p2p_astroturf

tell us something we didnt already know. you can solve the speed problem by using solana or literally any of the other 100 coins that claim to be fast, or eth2 in six months

i am not even a person who is a fan of blockchains (since they are mostly poorly designed, unfounded, etc)

How does some random webshit showing stuff possibly relevant to a user constitute being a radicalization engine? Is this something they could have known at design time? I'm not being rude, I want to know the reasoning.

> All of these projects have hundreds of million to billions in tvl and have been running fine for years.

Oh if only you knew.

Because I'm not a prick who needs clout for every single unit of hobbies I carry out.

Wikipedia is the one website that still has any value and actually serves the purpose of the web. Your website blocks me because I haven't enabled JS or disabled Tor or whatever, to prove I'm not a bot to fetch your front page which should take less resources than serving a captcha or JS check. Modern indeed.

imagine you make a website

imagine it blows up in popularity

do you get the problem now?

Uh no, this is (one reason) why you want to use a (well written) decentralized exchange.

>is like giving people ACH access

I use ACH, I know nothing about it, and I'm sure I can lose all my money from using it wrong, as banks love systems that are impossible to operate securely. I don't have this problem with bitcoin, and never will.

As for the tech side, you know nothing. The bugs are simply because of the demographics behind decentralized tech:

- Before snowden: script kiddies, slightly educated hobbyists

- After snowden: all kinds of idiots

> Crypto Anarchy is a farce

Your post is a farce. Wanting basic control over your own money (and removing horrible bank insecurity and UX as a side effect) is not anarchy or anything remotely resembling it. Your post only sounds reasonable from the perspective of $current_world which is basically hyperstatist, people are literally afraid to have sex and cross the street without government approval.

well the article is certainly bullshit. but someone there wrote a useful and accurate comment:

> people who claim to be working on web3 and crypto desperately try to fit their technology to user problems. none of them seems to be working on the fundamental issues or the foundation needed to solve the existing problems.

> Most of them are half baked product/ marketing guys

> pretty much they create glittering websites and post tweets threads like "here is why web3 is a big thing" and nothing else they do

web3 can be proven bullshit the moment you realize all the implementations require web browsers instead of coming up with a solid foundation. this has caused major issues in ethereum (such as realizing their shit is completely broken and replacing it with metamask which is still bullshit). this on top of the fact that it's all MVP half working crap. almost all cryptocoin applications (and basically 100% of things titled "web3") require a web browser, which means you are trusting google/mozilla with all your money, on the web which is the most insecure, error-prone possible way to develop an application.

even from a layman perspective it's crap. you get something competing to be a standard web app, with all the same bugs and slowness, instead of a properly developed "native" GUI. example:

last time i tried to do something with metamask (a browser plugin), it didn't work on firefox. oh yeah, this was a top 10 (i.e, multi billion dollar market cap) cryptocoin's main use case which requires you to run code from a webpage on the internet that interfaces with metamask and you have to trust both of course as well as CA infra which is the opposite of decentralized. so i went with chrome. it tries to be a popup menu you're meant to just open and click one button in and close. if you open another window (like a text editor), it closes and you have to reopen it. so when i tried to open it to do some stuff and cross reference some number, i had to repeatedly: reopen metamask and press a bunch of buttons to bring me back to the same screen within metamask.

let's also look at the standard web3 "onboarding" user experience:

    - they assume you're a giant moron (and are correct)
    - they make you setup a password to encrypt your private key and not tell you this will be used as an encryption key (do they really believe I as a giant moron will come up with a password with sufficient entropy to be used as an encryption key for the 5th application today that asked me to make a password?)
    - next, they display the seed used to generate your password in the form of 20 or so words and ask you to write it down
    - next, they force you to input the words to "prove" you wrote it down, typically with some hack to disable copy/paste
    - at this point you may have lasers and spaceships flying around your screen as well as animated 3D polygons, to emphasize how cool it is to go through this step (and lessen the chance the user understands what is going on)
    - they do not provide an option to skip any of the above (typically, you may need to go read undocumented internal API)

let's look at web3.js

    - it's terribly documented
    - it's js
    - a language that does not support numbers
    - go-ethereum ships with a version that is several years old, i don't remember the numbers, but it's on an order of magnitude like 0.4.0 vs 2.3.4
    - in go-ethereum, there is no real way to find documentation for the web3 JS APIs you can use from its shell. but that's fine since the web3 JS API largely is an incoherent mess anyway
    - it's full of quirky shit (largely for the sake of snakeoil) like: every time you use a function in the "personal" namespace, like personal.listAccounts, it erases that line from your shell history
    - in fact, they dont want you to use the shell, they want you to be a mindless consumer and use premade web applications (hosted behind web pages "secured" by CAs) to do everything
    - i never used it outside go-ethereum, because why would i want to use js. may as well just use the node API at that point
    - all these are a multi billion dollar companies that could easily have allocated resources to these problems

let's look at how web3 wallets work:

