Browse Source

[lukechilds] Update readme for 2019 elections

patch-7
Luke Childs 6 years ago
committed by GitHub
parent
commit
5a5985496f
No known key found for this signature in database GPG Key ID: 4AEE18F83AFDEB23
  1. 130
      notarynodes/lukechilds/readme.md

130
notarynodes/lukechilds/readme.md

@ -8,17 +8,13 @@
<br>
**Public Vote Address**<br>
RV2evPRxFGk2ev7eRxUvWuzjYPWwQ2kpMC
<br>
<br>
**Private Vote Address**<br>
zcLQAsdGtJ1KW2KX4Kpdq7mH1K1SkptzUThWj5ZEDTiZq7kWATeQwhFwbmoitPzz6MJQZXjUaG1apm39zWnEkkZGN3V6RtY
</div>
## About Me
I'm an experienced software developer that's very active in the Open Source community and have been involved with cryptocurrencies since 2012. I work on Open Source almost full time, however I do some freelance work to cover my living costs.
I'm an experienced software developer that's very active in the Open Source community and have been involved with cryptocurrencies since 2012. I've been working on open source software full time since 2016. For the last year I've been working almost exclusively on projects related to Komodo.
I've made over 2000 contributions to Open Source software in the last year and have lots of my own projects published on [GitHub](https://github.com/lukechilds/). My Open Source modules get downloaded [millions of times a month](http://npm-stats.com/lukechilds).
I've made over 1500 contributions to open source software in the last year and have lots of my own projects published on [GitHub](https://github.com/lukechilds/). My Open Source modules get downloaded [millions of times a month](http://npm-stats.com/lukechilds).
My Open Source software is used in production by small developers and large companies all round the world. Some examples of companies that are using my software are:
@ -27,46 +23,74 @@ My Open Source software is used in production by small developers and large comp
- Signal
- Facebook
I'm currently working on an alternative GUI implementation for Komodo's BarterDEX with a focus on simplicity, reliability and ease of use. I'm also doing extensive [debugging/testing/security auditing](https://github.com/search?utf8=%E2%9C%93&q=repo%3Ajl777%2FSuperNET+author%3Alukechilds&type=Issues) with `marketmaker`.
### Contact Details
I'm @lukechilds on Slack, [GitHub](https://github.com/lukechilds), [Twitter](https://twitter.com/lukechilds) and [Keybase](https://keybase.io/lukechilds). My personal email address is also listed on my GitHub profile. All my contact details are also on my wesbite [lukechilds.co](https://lukechilds.co).
## Why vote for me?
I was in a leading position throughout 2018 and as a result my AR node will be automatically re-elected for 2019. I would like to run for another node in the EU region.
I have the experience required to run a notary node properly and securely with good performance as proven by my results last year.
If I'm elected I will be able to use the mining rewards to fund my work full time on open source and security research. I have many plans for open source projects that will benefit both the Komodo Platform and the entire cryptocurrency ecosystem as a whole.
### Contributions to The Komodo Platform
#### HyperDEX
I lead the development of [HyperDEX](https://github.com/atomiclabs/hyperdex), a GUI for Komodo's decentralised exchange network BarterDEX.
<div align="center">
<img src="https://i.imgur.com/mjHve26.jpg" width="600" />
</div>
<img src="https://github.com/atomiclabs/hyperdex/blob/master/media/screenshots/exchange-view.png?raw=true" width="600" />
</div>
### Contact Details
#### marketmaker
I'm @lukechilds on Slack, [GitHub](https://github.com/lukechilds), [Twitter](https://twitter.com/lukechilds) and [Keybase](https://keybase.io/lukechilds). My personal email address is also listed on my GitHub profile.
I've done extensive [debugging/testing/security auditing](https://github.com/search?utf8=%E2%9C%93&q=repo%3Ajl777%2FSuperNET+author%3Alukechilds&type=Issues) with `marketmaker`. The underlying daemon that powers the BarterDEX network.
