From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from sog-mx-3.v43.ch3.sourceforge.com ([172.29.43.193]
	helo=mx.sourceforge.net)
	by sfs-ml-2.v29.ch3.sourceforge.com with esmtp (Exim 4.76)
	(envelope-from <mh.in.england@gmail.com>) id 1UPeSC-0004SL-Rh
	for bitcoin-development@lists.sourceforge.net;
	Tue, 09 Apr 2013 19:43:40 +0000
Received-SPF: pass (sog-mx-3.v43.ch3.sourceforge.com: domain of gmail.com
	designates 209.85.214.173 as permitted sender)
	client-ip=209.85.214.173; envelope-from=mh.in.england@gmail.com;
	helo=mail-ob0-f173.google.com; 
Received: from mail-ob0-f173.google.com ([209.85.214.173])
	by sog-mx-3.v43.ch3.sourceforge.com with esmtps (TLSv1:RC4-SHA:128)
	(Exim 4.76) id 1UPeSB-0002N6-1Z
	for bitcoin-development@lists.sourceforge.net;
	Tue, 09 Apr 2013 19:43:40 +0000
Received: by mail-ob0-f173.google.com with SMTP id wn14so6243990obc.4
	for <bitcoin-development@lists.sourceforge.net>;
	Tue, 09 Apr 2013 12:43:33 -0700 (PDT)
MIME-Version: 1.0
X-Received: by 10.60.3.130 with SMTP id c2mr12102802oec.59.1365536613310; Tue,
	09 Apr 2013 12:43:33 -0700 (PDT)
Sender: mh.in.england@gmail.com
Received: by 10.76.167.169 with HTTP; Tue, 9 Apr 2013 12:43:33 -0700 (PDT)
In-Reply-To: <CAAS2fgSLQ9yQrt7SZ0xRp7rZ22SA7+nDKtP3fSxU3tYgd_=30A@mail.gmail.com>
References: <CA+8xBpc5iV=prakWKkNFa0O+tgyhoHxJ9Xwz6ubhPRUBf_95KA@mail.gmail.com>
	<CANEZrP1EKaHbpdC6X=9mvyJHC_cvW7u5p9nqM7EwkEypAg4Xmg@mail.gmail.com>
	<51642835.1040007@lavabit.com>
	<CAAS2fgSLQ9yQrt7SZ0xRp7rZ22SA7+nDKtP3fSxU3tYgd_=30A@mail.gmail.com>
Date: Tue, 9 Apr 2013 21:43:33 +0200
X-Google-Sender-Auth: UwOrgH2NtEnz4OUT6cNr4aUETGI
Message-ID: <CANEZrP18E6kQW_dS7_Vq5YHm7AaiVt_hEsexK4NN-=f_z8u_OA@mail.gmail.com>
From: Mike Hearn <mike@plan99.net>
To: Gregory Maxwell <gmaxwell@gmail.com>
Content-Type: multipart/alternative; boundary=e89a8fb2017ec4c0ff04d9f2c43f
X-Spam-Score: -0.5 (/)
X-Spam-Report: Spam Filtering performed by mx.sourceforge.net.
	See http://spamassassin.org/tag/ for more details.
	-1.5 SPF_CHECK_PASS SPF reports sender host as permitted sender for
	sender-domain
	0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
	(mh.in.england[at]gmail.com)
	-0.0 SPF_PASS               SPF: sender matches SPF record
	1.0 HTML_MESSAGE           BODY: HTML included in message
	0.1 DKIM_SIGNED            Message has a DKIM or DK signature,
	not necessarily valid
	-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
X-Headers-End: 1UPeSB-0002N6-1Z
Cc: Bitcoin Dev <bitcoin-development@lists.sourceforge.net>
Subject: Re: [Bitcoin-development] On-going data spam
X-BeenThere: bitcoin-development@lists.sourceforge.net
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: <bitcoin-development.lists.sourceforge.net>
List-Unsubscribe: <https://lists.sourceforge.net/lists/listinfo/bitcoin-development>,
	<mailto:bitcoin-development-request@lists.sourceforge.net?subject=unsubscribe>
List-Archive: <http://sourceforge.net/mailarchive/forum.php?forum_name=bitcoin-development>
List-Post: <mailto:bitcoin-development@lists.sourceforge.net>
List-Help: <mailto:bitcoin-development-request@lists.sourceforge.net?subject=help>
List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/bitcoin-development>,
	<mailto:bitcoin-development-request@lists.sourceforge.net?subject=subscribe>
X-List-Received-Date: Tue, 09 Apr 2013 19:43:41 -0000

--e89a8fb2017ec4c0ff04d9f2c43f
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

AV software changes all the time, I definitely recall cases where AV got
interested in, eg, web browser caches and ended up corrupting things. But
that might be because it knew the files were written by a web browser.
Lightly frying the contents has the disadvantage of no mmap and no
sendfile() in future. Perhaps an idea to stash in our back pockets if it
turns out to be needed later.


