News for hackers. Stuff that matters.

A comment on 153k Ether Stolen in Parity Multi-Sig Attack. Parent comment

Re:153k Ether Stolen in Parity Multi-Sig Attack by Taek on Wednesday July 19, 2017 @08:06PM (#14809059)
People write this stuff off so fast. Here we have a parity developer, probably one of the most competent in the Ethereum ecosystem, and he screwed up to the tune of losing $30m of other people's money.

If HE can't get it right, what business do you have running around saying that anyone who can make a webpage can make a decentralized application?

We are playing with money. Dealing with attackers is not as simple as rebooting your server. Mistakes mean irreversible loss.

The devs in this industry are way over their heads and nobody is willing to admit it, because doing so destroys the entire core value prop of Ethereum, the poster child of the current bubble.

[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by dahdum on Wednesday July 19, 2017 @08:57PM (#14809294)
He may be brilliant, but he played fast and loose without real testing or concern, so I wouldn't call him the "most competent". For a wallet contract they knew would secure many millions of dollars, there should have been dozens of people auditing it before rolling out to users.
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by ceejayoz on Wednesday July 19, 2017 @10:54PM (#14809742)
You're "no true Scotsman"ing so hard Mary, Queen of Scots doesn't even qualify.
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by shrewduser on Wednesday July 19, 2017 @11:10PM (#14809800)
I wish I could see how the op is employing the no true Scotsman fallacy, but I can't.
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by ceejayoz on Wednesday July 19, 2017 @11:17PM (#14809812)
https://twitter.com/SatoshiLite/status/887781929726038016

"If the creator of Solidity, Gavin Wood, cannot write a secure multisig wallet in Solidity, pretty much confirms Ethereum is hacker paradise."

[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by dahdum on Wednesday July 19, 2017 @11:53PM (#14809914)
Charlie is trolling. The architect isn't going to be the best craftsman, that requires very different set of skills.

Parity devs may be academically brilliant, and they put out a fantastic client, but the wallet issue shows how lax their development lifecycle has been.

[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by heliumcraft on Thursday July 20, 2017 @07:02AM (#14811411)
Gavin Wood didn't not make the code change that caused this...
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by ericb on Thursday July 20, 2017 @07:18AM (#14811470)
I can't edit my post above to add this now, but looks like Charlie retracted this as Gavin was the original author, but not the one who made the mistake.
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by vasilipupkin on Wednesday July 19, 2017 @08:12PM (#14809088)
Dear god, I've been thinking crypto is a bubble since 2010. At some point, we have to admit this is not just a bubble. It's a new unproven evolving technology
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by Taek on Wednesday July 19, 2017 @09:38PM (#14809436)
Crypto has had at least 3 distinct bubbles. There's the current one, marked by Eth's absurd rise to $300. The previous one was when Bitcoin made an absurd rise to $1200 in 2014. There was a bubble before that where Bitcoin rose to $266 in 2011. And one before that I believe where Bitcoin rose to $32 in 2010.

Though crypto has risen past the high point of each of these bubbles, each price point can be definitively classified as a bubble in it's own time, and was followed by a crash that wiped out >70% of the market cap over the coming months/years.

Though it did recover, that doesn't mean it wasn't a bubble.

I believe cryptocurrency is going to be bigger than e-commerce is today. But it's not there yet, and it shouldn't be valued as though it has changed the world. It hasn't yet, and it's still a few years away at least from doing so.

[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by vasilipupkin on Wednesday July 19, 2017 @11:07PM (#14809787)
It's only a bubble if you can identify it ahead of time. Stating that something became much more valuable over a short period of time doesn't mean you know how to identify bubbles. Bitcoin is 70-80 times more valuable now than when it was at 32, and had you bought it then you would be up a lot. So, to say crypto is in a bubble today is the same thing as to predict that in a few years it will be worth less than today. Do you know that definitively ? I don't
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by vasilipupkin on Thursday July 20, 2017 @08:00AM (#14811675)
Downvoters, since you know how to indentify bubbles, I'm assuming you shorted ethereum on margin on GDAX when it hit 400 and made a ton? No? If not, why not, if you knew definitely it was a bubble ?
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by Taek on Thursday July 20, 2017 @11:21AM (#14813246)
Because it's very hard to figure out where the top of a bubble is, and if you short a bubble asset too long before the peak, you go broke, even if you are correct.

Don't short hopium.

[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by vasilipupkin on Thursday July 20, 2017 @01:26PM (#14814526)
Well, now we are talking semantics. You don't get to claim you are correct if your forecast turns out to be wrong. So, if you identify a bubble, part of the requirement to say that you succeeded is that you can identify the top. Otherwise, your "knowledge" that it's a bubble is useless
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by MockObject on Thursday July 20, 2017 @03:27PM (#14815552)
I think people agree that a price rise was a bubble after it pops, and I don't believe that prediction is a necessary condition.
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by vasilipupkin on Friday July 21, 2017 @08:38AM (#14819897)
It is, otherwise how do you distinguish a bubble from a rise justified by fundamentals ?
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by JauntyHatAngle on Wednesday July 19, 2017 @08:20PM (#14809118)
I actually think eth has a lot of potential, but I don't think he's saying crypto is a bubble. He's probably talking about the ICO "bubble", which isn't a controversial thing to claim. Eth has already halved in value in the last month which is mostly put down to the crazy value being pumped into ICO's slowing down.
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by vasilipupkin on Wednesday July 19, 2017 @08:41PM (#14809220)
I would argue ICO phenomenon is not a bubble Rather, some ICOs are scams But many are legitimate business ventures. Buying into an ICO is similar to buying deep out of the money options
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by mempko on Thursday July 20, 2017 @03:32AM (#14810645)
Someone's loss is anothers gain. That money didn't disappear, just got reallocated. And if spent ,will generate economic activity. It's certainly a hit in the trust of the core dev though.
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by rootlocus on Thursday July 20, 2017 @06:06AM (#14811185)
This gets awfully close to the broken window fallacy https://en.wikipedia.org/wiki/Parable_of_the_broken_window
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by mempko on Friday July 21, 2017 @11:45PM (#14825288)
I agree, if they did not address the concerns it would become unworkable.
[ Parent | on HN ]