News for hackers. Stuff that matters.
Re:Bad code may be to blame for $500M of cryptocurrency loss... by zaroth on Tuesday February 13, 2018 @08:49AM (#16367051)
Consider this: Every single Bitcoin mined has either been lost/stolen, or will be lost/stolen, with probability approaching 1 over increasing timespans.

I’d argue that since January 2009 about 50% of the ~17M coins minted to-date are lost. But the realization that this number will asymptotically approach 100% of all coins is a bit striking.

The reasoning is simple - maintaining control of your coins is surprisingly difficult. The harder you try to secure them from theft, the more likely an accident will wipe them away. The more redundancy you keep to protect from losing them, the more they are exposed to theft. And as time goes on, the random noise of life conspires to blot your coins out of existence. And once they’re lost, there is simply no recovery.

The supply of Bitcoin is not asymptotically approaching 21M. The supply is approaching zero.

Re:Bad code may be to blame for $500M of cryptocurrency loss... by LogicalBorg on Tuesday February 13, 2018 @10:01AM (#16367581)
Once the number of of Bitcoins approaches zero, the finite value of the Bitcoin ecosystem divided by zero coins approaches infinity. This will create a financial singularity that will open a payment gateway to the hell dimension. This dimension is a land of endless opulence and limitless transaction time ruled over by that vengeful daemon, Satoshi Nakamoto. Good luck, Bitcoin users, you're going to need it! jk lol
Re:Bad code may be to blame for $500M of cryptocurrency loss... by bastawhiz on Tuesday February 13, 2018 @12:44PM (#16369033)
Don't worry there's surely a bug in the hell dimension smart contract. We'll fork hell, steal their hellcoins, and force the vengeful demons to mine SHA hashes until the end of time.
Re:Bad code may be to blame for $500M of cryptocurrency loss... by CodeCube on Tuesday February 13, 2018 @09:09AM (#16367180)
This is a really interesting perspective ... though, I'm sure it could be argued that, "it only makes them more rare, and thus valuable!!11!1!" ;)
Re:Bad code may be to blame for $500M of cryptocurrency loss... by rulum on Tuesday February 13, 2018 @11:07AM (#16368169)
And that is exactly what you don't want in "money" in a functional economy. You don't want deflation. You want price stability.

So the more it gets artificially valuable, the more useless it becomes for its intended purpose.

Re:Bad code may be to blame for $500M of cryptocurrency loss... by dlwdlw on Tuesday February 13, 2018 @02:49PM (#16370117)
It is valuable as a store of value though. Either pure like gold, or tied to something more like assets. USD is a bit strange because it is both a store of value used by many countries as well as a currency. there is an implicit peg to oil though. So the the price of oil is something fairly important to the US.
Re:Bad code may be to blame for $500M of cryptocurrency loss... by gamblor956 on Tuesday February 13, 2018 @04:36PM (#16371015)
The USD is a currency. Due to its stability, it is also used as a store of value by foreign countries.

Oil is pegged to the dollar. The price of oil is relevant because of its effects on prices, not the dollar.

Re:Bad code may be to blame for $500M of cryptocurrency loss... by dragonwriter on Tuesday February 13, 2018 @04:41PM (#16371057)
> Oil is pegged to the dollar.

Oil producers may target a dollar price and trade in dollars, but oil is not pegged (that is: trading with a fixed exchange rate) to the dollar.

Re:Bad code may be to blame for $500M of cryptocurrency loss... by DennisP on Tuesday February 13, 2018 @10:15AM (#16367702)
It's not that hard. Do what you would do with a large amount of cash or gold coins: put it in a safe deposit box. Or a private vault, if you're ideologically opposed to banks.

Unlike gold, you can also add redundancy and cryptographic protection, but even without that you can at least be as secure as you are with gold, which plenty of rich people store in vaults without issues.

Re:Bad code may be to blame for $500M of cryptocurrency loss... by tim333 on Wednesday February 14, 2018 @01:19AM (#16373877)
People are idiots. It's almost impossible to destroy gold, quite easy with bitcoins.
Re:Bad code may be to blame for $500M of cryptocurrency loss... by DennisP on Wednesday February 14, 2018 @11:10AM (#16376822)
But it's also easy to store bitcoins in a way that makes them hard to destroy.

Idiots destroy wealth in all sorts of stupid ways.

Re:Bad code may be to blame for $500M of cryptocurrency loss... by rejschaap on Tuesday February 13, 2018 @10:37AM (#16367898)
Isn't a stolen coin still part of the supply? Do you mean to to mark them as stolen to prevent them from being used?
Re:Bad code may be to blame for $500M of cryptocurrency loss... by wereHamster on Tuesday February 13, 2018 @09:51AM (#16367502)
Backing your coins up is very easy, most wallets support BIP32/39/44. Just write the mnemonic down and put it under your mattress. Or a safe if you have one. But seriously, for most people under the mattress is equally safe. I don't understand why anyone would keep a non-trivial amount of coins in a wallet and not have a backup. That's irresponsible.
Re:Bad code may be to blame for $500M of cryptocurrency loss... by bpp on Tuesday February 13, 2018 @10:04AM (#16367608)
People losing their life savings because they kept it under their mattress is basically the reason that banks were invented. So I suppose this has all come full circle now.
Re:Bad code may be to blame for $500M of cryptocurrency loss... by wereHamster on Tuesday February 13, 2018 @10:35AM (#16367876)
There are web wallets today where you only have to remember a password, and can recover access if you can prove your identity. Like uhm… banks. If you don't trust yourself to keep the coins safe and backed up then go put them there. No shame in that.
Re:Bad code may be to blame for $500M of cryptocurrency loss... by jnordwick on Tuesday February 13, 2018 @10:53AM (#16368035)
> recover access if you can prove your identity

So hackable, you're saying?

