Forgot your password?
typodupeerror

Submission + - Bitcoin protocol vulnerability could lead to a collapse

stanga writes: Cornell researchers unveiled an attack on the Bitcoin mining protocol that enables selfish mining pools to earn more than their fair share. In a technical report the authors explain this attack can be performed by a pool of any size. Rational miners will join this pool to increase their benefits, creating a snowball effect that may end up with a pool commanding a majority of the system's mining power. Such a pool would be able to single-handedly control the blockchain, violating the decentralized nature of the increasingly successful Bitcoin.

The authors propose a patch to the protocol that would protect the system from selfish mining pools smaller than 25% of the system. They also show that Bitcoin can never be safe from selfish mining pools larger than 33% of the network, whereas it was previously believed that only groups larger than 50% of the network were a threat to the system.

The question is — can the miners operating today adopt the suggested fix and dismantle too-large pools before a selfish mining pool arises?

Submission + - Cornell Researchers Unveil A Virtual Notary for Online Factoids

el33thack3r writes: We've all wanted a trustworthy record of an online factoid, whether it's your official employment status, a tweet someone made or the hash of an open-source distribution to protect it from tampering. A group of Cornell researchers have just unveiled a service called Virtual Notary that can serve as a witness to online factoids. The service is useful for inventors who want to timestamp an invention disclosure, for people who are seeking an officially random number selected for a raffle or crypto protocol, for web services that want a record of a user's email address, and for many other use cases. The service is free and the researchers are seeking community input on other online factoids of interest. What would you like notarized online?
Google

Submission + - Python creator Guido van Rossum leaving Google for Dropbox (dropbox.com)

mrvan writes: "Guido van Rossum, the proclaimed python Benevolent Dictator For Life, is leaving Google in january to work for Dropbox. He is currently employed by Google, where he spends half his time developing the Python language. In their announcement, DropBox state that they relied heavily on python from the beginning, citing a mix of simplicity, flexibility, and elegance, and are excited to have GvR on the team. While this is without a doubt good news for DropBox, the big question is what this will mean for python (and for google)."

Comment Cannot tell if Google or IE is at fault. (Score 1) 1

The article says that Google sends a human-readable response instead of a P3P policy. IE somehow interprets this response rather liberally. It is not at all clear where the fault lies here -- security/privacy software should not interpret a human-readable string containing unparseable tokens as license to go ahead; they should fail safe.
Cloud

Submission + - Is it time for NoSQL 2.0? 1

rescrv writes: Key-value stores (like Cassandra, Redis and DynamoDB) have been replacing traditional databases in many demanding web applications (e.g. Twitter, Google, Facebook, LinkedIn and others). But for the most part, the differences between existing NoSQL systems come down to the choice of well-studied implementation techniques; in particular, they all provide a similar API that achieves high performance and scalability by limiting applications to simple operations like GET and PUT. HyperDex, a new key-value store developed at Cornell, stands out in the NoSQL spectrum with its unique design. HyperDex employs a unique multi-dimensional hash function to enable efficient search operations — that is, objects may be retrieved without using the key under which they are stored. Other systems employ indexing techniques to enable search, or enumerate all objects in the system. In contrast, HyperDex's design enables applications to retrieve search results directly from servers in the system. The results are impressive. Preliminary benchmark results on the project website show that HyperDex provides significant performance improvements over Cassandra and MongoDB. With its unique design, and impressive performance, it seems fittng to ask: Is HyperDex the start of NoSQL 2.0?
Java

Submission + - Java-based x86 Emulator

jaavaaguru writes: "Researchers at Oxford University have produced a Java-based x86 emulator which they hope will be useful in testing applications and learning about viruses without damaging the host PC's operating system. They have an online demo available which boots DOS and has some games to play. Being purely Java, this emulator should be able to run on almost anything, including cell phones."

Slashdot Top Deals

Stellar rays prove fibbing never pays. Embezzlement is another matter.

Working...