EOS BP Security Statement by eostribe

View this thread on: hive.blog | peakd.com | ecency.com

eos · @eostribe · May 30 '18 (edited)

$23.27

EOS BP Security Statement

<html>
https://cdn.steemitimages.com/DQmVSGKVZEwEUXdamFPS7wSXKHiynzfwsBrcK7SL7aqRxsH/eosbpsecurity.jpg
<br><br>
<strong>This article was written in collaboration with Eric Björk of Sw/eden, Eugene Luzgin of EOS Tribe, Jae Chung of HKEOS, Igor Lins e Silva of EOS Rio, Michael Yeates of eosDAC, and @jemxpat.</strong><br>
<h3>Motivation & Concerns</h3>
<br>
<strong>The EOSIO software is both groundbreaking and revolutionary. It has the potential to bring a new era of blockchain applications and create new paradigms in blockchain usability, scalability and governance. Thousands of people, including the people involved in this release, have invested huge amounts of time and money to ensure this potential is realised. This is all culminating in an expected launch of an EOS mainnet on June 2nd/3rd 2018.
<br><br>
However, the EOS mainnet is a unique target for attack. With a year long ICO and so much money raised, large community involvement, huge expectations, it is reasonable to assume that there are malicious detractors who wish it harm. We feel it prudent to consider the nature of possible attacks, and the defenses and procedures expected to be in place against such attacks.
<br><br>
The bootstrap methods implemented in the eos-bios program, result in <strong>severe vulnerabilities</strong>, allowing any attacker to damage or destroy producer nodes or the entire blockchain. The excessive information about the producer network published directly on the blockchain will allow all types of attack, from protocol injection up to volumetric DDoS attacks.
<br><br>
While it is never possible to perfectly secure any system, it is irresponsible to not create some reasonable defenses. In this message, we detail some of the attacks possible, demonstrate some tested attacks against the insecure boot chain, and then suggest our preferred method of bootstrapping in a more secure manner.
<br><br>
We deeply regret any discomfort and angst caused by this. We have tried to explain the problems and suggest solutions in public and private Telegram chat rooms for over two months. We have encouraged modifications to the proposed automatic bios code. Alas, changes to the security model have not been implemented, and have been actively resisted. We feel that we are left with no choice but to publish a few precise and demonstatable methods of attacking and damaging such a blockchain, and show how to mitigate such risks. If we do nothing, the risk of failure is too large to accept. 
<br/><br>
We did not publish these concerns earlier because we needed to investigate them extensively and verify that they were not just speculations before sharing them to the community. The writing that follows consists of facts supported by evidence. </strong>
<br>
<h3>Current insecurities discovered in the eos-bios boot process.</h3>
<br>
<strong>Much of the functionality of eosio is provided by plugins. They allow the system to produce blocks, connect to other nodes etc.  The base eosio software includes many plugins. A block producing node should not run any unnecessary plugin on a live network, because some of them allow the chain to be hacked. Some of these plugins should never be exposed on a publicly accessible node.
<br><br>
One particular plugin we have noticed is the <b>net_api plugin</b>, which provides an api which can be used to control the plugin remotely.  If this API is exposed on a public network then anyone with the ability to connect to this network can tell the block producers to disconnect from, or connect to, any other machine. This does not require anything close to a botnet. Without even being a part of the eos-bios network, a mac mini could disconnect every peer in the network.
<br><br>
Allowing this vulnerability on the live network could mean that an attacker can stop the chain from function properly and even partition the nodes so that eventually they stop. 
The Ghostbusters team noticed the vulnerability early on in the design of eos-bios and reported it to EOS Canada but no changes were made.  This is one reason that we cannot support the launch using eos-bios.</strong>
<br>
<h3>How to hack a chain knowing one peer node running net plugin</h3>
<br>
Run command: <pre>cleos -u [peer-url] net peers </pre>
<br>
Returns you a list of responses like following for each node:
<pre>
{
    "peer": "",
    "connecting": false,
    "syncing": false,
    "last_handshake": {
      "network_version": 1206,
      "chain_id": "0000000000000000000000000000000000000000000000000000000000000000",
      "node_id": "b92b2b7d8835e46e2fed97f5eebda31faea63fd07cc40ad52f132254f22cac8e",
      "key": "EOS1111111111111111111111111111111114T1Anm",
      "time": "1527171594944050635",
      "token": "0000000000000000000000000000000000000000000000000000000000000000",
      "sig": "SIG_K1_111111111111111111111111111111111111111111111111111111111111111116uk5ne",
      "p2p_address": "reach.me.example.com:9876 - b92b2b7",
      "last_irreversible_block_num": 57,
      "last_irreversible_block_id": "000000391a9439aaa2864d9807965bc84865cdd15c4a0a3d0ae3c7e54a85a38f",
      "head_num": 300,
      "head_id": "0000012c9826a4f37db5e5c8b4790acad70c01188aee8e7b7330790937a93cdd",
      "os": "linux",
      "agent": "\"EOS Example\"",
      "generation": 2
    }
</pre>

Next get a list of peers only: 
<pre>cleos -u [peer-url] net peers | grep peers</pre>

And disconnect each peer:
<pre>cleos -u [peer-url] net disconnect host:port</pre>

