If you are writing a bank, write it in SPARK Ada.
SPARK does nothing to defend against typical web vulnerabilities: XSS, CSRF, default/weak passwords, admin interface left open, etc.
Bitcoin exchange hacked via Rails exploit, funds stolen
181–190 of 279 posts
Re: Bitcoin exchange hacked via Rails exploit, funds stolen
#182Look at the transaction volumes there https://vircurex.com/ - that does not look serious.
By they way chrome shows their https certificate also has some problems.
Re: Bitcoin exchange hacked via Rails exploit, funds stolen
#183Earlier quoted context omitted.
Is there any evidence that apartments rented out with AirBnB are more prone to crime and abuse of non-tenants than apartments not rented out with AirBnB?
Yes. There is enough evidence of this that NYC created an entirely new beauracracy just to handle these issues. Numerous papers have published articles describing fraudulent or deceptive AirBnB listings, the guests' lack of resource, AirBnB's lack of assistance.
I'm asking about evidence for the higher rates of crime and abuse to non-tenants that tptacek claimed, not about deceptive listings on AirBnB or damage to tenants.
Re: Bitcoin exchange hacked via Rails exploit, funds stolen
#184There seems to be a pattern emerging in all of these 'disruptive' business models, whether it be Bitcoin (banking), AirBnb (hotels), or Uber (cabs). We look around and see these industries burdened by regulation, which tends to create entrenched players and which seem to us to be inefficient. So we create similar peer-to-peer equivalents, only to start rediscovering the reasons for all those regulations in the first…
That is an absolutely terrible lesson to draw from this episode. First and most importantly, Airbnb and Uber are not disrupting industries burdened primarily by consumer safety regulations; they are disrupting industries burdened primarily by barriers to entrance that are designed to direct economic rents to politically favored actors. Huge difference. There is no plausible 'consumer protection' story for preventing…
re: "Legitimate banks don't get hacked because there are billions of dollars at stake for the banking institution. "Legitimate" financial institutions do get hacked, and to suggest otherwise is crazy talk. Look here where a financial institution has an exploited flaw ongoing since at least 2008. http://www.batstrading.com/alerts/ ( http://cdn.batstrading.com/resources/system_self_help/BATS_N... )
Agree with you on your other points though.
Re: Bitcoin exchange hacked via Rails exploit, funds stolen
#185Earlier quoted context omitted.
Claiming hotel regulation has no benefit to consumers is simply not true. Consider the perspective of a resident of San Francisco (like me). SF has a very limited amount of housing. We can debate all day about ways to fix that and impediments to building more (and more affordable) housing, but the simple facts right now are that there are a LOT more people who want to live in SF than there are housing units. Addition…
The problem you described has a very simple solution. Grant more permits to increase the number of brand new housing units added to the market each year. The rate at which SF adds housing units given demand is absurd. In fact, you'd probably have many more small business opportunities in SF if the city were willing to add residential units faster.
Where would you put them? The demand is IN SF, not in the hills outside, or in Oakland.
Re: Bitcoin exchange hacked via Rails exploit, funds stolen
#186Earlier quoted context omitted.
There is no plausible 'consumer protection' story that would explain why building codes for permanent residence are not good enough for temporary residence as well. The law is there to protect hotel operators from vacation rental competition. This is not a very thoughtful comment. There are obvious reasons why properties zones for permanent residence aren't appropriate for transient residence; the latter type of occu…
Building codes (construction codes; how you must build), not zoning (what you're allowed to build).
I agree with the general sentiment, I think many of these regulations exist as protection for existing industry, but isn't the risk of a hotel burning down much greater than a home burning down? The potential loss of life in a single incident is far higher.
I imagine the rules about what safety equipment a small ocean-going yacht and an ocean liner must have are pretty different too, for similar reasons.
Re: Bitcoin exchange hacked via Rails exploit, funds stolen
#187Earlier quoted context omitted.
There is no plausible 'consumer protection' story that would explain why building codes for permanent residence are not good enough for temporary residence as well. The law is there to protect hotel operators from vacation rental competition. This is not a very thoughtful comment. There are obvious reasons why properties zones for permanent residence aren't appropriate for transient residence; the latter type of occu…
Building codes (construction codes; how you must build), not zoning (what you're allowed to build).
The rationale behind this is that with permanent residence there is the expectation of a careful examination of the dwelling, and that's relatively cheap because you only have to do it once every couple decades, whenever you buy a house, and hey, people should be able to make their house however they like. With temporary residence, the cost of doing that would be prohibitive, because visitors visit new temporary residences for short durations, and an individual visitor has a low probability of being hurt. Having a shoddy structure is the exact sort of thing where making decisions for immediate profit that have a low probability of high damages in the future that regulations make sense for.
Re: Bitcoin exchange hacked via Rails exploit, funds stolen
#188Earlier quoted context omitted.
Is there any evidence that apartments rented out with AirBnB are more prone to crime and abuse of non-tenants than apartments not rented out with AirBnB?
You're effectively asking whether apartments rented to unchecked strangers for days at a time are more prone to abuse than apartments rented months or years at a time. There is a reason hotels require "special use" zoning exceptions in cities, and it's not because Mariott and Hyatt have captured the city council; it's often the residents who create uproars when those exceptions are granted.
I'm not sure if we're talking about the same thing, we might be, we might not be.
You are talking about renting apartments to unchecked strangers for days and I am talking about people renting out their apartment on AirBnB. There's some relationship between the two sets but I don't think they're equivalent.
Regardless, is there evidence for the claim that crime and abuse of non-tenants is higher for either the set you're talking about or the set I'm talking about than in the general population?
Re: Bitcoin exchange hacked via Rails exploit, funds stolen
#189Bitcoin, the unregulated currency of OC & black hats gets hacked. This really isn't a big surprise. There's little or no come back for an individual, group or even nation state on this. This is evolution at work, where instead of survival, its a more tangible quality being selected for. The most ruthless, unremorseful and skilled the hacker, the more bitcoin they make allowing them to buy/build more RATs
Re: Bitcoin exchange hacked via Rails exploit, funds stolen
#190And this is why I would NEVER in 10,000 years trust an anonymous form of money that can't be recovered or tracked to a group of average developers who in this case are obviously are amateur and don't even respond to massive critical security updates. I'm sure all the rest are like that to some degree as well. No thanks, I'll stick with cash under my matress before ever using that. I feel bad for anyone that actually…
You are wrong, bitcoins can be "tracked". The whole point of the Bitcoin block chain is to track all transactions. The community has developed a few tool to track "tainted" money. Also, you already trust an anonymous form of money: cash. Why so? Mostly because insurance exists against cash theft. As the Bitcoin ecosystem develops, eventually an insurance market will develop too. It sounds like Bitcoin is too unmature…
Alright, fair enough. I suppose my point moreso was that the fate of your very hard earned cash was bested by a rails update that any noob developer should have seen.
Given that simple scenario, think about who is watching your money..
That's great its ensured though. Good deal