News for hackers. Stuff that matters.
Re:Critical Update on DAO Vulnerability by Joeboy on Friday June 17, 2016 @08:39AM (#11922254)
I'm mostly an ethereum skeptic, but maybe this doesn't actually indicate that all smart contracts are doomed? Maybe all it means is that bespoke ethereum contracts are risky, and people will have to use boilerplate contracts that have proven robust in the past.

I sort of assumed this DAO thing was intended in this spirit, as an experimental stab on the path to robust contracts.

Re:Critical Update on DAO Vulnerability by gexla on Friday June 17, 2016 @09:20AM (#11922456)
> I sort of assumed this DAO thing was intended in this spirit, as an experimental stab on the path to robust contracts.

With millions of dollars in prizes if you could exploit it?

Re:Critical Update on DAO Vulnerability by Joeboy on Friday June 17, 2016 @09:34AM (#11922531)
My hope is that the people putting millions of dollars into it are well off people who are OK with putting their spare money into something obviously risky and experimental.

Edit: If this is not how it is, I'd be interested to know who is putting money into the DAO, sociologically speaking. I hope nobody's investing their life savings in it.

Re:Critical Update on DAO Vulnerability by tveita on Friday June 17, 2016 @10:25AM (#11922788)
My impression is that the DAO people are early adopters mostly from the Ethereum Foundation itself, so the "150 million dollars" number that is bandied about would be mostly paper profits from a much smaller investment. It doesn't mean they ever had 150 million dollars in actual money between them, or any practical way to get it.
Re:Critical Update on DAO Vulnerability by tremon on Friday June 17, 2016 @09:32AM (#11922521)
With millions of dollars in prizes if you could exploit it!
Re:Critical Update on DAO Vulnerability by DasIch on Friday June 17, 2016 @09:20AM (#11922458)
There are bugs in critical shared software infrastructure like Linux, libc, OpenSSL, and so on as well and not just a few minors ones.

Why would it be any different for "bespoke ethereum contracts"?

Re:Critical Update on DAO Vulnerability by Joeboy on Friday June 17, 2016 @09:32AM (#11922523)
If an ethereum contract was the size and complexity of any of those projects I would certainly expect it to contain many errors.