One could eventually force the connection to any other peer using, also increasing risks of network instability:
<pre>cleos -u [peer-url] net connect host:port</pre>
<br><br>
<h3>The Recommended Solutions</h3>
<br>
<strong>So should we be panicking and throwing out all of our tokens? Definitely not. As much as we have investigated and tested the potential security risks associated with launching the network, we have also experimented and discussed about solutions to the problems above.</strong><br>
<h4>Wireguard Private Mesh Security</h4>
<br>
<strong>Given the fact that EOS software has not been securely vetted and BP node stores sensitive producer private keys, we have to take extra measures for securing those producing nodes. 
Ideally no public Internet access should be allowed to BP nodes while allowing meshing between BP nodes. 
Hence we propose using secure peer to peer communication between BP nodes via point-to-point secure tunnels using the open source WireGuard kernel based VPN software.
 <br><br>
Each BP node will have 1 or more full nodes that it establishes secure connection to. Those full nodes will be exposed on open Internet protocol and available for access for overall Blockchain network. BP node should not expose it’s non-VPN IP address to the open Internet access. 
Also for fault-tolerance BP node should establish several trusted connections to other nodes.
</strong>
https://cdn.steemitimages.com/DQmVd4Hdwk798oop7UdK7oaoiAPdVjssrb4vqSexXVKfJFq/BPinfra2.jpg
<br><strong>
<ul><b>Layer 1 (Block Production Layer)</b>
<li> 2 Producers: 1x Producer node & 1x Stand-by node</li>
<li> Producer Control Switch: a machine to monitor and enable failover switching</li>
<li> Layer 1 nodes could be connected to other trusted producer or full nodes via VPN (WireGuard)</li>
<li> Nothing extra installed other than Producer API, whose access is restricted to the producer control switch</li>
</ul>
<ul><b>Layer 2 (P2P Layer)</b>
<li> Full nodes to relay blocks</li>
<li> Connected to the Layer 1 nodes via direct tunnels (WireGuard)</li>
<li> Securely meshed to trusted BPs via P2P VPN (WireGuard)</li>
<li> Only uses History API and Chain API, restricted to the proxy servers on layer 3</li>
<li> BPs are encouraged to make public full nodes available for external access for example, exchanges, portals, new BPs…</li>
</ul>
<ul><b>Layer 3 (API Layer)</b>
<li> Web servers to support HTTP endpoints</li>
<li> Layer 3 nodes should be pure web firewalls and have no blockchain information</li>
<li> Connected to our Layer 2 Relay nodes via HTTP (wireguard)</li>
<li> Uses Patroneos to prevent against basic DDoS and application layer attacks</li>
 </ul>
<ul><b>Layer 4 (Public Layer)</b>
<li> Global BP Load Balancer (all traffic goes into this single point)</li>
<li> Volumetric Attacks gets handled at ISP level</li>
<li> Routes all HTTPS (SSL) traffic to our Layer 3 web servers</li>
<li> Configured to DNS (optional)</li>
<li> L4 can be as simple as DNS round robin with short TTL.</li>
</ul>
<br>
<h3>Conclusion</h3>
<br><strong>
We are 100% committed to launching, and supporting, a stable and resilient EOS mainnet. Given the facts stated above, and insecure nature of eos-bios boot process, our community of BPs is strongly advocating against using at as standard launch procedure as it exposes a complete chain to an attack by anyone. 
<br><br>
We, as a community, consider it our duty to ensure that the EOS mainnet is secure and resilient. Using the eos-bios process will create unnecessary risks for the EOS Blockchain launch and ultimately all EOS token holders. Also, any negative press on insecurities in EOS Blockchain launch or failed attempt to launch the Blockchain will have a negative impact on EOS price and reputation. 
<br><br>
Therefore we believe it will be in all stakeholders interests to bring down any insecure and unstable network, using above methods we have highlighted, before any malicious third party takes advantage of such insecurity. We will simultaneously endeavour to introduce security improvements into launch and operational processes.
<br><br>
The security imperatives cannot be ignored and, given the stakes, must viewed as the paramount consideration.
</strong>
<br><br>
<ul><b>BP Teams Involved:</b>
<li>Sw/eden</li>
<li>EOS Tribe</li>
<li>HKEOS</li>
<li>EOS Rio</li>
<li>Block Matrix</li>
<li>eosDAC</li>
<li>Eosmeso</li>
<li>AcroEOS</li>
</ul>
</html>

👍 lukestokes, ashe-oro, clains, tobixen, slavix, kwonjs77, bitspace, mjhomb, bryanj4, allyouneedtoknow, goldbug1450, summerskin, cmichel, steempowerpics, techblogger, andybets, cryptojaxx, ivrmakers, yingpingzhang, sanees, eluzgin, thomasuk, pdogg147, patrickzhou, sevenstars, luigi-tecnologo, robrigo, riceowladam, kesarito, eostribe, j96, eosys, m-i-k-e, sf2, russia-insider, vijbzabyss, xebb, eosdallas, eosrio, tsto, devcore, canellas, mellowplay, xoperator, a3t, dalaih, marcovitale, performatgames, eosdac, cjane, gnumarcelo, dr-manulz, cryptogrok, mso, leordev, sallshien, trustika, sunburntcat17, majesticherbs, adison, javierjmc, kamov, seanxa, hkeos, and 19 others
👎 dan, eos-asia, blacklist-a

