Friday, April 28, 2017

Ants Don't Have Blood

Ants have something called "hemolymph" which is a clear fluid that flows without the assistance of a circulatory system, but that's probably the least derpy thing to come out of the latest chapter in the anti-Jihan drama war.

There is no blood here..

Now, I love me some good bug hype as much as anyone, so when http://www.antbleed.com came online a couple days ago, I took notice.  Especially since I've got some ANTMINER S9s sitting in my garage that may be vulnerable to the issue.  Unfortunately, the number of red pixels on that website isn't really justified for this class of bug.  First off, the "bleed" suffix, referencing the old Heartbleed bug, has been reserved since then for memory disclosures.  This means vulnerable systems that you can hit in a funny way, and they disclose important information to you.  Most recently these are bugs like SSHBleed, or CloudBleed, etc.  There's no blood here though, both metaphorically in terms of urgency, and literally in terms of memory disclosure.  These miners have a feature built in that checks a web service to see if they are stolen, and if they are, they refuse to mine.  That's it.

Anti-Theft Telemetry

So what is Anti-Theft Telemetry?  This is a technology built into most phones, many new cars, and all sorts of embedded electronic gadgets that phone home regularly to determine if they are stolen, and if they are, the devices can be disabled.  If a mining rig gets stolen, the owner can report the theft to BITMAIN, and they can flip a switch, and your average thief will have a hard time getting the device working for them.
Now, I'll be the first to say that telemetry technologies are stupid, and in many ways, invasive, but it's also an extremely common, and often requested, theft deterrence feature.


Central Control

The thing that a lot of people have been freaking out over is the idea that Jihan, owner of BITMAIN, could shut down a huge part of the Bitcoin mining network if he wanted to, since a large portion of it is running on BITMAIN hardware.  While it is true that yes, he could screw over all his customers if he wanted to, it would damage his company irreparably, and for what?  A vast majority of the affected customers would be back online within a couple hours.  This, however, is no different than a large mining pool deciding to divert hashing power, or block users, except a mining pool could then steal its customers bitcoins as well.

The Man in the Middle

What I think is a much more serious concern is the Man in the Middle problem.  A malicious actor (and we've seen quite a few recently) could hijack the telemetry service and use it to make a political statement.  The derp-de-doo who implemented this feature didn't use HTTPS for the telemetry connection, which opens it up several points of attack.  Still though, the worst case scenario is denial of service, and since no one uses TLS for their mining traffic either, these points of attack are exactly the same as those that would hijack mining traffic itself, like the attacks we saw in 2014 that are still just as possible today.  Again, these attacks would net actual bitcoins, and are therefore much more likely for a profit driven attacker to go after.  The only threat (and it is a serious one) would be from those who would want to hurt BITMAIN's reputation.


Who done it?

One question that I feel isn't getting asked enough is, who did this?  We all know that Codenomicon found Heartbleed, Qualys found SshBleed, and Tavis found CloudBleed, but the AntBleed website has a distinct lack of identifying markers.

Besides there being nothing on the actual site, a quick whois will tell you that the site was registered with Namecheap, a registrar that allows you to register domains with Bitcoin.  It's also WhoisGuard protected, so whoever registered the domain didn't want anyone to know who they are.  The site is also being hosted on GitHub under an anonymous "antbleed" account which was used exclusively for setting up this site.  Luckily someone cloned the repo before the antbleed user deleted all their history, or we wouldn't even have that.

Clearly, whoever is promoting AntBleed doesn't want to be identified, which solidifies the suspicions that this was less of a bug report, and more of a pure political hit piece.  Jihan, owner of BITMAIN, upset a lot of people a couple months ago when he started speaking out against how the core Bitcoin developers were behaving, and began pointing the hashing power of his mining pool towards an alternative implementation, undermining the current core development team.  The retaliation has been swift, and strong, and most of all, shocking.

