Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A fake job offer took down Axie Infinity

theblock.co

Post reply on HN
Print view View original

241–250 of 364 posts

Re: A fake job offer took down Axie Infinity

#241

Post by whatisweb3 »

Barrera wrote: post #234

> Validators fulfill various functions in blockchains, including the creation of transaction blocks and the updating of data oracles. Ronin uses a so-called “proof of authority” system for signing transactions, concentrating power in the hands of nine trusted actors. This paragraph perfectly encapsulates everything wrong with the way promoters sell Ethereum. Smart contracts can do little of interest beyond straight m…

Oracles that connect to off-chain data are usually understood as points of centralization, I don’t think Ethereum or it’s developers are selling otherwise.

Most Ethereum developers are advising against relying on bridges across security zones that would be upheld by multisigs and oracles, they are vulnerable to attacks. A better model than a bridge to sidechain would be a rollup - posting proofs on chain without giving the sequencer the ability to steal or control user funds.

Re: A fake job offer took down Axie Infinity

#242

Post by spaceman_2020 »

Retric wrote: post #239
spaceman_2020 wrote: post #226

Earlier quoted context omitted.

Its an entirely free market. Just because one person doesn't understand the tech and loses his money doesn't mean that everyone else shouldn't be allowed to use it either. Even if you don't buy into the crypto vision (I don't), a digital-only currency that isn't tied to any nation-state does deserve to exist.

It’s fine for a few people to play with such a system. The issue if it’s absolutely clear crypto is incapable of widespread adoption or just about anything else people hype it up as, then it shouldn’t be hyped as if that stuff is a possibility. I could never tell how much was incompetence vs fraud, but either way without the hype vastly fewer suckers would be holding the bag right now. The crypto ecosystem has been j…

The people holding the bag right now mostly got in because of the allure of quick profits. And if they didn't sell even after making incredible (paper) returns, they have their own greed to blame.

Bitcoin was $6,000 in March 2020. It hit $63,000 in April 2021. And if you didn't sell that top, it hit $67,000 again in November 2021.

Even now, it has dropped less than Netflix, a supposed bluechip.

I don't know what's the scam in this - you had plenty of entry opportunities and plenty of exit opportunities. The underlying system itself still works exactly as described.

Re: A fake job offer took down Axie Infinity

#243

Post by petilon »

If you care about security, two things you don't want to install on your computer are Adobe Acrobat and Microsoft Office. These products were written the 1990s in C/C++ and are impossible to secure. Microsoft does not allow installing Office on Secure Admin Workstations (SAW) [1] for a reason!

[1] https://www.microsoft.com/en-us/insidetrack/protecting-high-...

Re: A fake job offer took down Axie Infinity

#244

Post by rurp »

V-2 wrote: post #83
Forgeties79 wrote: post #25

Earlier quoted context omitted.

It’s a shame too. In my experience LinkedIn has been great for job hunting, indeed et al. were worthless time sinks for me. I want to keep it just for the ability to job hunt and get results but as you said…it’s a risk too.

That's the only thing it's good for, but that thing actually works. My last three job offers were from LinkedIn (I ultimately rejected one because my employer at the time gave me a counteroffer when I handed my notice, but I did accept the other two). The "content" on LI (feelhgood / motivational BS) is do ridiculous that I sort of contempt-read it ("hateread" would be to strong a word) for the heck of it, but I can'…

When I first signed up for LI I honestly couldn't tell the difference between the actual feed and a what I imagined a parody site would look like. The posts that proclaim themselves to hold controversial ideas, followed by the most banal cliches possible, crack me up.

Once in a while I check the feed for kicks and it's always 100% spam, cliches, humble brags, and not-so-humble brags.

Re: A fake job offer took down Axie Infinity

#245

Post by ptudan »

Volundr wrote: post #202
rchaud wrote: post #114

Earlier quoted context omitted.

what would stop a developer from checking personal email on a work machine?

