Replay attack protection - EIP155, BIP44 about go-musicoin HOT 13 CLOSED

Yes I think so, latest parity code will have Easily adapt EIP-155 and BIP for chainid.
Above is good news. :-)

from go-musicoin.

https://github.com/Musicoin/go-musicoin/blob/master/params/config.go#L41

from go-musicoin.

Comment by Varunram
Saturday Aug 26, 2017 at 14:20 GMT

We should set CHAIN_ID to a unique value to prevent these kinds of attacks as detailed over at EIP 155. @immartian for your reference :)

from go-musicoin.

Comment by immartian
Saturday Aug 26, 2017 at 14:27 GMT

We know how to do it but it takes a lot of test with risking the timeline of UBI. It's not a security issue, just confined to MEW and Trezor. It'll be in timeline after UBI's deployment, together with other EIPs Ethereum brought later. Let's focus on many delayed works first.

from go-musicoin.

Comment by Varunram
Saturday Aug 26, 2017 at 14:28 GMT

Okay, so here are the things to do with BIP44.

• Look into how to implement BIP44 from other alt-coins
• Request Satoshi Labs for a unique Index
• Relay to MEW and Trezor that we've done this.

As you said, not really on the fore front with UBI incoming, but we need to keep this in mind since many people are commenting on the lack of MEW support in general. We can see this after UBI :)

from go-musicoin.

@immartian @Varunram Yes it's good approach,

1. other altcoin has changed BIP44 , at Feb 2017. So, I've looking at that time of alt coin's codes.
2. Fork Id and Chain Id different storage , 1byte vs (4byte or 8byte). <as I searched previous 4bytes , recent days, it has changing. now musicoin chainid is 4bytes full.
   Let's good job!

from go-musicoin.

@trustfarm-dev did you try the most recent Parity version of $MUSIC ? #47 I can build one if you want to try.

from go-musicoin.

@immartian not yet and little time , even though holiday 👍 -)
But, I'm briefly surveying the code of parity patch , just json patch.
I'm more concern on geth based node - gmc.
And, If you built parity-ubi-v2 and share this github, many musicoin community member will trying the parity node's verification I think.

And, I think more emergent things are review the contract code of DEV fund/Foundation fund security, before UBI 2.0 fork.

from go-musicoin.

Yes, we are doing, on security part.

The reason to suggest Parity is we have adopted upstream codebase of Ethereum there. So the replay attack should be solved. GMC will follow up, soon.

from go-musicoin.

enabling EIP-155 in parity is just a change in the chain spec. 👍

from go-musicoin.

@trustfarm-dev love to test?

from go-musicoin.

@immartian I've already built parity 1.8 music as you know.
recent day, I've no time to check.
I tried to binding pmc-v18 , nginx and MEW. enabled with EIP155 and disabled with EIP155.
But, Nginx and pmc-v18 , with MEW , there's communication problem and cross-origin problem may be.
block is increasing well.
I'm checking the pmc-v18 and MEW interface.
But, in orbiter looks well binded pmc-v18. is it correct?
Time is problem , but it may be work.. I guess.

from go-musicoin.

Ref. #74 for PR

from go-musicoin.