41 comments:

  1. شركة تنظيف
    تهتم شركة قمم التميز باعمال وخدمات التنظيف فى اى مكان فى تنظيف الشقق – البيوت – المنازل – المصانع واى مكان يحتاج الى اعمال التنظيف من اجل ان تساعد فى الوصول الى افضل ما تجدة من نتائج مميزة شركة تنظيف شقق بالرياض
    تنظيف يحتاج للاشياء معقدة من الادوات ، مثل الغرف المنزل لها ادوات التنظيف الخاصة، الصالون المدهب يحتاج لمنظف الخاص ، وسطح فى المنزل يتطلب مواد متخلفة ، فكثير من المنظفات المطلوبة حتى تكون عملية التنظيف سهلة ومن المنظفات : مبيض التواليت ، منظف الحمام، المطهرات ، المنظف للنوافذ شركة تنظيف فلل بالرياض
    والارضيات والغسيل ، سائل الغسيل واعمال المنزل الصغيرة يمكن انجازاها بفوطة جافة ومنظف جيد ، المنظف المصنوع بقل الامكنيات ، معلقتين من الخل الابيض مع لتر من الماء الساخن وضعهم فى بخاخة . بيكربونات الصوديم لتنظيف البلاط يمكن مزج ثلاثه اجزاء من الماء الساخن مع جزء من الصودا لتنطيف الفرن والثلاجة ، وبيكربونات الصوديم بقليل من سائل الجلى يتكون معجون سميك صالح لتنظيف الحمام ، يمكن استخدام بيكربونات الصوديم وضعه فى صحن صغير ولطرد الروائح الكريهة من الثلاجة ، كربونات الصوديم فعالة فى ازالة البقع الدهنية لانها قلوية ويجب لبس قفازات لاستخدامها . شركة تنظيف بالرياض
    الخل الابيض وعصير الليمون يمكن تنظيف السطوح الزجاجية والخشبية المصقولة ، ويمكن استخدام الخل الابيض والليمون للتخلص من الروائح الكريهة والتعطير .
    عند التنظيف يجب لبس القفازات لحماية الايدى من المواد المنظفه ، ويمكن لبس الفقازات عند غسيل الصحون وتكون مخصص لعمل فى المطبخ .
    والمنزل النظيفة من غير فوضوى أجمل بكثير وافضل ،وإذا توفر جميع الادوات النظافة داخل بيت تكون عمليه النظافة سهلة
    للتنظيف المنزل من اعلى الى اسفل ، اى تنظيف الغبار من اعلى الى اسفل ويمكن استخدام الاجهزة الكهربائية فى عملية التنظيف .
    تنظيف النوافذ باستخدام قطعة قطنية فى مسح الزجاج وللتجفيف بورقة من الجرائد ، وتنظيف الاسطح الزجاجية للمنضدة باستعمال عصير ليمون ودعكها ثم تجفيفها بفوطة ورقية. ويمكن استعمال معجون الاسنان فى ازالة الخدوش الصغيرة من الزجاج . شركة تنظيف منازل بالرياض
    لتنظيف الاثاث استعمال منظف على قليل من نشادر ، عدم وضع الاثاث فى أشعه الشمس فالشمس تجفف الأثاث ، للتخلص من الحلقات التى تكون على المنضدة بقليل من المنظف مع النشادر ثم مسحها بفوطة جافة ثم تلميعها بالملمع .
    يمكن وضع جدول زمنى لتنظيف المنزل : ترتيب السرير وتغير ملايات السرير كل اسبوع ، غسيل الملابس اذا كانت العائلة مكونة من الاطفال يقومون بتوسيخ ملابسهم بشكل متكرر فيجب تنظيف البقع سريعا . اسعار تنظيف الشقق بالرياض
    وغسل الاوانى الطعام باليد او فى غسالة الاطباق وغسلها يوميا لا نها تشكل العفن وقد تنيجة خطر ويسبب امراض .