Re:Bad code may be to blame for $500M of cryptocurrency loss... by wereHamster on Tuesday February 13, 2018 @11:15AM (#16368232)
Like banks.

The discussion is turning in circles. People lose coins. Have a backup. Too difficult. Put them in a bank. Banks are hackable. Manage the coins yourself. But then I might lose them.

(you can replace bank with 'trusted third-party', doesn't change the outcome)

Consider the two options: self-managed, or in a trusted third-party. Whichever has the smaller (perceived) risk, that's where you store your coins. Not everybody asses risk equally, and that's fine. My preferred solution may not be the same as your preferred solution. That's fine, still.

Re:Bad code may be to blame for $500M of cryptocurrency loss... by jnordwick on Tuesday February 13, 2018 @11:47AM (#16368529)
Fiat banks can recover money though - cash can be found and transactions unwound - and there are techniques to poison what is stolen without permanently decreasing the money supply. Freezing a wallet basically destroys the btc forever with no way to print more.
Re:Bad code may be to blame for $500M of cryptocurrency loss... by wereHamster on Tuesday February 13, 2018 @12:04PM (#16368697)
And the bitcoin software is written in stone, can never be changed.
Re:Bad code may be to blame for $500M of cryptocurrency loss... by mort96 on Tuesday February 13, 2018 @06:44PM (#16372026)
Basically, yeah.

I mean, the wallet software is obviously open source, and you can change it however you want of course, but allowing for transactions to be undone would basically require rewriting the entire protocol and everything which interacts with the bitcoin network - and that's if it's even possible in the first place, without removing vital parts of bitcoin like the decentralization or being able to trust the entire network without trusting any one entity.

Re:Bad code may be to blame for $500M of cryptocurrency loss... by junk_f00d on Tuesday February 13, 2018 @12:44PM (#16369046)
Re:Bad code may be to blame for $500M of cryptocurrency loss... by aeternus on Tuesday February 13, 2018 @03:58PM (#16370713)
To call that a solution is generous.. it is unlikely the average person could follow the Glacier Protocol.
Re:Bad code may be to blame for $500M of cryptocurrency loss... by dangerboysteve on Tuesday February 13, 2018 @03:30PM (#16370458)
Isn't the problem keeping the coins in on online wallet or exchange? If you store your personal wallet offline how can you be hacked?
Re:Bad code may be to blame for $500M of cryptocurrency loss... by aeternus on Tuesday February 13, 2018 @07:46PM (#16372406)
Lots of ways:

- Software you use for key generation uses a known random-seed.

- Compromised software that converts your seed into an address/priv key.

- Compromised transaction generation software.

- Offline wallet physically stolen

- Malware / firmware exploit on USB used to transfer transactions between online & offline computers

Re:Bad code may be to blame for $500M of cryptocurrency loss... by Retric on Tuesday February 13, 2018 @09:54AM (#16367519)
As the parent pointed out, that increases the risk of theft.
Re:Bad code may be to blame for $500M of cryptocurrency loss... by dawhizkid on Tuesday February 13, 2018 @09:58AM (#16367549)
Curious how that factor into the price of BTC?
Re:Bad code may be to blame for $500M of cryptocurrency loss... by jnordwick on Tuesday February 13, 2018 @10:59AM (#16368093)
Very severe price swings. Since supply is decreasing, the demand for bitcoin well whip the price all over the place. Fiat currencies can keep a stable price by liquidity injection (they can also drive it to zero that way too).

Bitcoin over corrects by not allowing any new coins to come into existence. Imagine the day there is only a single bitcoin left. Regardless of how small you can split it, massive deflation.

Currencies with a fixed or decreasing supply are a disaster.

Re:Bad code may be to blame for $500M of cryptocurrency loss... by jebeng on Tuesday February 13, 2018 @11:24AM (#16368296)
Supply is increasing though through mining. Stolen coins are still coins. And there's no way that lost coins are out pasing newly mined coins. True loss/data destruction/inaccessibility is fairly rare.

Even in the Bitcoin community it's a huge misconception that Bitcoin is somehow inherently deflationary. The supply increases predictably through mining. It can be price deflationary when demand exceeds supply. But there is nothing inherent or guaranteed about that at all.

Bitcoin is inflationary, with a predictable inflation schedule.