`author`	eostribe
`permlink`	eos-bp-security-statement
`category`	eos
`json_metadata`	{"tags":["eos","bp","launch","bios","security"],"users":["jemxpat"],"image":["https://cdn.steemitimages.com/DQmVSGKVZEwEUXdamFPS7wSXKHiynzfwsBrcK7SL7aqRxsH/eosbpsecurity.jpg","https://cdn.steemitimages.com/DQmVd4Hdwk798oop7UdK7oaoiAPdVjssrb4vqSexXVKfJFq/BPinfra2.jpg"],"app":"steemit/0.1","format":"html"}
`created`	2018-05-28 15:35:36
`last_update`	2018-05-30 02:17:42
`depth`	0
`children`	37
`last_payout`	2018-06-04 15:35:36
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	17.690 HBD
`curator_payout_value`	5.578 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.002 HBD
`body_length`	9,904
`author_reputation`	2,660,491,410,996
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,129,498
`net_rshares`	5,729,017,615,621
`author_curate_reward`	""

properties (23)vote details (86)

voter	rshares	pct
dan	-1,135,311,150,803	-100%
clains	455,714,153,753	47%
ashe-oro	1,471,587,177,339	100%
tobixen	446,084,734,272	100%
lukestokes	2,779,921,306,880	100%
kwonjs77	315,356,521,191	38%
robrigo	3,650,563,075	100%
bryanj4	84,546,075,762	100%
bitspace	231,985,657,466	100%
ubg	605,861,512	1%
pdogg147	10,081,471,634	100%
riceowladam	3,252,929,650	100%
xebb	949,967,723	100%
mjhomb	157,426,400,309	100%
allyouneedtoknow	84,366,791,127	70%
j96	2,461,677,143	100%
blacklist-a	-104,191,869	-10%
goldbug1450	68,842,265,795	100%
sallshien	610,798,666	100%
cryptojaxx	20,896,084,245	100%
sanees	11,797,273,759	100%
andybets	24,257,012,378	100%
sevenstars	8,678,485,593	100%
b1czu	610,098,279	100%
willstephens	443,622,133	100%
slavix	404,609,522,101	100%
steempowerpics	40,942,562,522	100%
youngogmarqs	75,503,454	0.02%
luigi-tecnologo	8,259,114,606	41%
summerskin	54,817,546,205	100%
javierjmc	610,390,398	100%
adison	610,390,398	100%
majesticherbs	610,390,398	100%
sunburntcat17	610,390,398	100%
eluzgin	10,799,316,179	100%
trustika	610,390,398	100%
techblogger	35,245,514,127	100%
ivrmakers	15,650,649,444	100%
mso	611,067,624	100%
thomasuk	10,094,410,201	100%
kesarito	3,043,184,095	100%
starlost	528,928,531	100%
yingpingzhang	13,594,137,365	100%
cryptogrok	611,243,358	100%
m-i-k-e	1,659,604,402	100%
russia-insider	1,193,959,886	100%
canellas	613,140,331	100%
cmichel	43,557,791,043	100%
marcovitale	611,527,595	100%
performatgames	611,495,601	100%
patrickzhou	9,092,068,811	100%
dr-manulz	611,243,358	100%
gnumarcelo	611,243,358	100%
thetroublenotes	76,768,055	0.7%
leordev	610,992,211	100%
maxocoin	0	100%
devcore	613,682,078	100%
tsto	616,758,580	100%
sf2	1,464,484,868	100%
eosdac	611,331,164	100%
kamov	610,361,074	100%
eosys	2,343,415,652	100%
mellowplay	612,858,388	100%
xoperator	612,855,259	100%
dalaih	612,101,244	100%
cryptolions	596,383,820	100%
eosdallas	761,796,620	100%
gerswyn	578,133,990	100%
a3t	612,527,606	100%
edublock	341,294,804	100%
eos-asia	-281,014,529	-100%
seanxa	610,225,902	100%
eostribe	2,643,892,085	100%
dimelopons	246,908,631	100%
eosrio	688,465,340	100%
vijbzabyss	1,059,953,060	100%
hkeos	610,107,133	100%
cjane	611,258,372	100%
blockmatrix	122,198,298	100%
eos-costarica	320,810,520	100%
gusguimaraes2	598,398,311	100%
lucacroce	316,563,018	100%
eoslithuania	244,091,306	100%
dondimaric	341,699,562	100%
abartminas	0	100%
litch	0	100%

@ash · May 28 '18

$0.11

so EOSCanada ignoring security concerns for 2 months straight? way to become a BP

👍 eluzgin, pointeblue, extremedistaste, greycrasan, m-i-k-e, cryptogrok

`author`	ash
`permlink`	re-eostribe-eos-bp-security-statement-20180528t163534669z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-05-28 16:35:36
`last_update`	2018-05-28 16:35:36
`depth`	1
`children`	3
`last_payout`	2018-06-04 16:35:36
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.108 HBD
`curator_payout_value`	0.002 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	81
`author_reputation`	286,803,743,324,398
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,138,662
`net_rshares`	27,760,889,929
`author_curate_reward`	""

properties (23)vote details (6)

voter	rshares	pct
extremedistaste	4,991,722,607	95%
pointeblue	6,621,272,531	31%
eluzgin	10,637,326,437	100%
cryptogrok	0	100%
m-i-k-e	1,584,922,204	100%
greycrasan	3,925,646,150	29%

@devcore · May 28 '18

$0.04

now, EOSCanada has always been very transparent about any problem, let's wait for them to tell us their version of things before rushing to conclusions...