    - it's a web app in electron, that takes between 4 seconds (eternity) and several minutes to display the main GUI
    - on most coins, there is no official wallet. not CLI. not GUI. so it is indeed an electron app by a 3rd party
    - the text "undefined" is written everywhere
    - menus mysteriously fail to open on certain occasions
    - it has several hundred thousand lines of code to do animations like lasers flying around the screen, yet the program literally has no features aside from "transfer in" and "transfer out", and "recover from seed"
    - the code is written by a mix of teenaged script kiddies, dot com boomers, and silicon valley startup hipsters (actually this applies everywhere in blockchain stuff, not just GUI wallets)
    - they do not tell you how you are synchronizing to coin #35. is it using an internal server owned by the wallet vendor? is it doing light sync?
    - they do not provide you with an option of *how* to connect to the coin's network, it "just works"

tl;dr web3 is not real software

The video game industry is literally 10x more scummy than the cryptocoin industry.

edit: keep downvoting me morons. what is microtransactions? literally the same bullshit you bitch about like NFTs and IPOs.

and the video game industry is not just scum for that, but for the terrible code they write and how they drag down the entire computing industry with pervasive poor engineering

what is steam? origin? epic store? literally webshit like a cryptocurrency wallet + vendor lock in + a bunch of mutually incompatible software deliberately made that way in the interests of the vendors instead of using open standards

Ironically, the worst part of web3 is that everything that calls itself that, such as web3.js and metamask, are web based.

> The web is decentralized

I know you just want to throw in the invalid "look at me I'm an old school hacker" definition that can't be argued with, but it isn't. To serve content, it has to be hosted somewhere, and that place must be a single entity, and it must have infinite money to replicate the content for infinite users. On freenet or torrent, this isn't the case. Then there are also the other 700 ways the web is centralized...

A BTC wallet is infinitely more user friendly than a banking website that only works in chrome xor firefox and constantly locks you out for reasons they don't want you to know about and severely limits your transfer sizes. If you do EFT and wait between 3 and 10 days each time, even bitcoin is better than this.

Centralized web is horrible and dead. Literally _anything_ is a better alternative. The user can be convinced to adopt superior tech even if he does not explicitly know the problems. It just has to feel better.

> it doesn't need to be technically elegant, but user-facing elegant.

dont worry bro. the "set user = happy" voodoo dance has already been done. every cryptocoin wallet is a browser plugin or mobile app with 90% of code for themeing with all the bugs and slowness smartcrap/web users are accustomed to. you are even discouraged from rnunning yoyr own node

No, you're asking me to not communicate to other security resarchers about the problems with security systems (for example, publishing a PoC):

> 2. People who create and distribute these stickers knowing their purpose should go to prison.

... and you're asking the entire world to change to make your vehicle work:

> 4. Roads should be modified over time to make it more difficult to do this attack.

10 years ago when AI cars were getting memed into existence I would get dogpiled on for naysaying. Now you same people want laws to stop people from breaking what was already easily breakable and which you argued was unbreakable.

Also, your poison analogy is invalid. Poison is not uncommon because of law, it's uncommon because it's uncommon. In the future, crazy people will be poisoning random stuff in the grocer because they don't like the demographic that shops there.

Your analysis does not break out of the well known box that is the classical ways of analyzing the security of a computer system (it actually creeps into DRM/TPM territory which is known insecure despite governments with guns). Thus the security of "AI" algorithms remains as insecure as it already was, and should not be used for anything that needs to be secure. If anything, the people who make critical infrastructure insecure should go to prison (after education is reformed to actually teach these basic problems). Your example is like how typical american citizens get their panties in a bunch and throw you in jail for 5000 years if you fake your identity, but this is only because they have build such insecure systems that comeletely break down once this happened. And this is yet another thing not fixed by policing. Sorry not sorry if I sound rude. You are basically asking me to go to jail so you can use some convenient AI consumer tech in lieu of proper solutions for stuff like authentication, court systems, and car driving (and all the other thing the wackos want to replace with AI).

