Live data from Hacker News

Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

dzoba.com

141–150 of 157 posts

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#141
post #120

Earlier quoted context omitted.

Unfortunately I don't know enough about the bitcoin innards to give you an informative answer, and the answer isn't clear from a plain reading of the code. The leaked code seems to just be an internal API for twiddling wallets. There doesn't seem to be any logic here for either the txid conflict retry bits or the hot/cold transfer bits.

Thanks for the reply. If you look at each method that can return failure, and then look at the code that calls these methods, do the callers check for failure or just keep going with the transaction? (This would both indicate the quality of the code and show a path that could generate bad transactions.)

There are a few (9?) places where "getNullAddr" is called. I assume this would return what was earlier called a "null key." It returns the requested information, except when the new address could not be inserted into the database, in which case it returns false. Less than half of the calls have any failure checking, and a few of those return false as well, and who knows if the things that call those functions have any error checking...

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#142
post #67

Earlier quoted context omitted.

Can you explain what's wrong with this? If I had 1 million in $info[ 'balance' ]? Would $bean->Coins overflow?

Using floats to represent currency is a big no-no. Floats have limited precision, and some numbers aren't representable by floats. Go try adding 0.1 to itself over and over again in your favorite implementation. It is better to represent as integers or fixed-precision numbers. That way, you are dealing with exact quantities.

It's even better to represent as binary coded decimal, Ulrich Drepper's opinions notwithstanding.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#143
post #88
post #76

Earlier quoted context omitted.

I usually hear 'ore' from people who learned their Japanese by watching shonen anime. Even outside of a business meeting, in normal conversation, it would be offensive to most people I think.

What does the use of 'ore' imply and what makes it rude? Is it a snobby way of referring to yourself?

It's not snobbish, it's cocky/boastful. "I'm hot shit" sort of way.

Why is it that way? I don't know the history, but the short answer is, because that's the way it is used.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#144
post #51

Earlier quoted context omitted.

Yes, he was saying "ore", which is an incredibly rude and amateur mistake. In English, that would be like be entering an important business meeting with a bank and saying, "Yo dude, wassup?"

Are you sure he was saying "ore"? Given the fact that his grammar is otherwise pretty tight, I wouldn't be surprised if he were instead using "ware".

Grammar & honorifics/formality are two separate subjects. I'm not fluent in Japanese by any stretch of the imagination, but I know the basics of grammar while I know basically nothing about formal speech/informal speech.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#145
post #121
post #88

Earlier quoted context omitted.

What does the use of 'ore' imply and what makes it rude? Is it a snobby way of referring to yourself?

I've never heard the word before this thread but I'm inclined to think it's a bit like "lads" in British English.

It's really... boastful. Cocky. Self-important. He's using it in sentences where he could just as easily get away without using any pronoun at all.

The closest thing I could think would be to conduct a business meeting in which you only describe your actions and refer to yourself in the third person, and then only as "Big Mark".

"Big Mark understands your position but thinks you're being a bit rude about all of this. Big Mark thinks we should cooperate more" etc, etc

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#146
post #109

Thought I'll quickly scan the source code... On the first screen: $bean->Coins = (int)round($info['balance'] * 100000000); Really? Currency as a float and rounding? Just so that he can later: $client->sendToAddress($addr, $bean->Coins / 100000000); I'm ready to believe in any error "due to a bug" they claim now.

The code may be buggy but it is actually quite clean...more than I can say for most code (my own included)...at least it is actually readable :)

This code is not "quite clean." The only thing it has going for it is mostly decent naming. This is some of the most tightly coupled code I've seen written this _century_. This is the kind of code that gives PHP a bad rap.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#147
post #93

Earlier quoted context omitted.

That isn't how you do it?

Depends on whether I can make sense of the *nix joke on the banker’s t-shirt, or if I can tell how many months of salary his tie is worth.

I thought it depends on how many zeroes you have at the end of your (positive) account balance with the bank.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#148
post #126
post #39

Earlier quoted context omitted.

Way too much schadenfreude given Gox's history. Although contrary to popular belief Gox was never a Magic exchange, they were a Bitcoin startup at a time when Bitcoin was not much more than internet lols and pizza deliveries. The first thing you do when hacking together a stupid exchange for a joke e-currency isn't writing unit tests. You just write the code and blast it up on a domain you had lying around for a diff…

While it may have not been a MTG card trading site, Karpeles was involved in running MMO servers based around Ragnarok Online before running an exchange. His involvement carried through during MTGox's existence until maybe a year or two ago.

If Mt Gox was ever a MTG card trading site, it would have been before Mark purchased it from Jed McCaleb.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#149

Earlier quoted context omitted.

Using floats to represent currency is a big no-no. Floats have limited precision, and some numbers aren't representable by floats. Go try adding 0.1 to itself over and over again in your favorite implementation. It is better to represent as integers or fixed-precision numbers. That way, you are dealing with exact quantities.

> some numbers aren't representable by floats an infinite number of them in fact

[deleted]

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#150

Earlier quoted context omitted.

Using floats to represent currency is a big no-no. Floats have limited precision, and some numbers aren't representable by floats. Go try adding 0.1 to itself over and over again in your favorite implementation. It is better to represent as integers or fixed-precision numbers. That way, you are dealing with exact quantities.

> some numbers aren't representable by floats an infinite number of them in fact

Turing proved there's an uncountable set of numbers that cannot even be computed let alone represented
Post reply on HN