{"action":"created","issue":{"url":"https://api.github.com/repos/bitcoin/bitcoin/issues/7093","labels_url":"https://api.github.com/repos/bitcoin/bitcoin/issues/7093/labels{/name}","comments_url":"https://api.github.com/repos/bitcoin/bitcoin/issues/7093/comments","events_url":"https://api.github.com/repos/bitcoin/bitcoin/issues/7093/events","html_url":"https://github.com/bitcoin/bitcoin/pull/7093","id":118712234,"number":7093,"title":"Address mempool information leak and resource wasting attacks.","user":{"login":"gmaxwell","id":858454,"avatar_url":"https://avatars.githubusercontent.com/u/858454?v=3","gravatar_id":"","url":"https://api.github.com/users/gmaxwell","html_url":"https://github.com/gmaxwell","followers_url":"https://api.github.com/users/gmaxwell/followers","following_url":"https://api.github.com/users/gmaxwell/following{/other_user}","gists_url":"https://api.github.com/users/gmaxwell/gists{/gist_id}","starred_url":"https://api.github.com/users/gmaxwell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gmaxwell/subscriptions","organizations_url":"https://api.github.com/users/gmaxwell/orgs","repos_url":"https://api.github.com/users/gmaxwell/repos","events_url":"https://api.github.com/users/gmaxwell/events{/privacy}","received_events_url":"https://api.github.com/users/gmaxwell/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/bitcoin/bitcoin/labels/P2P","name":"P2P","color":"006b75"},{"url":"https://api.github.com/repos/bitcoin/bitcoin/labels/Privacy","name":"Privacy","color":"5319e7"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":16,"created_at":"2015-11-24T21:59:50Z","updated_at":"2015-12-04T09:32:29Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/bitcoin/bitcoin/pulls/7093","html_url":"https://github.com/bitcoin/bitcoin/pull/7093","diff_url":"https://github.com/bitcoin/bitcoin/pull/7093.diff","patch_url":"https://github.com/bitcoin/bitcoin/pull/7093.patch"},"body":"Currently an attacker can poll mempool frequently to bypass\r\n trickling logic and trace a transaction through the network.\r\n This also wastes lots of bandwidth by causing the same huge\r\n invs to be sent over and over.\r\n\r\nThis change makes mempool not return results with an arrival\r\n time greater than the current minus 16 rounded down to a\r\n multiple of 16 seconds. This is a 16 to 32 second delay.\r\n\r\nIt also makes mempool calls return only responses which have\r\n not been INVed before (using the known inv mruset) and\r\n limits the mempool command to considering only the top 8192\r\n entries in the mempool.\r\n"},"comment":{"url":"https://api.github.com/repos/bitcoin/bitcoin/issues/comments/161919475","html_url":"https://github.com/bitcoin/bitcoin/pull/7093#issuecomment-161919475","issue_url":"https://api.github.com/repos/bitcoin/bitcoin/issues/7093","id":161919475,"user":{"login":"laanwj","id":126646,"avatar_url":"https://avatars.githubusercontent.com/u/126646?v=3","gravatar_id":"","url":"https://api.github.com/users/laanwj","html_url":"https://github.com/laanwj","followers_url":"https://api.github.com/users/laanwj/followers","following_url":"https://api.github.com/users/laanwj/following{/other_user}","gists_url":"https://api.github.com/users/laanwj/gists{/gist_id}","starred_url":"https://api.github.com/users/laanwj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/laanwj/subscriptions","organizations_url":"https://api.github.com/users/laanwj/orgs","repos_url":"https://api.github.com/users/laanwj/repos","events_url":"https://api.github.com/users/laanwj/events{/privacy}","received_events_url":"https://api.github.com/users/laanwj/received_events","type":"User","site_admin":false},"created_at":"2015-12-04T09:32:29Z","updated_at":"2015-12-04T09:32:29Z","body":"We could also deprecate the blocktester if we feel that its task has been sufficiently surpassed by the new test framework. But I'm not sure of this (in most part because I've never had a good grasp on what it actually does, being external software and in Java for that matter).\r\n"}}