    ReplyDelete
  2. Thanks for the post and great tips: even I also think that hard work is the most important aspect of getting success. Seattle exterminators

    ReplyDelete
  3. In the first place, auto title advances might be viewed as a secured advance since it requires a vow. In getting such advances, a borrower is required to give the title of his or her auto as guarantee. online car title loans chicago

    ReplyDelete
  4. Quick Pest Control provide tailor-made pest control services dependent on your circumstances and budget.
    Quick Pest Control in Croydon

    ReplyDelete
  5. Thank you for posting such a great article! I found your website perfect for my needs.
    fun games to download for pc

    ReplyDelete
  6. penetration testing training This is very useful post for me. This will absolutely going to help me in my project.

    ReplyDelete
  7. Pest control services are needed for the proper cleaning in house. Top pest control is one of the professional pest control service providers who help for the pest control services.

    ReplyDelete
  8. It could be absolutely essential towards state concerning industry budgetary functioning not to mention KPIs, to enjoy a fantastic association utilizing your commercial lender not to mention realize many take a look for best construction company City of Yonkers and also connect his or heir’s advice preferences.

    ReplyDelete
  9. Pest control services need to be hired on regular basis in home for the proper cleaning and fresh environment. Looking for the best pest control services then, you can visit on Bed Bug Control Vancouver

    ReplyDelete
  10. This comment has been removed by the author.

    ReplyDelete
  11. Thanks for sharing this blog. If you are looking for the pest control services then, you can visit on Pest Control White Rock

    ReplyDelete
  12. I like this article, I hope this article can be useful
    moreover this is an article that provides knowledge for those who read
    Daftar Judi Bola Online

    ReplyDelete
  13. This comment has been removed by the author.

    ReplyDelete
  14. We are really grateful for your blog post. You will find a lot of approaches after visiting your post. I was exactly searching for. Thanks for such post and please keep it up. Great work.Pathology lab

    ReplyDelete
  15. I really appreciate the kind of topics you post here. Thanks for sharing us a great information that is actually helpful. You can opt for the pest control services singapore

    ReplyDelete
  16. Thanks for sharing this very valuable information i really feel happy to read this post. Keep your home safe with the perfect pest control services by hoyhoyibiza.com. Visit us on pest control Ibiza

    ReplyDelete
  17. nice https://www.pxdojo.net/2017/04/ants-dont-have-blood.html

    ReplyDelete
  18. Insekten entwickeln verschiedene Komplikationen im Haus, zusammen mit einem Kammerjäger können die Schädlinge leicht aus der Residenz entfernt werden, indem viele umweltfreundliche Gegenstände verwendet werden. Der jeweilige Kammerjäger mit guten Kenntnissen kann Ihnen die positiven Ergebnisse sofort anbieten. Man könnte die Seite https://kammerjaeger-meister.de/ durchsuchen, um vollständige Informationen über Kammerjäger und Haustiere zu erhalten .

    ReplyDelete
  19. The technician is entirely responsible for conducting proper container fumigation. In case of failure or problems the technician will be held responsible.  Website

    ReplyDelete
  20. Get more update through your blog here..
    List of Mixer Grinders Online
    सबसे अच्छा मिक्सर
    Find the Desi Ghee Online सबसे अच्छा घी

    ReplyDelete
  21. Our Mortgage Repayment Calculator makes it possible to determine the amount you may need to pay for your own home loan. mortgage payment calculator canada The amortization of your mortgage refers for the total variety of years required to pay back your entire amount borrowed. canada mortgage calculator

    ReplyDelete
  22. Your blog is very useful for those who are searching for this kind of information, this information is a solution for those who are confused about it. Thanks for sharing this blog with us.Bee removal adelaide

    ReplyDelete
  23. Your website so nice & very fast load & layout themes are amazing, I really appreciate you for sharing it with me.... Foreign nationals can get Ethiopia tourist visa online. You can check online all Ethiopia tourist visa requirements via Visacent website. You can read all the information here & you can apply your Ethiopia tourist visa within 5 to 10 minutes.