## Why vote for me?
#### Ledger KMD Reward Claim App
I'm a single individual running a single node in a single region for better decentralisation. I have the experience required to run a notary node properly and securely as outlined below.
I built a [web application](https://github.com/atomiclabs/ledger-kmd-reward-claim) to allow users to claim KMD rewards held on Ledger devices.
If I'm elected I will be able to use the mining rewards to fund my work full time on Open Source and security research. I have many plans for Open Source projects that will benefit both the Komodo Platform and the entire cryptocurrency ecosystem as a whole.
<div align="center">
<img src="https://github.com/atomiclabs/ledger-kmd-reward-claim/blob/master/screenshot.png?raw=true" width="600" />
</div>
## Server
This involved not only building the web application but also updating the code that runs on the Ledger for this to even be possible: https://github.com/LedgerHQ/ledger-app-btc/pull/84
- 16 Core CPU
- 64 GB RAM
- 1TB SSD
#### Komodo Rewards JavaScript library
Will scale up as needed.
I built the [get-komodo-rewards](https://github.com/atomiclabs/get-komodo-rewards) JavaScript library to make it easier for third party developers to integrate Komodo reward claiming into their applications.
The server is hosted in Singapore in Asia. This strategic location gives lower latency connections to Bitcoin miners in China without being behind the Great Firewall of China itself.
#### Locktime Support in Ledger Live
| | |
|-----------------------|-----------------------------------------------------------------------|
| **VOTE2018 Address** | `RV2evPRxFGk2ev7eRxUvWuzjYPWwQ2kpMC` |
| **KMD Address** | `RPxsaGNqTKzPnbm5q7QXwu7b6EZWuLxJG3` |
| **BTC Address** | `1FggVkVYrWBpibPtMwRQrNnPKy6vJEzJYf` |
| **BTC Public Key** | `031aa66313ee024bbee8c17915cf7d105656d0ace5b4a43a3ab5eae1e14ec02696` |
I submitted some code changes to Ledger that enables Ledger Live to set the locktime value on Komodo transactions allowing them to accrue rewards.
## Experience
https://github.com/LedgerHQ/ledger-live-desktop/pull/1825
### System Administration
#### Security Auditing
I'm very experienced with system administration, I already run multiple nodes for other decentralised networks and have automated the process of running certain network services with my public Docker images.
I've discovered, responsibly disclosed, and submitted fixes for, a large number of critical security vulnerabilites exisitng in software in the Komodo ecosystem. If someone malicious had found some of these vulnerabilites before me, it could have lead to large loss of funds to users of the Komodo ecosystem.
#### Decentralised nodes
##### High Severity
- [BarterDEX Daemon Insufficient Authentication Vulnerability](https://github.com/jl777/SuperNET/issues/563)
- [Agama Remote Code Execution Vulnerability](https://gist.github.com/lukechilds/34f117120611a5bfa81606501cb1ddf2)
- [Agama Insufficient Authentication Vulnerability](https://gist.github.com/lukechilds/820dde4df9b6d0c70cdbbfe2fb1bb646)
##### Medium Severity
- [Agama Weak Seed Encryption Vulnerability](https://gist.github.com/lukechilds/3b949ef63010fba9feb5a98a2c1379c9)
- [BarterDEX GUI Insecure Content Vulnerability](https://gist.github.com/lukechilds/7f7447cc51f88d2ce105aaf5e3c759a3)
### Experience
#### System Administration
I'm very experienced with system administration, I already run multiple nodes for other decentralised networks and have automated the process of running certain network services with my public Docker images. I've also run a high performing notary node for the last year.
##### Decentralised nodes
I have a proven track record of running decentralised nodes online with high uptime and high performance:
@ -74,9 +98,9 @@ I've been running a Tor node since 2013. Due to high uptime and performance it w
