Earlier quoted context omitted.
Hmm. I'd say it's a combination of inside jobs and general poor coding/security practices. The inrush of customers has prompted lots of people to follow the "sell the shovels, not mine for gold" mentality and try to open up their own exchanges... and every exchange is a prime open target for any hacker because of the massive amounts involved.
In addition to all you said, I would add that some more advanced test frameworks/library a missing. There are only good ones for unit tests and UI test automation like Selenium, for integration tests there is a huge gap of decent test frameworks missing.
Bad code may be to blame for $500M of cryptocurrency losses in seven months
11–20 of 72 posts
Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months
#12Who says it was lost? I suspect quite a few of these 'hacks' are inside jobs to take coins from the general public and move them to the founders/owners/employees of exchanges. Yes, that's a pretty harsh accusation to make, but there is plenty of evidence that this happens with some regularity and the number of instances is high enough to make that claim. And it will continue as long as gullible people place 100's of…
It's illegal to steal, regulated or not.
Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months
#13Who says it was lost? I suspect quite a few of these 'hacks' are inside jobs to take coins from the general public and move them to the founders/owners/employees of exchanges. Yes, that's a pretty harsh accusation to make, but there is plenty of evidence that this happens with some regularity and the number of instances is high enough to make that claim. And it will continue as long as gullible people place 100's of…
Hmm. I'd say it's a combination of inside jobs and general poor coding/security practices. The inrush of customers has prompted lots of people to follow the "sell the shovels, not mine for gold" mentality and try to open up their own exchanges... and every exchange is a prime open target for any hacker because of the massive amounts involved.
I don't think it's mutually exclusive though. Tux was an awful coder and Mt. Gox was a scam at the same time.
Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months
#14Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months
#15* Yes, I know market cap is a poor metric, but it’s equivalently bad to the $500M “lost” metric used here.
Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months
#16http://dayssinceacryptocurrencyexchangehaslostmorethan100mil...
Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months
#17Earlier quoted context omitted.
Hmm. I'd say it's a combination of inside jobs and general poor coding/security practices. The inrush of customers has prompted lots of people to follow the "sell the shovels, not mine for gold" mentality and try to open up their own exchanges... and every exchange is a prime open target for any hacker because of the massive amounts involved.
In addition to all you said, I would add that some more advanced test frameworks/library a missing. There are only good ones for unit tests and UI test automation like Selenium, for integration tests there is a huge gap of decent test frameworks missing.
Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months
#18Earlier quoted context omitted.
In addition to all you said, I would add that some more advanced test frameworks/library a missing. There are only good ones for unit tests and UI test automation like Selenium, for integration tests there is a huge gap of decent test frameworks missing.
Wrong thread? Or do you feel that test frameworks/libraries are going to take care of sloppy security practices and inside jobs?
Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months
#19One man's loss is everyone else's gain. If $500MM of a coin is irrevocably lost or destroyed, everyone just gained $500MM in value through an increase rarity. It's equivalent to the losers transferring all their coin to the rest of the network participants (in proportion to their stake).
> If $500MM of a coin is irrevocably lost or destroyed But the examples in the article are about coins being stolen, not lost or destroyed. Someone somewhere still has it and is presumably able to spend it.
Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months
#20Earlier quoted context omitted.
Wrong thread? Or do you feel that test frameworks/libraries are going to take care of sloppy security practices and inside jobs?
From the bugs described in the article, specially the one a person could withdrawal from another account to its own account, I believe better test libraries could help. Normally people develop tests using the same input data from beginning to end of test execution, since it becomes cumbersome to use different test data for input in the same round of test execution. Mainly because how these data come from fixtures.