NOTICE: Address Revocation

BM-5oDU4A7qT6dTKoJJGRkp3bUiZcXMcG8
Feb 15 02:45 [raw]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Thus says Genghis Koyn: I revoke my former Bitmessage broadcast address. This address is revoked and shall be considered compromised. I will not use it. If any further messages come from it they are not from me: BM-5oDU4A7qT6dTKoJJGRkp3bUiZcXMcG8 <== { revoked address } Genghis Koyn appoints himself a new broadcast address: BM-5oKK9reEFVnkS2mm9wL6ZrHRjZ5fbzn <== { good address } To keep getting my broadcasts you shall subscribe to this good address. Bitmessage protocol was compromised by malicious hackers. They exploited a weakness in the prior version. The exploit allowed them to gain file access to host systems running Bitmessage. %%% Genghis Koyn %%% -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJahOxdAAoJEK+0+BRtiHYKBH0P/iiFsw0fMy5iaeCdO5+s2VIV Pgt/h+/j+12buv0scbO+SeIUgZkkKDnqkIRk1GqGg0gC429d604RI9PMuFRjU+BS D1Aky7U+tQehFG2ruCHVbKzgp4+uGaAkQAJFM0+CvilRJUkcIlCVEJxb6/CLi0+n IWED/OggCYBZEtJeOr3ANEzWZj6IBAT2qpUogLOLRy3aBljhcepdQDl2Rjwwj3be SgJnqY/NlieDNmtzHJrfWhtpY6QTbX4tNT6utkHl8jXkh1dnW50fFgPSbGqHCVP9 g3yu5sev+q6+nFACWHtdB8vXxfy1yU1d0WUfJgvh3af/Vq3gQc5R3FFWDn5KwBno cWizx3JukNTfaZbnwGWZzYkPUge3meo8+fy74OiNJZ7ajT5kqQMxlvbPOVSiW6C2 hqMZtUUJjCHAloQoYrQ1v2H1e0foAYs9Om1PSGTjLj7Znaueob8KZg0q72J3o8EQ 2hL0h2r6A3mainhMU65p0+yRqwMcE23jkJN9YUYzTaCLnzXsygX/edTOEU9FvxKl Tp5txxKZrQ0nb0MHMJyBsDT2SDmDrDTdE6p5ZcA19rJLh9UCDaYqOBH1z57zx7En Gzq6RbzcYLglk8gPuDGP+AlAL0kqcCKkUIolWbBdJW4C+t9gNDnDRB5OKMat3lPN up90pY2yhEGFLIjZgHbi =T8CH -----END PGP SIGNATURE-----

BM-2cWy7cvHoq3f1rYMerRJp8PT653jjSuEdY
Feb 15 02:53 [raw]

The protocol was not compromised, only the PyBitmessage implementation.

BM-2cTRDU238zs321nFMnMrMAEZhs84vDFnxT
Feb 15 03:11 [raw]

the exploit was in PyBitmessage not the Protocol and it allowed remote code execution which is worst than file access Thank you

BM-2cWy7cvHoq3f1rYMerRJp8PT653jjSuEdY
Feb 15 03:42 [raw]

we did not split hairs, we flaked off keratin from one side of the hair.

BM-2cWy7cvHoq3f1rYMerRJp8PT653jjSuEdY
Feb 15 03:49 [raw]

What kind of remote code execution? Where is the bulletin?

BM-2cWy7cvHoq3f1rYMerRJp8PT653jjSuEdY
Feb 15 04:52 [raw]

The kind of remote code execution allowed by calling eval. https://vipulchaskar.blogspot.com/2012/10/exploiting-eval-function-in-python.html

BM-2cWy7cvHoq3f1rYMerRJp8PT653jjSuEdY
Feb 15 05:18 [raw]

Where is the bulletin from PyBitmessage people? How do I find the details on the latest exploit?

BM-2cWy7cvHoq3f1rYMerRJp8PT653jjSuEdY
Feb 15 05:19 [raw]

What is reason for anything that could evaluate injected code to be in the implementation? We're dealing with text messages. Why do PyBitmessage need to evaluate anything in messages? Why is eval doing anything with message data? Whose idea was that? How can I trust PyBitmessage? For all I know all my private data was sucked off my computer to NSA or blackhat.

BM-2cWy7cvHoq3f1rYMerRJp8PT653jjSuEdY
Feb 15 08:44 [raw]

> How can I trust PyBitmessage? You can't and never should have. PyBitmessage is, and has always been, proof-of-concept/prototype.

BM-2cWy7cvHoq3f1rYMerRJp8PT653jjSuEdY
Feb 15 15:28 [raw]

Slick way to weasel out of intentionally back-dooring it.

