A hacker stole $31M of Ether – how it happened, and what it means for Ethereum
medium.freecodecamp.org
A hacker stole $31M of Ether – how it happened, and what it means for Ethereum
1–10 of 440 posts
Re: A hacker stole $31M of Ether – how it happened, and what it means for Ethereum
#2>"It’s important to understand that this exploit was not a vulnerability in Ethereum or in Parity itself."
I mean.... I guess. It's a feature of Ethereum, if we're going to weasel around.
Re: A hacker stole $31M of Ether – how it happened, and what it means for Ethereum
#3>"It’s important to understand that this exploit was not a vulnerability in Ethereum or in Parity itself." I mean.... I guess. It's a feature of Ethereum, if we're going to weasel around.
I think most developers know not to eval()
Why would you execute arbitrary text in any other languages?
Re: A hacker stole $31M of Ether – how it happened, and what it means for Ethereum
#4The developer shouldn't have executed arbitrary text. Hopefully we can just fork, blacklist the stolen transactions and pretend this didn't happen.
Re: A hacker stole $31M of Ether – how it happened, and what it means for Ethereum
#5"smart contracts can also do things that normal contracts can’t, such as enforce a set of rules entirely through unbreakable cryptography."
Isn't "unbreakable" a bit of a dirty word in the security community? Is there really such a thing as "unbreakable cryptography"?
Re: A hacker stole $31M of Ether – how it happened, and what it means for Ethereum
#6>"It’s important to understand that this exploit was not a vulnerability in Ethereum or in Parity itself." I mean.... I guess. It's a feature of Ethereum, if we're going to weasel around.
I know I'm this situation the dev made a simple mistake, but I wonder if Ethereum is safe as a system assuming developers will make many mistakes, and those mistakes will happen more often as more complicated contracts are written.
At some point I wonder if the idea of smart contracts is better than a traditional system, since they seem prone to developer error due to complexity.
Re: A hacker stole $31M of Ether – how it happened, and what it means for Ethereum
#7"smart contracts can also do things that normal contracts can’t, such as enforce a set of rules entirely through unbreakable cryptography." Isn't "unbreakable" a bit of a dirty word in the security community? Is there really such a thing as "unbreakable cryptography"?
One time pad encryption is unbreakable given integrity of the pad material itself.
Re: A hacker stole $31M of Ether – how it happened, and what it means for Ethereum
#8>"It’s important to understand that this exploit was not a vulnerability in Ethereum or in Parity itself." I mean.... I guess. It's a feature of Ethereum, if we're going to weasel around.
I know I'm this situation the dev made a simple mistake, but I wonder if Ethereum is safe as a system assuming developers will make many mistakes, and those mistakes will happen more often as more complicated contracts are written. At some point I wonder if the idea of smart contracts is better than a traditional system, since they seem prone to developer error due to complexity.
>At some point I wonder if the idea of smart contracts is better than a traditional system, since they seem prone to developer error due to complexity.
The idea is incredible. Groundbreaking. Honestly super interesting to me.
The execution of them as law is... well, going about as expected. This is why the law doesn't actually work this way.
Re: A hacker stole $31M of Ether – how it happened, and what it means for Ethereum
#9"smart contracts can also do things that normal contracts can’t, such as enforce a set of rules entirely through unbreakable cryptography." Isn't "unbreakable" a bit of a dirty word in the security community? Is there really such a thing as "unbreakable cryptography"?
One time pad encryption is unbreakable given integrity of the pad material itself.
And, how do you build one time pad encryption into ethereum?
Re: A hacker stole $31M of Ether – how it happened, and what it means for Ethereum
#10"smart contracts can also do things that normal contracts can’t, such as enforce a set of rules entirely through unbreakable cryptography." Isn't "unbreakable" a bit of a dirty word in the security community? Is there really such a thing as "unbreakable cryptography"?
the algorithm may be nigh-on unbreakable, but the implementation can always have flaws. Getting crypto right is hard.