👍 cryptohead, dinnen

`author`	devcore
`permlink`	re-ash-re-eostribe-eos-bp-security-statement-20180528t164102747z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-05-28 16:40:57
`last_update`	2018-05-28 16:40:57
`depth`	2
`children`	2
`last_payout`	2018-06-04 16:40:57
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.031 HBD
`curator_payout_value`	0.004 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	154
`author_reputation`	11,403,814,844
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,139,377
`net_rshares`	9,586,982,317
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
cryptohead	0 B		8,976,306,562	43%
dinnen	0 B		610,675,755	100%

@cryptogrok · Jun 4 '18 (edited)

They failed to launch the chain because of the very things the Trinity/Ghostbusters group was saying all along - for literally months. There is no excuse. The serious security and systems guys were right, a lot of the others were flat out wrong. Maybe the next time something happens like this people might not dismiss it so quickly.

properties (22)

`author`	cryptogrok
`permlink`	re-devcore-re-ash-re-eostribe-eos-bp-security-statement-20180604t195536248z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-06-04 19:55:36
`last_update`	2018-06-04 19:56:00
`depth`	3
`children`	0
`last_payout`	2018-06-11 19:55:39
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	333
`author_reputation`	2,879,402,357
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	59,257,949
`net_rshares`	0

@eluzgin · May 28 '18

$0.05

https://cdn.steemitimages.com/DQmTe3zBwe3aAooat5PpeYRn6aoKbtDKvJRQMLYHwuQb1Jv/Screen%20Shot%202018-05-28%20at%2017.27.03.png

👍 cryptohead, m-i-k-e, eosrio, winlin, eosdac, seanxa, miohtama

`author`	eluzgin
`permlink`	re-devcore-re-ash-re-eostribe-eos-bp-security-statement-20180528t165652514z
`category`	eos
`json_metadata`	{"tags":["eos"],"image":["https://cdn.steemitimages.com/DQmTe3zBwe3aAooat5PpeYRn6aoKbtDKvJRQMLYHwuQb1Jv/Screen%20Shot%202018-05-28%20at%2017.27.03.png"],"app":"steemit/0.1"}
`created`	2018-05-28 16:56:51
`last_update`	2018-05-28 16:56:51
`depth`	3
`children`	0
`last_payout`	2018-06-04 16:56:51
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.046 HBD
`curator_payout_value`	0.004 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	124
`author_reputation`	48,344,025,750
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,141,471
`net_rshares`	13,195,967,931
`author_curate_reward`	""

properties (23)vote details (7)

voter	rshares	pct
cryptohead	8,976,306,562	43%
miohtama	93,074,156	100%
m-i-k-e	1,618,114,292	100%
eosdac	608,274,508	100%
seanxa	601,072,514	100%
eosrio	688,465,340	100%
winlin	610,660,559	100%

@bryanj4 · May 28 '18

Great work Eugene and team!

👍 a3t, dmore, seanxa

`author`	bryanj4
`permlink`	re-eostribe-eos-bp-security-statement-20180528t161041028z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-05-28 16:10:39
`last_update`	2018-05-28 16:10:39
`depth`	1
`children`	0
`last_payout`	2018-06-04 16:10:39
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	27
`author_reputation`	1,872,773,519,829
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,135,196
`net_rshares`	1,778,493,188
`author_curate_reward`	""

properties (23)vote details (3)

voter	rshares	pct
a3t	612,527,606	100%
seanxa	576,663,478	100%
dmore	589,302,104	100%

@cmichel · May 28 '18

@remind.bot 3 hours

👍 remind.bot

`author`	cmichel
`permlink`	re-eostribe-eos-bp-security-statement-20180528t184517425z
`category`	eos
`json_metadata`	{"tags":["eos"],"users":["remind.bot"],"app":"steemit/0.1"}
`created`	2018-05-28 18:45:18
`last_update`	2018-05-28 18:45:18
`depth`	1
`children`	2
`last_payout`	2018-06-04 18:45:18
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	19
`author_reputation`	1,950,560,061,631
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,155,579
`net_rshares`	610,654,513
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
remind.bot	0 B		610,654,513	100%

@remind.bot · May 28 '18

$0.52

Mentioning and replying to you here on **Mon, 28 May 2018 21:46:10 GMT** to remind you of [this post](https://steemit.com/tag/@eostribe/eos-bp-security-statement).
Please consider upvoting this comment to keep this service running.

👍 tobixen, cmichel

`author`	remind.bot
`permlink`	re-cmichel-re-eostribe-eos-bp-security-statement-20180528t184724022z
`category`	eos
`json_metadata`	{"app":"coininfo/1.0.0","format":"markdown"}
`created`	2018-05-28 18:47:24
`last_update`	2018-05-28 18:47:24
`depth`	2
`children`	0
`last_payout`	2018-06-04 18:47:24
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.389 HBD
`curator_payout_value`	0.126 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	231
`author_reputation`	16,538,891,840
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,155,838
`net_rshares`	127,732,675,424
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
tobixen	0 B		84,838,200,996	19%
cmichel	0 B		42,894,474,428	100%

@remind.bot · May 28 '18

$0.17

Reminding @cmichel of [this post](https://steemit.com/tag/@eostribe/eos-bp-security-statement) as requested!
Please consider upvoting this comment to keep this service running.

👍 cmichel

`author`	remind.bot
`permlink`	re-cmichel-re-eostribe-eos-bp-security-statement-20180528t214729759z
`category`	eos
`json_metadata`	{"app":"coininfo/1.0.0","format":"markdown"}
`created`	2018-05-28 21:47:30
`last_update`	2018-05-28 21:47:30
`depth`	2
`children`	0
`last_payout`	2018-06-04 21:47:30
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.126 HBD
`curator_payout_value`	0.042 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	176
`author_reputation`	16,538,891,840
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,176,892
`net_rshares`	42,231,157,813
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
cmichel	0 B		42,231,157,813	100%

@cryptohead · May 28 '18 (edited)

The vulnerability you are pointing to is in the net_api plugin, not in the EOS-BIOS software.