Ever since I had the misfortune of learning about hacker kids wanting self-driving cars, I've been saying you can literally put a poster on the side of the road and every car that comes by it will crash. Seems like I'm on the right track. Software has edge cases. Every software engineer knows this.

>The second-most frequent complaint is that the adversarial image attack is ‘white box’, meaning that you would need direct access to the training environment or data.

The training data will be leaked. Companies are very bad at classifying what is and isn't private information that they need to keep secret. But anyway you probably don't even need the training data.

There's nothing you can do. All language library distribution systems ever made are insecure, and backed by willful ignorance.

Your insane perspective and the fact that it is common, is why the internet sucks.

1. Youtube is just a generic video hoster, of which many came before, during, and will come after. As for the whole "pretend Youtube is a thing" thing, I can't remember one actual good video from a "content creator" ever. It's all circle jerking and quick videos on a topic based on least effort.

2. <video> tag has never had a single good implementation. They are all bugged and 100x slower/clunkier than using the built in menu on a CRT TV from the early 90s.

3. Yes, the web would be better if it was just static content. Even without <video> tag. The primary use of a <video> tag is clickbait (actually, almost nobody uses a <video> tag because they don't want to host video, and instead use a youtube embed, so <video> is not even used in practice). For anything else, like movies, porn, etc, it's 1000x more convenient to just download the video and watch it offline in a real video player like MPV. Web browsers still cannot even turn off that stupid "you are now in full screen" banner at the top of the screen, which fortifies my point that <video> is not good for what it is intended for: short one-off clips scattered throughout web pages.

4. The whole idea that it's hard to have a video tag is a product of licesnsing braindamage and the clusterfuck of video encoding standards.

5. The web is not great, and I try to avoid it as much as possible. Using a god damn terminal emulator (the most braindamaged obsolete shit in the world) is 1000x more pleasant than using a web browser.

This article is terrible and does not explain how proof of stake works let alone how it's broken, but links to another (probably better article on etheruem.org). back to studying it for myself, then. I literally have a headache after reading the bitcoin analogy and trying to guess which parts of the analogy I will need to remember for later in the article (hint: none). It would have been simpler to just explain what a nonce and hash is.

hashcash was not obscure even before bitcoin came out

As a hacker you probably know that decimal is an arbitrary radix and even if there was a canonical radix, it would not make sense to start worrying about your job when the number ends in a "0".

What is the point of arxiv other than a file host but where people forcibly constrain themselves to the bureacratic process of creating a UN*X braindamaged tex / PDF with whatever academic publishing conventions? Someone in here even has posted makefile. For analogy to the problem I am alluding to, imagine needing a makefile to write an ASCII text document. Skimming through these comments, it seems like arxiv supports some kind of search or other metadata traversal. All this stuff could be done without a centralized server. No I am not advocating for your half working p2p network, cryptocoin, or startup.

I use it for buying groceries.

Did you link to this SE post so we could laugh at it?

Never smells: You are using a language with discriminated unions (before or after 90s)

Smells: You are using a dynamically typed language, and you used a hack to implement them

Sometimes smells: You are using a 90s language with a horrible implementation of enums

Smells: You are an OOP charlatan and they do not fit your invalid world view and your enums have methods on them plus some other bezerk shit. plus you have cognitive dissonance because you were told objects are expensive and you should really only pass ints around willy nilly and everything else should be god objects

damn i need more sockpuppet accounts so i can list all my snarky comments:

- no shit, use public keys

- your 2FA can also be hacked

- your company forcing 2FA is insufferable like all modern web

- your KYC is literally pointless since i already gave those same ID photos to 100 different companies, few to none of which are competent enough to keep them secret

EDIT: huh, this is actually a good article. but it's still ironic since it's coming from a company that follows all the standard snake oil

This has to be the stupidest sentiment I've seen other than the dopamine meme itself where laypeople online use the word to back up reactionary politics.

> It had Active Desktop. It had Channels.

I remember playing with Active Dekstop as a kid, but what were channels?

And now today CloudFlare serves you a captcha if they don't like your user-agent and IP address combo.

AKA the web was always a bunch of cargo cult, NIH about the most basic computer programming tasks, etc.

Oh you think Google is cool? Bro CloudFlare hackers can debug a kernel panic through just a single register. I'm going to install CloudFlare on my website because everyone's doing it!

>You have probably used one [credit card]

no

>mostly [aware] how it is a complicated bundle of services with a pricing structure strictly more complicated than a venture capital fund’s.

yes

Content free article. I literally could not remember what (if any) point was made by the time I reached the end.