Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tampering during Bitcoin TX confirmation #42

Open
phptek opened this issue Nov 1, 2018 · 2 comments
Open

Tampering during Bitcoin TX confirmation #42

phptek opened this issue Nov 1, 2018 · 2 comments
Labels
bug Something isn't working Rather Hard This might be rather hard to achieve
Milestone

Comments

@phptek
Copy link
Owner

phptek commented Nov 1, 2018

The possibility exists for tampering to occur in the time elapsed between an object's publication, and the Bitcoin transaction in which that published version's hash is embedded, is confirmed.

A user could publish an article, and parts of it could be subject to unauthorised change (outside of manual verification by proof reading for example) until the relevant Bitcoin transaction is confirmed, and the Chainpoint network is able to return a proof.

Some way should be found to preclude this from happening using perhaps an alternative 3rd party service to temporarily provide tamper evident services such as a simple AWS lambda - a "poor mans hash verification service" if you like. This would only be in service while the chainpoint network is unable to provide a proof response from the Bitcoin network.

@phptek phptek added this to the 2.1 milestone Nov 1, 2018
@phptek phptek added bug Something isn't working Rather Hard This might be rather hard to achieve labels Nov 1, 2018
@stoneloup
Copy link

while not a perfect solution, since in the Chainpoint process, the first proof that comes back is the one from the Chainpoint calendar ("type" : "cal") in about 5-15 secs. with this, there would be no need to worry about the 90 mins time gap before the Bitcoin proof ("type" : "btc") came back, or at least the window where changes could be made to the underlying hashed content would be greatly reduced from 90 mins down to 15 secs.

@phptek
Copy link
Owner Author

phptek commented Jan 10, 2019

While you're technically correct, we are however wholly contingent on Bitcoin's PoW for an immutible data store, something that isn't ensured from Chainpoint's network (otherwise we'd just use Chainpoint and forget about Bitcoin), this assumes you're alluding to the temporary use of Chainpoint in this specific case. If you meant something else, apologies. Could you possibly further detail the solution? (However rough).

Thanks for your interest btw!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working Rather Hard This might be rather hard to achieve
Projects
None yet
Development

No branches or pull requests

2 participants