News for hackers. Stuff that matters.
Re:Show HN: I made a site that shows jobs where you can work... by jrsj on Wednesday June 15, 2022 @01:11PM (#31756063)
threatening someone who has the ability to intentionally introduce a vulnerability into even a relatively small cryptocurrency probably has the potential to be insanely profitable, and the odds of it even being investigated are far lower than any other form of fraud (for now).

There’s plenty of good reasons to go after some specific blockchain engineers who could do this, but otherwise yeah it seems kind of silly and over dramatic.

Re:Show HN: I made a site that shows jobs where you can work... by HWR_14 on Wednesday June 15, 2022 @01:57PM (#31756724)
If the oversight on your project is so weak that an engineer can add code that steals money without being noticed, all you do is change who profits from the inevitable theft. In fact, if you allow the code to be delivered anonymously, you practically guarantee that smart people will add the vulnerability and steal the money.
Re:Show HN: I made a site that shows jobs where you can work... by jrsj on Thursday June 16, 2022 @12:01AM (#31762340)
I think stronger oversight and less trust is sort of implicit in a pseudo-anonymous model. An attack like I described doesn’t require something as obvious as “code that steals money” either, it could be something much more innocuous that even afterwards appears to have been a mistake. Almost any type of bug combined with a well timed leveraged short position could result in big profits.