I'd rather see a transparent, consensus oriented, well orchestrated launch, than one obscured by a  VPN system among a group of BP's.
I've never been an advocate of "Security by Obscurity" especially when BP's are suppose to act with complete transparency.

But I would wait to see EOS Canada's debunking of this issue before making further comments.

👍 sogasg, unus, dinnen

`author`	cryptohead
`permlink`	re-eostribe-eos-bp-security-statement-20180528t171947526z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-05-28 17:19:42
`last_update`	2018-05-28 17:23:00
`depth`	1
`children`	3
`last_payout`	2018-06-04 17:19:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	445
`author_reputation`	607,929,583,052
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,144,526
`net_rshares`	2,643,070,683
`author_curate_reward`	""

properties (23)vote details (3)

voter	rshares	pct
sogasg	1,456,511,034	100%
unus	612,524,439	100%
dinnen	574,035,210	100%

@cryptogrok · Jun 4 '18 (edited)

The plugin in question in fact had some dependancies at the time of announcement though. A time when they were only days away from launch. 

The Ghostbusters/ Trinity group had serious concerns that this could slow down the launch of the chain ultimately - which ended up actually happening. Now the Ghostbusters/Trinity group are the CORE group launching the chain. 

That says everything you really need to know about all this. 

End of story.

👍 cryptogrok

`author`	cryptogrok
`permlink`	re-cryptohead-re-eostribe-eos-bp-security-statement-20180604t201012707z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-06-04 20:10:12
`last_update`	2018-06-04 20:11:36
`depth`	2
`children`	0
`last_payout`	2018-06-11 20:10:12
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	445
`author_reputation`	2,879,402,357
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	59,259,699
`net_rshares`	589,849,841
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
cryptogrok	0 B		589,849,841	100%

@dmore · May 28 '18

why I am not surprised. first thing they have to do is to behave like professionals and act securely. bps must realise they are not 'talking' to the community only, nor the other bps; they are talking to their future hackers. bring down the youtube videos sharing screens and commands please and stop being careless. if you care about the community be secure. and if you care more, be more secure. you'll never tweet, share your name or your email because that would be insecure. and you would reset your router each day like a pro.

properties (22)

`author`	dmore
`permlink`	re-cryptohead-re-eostribe-eos-bp-security-statement-20180528t182819723z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-05-28 18:28:21
`last_update`	2018-05-28 18:28:21
`depth`	2
`children`	1
`last_payout`	2018-06-04 18:28:21
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	532
`author_reputation`	0
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,153,465
`net_rshares`	0

@eluzgin · May 28 '18

$0.17

Relying on hackers not knowing how to hack your system (also known as "security by obscurity"), doesn't work. You can safely assume hackers to know and understand your system well. Hence you can not hope for hackers not attacking your system. 
What this group have published is nothing secret but standard functionality. 
Besides these concerns were raised in smaller group conversations for some time now but no actions were taken to remedy security concerns. 
And while marketing was winning technical side of this argument - we had to make these facts known to a wider community while keeping in mind it may make some people unhappy.
Ultimately our goal is successful launch of EOS Blockchain and a duty to EOS token holders.

👍 cryptohead, slavix, eosrio, unus, seanxa

`author`	eluzgin
`permlink`	re-dmore-re-cryptohead-re-eostribe-eos-bp-security-statement-20180528t191639381z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-05-28 19:16:39
`last_update`	2018-05-28 19:16:39
`depth`	3
`children`	0
`last_payout`	2018-06-04 19:16:39
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.134 HBD
`curator_payout_value`	0.037 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	728
`author_reputation`	48,344,025,750
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,159,513
`net_rshares`	42,972,508,246
`author_curate_reward`	""

properties (23)vote details (5)

voter	rshares	pct
cryptohead	20,875,131,540	100%
slavix	20,230,476,105	5%
unus	603,336,572	100%
seanxa	588,867,996	100%
eosrio	674,696,033	100%

@dan · May 28 '18

$10.22

The eosio::net_api_plugin was made *optional* for this very reason. No producer or public endpoint should be running with this plugin and it is a simple config file change.  

I feel like the intro to this post is overly alarmist way to support an otherwise worthwhile effort at securing block producing nodes.

👍 dan, mariusfebruary, marketingmonk, mjhomb, gtg, cryptohead, chitty, thecastle, andybets, eluzgin, bobinson, robrigo, fixedelineation, yocko, ripama, n8d, ivanxia, genereos, mso, javierjmc, dinnen, almariah, eos-asia

`author`	dan
`permlink`	re-eostribe-eos-bp-security-statement-20180528t175218085z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-05-28 17:52:18
`last_update`	2018-05-28 17:52:18
`depth`	1
`children`	7
`last_payout`	2018-06-04 17:52:18
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	9.283 HBD
`curator_payout_value`	0.936 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	310
`author_reputation`	155,470,101,136,708
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,148,931
`net_rshares`	2,525,470,705,841
`author_curate_reward`	""

properties (23)vote details (23)

voter	rshares	pct
dan	1,152,958,474,391	100%
chitty	16,286,699,423	5%
marketingmonk	267,162,457,605	50%
cryptohead	20,875,131,540	100%
gtg	61,262,928,924	1%
robrigo	3,650,563,075	100%
fixedelineation	1,768,891,733	100%
mjhomb	160,434,548,085	100%
thecastle	16,206,969,624	10%
andybets	12,315,098,591	50%
javierjmc	598,182,590	100%
eluzgin	10,745,319,598	100%
mso	598,846,271	100%
bobinson	7,464,348,951	100%
n8d	611,446,647	100%
almariah	509,689,683	100%
ivanxia	610,390,398	100%
mariusfebruary	788,712,979,122	100%
yocko	612,524,439	100%
eos-asia	285,293,938	100%
ripama	611,599,280	100%
dinnen	586,248,725	100%
genereos	602,073,208	100%

@cryptogrok · Jun 4 '18 (edited)

Sorry guys but eat some humble pie on all the judgments that some put on this group for trying to bring all this up prior to the launch. No one listened. 

