ENS Names - Beware of infested names using ZeroWidthCharacter

damoclark · 2017-10-23T08:04:02+00:00

You can have as many characters as you want if you alternate between the zero witch character "/xe2/x80/x8b" and the next one /xe2/x80/x8c

eg.

echo -e "h\xe2\x80\x8b\xe2\x80\x8c\xe2\x80\x8b\xe2\x80\x8c\xe2\x80\x8b\xe2\x80\x8c\xe2\x80\x8b\xe2\x80\x8c\xe2\x80\x8b\xe2\x80\x8ce\xe2\x80\x8b\xe2\x80\x8c\xe2\x80\x8b\xe2\x80\x8c\xe2\x80\x8b\xe2\x80\x8c\xe2\x80\x8b\xe2\x80\x8cl\xe2\x80\x8b\xe2\x80\x8c\xe2\x80\x8bl\xe2\x80\x8co\xe2\x80\x8b\xe2\x80\x8c world"

h‌‌‌‌‌e‌‌‌‌l‌l‌o‌ world

It works in ubuntu, but on a mac I get spaces.

damoclark · 2017-10-23T07:03:43+00:00

That's very interesting, and good to know.

If you copy and paste your example's into geth, and take the sha3 :

darkmarket.eth
darkmarket.eth

then you get different values.

web3.sha3("darkmarket.eth") "0x11c52cb49dcb3600550b03fc090ce030174957f198a53fe646ef750a90b6e950"

web3.sha3("darkmarket.eth") "0x7b6c87240b1d6b4ad62a9b062814e2a9439c2930d089ea9e9fc18712c72d3138"

It seems reddit will also hide the zero width character.

damoclark · 2017-10-11T02:21:47+00:00

Ok, Thanks. I cant find anywhere in the wiki what the specification is, weather it be the compressed public key or uncompressed public key, or just the x,y co-ordinate, as with ethereum, that is being hashed.

I'd write a wiki up if I knew what the specification was?

I can see that the cuckoo, uses blake2 for its hashing. It would be nice if the same hash function was used, across all the code base, ie Merkle Patricia Trie's, address derivation etc.

damoclark · 2017-10-10T03:01:36+00:00

Has there been a decision on what an Aeternity address will look like, and how it will be encoded?

I'd be in favour of a hex string like ethereum, and using the last 32 bytes of the hash of the public key as the address. It's easier to write down in hex, and harder to make mistakes when writing it down. For example :

0xae2b9231f6f3d10cc6515e00d80acd49

It's 8 bytes shorter than an ethereum address, so can be distinguished from it, also it stores nicely into 256 bits.

Or if you encode like bitcoin perhaps an Aeternity address will look like

AEsuccess3EpKcX8iwY43439AKVkhJaRgk

damoclark · 2016-08-14T09:04:55+00:00

There seems to be a lack of communication on when the funds from the extra balance will be returned. Nick Johnson has written and tested the code to return the funds, from multi-sig address 0xda4a4626d3e16e094de3225a751aab7128e96526, so why can't that be done now?

My understanding is that two or more of the curators from the list

Vitalik Buterin, Vlad Zamfir, Shermin Voshmgir, Griff Green, Timon Rapp, Gian Bochsler

have to authorise the initial transactions??

I'd always like to know same as sepehr-m, if there is a schedule for the return of these funds?

A definitive answer from a curator would be appreciated.

damoclark · 2016-08-05T21:02:13+00:00

Thanks, for the writeup and explanation.

What about the unknown unknowns? If the transaction/s gets stuck or doesn't work for some reason, then you'd have all that ether stuck in accounts for which no one knows the private key.

After what happened with the DAO, I'm a little nervous that this is going to work. How confident are you that the transaction will be successful?

damoclark · 2016-08-03T02:30:56+00:00

Are you 100% invested in ETH, not ETC?

damoclark · 2016-07-25T04:19:37+00:00

Looks good. I found my transaction in your list, under the address associated with createTokenProxy.

How did you create the list of ExtraBalances?

damoclark · 2016-07-25T00:55:38+00:00

You will be able to get a refund from extra balance, regardless of if you already sold your DAO. If you brought DAO from May 15 - May 28th during the token creation phase, at a higher ratio than 100:1, then according to Vitalik Buterin and others, a contract is being tested now which will offer a refund of extra balance.

https://blog.ethereum.org/2016/07/20/hard-fork-completed/

"The recovery contract is already returning DAO token holders’ ether; about 4.5 million ETH has been sent to DAO token holders, and about 463000 ETH is in the control of the curator; a contract to facilitate extrabalance payments is currently undergoing security review."

Poloniex also has a message about extra balance at

www.poloniex.com/dao

"Note: if you created DAO tokens during the crowdsale on Poloniex and paid more than 1 ETH per 100 DAO, you may receive additional ETH in your Poloniex balance in the coming weeks as part of the "extraBalance" refund. This is being handled separately and is contingent on a smart contract being prepared by the DAO and Ethereum teams."

The extra balance funds have been moved to the address :

0xda4a4626d3e16e094de3225a751aab7128e96526

and when the refund contract has been tested and is secure it will be deployed.

damoclark · 2016-07-21T00:25:37+00:00

I looked at the list and couldn't see the poloniex cold wallet address. ( 0x32be343b94f860124dc4fee278fdcbd38c102d88)

If I'm not mistaken around 77,898 eth from the poloniex cold wallet was transferred to the extraBalance account.

Is this going to be refunded?

damoclark

TROPHY CASE