I also run a Vertcoin Electrum node. Likewise, this is [hardcoded](https://github.com/vertcoin-project/electrum-vtc/blob/44841d9668bd94f0a59fc311575770f29e73f6a1/lib/network.py#L57:5) into the Electrum-VTC source code as a bootstrap node due to high uptime and performance.
About 3 months ago, during excessive Vertcoin electrum traffic, all the electrum nodes went down apart from mine. My node (vtc.lukechilds.co) was single handedly processing all Vertcoin Electrum traffic and keeping everyone connected. [(proof)](https://www.reddit.com/r/vertcoin/comments/7j8l2h/working_electrum_nodes/)
During excessive Vertcoin electrum traffic, all the electrum nodes went down apart from mine. My node (vtc.lukechilds.co) was single handedly processing all Vertcoin Electrum traffic and keeping everyone connected. [(proof)](https://www.reddit.com/r/vertcoin/comments/7j8l2h/working_electrum_nodes/)
#### Docker
##### Docker
I have published multiple public Docker images which have been downloaded over a million times.
@ -84,11 +108,11 @@ I also built and maintain the official ElectrumX Docker image.
https://hub.docker.com/r/lukechilds/
### Security
#### Security
I also have good knowledge of network and application security. I have disclosed multiple vulnerabilities I've found in software.
#### Coinomi Mobile Wallet
##### Coinomi Mobile Wallet
I publicly disclosed the privacy issue of Coinomi leaking users wallet addresses in plain text after they ignored my multiple requests to reach out to them:
@ -97,28 +121,46 @@ I publicly disclosed the privacy issue of Coinomi leaking users wallet addresses
- https://www.dashforcenews.com/coinomi-vulnerability-discovered-developers-react-harshly/
- https://cryptoble.win/2017/09/30/vulnerability-coinomi-devs-retaliate/
#### Buttercup Password Manager
##### Buttercup Password Manager
I found and reported a vulnerability in a password manager's browser extension that would allow any website to read the entire contents of a users password store:
https://github.com/buttercup/buttercup-browser-extension/issues/92
#### Agama
## Server Details
I found two high severity security vulnerabilities in Agama and have submitted fixes for them.
### lukechilds_AR
One was a remote code execution vulnerability giving certain sites the ability to take full control of your computer.
- 16 Core CPU
- 64 GB RAM
- 1TB SSD
The other was a flaw in the authentication system that would allow an attacker to send you a URL that when opened would transfer all of your funds to them.
Will scale up as needed.
I have fixed both of these vulnerabilities but @jl777 has asked me not to go into more detail or publicly post proof of the vulnerabilities until more users have had time to update. He can verify that I found these issues.
The server is hosted in Singapore in Asia.
#### BarterDEX
| | |
|-----------------------|-----------------------------------------------------------------------|
| **KMD Address** | `RPxsaGNqTKzPnbm5q7QXwu7b6EZWuLxJG3` |
| **BTC Address** | `1FggVkVYrWBpibPtMwRQrNnPKy6vJEzJYf` |
| **BTC Public Key** | `031aa66313ee024bbee8c17915cf7d105656d0ace5b4a43a3ab5eae1e14ec02696` |
### lukechilds_EU (not yet elected)
- 16 Core CPU
- 64 GB RAM
- 1TB SSD
Will scale up as needed.
I found a vulnerability in `marketmaker`, the daemon that powers the BarterDEX network, that would allow a website to steal all your funds after you launch the daemon. I advised how to fix the issue and it was resolved many releases ago.
The server will be hosted in the Netherlands in Europe.
https://github.com/jl777/SuperNET/issues/563
| | |
|-----------------------|-----------------------------------------------------------------------|
| **KMD Address** | |
| **BTC Address** | |
| **BTC Public Key** | |
## Disclosure
I'm leading the development team on the new BarterDEX GUI; HyperDEX. It's not an official Komodo project, but is funded by Pondsea.
Some of the open source work I've done for Komodo has been funded by other community members (Pondsea), some work I've been awarded bounties for, and some work I've done for free out of the goodness of my heart :)

Loading…
Cancel
Save