Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

dzoba.com

Post reply on HN
Print view View original

101–110 of 157 posts

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#101

Post by bennyg »

viraptor wrote: post #73
negamax wrote: post #70

Earlier quoted context omitted.

If Bitcoin has x point precision and I multiply every amount by 1e^x. Won't that in essence gives me correct integer value to work with. Provided I haven't overflowed the integer max?

Sure, you can prove that, then verify your language complies over the whole range, then add validation that your values never go over the range provided and no input outside of the range can be accepted and then figure out a way to guarantee none of that will change in the future. (even controlling inputs/outputs is not enough, since internally they sometimes split the values into 40%/60% for transfers) Or you just s…

So if one of us were to create something dealing with BTC we should just store the data as the smallest discrete amount (satoshis) and then run calculations on that to display info to the user?

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#102

Post by patio11 »

impendia wrote: post #95
fab13n wrote: post #86

Earlier quoted context omitted.

I'm digging further off-topic, but anyway: as a non-japanese speaker and someone who spontaneously thinks in terms of optimization, I'm amazed by the seemingly gratuitously complicated rules of politeness in that language. Does it require concentration for a native to avoid faux-pas in a discussion? Can it become much more difficult depending on your social origins (i.e. how effective is it as a social discriminant)?…

Although the rules are complicated, I lived in Japan for awhile, and almost no one Japanese would be offended by a foreigner getting it only mostly right. This is not terribly hard. It suffices for foreigners to observe the basics. As explained below, Karpeles referred to himself as "ore". "Ore" is mostly used by men, and carries a boastful tone. Moreover, pronouns aren't necessary to make grammatical sentences, e.g.…

A fairly close analogy in English would be to randomly sprinkle the word "fuck" in your speech.

I was once speaking to a good friend of mine here, in English.

"Do you want to go out for yakitori?"

"Go fuck yourself!"

"... switches to Japanese Have I recently done anything very major to offend you?"

"No, of course not."

"Oh, OK, I was worried. So that phrase, that's something you would only say under extreme distress when you had maximal desire to offend me, or I suppose you could use it jokingly between friends, but neither you nor I generally talk that way."

"I learned it from a movie. I thought it meant "No.""

"You might want to not repeat it ever again."

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#103

Post by patio11 »

Consider not taking advantage of the illegal compromise of someone else's servers, even if you are very interested in the contents of their purloined data. You'd hate it if it happened to your startup, and odds are your startup has plenty of ways to get into equally private data. If nothing else, consider it your moral down payment on being able to criticize the NSA ever again.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#104

Post by vbuterin »

patio11 wrote: post #103

Consider not taking advantage of the illegal compromise of someone else's servers, even if you are very interested in the contents of their purloined data. You'd hate it if it happened to your startup, and odds are your startup has plenty of ways to get into equally private data. If nothing else, consider it your moral down payment on being able to criticize the NSA ever again.

Except that MtGox is known to with very high probability have been acting criminally dishonestly and there is a strong public interest in helping people determine what happened and recover what could potentially be up to 200000 of their own bitcoins. That pretty much passes all the standard tests for an involuntary violation of privacy; this is NOT a case of hurting an innocent startup.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#105

Post by patio11 »

vbuterin wrote: post #104
patio11 wrote: post #103

Consider not taking advantage of the illegal compromise of someone else's servers, even if you are very interested in the contents of their purloined data. You'd hate it if it happened to your startup, and odds are your startup has plenty of ways to get into equally private data. If nothing else, consider it your moral down payment on being able to criticize the NSA ever again.

Except that MtGox is known to with very high probability have been acting criminally dishonestly and there is a strong public interest in helping people determine what happened and recover what could potentially be up to 200000 of their own bitcoins. That pretty much passes all the standard tests for an involuntary violation of privacy; this is NOT a case of hurting an innocent startup.

That sounds like an excellent reason for a judge in Tokyo to issue a subpoena. It does not sound like an excellent reason for the Internet to vicariously participate as a group of Russian hackers roots their boxes.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#106

Post by simias »

patio11 wrote: post #103

Consider not taking advantage of the illegal compromise of someone else's servers, even if you are very interested in the contents of their purloined data. You'd hate it if it happened to your startup, and odds are your startup has plenty of ways to get into equally private data. If nothing else, consider it your moral down payment on being able to criticize the NSA ever again.

Who are you talking to exactly? The hackers? I doubt they care. HN readers? How are we taking advantage of anything exactly?

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#107

Post by danielweber »

troels wrote: post #71
McGlockenshire wrote: post #19

The code is ... interesting. Smells organic, not designed. Comments are rare but usually useful. Highly coupled. Static methods everywhere. Violates SOLID principles. Basically, ignores current best practices. Clearly not designed for any sort of automated testing, which should be the first damn thing you do when there's any sort of money involved. Hell, even when there isn't money involved. We'd already guessed that…

Yes, it doesn't look very pretty. It relatively recent code though, making plenty use of php 5.3+ constructs, so you can't even blame it on legacy code.

I've written uglier code. But I didn't write it in places where I had highly motivated adversaries trying to break it with the result that many people's life savings would be irrevocably lost if I had a bug.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#108

Post by acdha »

aegiso wrote: post #39
McGlockenshire wrote: post #19

The code is ... interesting. Smells organic, not designed. Comments are rare but usually useful. Highly coupled. Static methods everywhere. Violates SOLID principles. Basically, ignores current best practices. Clearly not designed for any sort of automated testing, which should be the first damn thing you do when there's any sort of money involved. Hell, even when there isn't money involved. We'd already guessed that…

Way too much schadenfreude given Gox's history. Although contrary to popular belief Gox was never a Magic exchange, they were a Bitcoin startup at a time when Bitcoin was not much more than internet lols and pizza deliveries. The first thing you do when hacking together a stupid exchange for a joke e-currency isn't writing unit tests. You just write the code and blast it up on a domain you had lying around for a diff…

> The first thing you do when hacking together a stupid exchange for a joke e-currency isn't writing unit tests.

As soon as you write anything where a bug causes money to change hands, even on a laugh, you write some tests.

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#109

Post by Edmond »

viraptor wrote: post #60

Thought I'll quickly scan the source code... On the first screen: $bean->Coins = (int)round($info['balance'] * 100000000); Really? Currency as a float and rounding? Just so that he can later: $client->sendToAddress($addr, $bean->Coins / 100000000); I'm ready to believe in any error "due to a bug" they claim now.

The code may be buggy but it is actually quite clean...more than I can say for most code (my own included)...at least it is actually readable :)

Re: Mt. Gox Has Been Hacked by People Trying to Find Out What Happened?

#110

Post by Edmond »

AVTizzle wrote: post #24
nathan_f77 wrote: post #8

Wow, that's a lot of my personal data leaked in these last months. My email and encrypted password in the adobe breach, my user id and part of my mobile number via SnapChat, and now hackers potentially have scans of my passport courtesy of Mt. Gox. I'm probably forgetting about some leaks, and who knows how many security breaches were never discovered. The internet is not a safe place.

I feel for you bud. I'm a UMD grad (SSN) who shopped at Target in December (CC).

sorry dude..fellow terp here...I never got IDs from the affected campuses and I have had a security freeze on my credit report for a number of years now. hopefully that protects me ):
Post reply on HN