From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from sog-mx-3.v43.ch3.sourceforge.com ([172.29.43.193] helo=mx.sourceforge.net) by sfs-ml-2.v29.ch3.sourceforge.com with esmtp (Exim 4.76) (envelope-from ) id 1UPeSC-0004SL-Rh for bitcoin-development@lists.sourceforge.net; Tue, 09 Apr 2013 19:43:40 +0000 Received-SPF: pass (sog-mx-3.v43.ch3.sourceforge.com: domain of gmail.com designates 209.85.214.173 as permitted sender) client-ip=209.85.214.173; envelope-from=mh.in.england@gmail.com; helo=mail-ob0-f173.google.com; Received: from mail-ob0-f173.google.com ([209.85.214.173]) by sog-mx-3.v43.ch3.sourceforge.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.76) id 1UPeSB-0002N6-1Z for bitcoin-development@lists.sourceforge.net; Tue, 09 Apr 2013 19:43:40 +0000 Received: by mail-ob0-f173.google.com with SMTP id wn14so6243990obc.4 for ; Tue, 09 Apr 2013 12:43:33 -0700 (PDT) MIME-Version: 1.0 X-Received: by 10.60.3.130 with SMTP id c2mr12102802oec.59.1365536613310; Tue, 09 Apr 2013 12:43:33 -0700 (PDT) Sender: mh.in.england@gmail.com Received: by 10.76.167.169 with HTTP; Tue, 9 Apr 2013 12:43:33 -0700 (PDT) In-Reply-To: References: <51642835.1040007@lavabit.com> Date: Tue, 9 Apr 2013 21:43:33 +0200 X-Google-Sender-Auth: UwOrgH2NtEnz4OUT6cNr4aUETGI Message-ID: From: Mike Hearn To: Gregory Maxwell Content-Type: multipart/alternative; boundary=e89a8fb2017ec4c0ff04d9f2c43f X-Spam-Score: -0.5 (/) X-Spam-Report: Spam Filtering performed by mx.sourceforge.net. See http://spamassassin.org/tag/ for more details. -1.5 SPF_CHECK_PASS SPF reports sender host as permitted sender for sender-domain 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mh.in.england[at]gmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.0 HTML_MESSAGE BODY: HTML included in message 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature X-Headers-End: 1UPeSB-0002N6-1Z Cc: Bitcoin Dev Subject: Re: [Bitcoin-development] On-going data spam X-BeenThere: bitcoin-development@lists.sourceforge.net X-Mailman-Version: 2.1.9 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Apr 2013 19:43:41 -0000 --e89a8fb2017ec4c0ff04d9f2c43f Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable AV software changes all the time, I definitely recall cases where AV got interested in, eg, web browser caches and ended up corrupting things. But that might be because it knew the files were written by a web browser. Lightly frying the contents has the disadvantage of no mmap and no sendfile() in future. Perhaps an idea to stash in our back pockets if it turns out to be needed later. On Tue, Apr 9, 2013 at 9:25 PM, Gregory Maxwell wrote: > On Tue, Apr 9, 2013 at 7:39 AM, Caleb James DeLisle > wrote: > > what anti-virus software might do when certain streams of bytes are sen= t > across > > the tcp socket or persisted to disk. Perhaps worth contacting an AV > company and > > asking what is the smallest data they have a signature on. > > I stuffed the testnet chain full of the EICAR test string and it > hasn't triggered for anyone=E2=80=94 it seems that (most?) AV tools do no= t > scan big binary files of unknown type.. apparently. > > If we encounter a case where they do we can implement storage > scrambling: E.g. every node picks a random word and all their stored > data is xored with it. > > > -------------------------------------------------------------------------= ----- > Precog is a next-generation analytics platform capable of advanced > analytics on semi-structured data. The platform includes APIs for buildin= g > apps and a phenomenal toolset for data science. Developers can use > our toolset for easy data analysis & visualization. Get a free account! > http://www2.precog.com/precogplatform/slashdotnewsletter > _______________________________________________ > Bitcoin-development mailing list > Bitcoin-development@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/bitcoin-development > --e89a8fb2017ec4c0ff04d9f2c43f Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
AV software changes all the time, I definitely recall case= s where AV got interested in, eg, web browser caches and ended up corruptin= g things. But that might be because it knew the files were written by a web= browser. Lightly frying the contents has the disadvantage of no mmap and n= o sendfile() in future. Perhaps an idea to stash in our back pockets if it = turns out to be needed later.


On Tue, Apr 9= , 2013 at 9:25 PM, Gregory Maxwell <gmaxwell@gmail.com> wro= te:
On Tue, Apr 9, 2013 at 7:3= 9 AM, Caleb James DeLisle
<calebdelisle@lavabit.com> wrote:
> what anti-virus software might do when certain streams of bytes are se= nt across
> the tcp socket or persisted to disk. Perhaps worth contacting an AV co= mpany and
> asking what is the smallest data they have a signature on.

I stuffed the testnet chain full of the EICAR test string and it
hasn't triggered for anyone=E2=80=94 it seems that (most?) AV tools do = not
scan big binary files of unknown type.. apparently.

If we encounter a case where they do we can implement storage
scrambling: E.g. every node picks a random word and all their stored
data is xored with it.

---------------------------------------------------------------------------= ---
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building<= br> apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!=
http://www2.precog.com/precogplatform/slashdotnewsletter _______________________________________________
Bitcoin-development mailing list
Bitcoin-develo= pment@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bitcoin-de= velopment

--e89a8fb2017ec4c0ff04d9f2c43f--