News for hackers. Stuff that matters.
Re:Skype has my account balance as $42M. I tried asking sup... by shawndumas on Thursday February 02, 2017 @07:28PM (#13556485)
"I'm guessing unsigned integer overflow. The range of an unsigned 32 bit number is 4,294,967,295. If their base unit is pennies, that's 42M."

--rouverius

Re:Skype has my account balance as $42M. I tried asking sup... by eridius on Thursday February 02, 2017 @08:44PM (#13556934)
More likely to be underflow.

-296, when interpreted as an unsigned 32-bit integer, is 4294967000, which exactly matches the balance the person was seeing.

Re:Skype has my account balance as $42M. I tried asking sup... by SamReidHughes on Thursday February 02, 2017 @11:52PM (#13557775)
Underflow is when a nonzero floating point number is too small to be represented.
Re:Skype has my account balance as $42M. I tried asking sup... by eridius on Friday February 03, 2017 @01:23PM (#13561925)
Overflow is generation of numbers that are too large. If I can't use "underflow" to mean trying to go negative with an unsigned integer, then what term am I supposed to use?
Re:Skype has my account balance as $42M. I tried asking sup... by SamReidHughes on Friday February 03, 2017 @03:37PM (#13563080)
It is forbidden! You must not speak of it.
Re:Skype has my account balance as $42M. I tried asking sup... by Waterluvian on Friday February 03, 2017 @01:47AM (#13558221)
Thanks for sharing. Didn't know that. Always thought it was as suggested above: you loop around by going negative.
Re:Skype has my account balance as $42M. I tried asking sup... by banhfun on Thursday February 02, 2017 @08:46PM (#13556943)
I'd be really surprised if an app like Skype could overlook such a simple bug.
Re:Skype has my account balance as $42M. I tried asking sup... by nom on Thursday February 02, 2017 @10:06PM (#13557330)
I remember a discussion on HN (I think) about the Skype windows client, where an ex-dev told tales about how horrible their code base is. It sounded like an engineers nightmare. They also employ(ed?) several obfuscation techniques and stuff like runtime memory encryption, just to 'protect' their protocol from being reverse engineered. I can imagine that things didn't improve much over the last decade and that their Android/iOS app doesn't look much better internally.
Re:Skype has my account balance as $42M. I tried asking sup... by CaptSpify on Thursday February 02, 2017 @09:47PM (#13557245)
Wait, really? Have you used the same Skype that I've been using?
Re:Skype has my account balance as $42M. I tried asking sup... by stouset on Thursday February 02, 2017 @09:34PM (#13557168)
And yet here we are.
Re:Skype has my account balance as $42M. I tried asking sup... by computerex on Thursday February 02, 2017 @10:13PM (#13557350)
Skype wasn't originally written by Microsoft, so who knows how the code looks like. I know the linux client was god awful.
Re:Skype has my account balance as $42M. I tried asking sup... by nom on Friday February 03, 2017 @12:51AM (#13558023)
BTW, the old linux client (dating back to 2014) still exists and can be downloaded from the official site. It only supports text messages and files, and the messages don't show up in other clients for some reason as if they are not stored in the server side log. Can't explain that one.
Re:Skype has my account balance as $42M. I tried asking sup... by aedron on Friday February 03, 2017 @06:00AM (#13558997)
Skype was developed by an outsourced team in Estonia.