News for hackers. Stuff that matters.
Re:Hard Problems in Cryptocurrency: Five Years Later by fxtentacle on Sunday November 24, 2019 @01:02AM (#21618704)
Plus there's the problem that smart contracts cannot be easily modified if they are found to be buggy and that one can always reverse engineer them, because they're distributed to everyone.

These two together have already caused lots of damage https://hackernoon.com/yes-this-kid-really-just-deleted-150-... and they make most real-world uses impossible.

It is pretty much impossible to sell anything digital with smart contracts, because due to the source code being accessible to everyone you can always figure out the password, key, or secret URL to whatever is being sold. Without paying for it.

Re:Hard Problems in Cryptocurrency: Five Years Later by alanfalcon on Sunday November 24, 2019 @06:13AM (#21619680)
The best smart contracts don't need to be reverse engineered, they've got shared, verified source code. The bugginess is a real problem as you've pointed out. The "impossible to sell anything" couldn't actually be farther than the truth from all my experience buying and selling NFTs. Over $150,000 USD worth of digital collectable game cards have been traded this week alone over at https://opensea.io/recent - everything is based on cryptographic signing and verified ownership on smart contracts, and it works great.
Re:Hard Problems in Cryptocurrency: Five Years Later by simias on Sunday November 24, 2019 @08:35AM (#21620312)
Digital assets are obviously the best possible use case for blockchains and smart contracts, but can it really work outside of that use case? And even for that use case is it really more convenient than centralized solutions?

From what I can tell browsing through this website those digital "assets" seem to be yet another speculative outlet with some limited gamification on top. It's cool from a technical perspective but where do we go from there?

Re:Hard Problems in Cryptocurrency: Five Years Later by alanfalcon on Sunday November 24, 2019 @02:53PM (#21622860)
We're going to get the Metaverse from there, eventually! And it will be glorious. A great definition of the Metaverse and what role blockchain may play in it: https://soundcloud.com/siggraph-spotlight/30-tim-sweeney-and...

I can confirm that the blockchain is way more convenient than centralized solutions for buying and selling digital assets once you get over the initial friction (which is still way too much). The keys here are open standards, composability, and trustless atomic transactions. As a user, I basically look at ethereum as an in-game currency—and the game is the whole of the ethereum gaming space (still nascent, yes, and polluted by a great many scammy speculative shell games) rather than a single game.

As for working outside of digital asset use cases, there are certainly a large number of people trying to get it to work though I agree the use case is much less clear cut. Without exactly agreeing with Vinay here, I at least appreciated the perspective he shared in detail on this episode of the NonFunGerbils podcast: https://nonfungerbils.com/podcast/3-vinay-gupta-indexing-the...

Re:Hard Problems in Cryptocurrency: Five Years Later by ErikAugust on Sunday November 24, 2019 @10:32AM (#21620960)
You can make real games that leverage these type of assets. Plug: https://www.megacity.gg.
Re:Hard Problems in Cryptocurrency: Five Years Later by nradov on Sunday November 24, 2019 @01:12PM (#21622164)
So in other words it's being used for something even more useless than trading Beanie Babies.
Re:Hard Problems in Cryptocurrency: Five Years Later by pfisch on Sunday November 24, 2019 @01:23AM (#21618768)
> It is pretty much impossible to sell anything digital with smart contracts, because due to the source code being accessible to everyone you can always figure out the password, key, or secret URL to whatever is being sold. Without paying for it.

Pirating most software/movies/music is pretty easy, but people still sell it. I'm not sure this is as big a problem as you think it is.

Re:Hard Problems in Cryptocurrency: Five Years Later by bouncycastle on Sunday November 24, 2019 @02:47AM (#21619025)
There hasn't been any high profile smart contract hacks for a while now. Early days are always fraught with disasters. The field is evolving with "best practices", formal verification and lessons learned from past mistakes, so you'll find that these days things are more stable.

One example is MakerDAO which has around $300 million in value locked, and has been running without incident for a while now.

Re:Hard Problems in Cryptocurrency: Five Years Later by joosters on Sunday November 24, 2019 @05:49AM (#21619590)
I bet you that their smart contract, like most other significant ones, has been designed to be upgradable. That means the authors can modify the smart contract whenever they want, which means it implicitly has a centralised trust mechanism (I.e. you had better hope that the authors don’t go rogue and screw over the users) Central point of trust => blockchain part is now pointless, as ever.
Re:Hard Problems in Cryptocurrency: Five Years Later by mhluongo on Sunday November 24, 2019 @07:52AM (#21620115)
Those upgrade mechanisms don't need to be centralized, and are sometimes vote-based. Unsure about the upgrade mech behind Maker though.
Re:Hard Problems in Cryptocurrency: Five Years Later by bouncycastle on Sunday November 24, 2019 @07:55PM (#21624641)
Nope, Maker contracts are not upgradable.