    ReplyDelete
  24. Excellent job, this is great information which is shared by you. This info is meaningful and factual for us to increase our knowledge about it. about Pest control services gold coast So please always keep sharing this type of information.

    ReplyDelete
  25. This is a fabulous post I seen by virtue of offer it. It is genuinely what I expected to see look for in future you will continue subsequent to sharing such an extraordinary post
    먹튀검증
    경마

    ReplyDelete
  26. Hi there! I could have sworn I’ve been to this website before but after browsing through some of the post I realized it’s new to me. Nonetheless, I’m definitely delighted I found it and I’ll be
    bookmarking and checking back often!
    majortotositep1
    racesitepro1
    oncasinosite1
    totopickpro1

    ReplyDelete

  27. 스포츠중계
    토토사이트
    토토


    I truly desired the articles it’s truly wonderful best author

    ReplyDelete
  28. 토토사이트
    토토
    배트맨토토

    This didn’t just inspire this also teaches me a lot good ideas.

    ReplyDelete
  29. 토토사이트
    먹튀검증
    토토365프로

    You make so many great points here that I read your article a couple of times. Your views are in accordance with my own for the most part. This is great content for your readers.

    ReplyDelete
  30. The representation of this article is actually superb. I think this is a genuinely beneficial and instructive article for everyone, I appreciate this kind of writing, Thankful to you for sharing an article like this.ant exterminator edmonton

    ReplyDelete
  31. I read the above article and I got some different kind of information from your article about a mattress. It is a helpful article to enhance our knowledge for us. Thankful to you for sharing an article like this.AnexMiner Dark Star ET7 6000MH/s

    ReplyDelete
  32. Wow, this post really got me thinking! Your perspective is so refreshing, and I love how you present your ideas. Looking forward to more thought-provoking content from you. Discover the allure of Bayt Al-Suhaymi Cairo heritage jewel. Immerse in rich history, intricate architecture, and cultural elegance.

    ReplyDelete
  33. Your posts stand out due to your one-of-a-kind perspective and enlightening insights. It's obvious that you're fervently devoted to your subject matter, and that devotion radiates from every word. latest news about the Discovering Untamed Beauty In French Southern Territories, this information looks great. Do you want to learn more about it?

    ReplyDelete
  34. I appreciate your openness in sharing these insights with us. In the coming days, I'll certainly be joining the event as this subject matter greatly piques my interest. For more insights, please follow the link I've provided.Visa-Free Entry for Myanmar Passport Holders. Popular destinations for them include Thailand, Singapore, and Malaysia, allowing for hassle-free travel. However, entry requirements can change, so it's essential to check the latest information before planning your trip.

    ReplyDelete
  35. Your blog is an exquisite blend of wisdom and storytelling. It's like embarking on a meticulously crafted journey through a universe of knowledge, thoughtfully designed for readers of all backgrounds. Your skill in making complex ideas easily digestible is truly impressive. Furthermore, I'd like to offer valuable insights into the on-arrival visa for Saudi Iqama holders. Simplifying travel logistics, this process facilitates easy entry into different countries, granting Saudi Iqama holders the flexibility they need throughout their journeys.

    ReplyDelete
  36. انسداد شرايين الساق (الإصابة الوعائية الطرفية) هو حالة تحدث عندما تتضيق أو تسد شرايين الساق، وتنحصر بفعل تراكم الرواسب الدهنية (التصلب اللويحي) أو التجلطات الدموية. يحدث هذا الانسداد نتيجة لعدة أسباب ويؤثر في الرجال والنساء على حد سواء. ويعتبر علاج الدوالي بدون جراحة بتقنية الكلاكس هو الاحسن حتي الان.

    ReplyDelete