There is evidence about the consensus mechanism (Ouroboros) of Cardano being save in terms of preventing key blockchain attack vectors (51%, Double Spender, Bootstrap Problem, Sybil Attack). Compare https://medium.com/@undersearcher/how-secure-is-cardano-5f1e076be968 So in theory all is good as l…

[image] Markus-VITAL: Aren’t you assuming here that the next node is a honset one? So thinking of a 51% attack a majority of other nodes would just accept the invalid blick if they are also compromised. It is PoS , you dont need 51% nodes - but 51% blocks which would be proportional to stake …

I did not mean that someone would compromise the IOG version, but rather make a clone from the IOG version with a small modification, put on their own github and deploy on the node instead of the IOG version. And I agree with you, not very likely to happen, but I would not want my nodes compromised…

[image] rdlrt: If we’re expecting universe to fall apart and everyone from guild group (who have helped onboard the majority of stakepools without marketing) to go Rogue/hacked, then the same assumptions would apply to IOG github account too Sure, as long as the code base of the widely used t…

[image] rdlrt: you dont need 51% nodes - but 51% blocks I’m aware of that, But the hope is that >50% are at some time community controlled.

I dont see how we can reach to conclusions without validating+quantifying your assumptions about risks, but all good… I will retire from this convo

Maybe a scenario like this: One of the scripts just created a host entry to download the next Update not from Github but from a malicuous github clone… Then at the specific time of the next update all the users are downloading a manipulated code at the same time. → Instrusion detection should ide…

[image] rdlrt: I dont see how we can reach to conclusions without validating+quantifying your assumptions about risks, but all good… I will retire from this convo I hoped to get your opinion or a recommendation, so i just drafted potential conclusions here. I will not be able to validate and …

You’re placing all your hopes for survival of decentralized ecosystem on to centralised IOG github accounts, and flagging not-so-rocket-science bash scripts as github-accounts-could-be-sacrificed. You cant debate if that’s your basis of thought process since your outcome is pre-decided. I cannot an…

[image] rdlrt: Your thread started by talking about block validations , then focused on scripts - then assume 50% nodes are sacrificed - and not one member reads the code + this 50% excludes IOG and exchanges, github accounts of selective members are hacked…OR those with 4 years of reputation su…

@zwirny Hi Zwirny, I understand all your concerns and I appreciated you took some time to ask the community what are their thoughts about it, and since I am part of the community, besides being a professional Cyber Security consultant, I feel I can share my view on the topics you raised. First of…

Stakepool Operation Tools as a potential risk?

Staking & Delegation Stake Pool Security

Topic		Replies	Views
Guild Operator scripts are security holes Operate a Stake Pool	11	1419	25 April 2021
SPOs, Do not repeat my mistakes, Keep your Core Node Safe Stake Pool Security	46	13512	20 November 2021
Staking pool meetups in future and a way to silence Daniel Larimers critisism on PoS Developers jormungandr , testnet	26	1943	13 October 2019
Pool maintenance routines Operate a Stake Pool	15	2990	8 October 2020
[Beginner Guide] Setup a Cardano Node using Guild Operator Scripts + (Tips & Troubleshooting) Setup a Stake Pool	1	4968	15 May 2022

Stakepool Operation Tools as a potential risk?

Related topics