Earlier quoted context omitted.
I can literally feel how Ethereum changes the law. I mean, seriously, no need for lawyers anymore. On ethereum it's is simple: You got fucked, live with it. "Bad faith? It's the code, didn't you read it?"
Except for that DAO of last summer, in that case the law changed...
153k Ether Stolen in Parity Multi-Sig Attack
211–220 of 754 posts
Re: 153k Ether Stolen in Parity Multi-Sig Attack
#212Earlier quoted context omitted.
Why would an unmarked function get the broadest possible scope in a language designed for contracts? I'm always surprised by the decisions made around Ethereum, and just how much value people have poured into it.
Because the cryptocurrency space attracts only the brightest minds .
the work being done on public blockchains is unlike anything else done before. You don't have he luxury of keeping your db behind a vpn running on a vm platform secured and maintained by the worlds largest companies. These engineers put themselves out there, waaaaaaaay out there to try and make shit happen. And they mostly do good work. But if banks and major retailers who have huge budgets can get hacked, of course we can too.
Re: 153k Ether Stolen in Parity Multi-Sig Attack
#213Let's play hypotheticals. If you were the attacker and you now have the ETH in your wallet, how do you cash out without anyone identifying you and maximising your profits? Also has the attacker broken a law by exploiting a bug in the contract?
Re: 153k Ether Stolen in Parity Multi-Sig Attack
#214Here's the root error I believe: https://github.com/paritytech/parity/blob/master/js/src/cont... The initWallet function should have been marked internal, but was instead not marked. Unmarked functions default to public in Solidity, so anyone can call that function and reinitialize the wallet to be under their control
Seems like something a code review would have caught. Then again, code reviews and other slow processes are probably not the par for startups.
Re: 153k Ether Stolen in Parity Multi-Sig Attack
#215Earlier quoted context omitted.
Why would an unmarked function get the broadest possible scope in a language designed for contracts? I'm always surprised by the decisions made around Ethereum, and just how much value people have poured into it.
Because the cryptocurrency space attracts only the brightest minds .
Re: 153k Ether Stolen in Parity Multi-Sig Attack
#216Earlier quoted context omitted.
If we enter a contract that we all know is intended to be immutable, why would a judge not enforce that? I can understand buried and obfuscated immutability clauses, but if the parties know exactly what they're getting into, the parameters of justice are contained.
the parameters of justice are contained It just doesn't work like this.
Re: 153k Ether Stolen in Parity Multi-Sig Attack
#217Earlier quoted context omitted.
Won't happen. People need to believe that the justice system will hear their pleas and consider factors on-balance, and then proceed in fairness. In real law, there are several potential overrides available to stop egregiously unfair outcomes that would otherwise be legally valid (estoppel, unconscionability, etc.). People will not accept a system that does not have the appearance of fairness (regardless of its actua…
Not sure why you're being downvoted because you're exactly right. The crypto-anarchists love to say "the code is the law", but the reality is that losing your retirement savings because somebody forgot to mark a method private is a pretty shitty outcome. For all its warts, a legal system backed by a jury of your peers is still the best way of sorting out the actual intent of a contract when the shit hits the fan.
Re: 153k Ether Stolen in Parity Multi-Sig Attack
#218Earlier quoted context omitted.
This is why I keep saying that "smart contracts" should be expressed in some declarative notation like decision tables. Byte-coded programs as contracts were a really bad idea. Contracts need to be readable, not just executable.
I'm kind of curious on what you think about Tezos and its Michelson language ( https://www.tezos.com/static/papers/language.pdf ) which offers provability of contracts.
Re: 153k Ether Stolen in Parity Multi-Sig Attack
#219Forgive me for being harsh: Why is there no "pen-test" phase to any crytocurrency which hits the market. So, let me understand; you're ostensibly smart enough to (perhaps as a body of contributors, even) develop a cryptocurrency offering - yet youre also fucking stupid enough to not have same/wider network of ppl attempt to hack the fuck out of your plan? Does this already occur? or some savant comes and owns them? W…
*HIPAA. I remember it as "hippo", or "H-I-P-P-Oh darn, I spelled it wrong again!"
Re: 153k Ether Stolen in Parity Multi-Sig Attack
#220Earlier quoted context omitted.
Not sure why you're being downvoted because you're exactly right. The crypto-anarchists love to say "the code is the law", but the reality is that losing your retirement savings because somebody forgot to mark a method private is a pretty shitty outcome. For all its warts, a legal system backed by a jury of your peers is still the best way of sorting out the actual intent of a contract when the shit hits the fan.
He's being downvoted because he's replying to obvious sarcasm as if it was serious. You also appear to have taken the joke seriously.
And many people do promote the "code is law, and nothing else" idea -- at least Ethereum Classic stuck to it!