News for hackers. Stuff that matters.
Re:Another successful DAO attack recursive split by Animats on Sunday June 19, 2016 @02:33PM (#11934001)
Bitcoin has turned out to be quite secure technically. The problem with Bitcoin is that anonymous unidirectional remote money transfers are the con man's dream. Bitcoin thus became a scam magnet. The goal of Etherium was to provide something akin to a contract so that remote parties could not just take the money and run. That seems to have failed technically.

(Another big problem with Bitcoin at scale is that you can't count it without access to the keys that let you spend it. This makes outside auditing very difficult and helped to enable the Mt. Gox scam. Etherium doesn't address that. Some multi-signature scheme where external parties could determine that an account has funds without the key needed to take them would be useful for a cryptocurrency. But, as Etherium shows, adding complexity adds exploitable bugs.)

Re:Another successful DAO attack recursive split by grapehut on Sunday June 19, 2016 @03:07PM (#11934196)
> Another big problem with Bitcoin at scale is that you can't count it without access to the keys that let you spend it.

That's not remotely true, I'm not sure what gave you that idea. Bitcoin at its core is based around asymmetric encryption, which allows only 1 party to send money but everyone to verify it. By sharing a public key (a bitcoin address) you can see the funds, but can not spend it. In fact, right from the start bitcoin client even included the ability to sign and verify messages from addresses to prove ownership. Right now I could give you the bip44 (public key) of my wallet and you could see every transaction I have received, sent (and all future ones, from that wallet). But you'll have no ability to spend my money. Although I'm not going to do that for the same reason most people won't: privacy.

Anyway, there's been proof of solvency schemes for a long times, it's just most exchanges and services (with a few notable exceptions) haven't seen a business case in implementing it.

Re:Another successful DAO attack recursive split by Animats on Sunday June 19, 2016 @03:21PM (#11934272)
Re:Another successful DAO attack recursive split by grapehut on Sunday June 19, 2016 @03:34PM (#11934326)
Umm? Maybe you misread the title: "Off-Chain Transactions" which according to the article: "An off-chain transaction is the movement of value outside of the block chain."

So yeah, an exchange like Mt Gox can not prove they own the USD they should own, but can prove they own the bitcoin they claim to own. How is this a problem or limitation of bitcoin again?

Re:Another successful DAO attack recursive split by emiliobumachar on Sunday June 19, 2016 @03:09PM (#11934204)
"Another big problem with Bitcoin at scale is that you can't count it without access to the keys that let you spend it."

I'm not an expert, but I'm pretty sure one could use the private key, without revealing it, to sign a message, for example "%date I, %owner, own the bitcoin in $account".

Then anyone else could check the signature against the public key on the blockchain.

Would that not be enough?

Re:Another successful DAO attack recursive split by xorcist on Sunday June 19, 2016 @03:05PM (#11934185)
> Some multi-signature scheme where external parties could determine that an account has funds without the key

Correct me if I misunderstand, but checking that an account has funds is trivial. It's in the blockchain. Multi-signature transactions are also standard.