Although the main achilles heel with Maker is the governance and the oracle. The new version of maker has minimised the governance, and the new oracle design has better protection against an oracle attack. Ideally, you want as little governance as possible.

Re:Hard Problems in Cryptocurrency: Five Years Later by v64 on Sunday November 24, 2019 @08:33PM (#21624786)
> Nope, Maker contracts are not upgradable.

This may have been true in the past, but not anymore. Here's [1] an example of a minor bug that was recently discovered in the MCD deployment and how they're going to patch it. The modules in the Maker system have variables that point to which smart contract to call to execute their actions, and the Maker governance is involved in changing these values.

[1] https://forum.makerdao.com/t/proposal-upgrading-the-flopper/...

Re:Hard Problems in Cryptocurrency: Five Years Later by xorcist on Monday November 25, 2019 @11:34AM (#21629804)
Perhaps a naive question, but in that case, why bother with a blockchain?

If some entity holds the keys to control what code is run, why not let them run the code to begin with? This simplifies implementation significantly, and has obvious scaling benefits.

You can still operate this in a transparent way with multiple independent stakeholders that validates data. Many other systems work this way.

Re:Hard Problems in Cryptocurrency: Five Years Later by v64 on Monday November 25, 2019 @11:50AM (#21630007)
There are a couple of reasons.

The Maker system was bootstrapped this way, but now with the release of MCD, the system will be modified so that the Maker corporation's key is revoked and changes to the system will only be able to be made through MKR token governance votes moving forward. [1] When people refer to the "Maker governance", they refer to those decisions that are voted on by holders of the MKR token. In practice in the short term, the Maker corp will still hold a voting majority of MKR, but it's a long term goal that eventually the Maker corporation won't have to exist and the system is totally maintained by the holders of MKR token.

The more important reason though for doing it on the blockchain is reducing technological centralization. Right now, as long as the Ethereum network exists, the Maker system will be on the blockchain and can't be shut down, even if the Maker corporation is dissolved.

US FinCEN has recently set their eyes on stablecoins, declaring that the entities that offer them will need to comply with KYC regulations. [2] By deploying the system on a public blockchain, it's arguable that the US govt will not be able to cease the distribution of Dai itself and will only be able to go after its holders.

[1] https://forum.makerdao.com/t/mkr-token-authority-transfer/83...

[2] https://finance.yahoo.com/news/fincen-stablecoin-issuers-mon...

Re:Hard Problems in Cryptocurrency: Five Years Later by bouncycastle on Sunday November 24, 2019 @09:54PM (#21625059)
TIL, thanks!
Re:Hard Problems in Cryptocurrency: Five Years Later by magma17 on Sunday November 24, 2019 @01:48AM (#21618851)
That's what oracles do.
Re:Hard Problems in Cryptocurrency: Five Years Later by joosters on Sunday November 24, 2019 @02:03AM (#21618893)
If you have to trust an oracle, you have essentially thrown away all of the plusses of decentralisation/trustlessness. At that point, the blockchain becomes pointless busywork, useful only for duping mug investors.
Re:Hard Problems in Cryptocurrency: Five Years Later by nootropicat on Sunday November 24, 2019 @06:55AM (#21619854)
The impossibility of a full elimination of trust, for any particular problem, doesn't mean a partial reduction isn't valuable.

If you disagree, would you be fine with changing the political and justice system of your country into a fully opaque black box? As in, you still can vote for the policies you want, but it's impossible to know how the government functions, what are the reasons for its decisions, or even who personally forms the government, to the point it could be run by aliens or an ai. Sometimes people are arrested for crimes, but it's impossible to know what's the evidence or even what the crime was, even after sentencing.

If you don't consider this equivalent to the currently utilized system in your country, you have to agree that there's value in trust minimization.

Re:Hard Problems in Cryptocurrency: Five Years Later by SpicyLemonZest on Sunday November 24, 2019 @01:25PM (#21622253)
I think we're detached from the original discussion. "That's what oracles do" was a response to the problem that "smart contracts cannot be easily modified if they are found to be buggy". Trust minimization is valuable, but a smart contract that allows an oracle to unilaterally override its terms doesn't minimize trust in any meaningful way.
Re:Hard Problems in Cryptocurrency: Five Years Later by monospaceisgood on Sunday November 24, 2019 @07:21AM (#21619976)
Infiltrate a government or a justice system require a lot of time and resources.

A blockchain? not so much

You basically replace trust (with doubts) with faith.

Re:Hard Problems in Cryptocurrency: Five Years Later by dorgo on Sunday November 24, 2019 @07:01AM (#21619882)
care to elaborate?

Afaik, oracles are used to synchronize the blockchain to the real world and there are sophisticated mechanisms to keep them honest.