News for hackers. Stuff that matters.
Re:Another successful DAO attack recursive split by eterm on Sunday June 19, 2016 @01:06PM (#11933663)
Watching Ethereum discover why there are lawyers is similar to watching the Bitcoin community find out why there are (central) banks.

The bitcoin world now has "consensus" meetings which from an outsiders' perspective look a lot like the kind of meetings at Davos that bitcoin was supposed to be against, only without regulation, consumer protection and any recourse against bad actors within the upper spheres of influence.

In future of ethereum there'll have to be "arbitration committees" which will look a lot like courts. Self-appointed, unregulated courts of course.

Re:Another successful DAO attack recursive split by meowface on Sunday June 19, 2016 @02:04PM (#11933879)
Despite Bitcoin's downsides, they've never actually had an issue nearly as bad as what Ethereum's experiencing now.

With Bitcoin, most issues were a result of private organizations misappropriating money or security. But the entire foundation of Ethereum is now considered completely unreliable.

Re:Another successful DAO attack recursive split by Animats on Sunday June 19, 2016 @02:33PM (#11934001)
Bitcoin has turned out to be quite secure technically. The problem with Bitcoin is that anonymous unidirectional remote money transfers are the con man's dream. Bitcoin thus became a scam magnet. The goal of Etherium was to provide something akin to a contract so that remote parties could not just take the money and run. That seems to have failed technically.

(Another big problem with Bitcoin at scale is that you can't count it without access to the keys that let you spend it. This makes outside auditing very difficult and helped to enable the Mt. Gox scam. Etherium doesn't address that. Some multi-signature scheme where external parties could determine that an account has funds without the key needed to take them would be useful for a cryptocurrency. But, as Etherium shows, adding complexity adds exploitable bugs.)

Re:Another successful DAO attack recursive split by grapehut on Sunday June 19, 2016 @03:07PM (#11934196)
> Another big problem with Bitcoin at scale is that you can't count it without access to the keys that let you spend it.

That's not remotely true, I'm not sure what gave you that idea. Bitcoin at its core is based around asymmetric encryption, which allows only 1 party to send money but everyone to verify it. By sharing a public key (a bitcoin address) you can see the funds, but can not spend it. In fact, right from the start bitcoin client even included the ability to sign and verify messages from addresses to prove ownership. Right now I could give you the bip44 (public key) of my wallet and you could see every transaction I have received, sent (and all future ones, from that wallet). But you'll have no ability to spend my money. Although I'm not going to do that for the same reason most people won't: privacy.

Anyway, there's been proof of solvency schemes for a long times, it's just most exchanges and services (with a few notable exceptions) haven't seen a business case in implementing it.

Re:Another successful DAO attack recursive split by Animats on Sunday June 19, 2016 @03:21PM (#11934272)
Re:Another successful DAO attack recursive split by grapehut on Sunday June 19, 2016 @03:34PM (#11934326)
Umm? Maybe you misread the title: "Off-Chain Transactions" which according to the article: "An off-chain transaction is the movement of value outside of the block chain."

So yeah, an exchange like Mt Gox can not prove they own the USD they should own, but can prove they own the bitcoin they claim to own. How is this a problem or limitation of bitcoin again?

Re:Another successful DAO attack recursive split by emiliobumachar on Sunday June 19, 2016 @03:09PM (#11934204)
"Another big problem with Bitcoin at scale is that you can't count it without access to the keys that let you spend it."

I'm not an expert, but I'm pretty sure one could use the private key, without revealing it, to sign a message, for example "%date I, %owner, own the bitcoin in $account".

Then anyone else could check the signature against the public key on the blockchain.

Would that not be enough?

Re:Another successful DAO attack recursive split by xorcist on Sunday June 19, 2016 @03:05PM (#11934185)
> Some multi-signature scheme where external parties could determine that an account has funds without the key

Correct me if I misunderstand, but checking that an account has funds is trivial. It's in the blockchain. Multi-signature transactions are also standard.

Re:Another successful DAO attack recursive split by nawitus on Sunday June 19, 2016 @02:06PM (#11933891)
"But the entire foundation of Ethereum is now considered completely unreliable."

Considered by who? The bugs are in the smart contract, not Ethereum itself.