Now here we are 2-3 days later and BOOT BIOS didn't deliver. All that hype. All that political BS, pomp and circumstance, etc... and in the end, they feel flat on their face. 

Funny the difference that just a few days makes. ;)

In the end, the very people you put in question ended up <a href="https://medium.com/@bensig/letter-to-eos-block-producer-candidates-184ef59a0748">being the talent that will launch the chain</a>.

👍 cryptogrok

`author`	cryptogrok
`permlink`	re-dan-re-eostribe-eos-bp-security-statement-20180604t194127004z
`category`	eos
`json_metadata`	{"tags":["eos"],"links":["https://medium.com/@bensig/letter-to-eos-block-producer-candidates-184ef59a0748"],"app":"steemit/0.1"}
`created`	2018-06-04 19:41:27
`last_update`	2018-06-04 19:47:24
`depth`	2
`children`	0
`last_payout`	2018-06-11 19:41:27
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	581
`author_reputation`	2,879,402,357
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	59,256,074
`net_rshares`	611,243,358
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
cryptogrok	0 B		611,243,358	100%

@gtg · May 28 '18

$0.71

> I feel like the intro to this post is overly alarmist 

Yeah, especially that all those are pretty much basic and obvious do's and dont's (don't run plugins you don't need on a witness node, do not expose API to public that you don't want to be public, etc, etc. :-) ) and everyone who is familiar with this family of blockchains already knows that
Well, at least those running for the office should ;-)
<sub>(no, I'm not, too busy with Steem)</sub>

👍 mjhomb, andybets, bobinson, eos-asia

`author`	gtg
`permlink`	re-dan-re-eostribe-eos-bp-security-statement-20180528t185810164z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-05-28 18:58:09
`last_update`	2018-05-28 18:58:09
`depth`	2
`children`	4
`last_payout`	2018-06-04 18:58:09
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.536 HBD
`curator_payout_value`	0.173 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	451
`author_reputation`	461,778,196,648,915
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,157,147
`net_rshares`	175,848,952,979
`author_curate_reward`	""

properties (23)vote details (4)

voter	rshares	pct
mjhomb	155,420,968,458	100%
andybets	12,190,703,656	50%
bobinson	7,961,972,215	100%
eos-asia	275,308,650	100%

@eosdallas · May 28 '18

$0.13

We are sorry you feel that way @gtg

The effort was honest and others in the Trinity group are saying it isn't resolved this easily. Let's let the dust settle and see how these groups resolve this issue before discounting anyones work on strengthening the EOS network.

👍 slavix, andybets, bobinson

`author`	eosdallas
`permlink`	re-gtg-re-dan-re-eostribe-eos-bp-security-statement-20180528t191148233z
`category`	eos
`json_metadata`	{"tags":["eos"],"users":["gtg"],"app":"steemit/0.1"}
`created`	2018-05-28 19:11:48
`last_update`	2018-05-28 19:11:48
`depth`	3
`children`	3
`last_payout`	2018-06-04 19:11:48
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.099 HBD
`curator_payout_value`	0.029 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	268
`author_reputation`	355,857,786,056
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,158,895
`net_rshares`	32,172,389,891
`author_curate_reward`	""

properties (23)vote details (3)

voter	rshares	pct
andybets	11,941,913,786	50%
slavix	20,230,476,105	5%
bobinson	0	0%

3 replies

@m-i-k-e · May 28 '18

Are you aware of the Ghostbusters project?

👍 eosdac, cryptogrok
👎 crypto-guru, eos.sweden

`author`	m-i-k-e
`permlink`	re-dan-re-eostribe-eos-bp-security-statement-20180528t180428150z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-05-28 18:04:27
`last_update`	2018-05-28 18:04:27
`depth`	2
`children`	0
`last_payout`	2018-06-04 18:04:27
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	42
`author_reputation`	595,891,052,756
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,150,552
`net_rshares`	-204,014,663,439
`author_curate_reward`	""

properties (23)vote details (4)

voter	rshares	pct
crypto-guru	-203,892,641,967	-100%
cryptogrok	0	100%
eosdac	605,217,852	100%
eos.sweden	-727,239,324	-100%

@dimelopons · May 28 '18

Really is a breath of fresh air to see a talented community  with a clear. The combination of this security bug and the consensus algorithm flaw i think it's safe to say mainnet isnt ready for launch and the fact that the community is aware of that and not trying to rush it is a great sign.

