News for hackers. Stuff that matters.

A comment on 153k Ether Stolen in Parity Multi-Sig Attack. Parent comment

Re:153k Ether Stolen in Parity Multi-Sig Attack by arjo1 on Thursday July 20, 2017 @04:37AM (#14810886)
Fixing the language is one step. It will still not prevent hax0rs from targeting the bytecode of the VM itself.
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by lmm on Thursday July 20, 2017 @06:03AM (#14811169)
Perfect is the enemy of good.
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by pmarreck on Thursday July 20, 2017 @07:49AM (#14811602)
If that BS was true, we should all just switch to PHP right now
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by lmm on Thursday July 20, 2017 @08:34AM (#14811890)
On the contrary. No other language is perfect, so if you can only think of perfect you would keep using PHP; it's only if you recognise the idea that a language can be better while still being imperfect that you can switch to a better language.
[ Parent | on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack by naasking on Tuesday July 25, 2017 @12:50PM (#14849362)
The EVM has been formalized in theorem provers [1], so they're already taking that threat seriously. One threat also mentioned in the above thread that is often overlooked are full abstraction failures, ie. exploitable mismatches between high level language constructs and the machine code to which it gets compiled.

[1] http://lambda-the-ultimate.org/node/5003#comment-94646

[ Parent | on HN ]