News for hackers. Stuff that matters.
Re:Revisit Trusting trustlessness? exploits in curve and pol... by noneoftheaboveu on Tuesday August 01, 2023 @10:09PM (#36966102)
Recent vulnerabilities and exploits found in Defi bring back a quote found in this short essay by Georgiadis: “Additionally, even though the codebase might be open source, and thus inspectable, validating integrity of a million-loc-long codebase isn’t something that the average user is capable of.”

I might add, it’s not even feasible for the average expert. The essay touches on some very nice points.

Re:Revisit Trusting trustlessness? exploits in curve and pol... by nftsnotforme on Tuesday August 01, 2023 @10:36PM (#36966307)
The bug in Curve was in vyper's compiler not Curve itself.

I agree with this essay, and your point. No average user, nor average expert can spot this type of exploit. My own background is in compiler work. Hence the author, Evangelos Georgiadis, advocates for formal verification methods, but even these methods are not perfect. The most intriguing point for me was the author's concept of conceptual corruption, referencing work by Markus G Kuhn. It leaves off with an easter egg quote of former compiler expert Donald Knuth. This 3 pager is quite fitting for current events.

Re:Revisit Trusting trustlessness? exploits in curve and pol... by 10n10n on Wednesday August 02, 2023 @12:10AM (#36966852)
I'm a victim to the bug. Man someone out here help. defi is fraud, I dont trust anyone.
Re:Revisit Trusting trustlessness? exploits in curve and pol... by migrane3 on Wednesday August 02, 2023 @12:12AM (#36966867)
Defi is not fraud, people are fraud. This essay makes a point in case for this argument. I'm sorry to hear that you were victim to the bug!
Re:Revisit Trusting trustlessness? exploits in curve and pol... by 8d7n on Wednesday August 02, 2023 @12:13AM (#36966875)
Defi is fraud! and people in Defi are fraud too. how about this?
Re:Revisit Trusting trustlessness? exploits in curve and pol... by scrapemenow on Wednesday August 02, 2023 @04:46AM (#36968543)
This is a nicely written spin of Turing Award winner Ken Thompsons speech "Reflections of Trusting Trust(lessness)!". Thanks for this, and thanks for posting.
Re:Revisit Trusting trustlessness? exploits in curve and pol... by felixans on Tuesday August 01, 2023 @10:52PM (#36966428)
FYI already made it here:

https://news.ycombinator.com/item?id=29145946

But this type of trust is kinda timeless.

Re:Revisit Trusting trustlessness? exploits in curve and pol... by bigdickensdick on Wednesday August 02, 2023 @12:35AM (#36967004)
Very informative. I bookmarked it.