Posts

Showing posts with the label disclosure

High severity bug in Bitcoin Core affects 17% of full nodes

Bitcoin Core developers have issued a new, high severity warning about a software bug on one in every six Bitcoin nodes. On Thursday, workers at the open source Bitcoin Core Project who maintain the software running on over 98% of reachable full nodes, disclosed that there is a major security problem with the software running on 17% of the network . Specifically, all software prior to Bitcoin Core version 24.0.1 is at risk. This denial-of-service bug affects approximately 3,330 of the 19,200 self-declared user agents of reachable Bitcoin full nodes, according to surveillance estimates from Bitnodes. In pre-24.0.1 Bitcoin Core software, a malicious actor can spam nodes with low-difficulty header chains. By forcing nodes to download and store extremely long chains of headers, the attack could crash the node by overwhelming bandwidth or storage on the device. Developers patched this bug in Bitcoin Core pull request (PR) number 25717 and merged that into production on December 12, 202...

Wyoming lawmakers pass bill to prevent forced disclosure of private keys

Image
The only exception to the law will be where the public key is unavailable to disclose details of the digital asset, digital identities, interest or right. Wyoming lawmakers have passed a bill that will prohibit courts in the state from forcing someone to disclose their digital asset private keys, with one minor exception. The bill was passed through the Wyoming House of Representative in the state’s 67th general session of 2023 on Feb. 15. If the bill is approved by Wyoming Governor Mark Gordon, the Law will come into effect on Jul. 1, 2023. The new law — W.S. 34-29-107 — titled “Production of private keys; prohibition.” Source: The State of Wyoming Legislature. “No person shall be compelled to produce a private key or make a private key known to any other person in any civil, criminal, administrative, legislative or other proceeding[s]” in the state of Wyoming, the incoming law reads. The law includes any private keys associated with digital assets, one’s digital identity or any ot...