👍 m-i-k-e, dmore, edublock, adrianbye

`author`	dimelopons
`permlink`	re-eostribe-eos-bp-security-statement-20180528t162525677z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-05-28 16:25:27
`last_update`	2018-05-28 16:25:27
`depth`	1
`children`	1
`last_payout`	2018-06-04 16:25:27
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	291
`author_reputation`	20,540,138,880
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,137,264
`net_rshares`	2,575,939,506
`author_curate_reward`	""

properties (23)vote details (4)

voter	rshares	pct
m-i-k-e	1,643,008,358	100%
adrianbye	0	100%
edublock	334,468,908	100%
dmore	598,462,240	100%

@adrianbye · Jun 6 '18

Exactly!

properties (22)

`author`	adrianbye
`permlink`	re-dimelopons-re-eostribe-eos-bp-security-statement-20180606t034036352z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-06-06 03:40:36
`last_update`	2018-06-06 03:40:36
`depth`	2
`children`	0
`last_payout`	2018-06-13 03:40:36
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	8
`author_reputation`	0
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	59,468,350
`net_rshares`	0

@eos-costarica · May 28 '18 (edited)

$0.08

Thanks for the information! Launching the EOS mainnet will require a great deal of coordination between Block Producers. This involves configuring secure connections to prevent attackers from scanning the entire network topology looking for nodes to shut down. 

We will need to plan, communicate and work closely together with other Block Producers to ensure the network is secure and efficient. 

We have identified this requirement in our   [Technical Roadmap](https://steemit.com/eos/@eos-costarica/technical-roadmap-eos-costa-rica)

👍 cryptohead, seanxa

`author`	eos-costarica
`permlink`	re-eostribe-eos-bp-security-statement-20180528t172031543z
`category`	eos
`json_metadata`	{"tags":["eos"],"links":["https://steemit.com/eos/@eos-costarica/technical-roadmap-eos-costa-rica"],"app":"steemit/0.1"}
`created`	2018-05-28 17:20:30
`last_update`	2018-05-28 17:31:09
`depth`	1
`children`	0
`last_payout`	2018-06-04 17:20:30
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.066 HBD
`curator_payout_value`	0.017 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	536
`author_reputation`	59,435,529,009
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,144,637
`net_rshares`	21,126,463,525
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
cryptohead	0 B		20,562,004,566	100%
seanxa	0 B		564,458,959	100%

@eos.store · May 29 '18

This is a good article with a lot of good security advice, but I suggest that the Ghostbuster team and the Canada team and other core teams can communicate deeply, make up for each other's shortcomings, and finally reach the same starting point, such as reaching a compatible solution that will not cause the community to split up, only in this way can we start a main network in the whole world.

The following figure is a deployment diagram that I suggest for each BP. Each BP provides two types of nodes, some node communication with other BP's nodes through VPN(WireGuard), some use public networks to connect directly to other BP nodes， The details are decided by BP himself
![WX20180529-102749@2x.png](https://cdn.steemitimages.com/DQmZ7pWUzP2jJzuZbtbda4yAtkniTVZTHaEbTfKxytZXrwD/WX20180529-102749@2x.png)

properties (22)

`author`	eos.store
`permlink`	re-eostribe-eos-bp-security-statement-20180529t022842664z
`category`	eos
`json_metadata`	{"tags":["eos"],"image":["https://cdn.steemitimages.com/DQmZ7pWUzP2jJzuZbtbda4yAtkniTVZTHaEbTfKxytZXrwD/WX20180529-102749@2x.png"],"app":"steemit/0.1"}
`created`	2018-05-29 02:28:42
`last_update`	2018-05-29 02:28:42
`depth`	1
`children`	0
`last_payout`	2018-06-05 02:28:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	811
`author_reputation`	13,757,815,831
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,204,879
`net_rshares`	0

@goldbug1450 · May 28 '18 (edited)

Thank you for the information. The way i understand this EOS and other current ETH based tokens are currently safe (relative term) in registered MEW or simaler wallets. However tranfering them to the EOS main net upon launch may be risky unless security measures are implimented. Please confirm.

properties (22)

`author`	goldbug1450
`permlink`	re-eostribe-eos-bp-security-statement-20180528t161106804z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-05-28 16:11:33
`last_update`	2018-05-28 16:11:48
`depth`	1
`children`	1
`last_payout`	2018-06-04 16:11:33
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	295
`author_reputation`	26,412,852,309
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,135,320
`net_rshares`	0

@devcore · May 28 '18

$0.04

you don't really transfer those ERC-20 token into the EOS blockchain, is more like you get a copy of them on the other blockchain, if it makes sense. They will still be in your eth wallet AND in the EOS blockchain.

You don't have to implement particular security measures beside storing your priv keys in a safe way

👍 patrickzhou, b1czu, sunburntcat17

`author`	devcore
`permlink`	re-goldbug1450-re-eostribe-eos-bp-security-statement-20180528t163848771z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-05-28 16:38:42
`last_update`	2018-05-28 16:38:42
`depth`	2
`children`	0
`last_payout`	2018-06-04 16:38:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.033 HBD
`curator_payout_value`	0.004 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	316
`author_reputation`	11,403,814,844
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,139,074
`net_rshares`	10,154,817,174
`author_curate_reward`	""

properties (23)vote details (3)

voter	rshares	pct
b1czu	600,946,805	100%
sunburntcat17	598,182,590	100%
patrickzhou	8,955,687,779	100%

@mjhomb · May 28 '18

It's a good article. You should edit it to take out the alarmist parts now that you know...

👍 xebb

`author`	mjhomb
`permlink`	re-eostribe-eos-bp-security-statement-20180528t224836674z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-05-28 22:48:36
`last_update`	2018-05-28 22:48:36
`depth`	1
`children`	2
`last_payout`	2018-06-04 22:48:36
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	91
`author_reputation`	4,769,040,655,489
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,183,308
`net_rshares`	949,967,723
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
xebb	0 B		949,967,723	100%

@cryptogrok · Jun 4 '18

$0.60

But that's the thing - the Ghostbusters/Trinity group was right about all their assessments. The BOOT BIOS group was not able to stand up the chain because of some of the very reasons the Ghostbusters/Trinity group outlined. And the plugin in question ended up having some dependancies and wasn't as easy to use without them - so some people in the BOOT BIOS group couldn't hang when it was game time. 