Re:Another successful DAO attack recursive split by gcr on Sunday June 19, 2016 @03:12PM (#11934218)
Professional security audits of The DAO's smart contract code never caught this bug. This conclusively shows it's impossible for a mere mortal developer (or even a team of seasoned security professionals) to write smart contracts that behave in predictable ways. As an outsider, I will never use Ethereum for this reason.

The EVM may be reliable, but the humans that use it are completely unreliable, and it's the humans that form the foundation of any distributed system.

Re:Another successful DAO attack recursive split by nawitus on Sunday June 19, 2016 @04:35PM (#11934552)
It doesn't seem that rational to stop using Ethereum simply because a single smart contract contained a bug. It's a new project so there's bound to be bugs here and there. Of course, maybe your position is that you will never use any Ethereum-like software, which might become impractical in the future.
Re:Another successful DAO attack recursive split by argonaut on Sunday June 19, 2016 @06:18PM (#11934983)
It's almost like you didn't read the comment. They had experts review their code, and they didn't catch the bug. They had huge public interest, and nobody caught the bug. So the chances are, unless big, breaking changes to the platform are made, the vast majority of contracts that will ever be written will be buggy.
Re:Another successful DAO attack recursive split by Cyph0n on Sunday June 19, 2016 @02:10PM (#11933910)
But wasn't the smart contract system the selling point for the novelty of Ethereum? If it doesn't work reliably, why should we use it over the more mature and stable Bitcoin?
Re:Another successful DAO attack recursive split by anonymousab on Sunday June 19, 2016 @02:30PM (#11933987)
It works reliably, insofar as you are fully able to write and execute a desired contract, but also able to write a contract that shoots you in the foot.

Like a certain programming language's features, it may happen to be easier than not.

Re:Another successful DAO attack recursive split by Cyph0n on Sunday June 19, 2016 @02:54PM (#11934119)
That's a strange way to design a financial contract system. I mean, just like Rust checks for memory safety at compile time, can't the contract language make similar checks? Or perhaps the contracts can run in a simulator first?
Re:Another successful DAO attack recursive split by nawitus on Sunday June 19, 2016 @04:33PM (#11934541)
Yes, you can write a contract language (or improve an existing one) which contains static checks. That hasn't been implemented yet probably because of lack of resources. The higher level contract language is compiled down to byte code.

You can in addition implement these safety checks to be executed during runtime, but that costs money.

Re:Another successful DAO attack recursive split by erikpukinskis on Sunday June 19, 2016 @05:59PM (#11934905)
It's not a financial contract system. It's a decentralized general purpose computing platform. It can be used for financial contracts.
Re:Another successful DAO attack recursive split by 21echoes on Sunday June 19, 2016 @02:31PM (#11933990)
My understanding is that the bug was in a particular contract written using the Ethereum contract "language", not Ethereum itself. E.g., one does not stop using Python because there's a bug in Quora
Re:Another successful DAO attack recursive split by Animats on Sunday June 19, 2016 @02:46PM (#11934068)
The people who screwed up the DAO smart contract can't fix the problem from within the DAO, and they want to change the rules of Etherium to fix the DAO's problem. The fact that the same people are behind Etherium, the DAO, and the programmable door-lock startup makes this possible. It also makes it suspicious. In the Bitcoin world, all too often we've seen an "outside hack" that turned out to be insiders.
Re:Another successful DAO attack recursive split by wcummings on Sunday June 19, 2016 @04:44PM (#11934592)
>and the programmable door-lock startup

The door lock company is the funniest part of the whole thing. It makes this meltdown so much less surprising tbh.

Re:Another successful DAO attack recursive split by stale2002 on Sunday June 19, 2016 @05:57PM (#11934893)
Oh god, its some random IoT company that is using the blockchain to run its IoT platform for no reason, and then decided to pivot into a decentralized investment fund.
Re:Another successful DAO attack recursive split by Animats on Sunday June 19, 2016 @06:21PM (#11934994)
It's all the same guy, Vitalik Buterin. He's behind Etherium, the DAO, and the door lock company, "Slock.it UG".
Re:Another successful DAO attack recursive split by stale2002 on Sunday June 19, 2016 @05:51PM (#11934872)
Whats up with the door lock thing? I haven't heard about that.
Re:Another successful DAO attack recursive split by nawitus on Sunday June 19, 2016 @05:58PM (#11934901)
Probably refers to this: http://www.ibtimes.co.uk/ethereum-based-slock-reveals-first-...

