News for hackers. Stuff that matters.
Re:153k Ether Stolen in Parity Multi-Sig Attack by 1_player on Wednesday July 19, 2017 @07:03PM (#14808757)
No, being Turing complete makes it impossible to be 100% secure and trustworthy, by definition.

It is possible to have trusted contracts, iff their logic is (mathematically) proven. But the VM can't make contracts more secure by itself.

Re:153k Ether Stolen in Parity Multi-Sig Attack by dragonwriter on Wednesday July 19, 2017 @07:30PM (#14808891)
> No, being Turing complete makes it impossible to be 100% secure and trustworthy, by definition.

Being Turing-complete means it's possible to write some contracts/programs for which certain features are undecidable by analysis.

It doesn't mean that programs that could be also be written in any more limited language can't have all the properties about then that could be proven in the non-Turing complete language proven when written in the Turing-complete language.

> It is possible to have trusted contracts, iff their logic is (mathematically) proven.

Trustworthiness of programs (including “smart contracts”, which are only loosely analogous to traditional contracts) is about whether the actual people using them get what they expect out of their behavior. Mathematical proofs of formal properties may be useful to that in some cases, but are not generally sufficient.

Re:153k Ether Stolen in Parity Multi-Sig Attack by grandalf on Wednesday July 19, 2017 @07:13PM (#14808806)
> It is possible to have trusted contracts, iff their logic is (mathematically) proven.

Suppose a non-Turing-complete language were used instead. Now, imagine a contract that is highly complex. If a layperson decides to trust that contract without reading the code, does it matter whether the language used to implement the contract was Turing-complete or not?

I'd argue that trust of contracts is pragmatically more of a social concept than a computational concept, since at scale the vast majority of contract users would make their trust decision about a contract based on non-technical factors.

Re:153k Ether Stolen in Parity Multi-Sig Attack by Blackthorn on Wednesday July 19, 2017 @10:26PM (#14809636)
> If a layperson decides to trust that contract without reading the code, does it matter whether the language used to implement the contract was Turing-complete or not?

Um, yes? Literally the point of weaker languages in this context is that they can be statically provable.

Re:153k Ether Stolen in Parity Multi-Sig Attack by inimino on Thursday July 20, 2017 @07:29AM (#14811514)
As would the same program written in a Turing-complete language. The Turing-completeness here is a total red herring.