12 entries
Internet expert John Levine dismisses Bitcoin's security assumption, arguing that botnet operators routinely control zombie farms of 100,000+ machines and that hashcash failed for the same reason — the bad guys have vastly more computational firepower than the good guys.
Trammell conducts a detailed security analysis of Bitcoin's send-to-IP feature, identifying man-in-the-middle vulnerabilities including ARP poisoning and ISP-level interception. He recommends always using Bitcoin addresses instead of IP addresses.
Security consultant Bill Frantz makes the ironic observation that botnet-controlled machines are 'among the most secure on the network' because operators work hard to keep others from compromising 'their' machines, and speculates that botnet operators could evolve into legitimate security firms funded by proof-of-work rewards.
Satoshi explains that the chain must keep extending even without transactions, to prevent attackers from catching up.
Satoshi explains why SHA-256 collisions are not a practical concern for Bitcoin, describing the immense computational difficulty involved.
Satoshi explains the security of Bitcoin's keypair generation and the astronomical odds against address collision.
Emergency release of Bitcoin v0.3.10 to fix a critical value overflow vulnerability that had been exploited to create 184 billion bitcoins in a single transaction. Satoshi coordinated a rapid response to deploy a soft fork fix.
An integer overflow bug (CVE-2010-5139) was exploited to create 184,467,440,737.09551616 BTC in a single transaction in Block 74638. Satoshi Nakamoto published a fix within 5 hours, and the corrected chain overtook the invalid chain within 15 hours — the most serious crisis in Bitcoin's history.
Wei Dai's comments on the LessWrong 'Making money with Bitcoin?' thread. He clarified that he did not create Bitcoin but 'only described a similar idea more than a decade ago' and that Satoshi independently reinvented the concept. He revealed purchasing a Radeon 5870 GPU for mining after this thread, and warned that 'not many other cryptographers have analyzed its security.'
Renowned security researcher Dan Kaminsky attempted to find vulnerabilities in Bitcoin and failed. 'I came up with beautiful bugs. But every time I went after the code there was a line that addressed the problem.' He concluded: 'Either there's a team of people who worked on this, or this guy is a genius.'
Proposed Pay-to-Merkle-Root (P2MR), a quantum-resistant output type for Bitcoin. P2MR operates like Taproot but removes the quantum-vulnerable key path spend, committing only to the Merkle root of a script tree. Deployed as SegWit version 2, it provides resistance against long-exposure quantum attacks while maintaining backward compatibility as a soft fork.
Blockstream CEO Adam Back stated that Bitcoin faces no quantum computing threat for roughly 20–40 years, pointing to NIST-standardized post-quantum signatures like SLH-DSA that Bitcoin can adopt well before any threat materializes.