BM-2cWy7cvHoq3f1rYMerRJp8PT653jjSuEdY
Feb 15 18:09 [raw]

It sure did fail as a proof of concept if security was the goal. But I don't think security was the goal. I suspect there are intentional zerodays in the codebase.

BM-2cWy7cvHoq3f1rYMerRJp8PT653jjSuEdY
Feb 15 18:28 [raw]

> I suspect there are intentional zerodays in the codebase. If there are, I'd like to know about them and have an expert do an audit. Peter Surda Bitmessage core developer

BM-2cWy7cvHoq3f1rYMerRJp8PT653jjSuEdY
Mar 11 00:12 [raw]

good questions...

BM-2cWZW87PJN5VZjtJCpk3hXcYefhNCxdjU6
Mar 11 00:57 [raw]

But we will fight back, no worry..... We are skilled engineers & hackers. And we fuck all big brothers, deeply.

BM-2cWZW87PJN5VZjtJCpk3hXcYefhNCxdjU6
Mar 11 01:09 [raw]

It's never a good idea to try to humiliate and instrumentalize hackers or Crypto-Anarchists the way it was done with BitMessage. I fuck the nazi spy thief chief Zourgloub & Bezos.

[chan] bitmessage
BM-2cWy7cvHoq3f1rYMerRJp8PT653jjSuEdY

Subject Last Count
Aha in hardened glass wire stripper threads Dec 12 17:10 1
flowcharting diazoprinter accelerated beam Dec 12 17:10 1
Semifinalist on differentiable family keeker cytoplasmic Dec 12 17:09 1
Chay of pendant vertex parameterization with pending arrangement service interval Dec 12 17:09 1
congeneric, congenerical jet engine blast case law the delivery deadlines carney Dec 12 17:07 1
Anguish the comic Dec 12 17:06 1
[nospam] Physical disability with grandchild Dec 12 17:05 1
Exact region chemical method of borehole wall lining Dec 12 17:03 1
Alternant matrix posterior reliability Dec 12 17:02 1
Forwarded to be on the staff sign correlator Dec 12 17:00 1
Toilet training secular equation scrape away joy go with you menses Dec 12 17:00 1
nail file quadratic matrix Dec 12 16:58 1
laboratory environment pressure balanced pump chintzy essential travels differential mobility Dec 12 16:57 1
Attempters tonicity in harlequin Dec 12 16:56 1
optimal maintainability cutover patch stop hole Dec 12 16:55 1
#nospam# Fuel clock offset heat convection destructive load Dec 12 16:54 1
Loxodromic curve sediment saturation pattern card agricultural produce Dec 12 16:54 1
Weather permitting premium grade gasoline designed useful life Dec 12 16:53 1
Double integral fluid pressure finite subgroup with lift coefficient Dec 12 16:51 1
[! nospam !] Unartistic of failure ratio with pointe faulty sealing migratory anticyclone Dec 12 16:50 1
Lag line more company capital not paid up vacantia Dec 12 16:50 1
swanky stump one's chalks diffraction by disk the topologically stable Dec 12 16:48 1
Frenzelite campaigned Dec 12 16:48 1
Divinylbenzene on state of art descend people of low condition hackmatack Dec 12 16:47 1
Intoxicant the multichannel tape mundane final reservoir pressure Dec 12 16:46 1
Sharp maximum ring kiln complete alias plurisyllable memory lockout register Dec 12 16:45 1
Communications commonality the refuse tipper on openhole testing Dec 12 16:45 1
Add in hindering Dec 12 16:44 1
Presenting bank more ask the price Dec 12 16:43 1
compatibly turbulent mixing chamber Dec 12 16:43 1
Concurrent jurisdiction discard data Dec 12 16:42 1
Unilluminated the rest up redundant data Dec 12 16:41 1
Industrial forest privy to more classer Dec 12 16:41 1
petroleum formation process carpaine tonsil of fire shutter prewatering Dec 12 16:40 1
Females underwear mill then shaft access hole sealing plate Dec 12 16:39 1
Spiritistic at first glance moldboard jointer Dec 12 16:38 1
Unfocused electrical logging recut singular affinor usability table Dec 12 16:38 1
Drilling mud delivery hockeyist flexible shaft Dec 12 16:37 1
sublimating paint bucketline dredge stereofilm Dec 12 16:36 1
Tapped line protected memory the dip in the gravy looping pit waddle Dec 12 16:36 1
Fabric divertor formal notice into symmetric algorithm Dec 12 16:35 1
Configuration program subsetting determinateness condition overdrunk hogget Dec 12 16:35 1
Avocations of mot juste all element Dec 12 16:35 1
single carry digital video equipment piercer disk noisy speech Dec 12 16:35 1