Re:Bad code may be to blame for $500M of cryptocurrency loss... by jnordwick on Tuesday February 13, 2018 @11:44AM (#16368503)
Btc has a fixed supply that will be hit. About 17 of the 21 million have already been mined. That's a hard cap unless bitcoin radically changes. We will hit a time of zero miner reward, and even before that when the reward in miniscule in relation to float.

We don't know the extent of lost coins. We can make an estimate based on inactive accounts. And stolen coins that have been blacklisted are essentially lost too.

> Bitcoin is inflationary

Crypto people are deluding themselves.

Re:Bad code may be to blame for $500M of cryptocurrency loss... by mort96 on Tuesday February 13, 2018 @06:52PM (#16372066)
Just a small note: we won't ever hit a point where a miner will get zero money from mining a block, because people sending transactions pay a fee to the miner to have their transaction prioritied over people who pay a smaller fee, and the number of transactions per time unit is limited (and pretty small), and can't be easily changed radically (as in by orders of magnitude).

I think you're technically right, as the "miner reward" (as in the coins the miner cand give itself as a reward for finding a block) goes to 0, and you probably know that already, but I wanted to clarify for people who didn't yet know that.

Otherwise, I agree.

Re:Bad code may be to blame for $500M of cryptocurrency loss... by SamPatt on Tuesday February 13, 2018 @09:09AM (#16367173)
I've been using cryptocurrency for over five years and haven't lost as much as a satoshi. It's no more difficult than keeping other sensitive data secure.
Re:Bad code may be to blame for $500M of cryptocurrency loss... by ifdefdebug on Tuesday February 13, 2018 @09:23AM (#16367283)
The argument still holds. As long as there is a tiny probability for you or someone else to lose their private keys, and I don't see how that probability can be reduced to zero, bitcoin supply will approach zero over time.

And I don't think we are talking about some theoretical astronomical time span here - after a few hundred years (assuming in a few hundred years someone still cares about the bitcoin ledger), the proportion of lost coins must be huge - just think about people passing away without providing a way for their heirs to find the keys, maybe because they die young or because they have no heirs etc.

Re:Bad code may be to blame for $500M of cryptocurrency loss... by CodeCube on Tuesday February 13, 2018 @09:11AM (#16367201)
to be fair, by commenting on this very forum, you're already not "the norm" ... the average user can barely keep track of their password!! I'd argue that most users already have some form of 2 factor auth, because they can literally never remember their password, so they (barely) remember their password as the 1st, and then the "change password" email serves as the 2nd.

So yeah, not very good at maintaining data secure for the average person ;)

Re:Bad code may be to blame for $500M of cryptocurrency loss... by curuinor on Tuesday February 13, 2018 @12:55PM (#16369160)
So it's hard as hell?
Re:Bad code may be to blame for $500M of cryptocurrency loss... by mort96 on Tuesday February 13, 2018 @06:30PM (#16371941)
It looks like you're being downvoted, but you're not wrong.

It's easy for most people to keep their personal data safe, because they're not targeted by attackers because there's little of value. It's hard for people whose sensitive data is valuable to keep it secure; if valuable white house secrets were stored with my strategies for protecting my personal sensitive data, they'd have been leaked ages ago.

Once your sensitive data is highly valuable, like if you store a decent amount of cryptocurrencies (or is an attractive female with private nude pictures[0] or have a big YouTube channel[1]), protecting sensitive data from the likely targeted attacks is hard.

[0]: https://en.wikipedia.org/wiki/ICloud_leaks_of_celebrity_phot... (I'm not sure if there was monetary value in those pictures, but they certainly had other forms of value.)

[1]: https://www.youtube.com/watch?v=LlcAHkjbARs (He talks a lot about unrelated (to this discussion) about his Amazon links; go to 3 minutes in for the discussion about being compromised.)

Re:Bad code may be to blame for $500M of cryptocurrency loss... by oillio on Tuesday February 13, 2018 @12:01PM (#16368677)
Ever heard the rumor that nearly every $20 bill in circulation has detectible residual cocaine on it? In other worlds, the probability that a bill has been involved in a drug deal approaches 1 over increasing timespans.

Interesting anecdote, but not really super informative.

Re:Bad code may be to blame for $500M of cryptocurrency loss... by tim333 on Wednesday February 14, 2018 @01:22AM (#16373884)
Notes having cocaine on them doesn't show they've been involved in a drug deal. More likely someone rolled one up to snort the drug and then when it went through a sorting machine it got cocaine on to the machine and then many other notes.
Re:Bad code may be to blame for $500M of cryptocurrency loss... by zzbzq on Tuesday February 13, 2018 @09:16AM (#16367233)
Seems like sort of a theoretical argument, so I have to point out that I believe it's theoretically wrong. Caveat that I'm not a blockchain programmer so somebody may be able to correct me here, but I believe it's true. Bitcoin aren't individually identifiable, the "state" of ownership in the chain is stored as "unspent transactions." Meaning, once stolen are mixed with un-stolen, you can't differentiate them.

Obviously, the next step is we can reformulate your statement to say that the total number of Bitcoin lost or stolen will eclipse the total supply, given enough time. However, since the total supply is fixed, and time is not, that's not a very profound revelation.