4 ms·
A bit closer to the original source: https://securelist.com/blog/research/69488/blockchain-technology-abuse-time-to-think-about-fixes/ https://securelist.com/bl
by lazaroclapp 12y ago
A bit closer to the original source: https://securelist.com/blog/research/69488/blockchain-technology-abuse-time-to-think-about-fixes/ https://securelist.com/blog/research/69488/blockchain-techno... (can't see a paper or slides associated with the talk at BlackHat Asia, there is a very short video demonstration included).
As far as I can tell, the point of this demonstration is that you can store bytes representing a piece of malware in the blockchain. That is, just treat the blockchain as a storage medium for your malware code, since it is in the end a distributed database. You still need some other piece of malware to read this bytes and execute them, which makes this not really a "vulnerability". As far as I can tell it's more a case of "append-only publicly-writable distributed DB operating as intended".
I could be missing something, though...
- userbinator 12y agoAs far as I can tell it's more a case of "append-only publicly-writable distributed DB operating as intended". Indeed, it's almost the same as "people can post content like comments to websites - so they can post code of malware too!" Feels like a bit of anti-Bitcoin FUD.
- jerf 12y agoPerhaps not the best metaphor... malicious comments posted to web sites not only "can" cause users to download malware, they have, with some frequency.