5

I read this in a forum post on another site. Here's my recap. But by "I" I mean me, not the original poster.

All transactions over the bitcoin network is stored as raw data forever in the distributed database (all bitcoin clients has the same copy of the database .. and if they lose by, e.g. by reinstalling the client, they'll synchronize with the distributed one again).

You can "inject" whatever 20 byte binary strings you want into the flat files (described here http://pastebin.com/ct2WHUK5 ). I'm pretty sure there are other ways to do it as well (apparently you can add text messages to transactions?.. I don't really know).

Now, here's my question. What'd happen if the bitcoin database were flooded with virus signatures? Is this a serious matter or just a "Meh"?

Improve this question
5
  • 1
    An interesting question. I don't think it would be a "threat to the network" as such, but could be an annoyance and something to discourage new users. It also highlights the shortcomings of signature-based virus scanning.
    – Nate Eldredge
    Apr 3, 2014 at 14:11
  • This is interesting, but looking into blockchain.info, it seems that nobody sent anything to these addresses (yet). And these could just be perfectly valid bitcoin addresses belonging to the author of the post. I wouldn't try it with my BTC anyway.
    – G B
    Apr 3, 2014 at 14:58
  • check the blockchain. its quite disturbing what you will find. anything from pedofilia links, death threats, virus signatures, spam etc.
    – r3wt
    Apr 3, 2014 at 16:10
  • But how would the author be able to 'own' zero-padded virus signatures as his/her own?
    – user3493746
    Apr 3, 2014 at 16:15
  • reddit.com/r/Bitcoin/comments/22a1te/…
    – John T
    Apr 5, 2014 at 17:21

1 Answer 1

Reset to default
2

The pastebin you linked describes the harm caused as follows:

What'll happen is that that will trigger the anti-virus program for every bitcoin client user that has an anti-virus program installed (and this won't go away ever.. you can't clean the database). Those virus signatures are harmless in their own, but they are something that anti-virus program use to recognize viruses. The anti-virus programs will think that the local bitcoin database is infected.

If a transaction manages to trigger an anti-virus alert for someone, I'd blame it on the anti-virus program being badly designed.

Yes it will probably be annoying for a bunch of users but Bitcoin already has a strict enough rule set to make this hard to happen. 20 bytes isn't a lot, for most computers, a single standard word character is 1 byte. If a virus program goes around looking for suspicious data that is 20 bytes long they will run into a lot of false positives. And I doubt that there is any seriously dangerous virus that is under 20 bytes in size.

TL;DR

It's very hard to pull off anything harmful, you will need to develop a virus that only takes up <20 bytes and can destroy a system. Otherwise anti-virus programs would show you a warning that you can possibly close/ignore, it's up to the anti-virus programs to be smart enough to discern.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.