Hacker News Reader

Comment by berberous | Hacker News Reader

1) Both Kin and MobileCoin have moved to Stellar as their back end this week. I haven't paid Stellar much attention before. Anyone have any good links that explains Stellar and/or discusses the technical pros/cons? Trying to avoid any shill/pump or baseless FUD.

2) Am I correct that if any vulnerability were found in the SGX, an attacker would gain access to the encrypted private keys that are stored on a server node and would just need to brute force the PIN?

View on HN

Here is a link to the blog post when the Stellar Consensus Protocol was released. It includes a summary in Stellar's own words and a link to the white paper: https://www.stellar.org/blog/stellar-consensus-protocol-proo...

I don't have a good link for Stellar but it's been around for a while, and the Rust creator even worked for them for some time.

Regarding the second point, since it's on the server, wouldn't a vulnerability just mean the server operator might potentially be able to get at the keys, not any random attacker?

I've done some work with Stellar and the implementation in the whitepaper sounds very different than how Stellar currently works.

For example, users control their own private keys and they're never exposed to a node, so I'm not sure why the whitepaper mentions storing private keys in the SGX. Perhaps they're going to host wallets for a user and store all keys in the SGX?

I'll be very interested in more details about this project since it doesn't appear to use the Stellar network, only the consensus protocol.

Reply on news.ycombinator.com