Hacker News new | ask | show | jobs
by tylersmith 3252 days ago
They almost certainly did. I do market research and a number of vendor keys changed on Hansa and Dream on June 23rd. Some had various comments in them claiming to be older, e.g. "EST June 2016".

Dutch Police released a statement claiming as much http://politiepcvh42eav.onion/hansafaq.html
2 comments
hackerboos 3252 days ago
I diffed a key I recently used on Hansa with one the same vendor on Grams and it appears that the key wasn't updated.

Maybe this was done on a case-by-case basis or Grams updated their keys to the new LE keys.

link
matt_wulfeck 3252 days ago
Interesting. What do you do with your market research?
link
tylersmith 3252 days ago
I'm a developer on the OpenBazaar project which is a p2p Bitcoin market. Because DNMs are the most popular Bitcoin marketplaces I keep up with them and their features and trends. They're great sources for discovering security concerns.
link
contingencies 3252 days ago
Can you give an example of some of the security concerns you have discovered? Do you keep a formal list of threat vectors? I would have thought they are pretty much the same as regular web apps.

PS. OpenBazaar seems to have received $3M funding. Interesting about change for a project started by Amir Taaki given his very anarchist professions.

PPS. Desktop client seems a bad thing to develop first (in the true tradition of Bitcoin!). Perhaps you guys could have stuck with network client daemon + API for starters. Anyway, good luck.

link
SamPatt 3251 days ago
The desktop client is just the GUI for the backend:

https://github.com/OpenBazaar/openbazaar-go

link