July 25

Please upgrade to 0.3.3! Important security improvements were made in 0.3.2 and 0.3.3. New features: - Gavin Andresen's HTTP authentication to secure JSON-RPC - 5x faster initial block download, under 30 minutes

Please do these tests on the test network. That's what it's for. Thanks.

Was that on the test network? http://bitcointalk.org/index.php?topic=363.0

Quote from: gavinandresen on July 25, 2010, 09:38:19 PM Great catch! Simpler fix is to specify the BIO_FLAGS_BASE64_NO_NL in the rpc.cpp/EncodeBase64 function SVN rev 111

Quote from: BitLex on July 25, 2010, 08:45:38 PM i got some problems here too trying to get this run on PHP. so far i had no luck, neither the wiki-sample (jsonRPCClient trying to fopen( http://username:password@local…

Quote from: lachesis on July 25, 2010, 07:52:35 PM I found what appears to be a bug: with a long enough username and password combination, the base64 encoder in bitcoind produces authorization headers that look like t…

For future reference, here's my public key. It's the same one that's been there since the bitcoin.org site first went up in 2008. Grab it now in case you need it later. http://www.bitcoin.org/Satoshi_Nakamoto.asc

Sorry, actually it's ECDSA (Elliptic Curve Digital Signature Algorithm) not RSA. I shouldn't have said "prime numbers". ECDSA doesn't take much time to generate a keypair.

Quote Here is a paper that claims to find SHA-1 collisions in 2^52 crypto operations. And optimally secure hash would take 2^80 operations. 2^52 time is still large, but it is getting into cluster and botnet range. 2^…

Quote from: knightmb on July 25, 2010, 07:44:02 PM If I figure out that Public Key 123456 generates Hash ABCD and Public Key 654321 also generates Hash ABCD I'm still left without the Private Key. But from what you ar…

Red, thanks for telling me privately first! Please go ahead and post it (and relieve the suspense for everyone!) His point is that transactions paid to a Bitcoin Address are only as secure as the hash function. To mak…

It's best if you tell it to me privately so it can be fixed first. I just e-mailed you my e-mail address. (or you could PM me here)