Not trying to be confrontational, but that's the final word on all that.

👍 mjhomb

`author`	cryptogrok
`permlink`	re-mjhomb-re-eostribe-eos-bp-security-statement-20180604t200648546z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-06-04 20:06:48
`last_update`	2018-06-04 20:06:48
`depth`	2
`children`	1
`last_payout`	2018-06-11 20:06:48
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.454 HBD
`curator_payout_value`	0.150 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	476
`author_reputation`	2,879,402,357
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	59,259,281
`net_rshares`	174,668,858,230
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
mjhomb	0 B		174,668,858,230	100%

@mjhomb · Jun 5 '18

Fair enough then if the tone of the article was about right in the end. To me it initially sounded overly political. Always good if you can end up coming back and say "I told you so"! Good work ghostbusters

properties (22)

`author`	mjhomb
`permlink`	re-cryptogrok-re-mjhomb-re-eostribe-eos-bp-security-statement-20180605t014830930z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-06-05 01:48:33
`last_update`	2018-06-05 01:48:33
`depth`	3
`children`	0
`last_payout`	2018-06-12 01:48:33
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	206
`author_reputation`	4,769,040,655,489
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	59,295,961
`net_rshares`	0

@my4siteonline · May 28 '18

Go get em son we aint no verge

👍 dmore

`author`	my4siteonline
`permlink`	re-eostribe-eos-bp-security-statement-20180528t162124998z
`category`	eos
`json_metadata`	{"tags":["eos"],"app":"steemit/0.1"}
`created`	2018-05-28 16:21:27
`last_update`	2018-05-28 16:21:27
`depth`	1
`children`	0
`last_payout`	2018-06-04 16:21:27
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	30
`author_reputation`	48,458,559
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,136,720
`net_rshares`	610,675,755
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
dmore	0 B		610,675,755	100%

@performatgames · May 28 '18

Thank you for putting together this article, all of you are now on my list of BP candidates to most likely vote for.

👍 dmore

properties (23)vote details (1)

@riceowladam · May 28 '18

$0.24

Thanks for the update, heard about this but hadn’t looked into it yet...

👍 bryanj4, dallasrushing, mysearchisover

properties (23)vote details (3)

@steemitboard · May 30 '18

Congratulations @eostribe! You have completed some achievement on Steemit and have been rewarded with new badge(s) :

[![](https://steemitimages.com/70x80/http://steemitboard.com/notifications/voted.png)](http://steemitboard.com/@eostribe) Award for the number of upvotes received

Click on any badge to view your Board of Honor.
For more information about SteemitBoard, click [here](https://steemit.com/@steemitboard)

If you no longer want to receive notifications, reply to this comment with the word `STOP`

**Do not miss the [last announcement](https://steemit.com/steemitboard/@steemitboard/steemitboard-new-level-notifications) from @steemitboard!**

> Do you like **SteemitBoard**'s project? **[Vote for its witness](https://v2.steemconnect.com/sign/account-witness-vote?witness=steemitboard&approve=1)** and **get one more award**!

properties (22)

@unus · May 28 '18

$6.55

here's where Alex explains that net_api module was added for testing only and he warns it has to be taken out:

https://www.youtube.com/watch?v=oZNV6fUoyqM&feature=youtu.be&t=4m17s

👍 dan, marketingmonk, mjhomb, andybets, bobinson, dinnen, almariah, miohtama

properties (23)vote details (8)

@cryptogrok · Jun 4 '18 (edited)

Yeah, that wasn't what it was about. The plugin in question still had some dependancies that required it to work predictably/easily for the majority of users using it - some of which were not capable of doing it any other way. Regardless of whatever spin people try to put on it, these guys were just trying to help and got sandbagged for it. 

Anyone who knows anything understands that's what really happened with all this. Read through the lines people, don't believe to the first thing you hear. This is a political race and we should expect people to push their own narrative, especially if it dissuades popular opinion in their favor in the eyes of token holders and the larger community.

properties (22)

@vijbzabyss · Jun 1 '18

What an article! Resteemed to my Cyber-Security blog!

properties (22)

@yingpingzhang · May 29 '18

good job!

properties (22)

voter	rshares	pct
bryanj4	58,336,792,276	70%
dallasrushing	1,242,392,805	100%
mysearchisover	955,913,772	100%

`author`	steemitboard
`permlink`	steemitboard-notify-eostribe-20180530t223847000z
`category`	eos
`json_metadata`	{"image":["https://steemitboard.com/img/notify.png"]}
`created`	2018-05-30 22:38:45
`last_update`	2018-05-30 22:38:45
`depth`	1
`children`	0
`last_payout`	2018-06-06 22:38:45
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	840
`author_reputation`	38,975,615,169,260
`root_title`	"EOS BP Security Statement"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	58,507,742
`net_rshares`	0

voter	rshares	pct
dan	1,176,488,239,174	100%
marketingmonk	267,088,433,784	50%
miohtama	94,973,629	100%
mjhomb	152,412,820,681	100%
andybets	12,439,493,527	50%
bobinson	7,663,398,256	100%
almariah	521,897,819	100%
dinnen	598,462,240	100%