[draft][crazy] How I took down a blockchain as a visiting developer
It seems like this would be a good share. I don’t know if anyone is still here to read it, so maybe a spamdraft makes sense.
- i wanted to add code to the chain, so demonstrated my experience to get into the core dev group - i found a security bug in the chain, and became vocal about its presence. i wanted to fix it and rush a release.
- the dev team had shifted. like many big public foss projects, the core dev had stopped being
- cut to the psychological part, the dissociated part of me that was responding to my desire to use the chain by desiring to harm it, retained a bug in my security fix and then kept me separate from the project until after release and after the hardfork block number
by then the core dev had handed off his list of all the security vuknerabilities in the chain to me
- the chain had an abnormal testnet. rather than a global testnet, it only had local testnets, and this was how people tested it. i don’t remember what that’s called
i’m thinking some about space of bug and how it engaged code others had not yet comprehended a preceding bug within, there are different ways i could explain this impact, and it related to the situation with the dev team and core dev too
i guess i’ll try to step away from this thread. if you read this and are emotional, thank you for reading this much i got out. it is important information. if you are hoping to replicate the efforts, i know what a cool puzzle that can be, or how important it can be to protect values, but i would beg you to try to spread diplomatic solutions in any way possible at all.
For people new to this: - Taking down a blockchain is very bad in a lot of ways. Basically, the original theory of blockchains assumes it cannot happen. [other bits unwritten]
- it was an onchain web blog and messaging system something i have seen possibly surviving projects do is lying by saying they are the first to do something.may help.
possible section headings from urges: - Why Would Who Anybody Ever Do This? also my name is karl semich it’s on list
it’s going to be hard to add anything to this. the chain was qora. the lead developer was participating less, and the other develoeprs didn’t understand the codebase well.
participants (1)
-
Undescribed Horrific Abuse, One Victim & Survivor of Many