On Tue, Apr 9, 2013 at 9:25 PM, Gregory Maxwell <gmaxwell@gmail.com> wrote:

> On Tue, Apr 9, 2013 at 7:39 AM, Caleb James DeLisle
> <calebdelisle@lavabit.com> wrote:
> > what anti-virus software might do when certain streams of bytes are sen=
t
> across
> > the tcp socket or persisted to disk. Perhaps worth contacting an AV
> company and
> > asking what is the smallest data they have a signature on.
>
> I stuffed the testnet chain full of the EICAR test string and it
> hasn't triggered for anyone=E2=80=94 it seems that (most?) AV tools do no=
t
> scan big binary files of unknown type.. apparently.
>
> If we encounter a case where they do we can implement storage
> scrambling: E.g. every node picks a random word and all their stored
> data is xored with it.
>
>
> -------------------------------------------------------------------------=
-----
> Precog is a next-generation analytics platform capable of advanced
> analytics on semi-structured data. The platform includes APIs for buildin=
g
> apps and a phenomenal toolset for data science. Developers can use
> our toolset for easy data analysis & visualization. Get a free account!
> http://www2.precog.com/precogplatform/slashdotnewsletter
> _______________________________________________
> Bitcoin-development mailing list
> Bitcoin-development@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bitcoin-development
>

--e89a8fb2017ec4c0ff04d9f2c43f
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">AV software changes all the time, I definitely recall case=
s where AV got interested in, eg, web browser caches and ended up corruptin=
g things. But that might be because it knew the files were written by a web=
 browser. Lightly frying the contents has the disadvantage of no mmap and n=
o sendfile() in future. Perhaps an idea to stash in our back pockets if it =
turns out to be needed later.</div>
<div class=3D"gmail_extra"><br><br><div class=3D"gmail_quote">On Tue, Apr 9=
, 2013 at 9:25 PM, Gregory Maxwell <span dir=3D"ltr">&lt;<a href=3D"mailto:=
gmaxwell@gmail.com" target=3D"_blank">gmaxwell@gmail.com</a>&gt;</span> wro=
te:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div class=3D"im">On Tue, Apr 9, 2013 at 7:3=
9 AM, Caleb James DeLisle<br>
&lt;<a href=3D"mailto:calebdelisle@lavabit.com">calebdelisle@lavabit.com</a=
>&gt; wrote:<br>
&gt; what anti-virus software might do when certain streams of bytes are se=
nt across<br>
&gt; the tcp socket or persisted to disk. Perhaps worth contacting an AV co=
mpany and<br>
&gt; asking what is the smallest data they have a signature on.<br>
<br>
</div>I stuffed the testnet chain full of the EICAR test string and it<br>
hasn&#39;t triggered for anyone=E2=80=94 it seems that (most?) AV tools do =
not<br>
scan big binary files of unknown type.. apparently.<br>
<br>
If we encounter a case where they do we can implement storage<br>
scrambling: E.g. every node picks a random word and all their stored<br>
data is xored with it.<br>
<div class=3D"HOEnZb"><div class=3D"h5"><br>
---------------------------------------------------------------------------=
---<br>
Precog is a next-generation analytics platform capable of advanced<br>
analytics on semi-structured data. The platform includes APIs for building<=
br>
apps and a phenomenal toolset for data science. Developers can use<br>
our toolset for easy data analysis &amp; visualization. Get a free account!=
<br>
<a href=3D"http://www2.precog.com/precogplatform/slashdotnewsletter" target=
=3D"_blank">http://www2.precog.com/precogplatform/slashdotnewsletter</a><br=
>
_______________________________________________<br>
Bitcoin-development mailing list<br>
<a href=3D"mailto:Bitcoin-development@lists.sourceforge.net">Bitcoin-develo=
pment@lists.sourceforge.net</a><br>
<a href=3D"https://lists.sourceforge.net/lists/listinfo/bitcoin-development=
" target=3D"_blank">https://lists.sourceforge.net/lists/listinfo/bitcoin-de=
velopment</a><br>
</div></div></blockquote></div><br></div>

--e89a8fb2017ec4c0ff04d9f2c43f--