Somewhat related: the lock in my apartment is actually based on cryptography too. It uses SHA-1, which is somewhat scary, because it's not considered "safe" anymore. The algorithm was probably chosen because it uses less energy compared to safer ones, as the lock gets the energy from the turning of the key.

Re:Another successful DAO attack recursive split by tamana on Sunday June 19, 2016 @07:03PM (#11935157)
Sha-1 is only unsafe if an attacker can get a copy of the hashed password
Re:Another successful DAO attack recursive split by Klinky on Sunday June 19, 2016 @06:38PM (#11935058)
The issue here appears to be a human misunderstanding of best practices. An investment gone awry, maybe due to insider malfeasance or incompetence. Bitcoin has most certainly had its fair share of those too. This is Ethereum's Mt.Gox moment.
Re:Another successful DAO attack recursive split by mrb on Sunday June 19, 2016 @02:41PM (#11934039)
No, Bitcoin was never supposed to be "against Davos meetings". These consensus meetings are all and only about increasing network capacity, that is all. You seem to conflate different concepts without understanding them. I suggest you read the Introduction of Satoshi's famous whitepaper¹. In short Bitcoin is about: (1) providing non-reversible electronic transactions, (2) reducing transaction costs, and (3) enabling micro-transactions:

"Commerce on the Internet has come to rely almost exclusively on financial institutions serving as trusted third parties to process electronic payments. While the system works well enough for most transactions, it still suffers from the inherent weaknesses of the trust based model. Completely non-reversible transactions are not really possible, since financial institutions cannot avoid mediating disputes. The cost of mediation increases transaction costs, limiting the minimum practical transaction size and cutting off the possibility for small casual transactions, and there is a broader cost in the loss of ability to make non-reversible payments for nonreversible services. With the possibility of reversal, the need for trust spreads. Merchants must be wary of their customers, hassling them for more information than they would otherwise need. A certain percentage of fraud is accepted as unavoidable. These costs and payment uncertainties can be avoided in person by using physical currency, but no mechanism exists to make payments over a communications channel without a trusted party."

¹ https://bitcoin.org/bitcoin.pdf

Re:Another successful DAO attack recursive split by argonaut on Sunday June 19, 2016 @06:15PM (#11934966)
Commerce on the Internet has come to rely almost exclusively on financial institutions serving as trusted third parties to process electronic payments. While the system works well enough for most transactions, it still suffers from the inherent weaknesses of the trust based model

The problem with [a trusted central authority] is that the fate of the entire money system depends on the company running the mint, with every transaction having to go through them, just like a bank.

Sure, it's hard to say exactly what Bitcoin is for or against, given that it's a multi-faceted community with many different goals. But to deny that decentralization and lack of central planning is a huge motivation / driver / goal of both the original inception of Bitcoin, and also the community that developed around Bitcoin, is pretty hard to believe.

Re:Another successful DAO attack recursive split by mrb on Sunday June 19, 2016 @08:11PM (#11935400)
Yes it is hard to say what Bitcoin is for or against. But to be clear: it is not "central planning" in general that the Bitcoin community is against. The community wants no central planning of the MONETARY POLICY (eg. they want no long-term inflation). That is why there is a fixed 21 millions coins (therefore no policy to decide about), which is arguably one of the most liked property of Bitcoin.

The original poster insinuated Bitcoin needed all-powerful policy planners ("Davos meetings"), which is false. All that is taking place is community discussions about scaling (block size increase), but it would be absolutely incorrect to compare this to "Davos meetings".

Re:Another successful DAO attack recursive split by argonaut on Monday June 20, 2016 @04:56PM (#11941503)
All you've repeated is that they're not the same. You haven't actually given any reasons why this is the case.
Re:Another successful DAO attack recursive split by sandworm101 on Sunday June 19, 2016 @01:50PM (#11933821)
But at least with bitcoin it is possible to insert an arbitration layer over and above the currency. The execution of transfers in bitcoin is still separate from any associated contract, which makes it more flexible and therefore more viable imho.