Themselves. I'm saying developers (and employees in general) should not do any personal stuff on work machines or any work stuff on personal machines. This has benefits for the employee, not just the company, in that it keeps the employees personal data out of the hands of the IT department.

Nahhhhh, I gotta browse the internet to be effective. That requires me logging into random sites with personal logins.

I don't install anything personal on my work computer, but I wouldn't hesitate to open an email or pdf from a seemingly trusted source. I don't really blame the dev here.

What you propose is a reasonable solution, but I feel like it slams in the face of actual human behavior. Most people act the way I describe, even most tech professionals.

Re: A fake job offer took down Axie Infinity

#246

Post by ptudan »

macintux wrote: post #222
Volundr wrote: post #202

Earlier quoted context omitted.

Themselves. I'm saying developers (and employees in general) should not do any personal stuff on work machines or any work stuff on personal machines. This has benefits for the employee, not just the company, in that it keeps the employees personal data out of the hands of the IT department.

Exactly. I was on a meeting a couple of years ago and the co-worker who was presenting his desktop received a personal iMessage that flashed for everyone to see.

yeah but that's solved by disabling notifications before presenting.

Re: A fake job offer took down Axie Infinity

#247

Post by cmeacham98 »

kortilla wrote: post #130
cmeacham98 wrote: post #58

Earlier quoted context omitted.

I doubt they'd actually ask you about it (and thus give you a chance to "explain" yourself), HR would just note you down and you'd be more likely to be laid off, less likely to get promotions approved, etc.

> less likely to get promotions approved This is not how companies work (at least the ones worth working for). Retention risk is a reflection on their current role, compensation, manager, etc. We have absolutely promoted high performing employees and/or given them raises even though we knew they were looking at other opportunities.

Companies worth working for aren't stalking their employees in LinkedIn.

Re: A fake job offer took down Axie Infinity

#248

Post by rurp »

hourago wrote: post #68
londons_explore wrote: post #19

The other major cause of the failure was that one dev had access to 5 signing keys. That shouldn't have happened, because than that one dev could have run off with $540 Million... And remember, it wasn't just that one dev - it was everything running on his computer - think of the probably tens of thousands of developers who wrote the code that runs as root on his PC, much of it unreviewed.

> In a post-mortem blog post on the hack, published April 27, Sky Mavis said: “Employees are under constant advanced spear-phishing attacks on various social channels and one employee was compromised. This employee no longer works at Sky Mavis. The attacker managed to leverage that access to penetrate Sky Mavis IT infrastructure and gain access to the validator nodes.” The company fully blames the employee. I wish so…

To be fair, an airline run like a typical crypto company would quickly be shut down due to all of their planes slamming into the ground.

Re: A fake job offer took down Axie Infinity

#249

Post by Retric »

spaceman_2020 wrote: post #242
Retric wrote: post #239

Earlier quoted context omitted.

It’s fine for a few people to play with such a system. The issue if it’s absolutely clear crypto is incapable of widespread adoption or just about anything else people hype it up as, then it shouldn’t be hyped as if that stuff is a possibility. I could never tell how much was incompetence vs fraud, but either way without the hype vastly fewer suckers would be holding the bag right now. The crypto ecosystem has been j…

The people holding the bag right now mostly got in because of the allure of quick profits. And if they didn't sell even after making incredible (paper) returns, they have their own greed to blame. Bitcoin was $6,000 in March 2020. It hit $63,000 in April 2021. And if you didn't sell that top, it hit $67,000 again in November 2021. Even now, it has dropped less than Netflix, a supposed bluechip. I don't know what's th…

I lost nothing, but I can empathies with people who are screwed.

It’s not that Bitcoin or any alt coin has X paper value right now, it’s nobody can get out without someone else getting stuck holding the bag. The underlying system is predatory because mining isn’t free so it’s a negative sum game where people have already cashed out.

I remember being saddened when it was less than 1/1,000th isn’t current value I realized how many suckers where lining up for the fleecing. I briefly thought the odds are very good it’s going sky high, but I didn’t want to be part of someone losing their retirement when things eventually fell apart.

Post reply on HN