News for hackers. Stuff that matters.
Re:153k Ether Stolen in Parity Multi-Sig Attack by riffraff on Thursday July 20, 2017 @01:21AM (#14810165)
Isn't the team also working on a new language targeting the same VM? If so, they might be useful.
Re:153k Ether Stolen in Parity Multi-Sig Attack by gst on Thursday July 20, 2017 @03:26AM (#14810624)
There are lots of different languages targeting EVM. The (IMO) most promising so far is https://github.com/ethereum/viper
Re:153k Ether Stolen in Parity Multi-Sig Attack by mbrock on Thursday July 20, 2017 @04:40AM (#14810893)
You can also just write bytecode directly. It's a simple stack machine, and contracts should be as simple as possible.
Re:153k Ether Stolen in Parity Multi-Sig Attack by federicobond on Thursday July 20, 2017 @10:49AM (#14812943)
Things are not always simpler at a lower level of abstraction.
Re:153k Ether Stolen in Parity Multi-Sig Attack by mbrock on Thursday July 20, 2017 @01:39PM (#14814651)
It depends what simplicity you mean. The Solidity compiler is very far from simple, so if you consider that part of the complexity incurred by using Solidity, then a reasonably small bytecode program might be much easier to audit. Consider that a typical smart contract is as simple as "if four out of these six addresses make the same proposal then execute it." You can basically write these things in hexadecimal without too much trouble.
Re:153k Ether Stolen in Parity Multi-Sig Attack by federicobond on Saturday July 22, 2017 @01:39AM (#14825592)
Yes, that's definitely a good idea. I will go back to my magnetized needle now, I have some bit flipping to do in order to finish my task for Monday.
Re:153k Ether Stolen in Parity Multi-Sig Attack by federicobond on Saturday July 22, 2017 @01:46AM (#14825617)
Speaking seriously, there is an assembly for Ethereum called LLL. I would love to see code that performs exactly that example you mention and is easier to audit than the equivalent Solidity version.
Re:153k Ether Stolen in Parity Multi-Sig Attack by smoyer on Thursday July 20, 2017 @07:13AM (#14811455)
For a stack machine, Forth might be a great choice.
Re:153k Ether Stolen in Parity Multi-Sig Attack by gradys on Thursday July 20, 2017 @02:26AM (#14810411)
Can people outside of the Ethereum org implement their own languages that target that VM?
Re:153k Ether Stolen in Parity Multi-Sig Attack by tscs37 on Thursday July 20, 2017 @02:47AM (#14810482)
Yes. The VM has a public specification and you can implement your own compilers for it.

On the blockchain, the VM only cares about the bytecodes you submit, not the code itself.