Watching this rapid evolution towards traditional legal systems reminds me of an oddball scifi story about life on the surface of a neutron star. Everything moves so quickly that, by our perspective orbiting the star, civilizations may rise and fall within days.

https://en.wikipedia.org/wiki/Dragon%27s_Egg

Re:Another successful DAO attack recursive split by empath75 on Sunday June 19, 2016 @01:58PM (#11933850)
I think ethereum will mostly be useful for people who don't have access to a real court system. Which is to say 'criminal enterprises'.
Re:Another successful DAO attack recursive split by prodigal_erik on Sunday June 19, 2016 @03:20PM (#11934268)
There are some contracts that courts refuse to enforce on public policy grounds, yet the contracting parties are not criminals.
Re:Another successful DAO attack recursive split by tamana on Sunday June 19, 2016 @07:08PM (#11935177)
Or people who live in different countries without a common court system
Re:Another successful DAO attack recursive split by Klinky on Sunday June 19, 2016 @06:24PM (#11935005)
I think Bitcoin will mostly be useful for people who don't have access to a real banking system. Which is to say 'criminal enterprises'.

Basically what is the point you're trying to make?

Re:Another successful DAO attack recursive split by Fej on Sunday June 19, 2016 @07:59PM (#11935368)
That is actually relatively accurate.
Re:Another successful DAO attack recursive split by Klinky on Sunday June 19, 2016 @11:55PM (#11935964)
Yes, accurate for all cryptocurrencies. Pointing to one and suggesting it'll be used mainly by criminals is silly.
Re:Another successful DAO attack recursive split by narrator on Sunday June 19, 2016 @04:05PM (#11934445)
The interesting thing to me about bitcoin's oligopoly of miners is that it is based on a real thing: "Hashing Power". This corresponds to real electricity usage and real chip design. In most systems there is something holy, sacred and arbitrary in it that maintains the structure. Bitcoin suffers from this the least compared to other systems.
Re:Another successful DAO attack recursive split by TazeTSchnitzel on Sunday June 19, 2016 @05:21PM (#11934730)
Yes, Bitcoin is based on destroying the planet through causing climate change, a novel source of political power.
Re:Another successful DAO attack recursive split by Fej on Sunday June 19, 2016 @07:59PM (#11935366)
I've been trying to tell people this for a while now. Bitcoin has to be the most wasteful software project ever made; I'm sure it has indirectly pumped millions of tons of CO2 into the atmosphere at this point. And for what? The blockchain is a neat academic piece for which we have yet to find a good use. Bitcoin is not usable as a currency (except for illicit trade) and it never will be. The only thing Bitcoin has ever been good for is as a pump & dump scheme, and the "dump" part already happened anyway.

If we're going to blow so much computer power on raw calculations, we could use it for Folding@home, SETI@home, or any number of other great causes. But this is just a waste.

Re:Another successful DAO attack recursive split by emiliobumachar on Monday June 20, 2016 @06:40AM (#11937183)
Without having crunched the numbers, I assume bitcoin mining is less harmful than gold and silver mining.

So, beware of status quo bias.

Re:Another successful DAO attack recursive split by darawk on Sunday June 19, 2016 @01:55PM (#11933838)
It isn't true that they have no recourse. The miners can simply refuse to upgrade, or people can make new forks of their own. That is the best kind of oversight - the ability to fork the currency.
Re:Another successful DAO attack recursive split by abritinthebay on Sunday June 19, 2016 @02:02PM (#11933871)
Which dilutes it's utility, marketplace, and value.

Not a great idea for a currency.

Re:Another successful DAO attack recursive split by darawk on Sunday June 19, 2016 @03:04PM (#11934178)
How does it do any of those things? Provided a fork is sufficiently rare, as it should be, because the threat of a fork is enough to mostly keep it from happening - it should have minimal impact on any of those things.

You could equally say that the threat of collapse of the US government dilutes the utility, marketplace and value of the US dollar. Sure, it's true, but it's irrelevant.

Re:Another successful DAO attack recursive split by abritinthebay on Sunday June 19, 2016 @05:34PM (#11934799)
Well yes, if they don't actually fork it's not a problem. If people DO and do it more than once then it is.

You're... kind of agreeing with me here.

The reason a threat of a fork works is because it had the results I mentioned.