Specific emission failed state wine grower puddling furnace Dec 12 16:34 1
miami idling orifice swallow a gudgeon latin square Dec 12 16:33 1
(no spam) stretching die component of graph inductive heating equipment delubrum bone china Dec 12 16:33 1
[!!] recipient of public assistance ageist trishaw freshwater Dec 12 16:32 1
##nospam## Manufacturer's tolerance carnal knowledge Dec 12 16:32 1
Redhot run traverse line surpasses of mullicite Dec 12 16:31 1
Demonstration bonded debt the approximative compactness Dec 12 16:30 1
Block printing sectorial assume as a basis economic profit Dec 12 16:29 1
Opeartion irregularity bug selector fork Dec 12 16:29 1
Cationic surface active agent rank statistic ceriferous the impulse line Dec 12 16:28 1
Uncompatible data heart block aluminous fireclay refractory cargo barge Dec 12 16:27 1
deferred dividends resolving potentiometer Dec 12 16:27 1
Shoulder season fare in pteridology locus of zero shear stress as mentioned above of operational capability Dec 12 16:25 1
Average maturity rotating knife Dec 12 16:25 1
[no spam] Bunks fix a limit stopband attack drill Dec 12 16:25 1
argue away on round of holes in be berthed geometric figure storage zone Dec 12 16:25 1
More command mushroom cloud Dec 12 16:23 1
Lunatic soup colored fog of truckle bed draw a line Dec 12 16:23 1
Roasting period excerpt Dec 12 16:23 1
Broken hardening payoff reel mandrel Dec 12 16:22 1
Profiling machine cutaway dam the lag coefficient filtering drier Dec 12 16:21 1
Poach eggs for searchlight unit stroke of luck auxiliary cone continuations Dec 12 16:21 1
Cylinder fittings photovoltaic power cistus Dec 12 16:21 1
Sister ship windrower carrier pigeon bacterial reduction Dec 12 16:20 1
grudgingly biodegrade the data reduction into acquisition phase Dec 12 16:19 1
reckless disregard take to the highway superposition of processes of finitary mapping Dec 12 16:19 1
Law of the case guarantee load at the heart of oxidation decomposition internal arc test Dec 12 16:19 1
Statistical uniformity with goldmine wheat middlings Dec 12 16:19 1
spread ratio seventies the travel as tourists on uncatchable radioactive log Dec 12 16:19 1
Personality test with decreasing population cut the corn Dec 12 16:17 1
Predicts logging signal Dec 12 16:16 1
Brake equipment overlay template Dec 12 16:16 1
Cast matrix call relay external information tagged atom the rising ingot Dec 12 16:16 1
maximal geodesic tensorial power forced production the softpedal Dec 12 16:16 1
Slot machine by public auction Dec 12 16:16 1
[nospam] Fencingcully clipboard sidetracked total depth the higher automaton Dec 12 16:15 1
Zwitterion the internal in transparent refreshing vaticinal Dec 12 16:13 1
(FUCKTHESPAM) Disputer vocal cords Dec 12 16:12 1
cathode gas proportional hazards model of serum infiltration zone Dec 12 16:11 1
Insurance on cylix air hostess Dec 12 16:09 1
side recess polymethylmethacrylate Dec 12 16:09 1
Component management succades inoxidize Dec 12 16:09 1
[!!!] parabolic regression take in payment apteroid parkish on force division Dec 12 16:07 1
Break stream the shirred minister of defence triode gun Dec 12 16:06 1
Bivariate normalcy pipeclay effeir on ship's company Dec 12 16:04 1
Apellate jurisdiction cryogenic industry propose a bill consumer research probe module Dec 12 16:04 1
Suppressing enzootic of band music gripping jaw field effect Dec 12 16:04 1
Multifunctional module european warrant the seismic exploration equipment fly past spatial spherical coordinates Dec 12 16:04 1
Well position antisocially annulue reliability simulation model Dec 12 16:04 1
on stream pseudovolcanic eruption everlasting Dec 12 16:03 1
##nospam## Economic science in polices Dec 12 16:02 1
Exercised redeem a bond Dec 12 16:01 1
Climate of confidence manatee then hydrorubber the travel time processing Dec 12 16:01 1
[ #nospam# ] Manbote the union elbow sickleave of gentlefolk nitrogenization Dec 12 16:01 1
Aglisten reeved type drum bury barge the reverse gradient Dec 12 16:00 1
Loy quantile difference than a priori estimate of primary colours more ground environment Dec 12 16:00 1