Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Critical Update on DAO Vulnerability

blog.ethereum.org

Post reply on HN
Print view View original

181–190 of 629 posts

Re: Critical Update on DAO Vulnerability

#181

Post by jpereira »

joosters wrote: post #26

Just remember, when the developers inevitably appear with suggestions about how to stop the hack, roll back the blockchain, or come up with other schemes to block the hackers, they are showing everyone that all the talk of blockchains being decentralised, or being beyond the control of governments or other powers... is a complete lie. If this hack can be stopped, then it demonstrates that the currency can be manipula…

It looks like the developers are proposing a soft fork to block certain transactions, followed by a hard fork to allow retrieval of funds.

[1] https://www.reddit.com/r/ethereum/comments/4oiqj7/critical_u...

Re: Critical Update on DAO Vulnerability

#182

Post by codingmyway »

joosters wrote: post #26

Just remember, when the developers inevitably appear with suggestions about how to stop the hack, roll back the blockchain, or come up with other schemes to block the hackers, they are showing everyone that all the talk of blockchains being decentralised, or being beyond the control of governments or other powers... is a complete lie. If this hack can be stopped, then it demonstrates that the currency can be manipula…

If it takes a vast majority of participants to agree, then not really. It's decentralized, not 100% immutable. Will get harder as it gets larger but at this stage it is good to still have the ability.

Re: Critical Update on DAO Vulnerability

#183

Post by wscott »

lordnacho wrote: post #144

I recall reading in the Bitcoin docs that the Forth-like scripting language was non-Turing complete. In addition, nothing particularly complex was using the scripting at the time. I guess this sort of thing would be the reason. One thing is finding bugs in ordinary software, where the bugs are accidents. It's hard. Another thing entirely is where you are looking for adversarial bugs. Just look at security articles th…

They are debugging it right now. The ultimate bug bounty program.

Re: Critical Update on DAO Vulnerability

#184

Post by Udo »

As far as attacks go, this seems to fall more within the "for the lolz" category, than an actual attempt to draw money. If they had kept it reasonable, say a couple of hundred thousands worth, this would probably have gone unnoticed for a long time (maybe long enough for the 27 day payout window to expire).

Re: Critical Update on DAO Vulnerability

#185

Post by Udo »

curiousgal wrote: post #139

It's not as bad as it seems. The hackers have their ETH locked in a Child DAO, so they will not be able to get the ETH out for a long time,by which a fix will be issued. The entire Ethereum Ecosystem is collaborating on a solution. 0. https://www.reddit.com/r/ethereum/comments/4oiib4/dao_is_saf...

Does the child DAO inherit the parent's code? If so, the money could be drained right back.

Re: Critical Update on DAO Vulnerability

#187

Post by detaro »

verroq wrote: post #174
1019301911 wrote: post #150

Earlier quoted context omitted.

How do you know? Of course, it could be established using "safe" blockchain voting technology...

The longest fork wins.

Isn't that basically measuring which side has more hashing power? It's not obvious to me why that necessarily represents "the majority of ethereum holders". Or am I missing a mechanism?

Re: Critical Update on DAO Vulnerability

#188

Post by Tinyyy »

> (The soft fork) will later be followed up by a hard fork which will give token holders the ability to recover their ether.

Does this mean that transactions are going to be rolled back?

If so, are they planning to do this everytime a vulnerability is exploited? Is The DAO too big to fail?

Re: Critical Update on DAO Vulnerability

#189

Post by njloof »

pmorici wrote: post #83
walrus01 wrote: post #56

Earlier quoted context omitted.

eth is traded to and from bitcoin on various exchanges, so it's a parallel.

So is the USD and a bunch of other currencies, what's your point? You can also trade ETH for USD on most big exchanges.

And USD are used for all kinds of illegal things; solutions include restricting paper transactions to $100 units of currency (so that large amounts of currency are bulky and heavy) and all kinds of restrictions on transactions over $10,000.

Re: Critical Update on DAO Vulnerability

#190

Post by jbpetersen »

marijn wrote: post #179
jbpetersen wrote: post #176

Response from the official Ethereum Foundation: https://blog.ethereum.org/2016/06/17/critical-update-re-dao-...

That yields, amusingly, a blank page for me right now.

Crosspost to reddit: https://www.reddit.com/r/ethereum/comments/4oiqj7/critical_u...
Post reply on HN