Re:Another successful DAO attack recursive split by shrugger on Sunday June 19, 2016 @01:36PM (#11933784)
missed a couple Govt classes? The existence of central banks are opposed by people who want to restrict third-party control of their money, not let any loser who walks by have a say (like DAO)

Ethereum is a bad idea and people are too embarrassed to admit it. I get it. However, turning around and shoehorning that sentiment into "They don't understand central banking" is just foolish and highlights the sort of headstrong obliviousness that has essentially springboarded DAO into the spotlight to begin with.

Smart contracts aren't good for stupid users. Someone outsmarted a big group, now they're having a fit because all of their money is going to leave, and rather than walk away from the poker table with their head hung low, they've decided to just rob the dealer and try for heisting the vault while they're at it.

And then they have the gall to say "Oh, you just dont understand the purpose of central banking" as they oppose a system that they put in place to benefit themselves, by themselves.

Re:Another successful DAO attack recursive split by wslh on Sunday June 19, 2016 @01:54PM (#11933834)
What (I think) OP is saying is that at the end power is what matters and the power is not evenly distributed like the blockchain. Looking at the long block size discussion you can see which stakeholders has power while others just watch.

I am long on cryptocurrencies but the community at large needs a reality check to see where they currently fit.

Re:Another successful DAO attack recursive split by hngiszmo on Sunday June 19, 2016 @01:24PM (#11933738)
You are very much mistaken on that one. Those consensus meetings can not decide anything against the will of the users. In fact bitcoin core would hard fork bitcoin if miners agreed to mine too big blocks and nobody could dictate the users of either of the chains to switch to the other. The user is in full control which type of bitcoin he wants to use but as such forks cause insecurity in the market, consensus meetings are held, to gauge the overall potential for consensus on the available options going forward. The most recent changes like CSV are only activated if 95% of miners want them, which would not stop the other 5% from going on without that. And you can be damn sure about seriously controversial changes triggering a 5% fork if need be.
Re:Another successful DAO attack recursive split by empath75 on Sunday June 19, 2016 @02:00PM (#11933863)
The vast majority of people using Bitcoin are locked out of profitable Bitcoin mining because of asics and power costs. There's a small cartel of Chinese miners that have the power to decide 'what Bitcoin is'. You can use whatever Bitcoin software you want, but if you're not using theirs, it's worthless.
Re:Another successful DAO attack recursive split by xorcist on Sunday June 19, 2016 @03:02PM (#11934160)
That's not true. You could just as well say that there is number of exchanges in the world that trade Bitcoin against USD and other currencies. It is this trade that give Bitcoin value, and only the Bitcoin fork the exchanges use is valuable. If all the miners would fork Bitcoin today to change consensus (perhaps to earn more from mining), and all the users and exchanges stayed behind, that would only be visible as a drop in mining power. In reality it's much more complicated, and consensus changes are not to be made lightly.
Re:Another successful DAO attack recursive split by empath75 on Sunday June 19, 2016 @03:17PM (#11934251)
The exchanges wanted to fork to increase the bandwidth cap. The miners refused. You can see who won.
Re:Another successful DAO attack recursive split by xorcist on Sunday June 19, 2016 @03:27PM (#11934297)
That does not mean that miners dictate which fork to use. The opposite situation, that miners wanted bigger blocks but exchanges and users refused, would be similarly impossible. It's a bit like mutually assured destruction, nobody wants to see a big drop in value.
Re:Another successful DAO attack recursive split by im3w1l on Sunday June 19, 2016 @05:46PM (#11934848)
At it's core, the true bitcoin is the bitcoin that "can be exchanged for goods and services" (and other currencies).
Re:Another successful DAO attack recursive split by JumpCrisscross on Sunday June 19, 2016 @01:36PM (#11933777)
> The user is in full control which type of bitcoin he wants to use

I am in full control of which currency I use when transacting.

Re:Another successful DAO attack recursive split by kang on Sunday June 19, 2016 @02:06PM (#11933888)
If the govt changes monetary policy, your held dollars change definition; if bitcoin devs do anything my bitcoins remain as per the definition i agreed to. I can choose to move to that new currency or not.
Re:Another successful DAO attack recursive split by JumpCrisscross on Sunday June 19, 2016 @03:01PM (#11934155)
You can stipulate in a contract that it may only be settled with paper notes printer before 1974. It would be silly, since it would make transacting difficult. But no more so than holding some deprecated shard of a cryptocurrency. A better store of value are real assets.