Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
LifeSunDeath
Jan 4, 2007

still gay rights and smoke weed every day

Juul-Whip posted:

next time we'll just find someone willing to go to jail to preserve our bags!
https://twitter.com/LNPBP/status/1501930914129010688

"No Your Honor you are the one who is guilty, of FUD!"

Adbot
ADBOT LOVES YOU

Arsenic Lupin
Apr 12, 2012

This particularly rapid💨 unintelligible 😖patter💁 isn't generally heard🧏‍♂️, and if it is🤔, it doesn't matter💁.


Lord have mercy.

https://twitter.com/mikeinspace/status/1503754795848450061

Zil
Jun 4, 2011

Satanically Summoned Citrus



Twice in one day I have had to say this, but logic gates are hard.

priznat
Jul 7, 2009

Let's get drunk and kiss each other all night.
Holy poo poo I am dying laughing, that is loving amazing.

Random Stranger
Nov 27, 2009



Zil posted:

Twice in one day I have had to say this, but logic gates are hard.

XOR and AND is a bit of a significant mix up.

It raises the question "Who tested this?" but I think we all know that answer.

LifeSunDeath
Jan 4, 2007

still gay rights and smoke weed every day

zedprime
Jun 9, 2007

yospos

Random Stranger posted:

XOR and AND is a bit of a significant mix up.

It raises the question "Who tested this?" but I think we all know that answer.
If they had to use boolean ops maybe this wouldn't have happened because they would have had to check a state table.

Of course this is Solidity. I bet it's something astronomically dumb like equal is cheaper gas than and.

Strong Sauce
Jul 2, 2003

You know I am not really your father.





happyhippy posted:

Then watch the full thing.

https://www.youtube.com/watch?v=Y9Fkby9Cvw8

Then read the comments, its brilliant.

i was looking for something i posted and then ran back into this. remember this guy? i bet this guy was so excited he was "blowing" up... let's see what happened.



lmao.

Parkingtigers
Feb 23, 2008
TARGET CONSUMER
LOVES EVERY FUCKING GAME EVER MADE. EVER.

It can't be that stupid, you must be explaining it wrong.

Random Stranger
Nov 27, 2009



Strong Sauce posted:

i was looking for something i posted and then ran back into this. remember this guy? i bet this guy was so excited he was "blowing" up... let's see what happened.



lmao.

I hope he didn't quit his job to youtube full time.

Wait, being a crypto guy was probably his job. Then I really hope he quit his job to youtube full time.

El Spamo
Aug 21, 2003

Fuss and misery
I'm just trying to wrap my head around the thought process that decided that in this key authentication check, where money is on the line, they would not check for the desired output of (dummy function names) signatureOK() and fromGuardian() but just check that the return values are the same.

Slapdash, lazy, dumb, whatever

code is law, two wrongs make a right

Macichne Leainig
Jul 26, 2012

by VG
Oh it's just entirely a bug from my understanding.

Normally you would check that both of those things are true, and I think that was the intent.

What the code actually did was check that the results of both of those checks were equal, not true. So when both checks were actually false, the code was like "well they're equal, all good."

Even though both of the checks had, in practice, failed as designed. :thumbsup:

El Spamo
Aug 21, 2003

Fuss and misery
Thing is a bug light that ought to be caught in a review and testing. You would, in an ideal development environment, test all the inputs. poo poo, there are only four. Three if you're rushed. True/True True/False False/True False/False.
Clearly this did not happen. They're lazy, rushed, incompetent, or some combo of that.

But the thing that gets me, is that as much as they go on about "code is law" and "decisions will be made by perfect, rational machines" here is a perfect example of that flawless rational machine having a flaw with irreversible consequences.

Jose Valasquez
Apr 8, 2005

El Spamo posted:

Thing is a bug light that ought to be caught in a review and testing. You would, in an ideal development environment, test all the inputs. poo poo, there are only four. Three if you're rushed. True/True True/False False/True False/False.
Clearly this did not happen. They're lazy, rushed, incompetent, or some combo of that.

But the thing that gets me, is that as much as they go on about "code is law" and "decisions will be made by perfect, rational machines" here is a perfect example of that flawless rational machine having a flaw with irreversible consequences.

The best description I've seen for smart contracts is that they are self funding bug bounties

priznat
Jul 7, 2009

Let's get drunk and kiss each other all night.
Coding complex systems is hard, but that is literally the easiest possible part of it to get correct because that is the entire point of a checking algorithm. It’s just amazingly shoddy work.

This should be taught in introductory coding courses as it is a great example for complete beginners how not to do things.

Gutcruncher
Apr 16, 2005

Go home and be a family man!
I guess two wrongs DO make a right!

novamute
Jul 5, 2006

o o o

https://twitter.com/AGlasgow12/status/1503795820310761472/photo/1

Not quite that dumb but still dumb. Solana lets you pass what are effectively function pointers and the attacker provided their own implementation of what the bridge was assuming would be a built-in to validate the signature.

Professor Shark
May 22, 2012

Which early Coiner was it that said the first version of anything was best because it captured the spirit of the designer, like some sort of Martian Techpriest? Was it Dank?

A Wizard of Goatse
Dec 14, 2014

is Solana one of the ones that has an actual development team beyond whoever was cheapest on Fiverr

Hammerite
Mar 9, 2007

And you don't remember what I said here, either, but it was pompous and stupid.
Jade Ear Joe

Professor Shark posted:

Which early Coiner was it that said the first version of anything was best because it captured the spirit of the designer, like some sort of Martian Techpriest? Was it Dank?

Thermos, the admin of the BitcoinTalk forum

Hammerite
Mar 9, 2007

And you don't remember what I said here, either, but it was pompous and stupid.
Jade Ear Joe
ok, so how would you like to write a computer program, that handles nominally enormous amounts of money*, and if money* changes hands it can't be reversed if anything went wrong, but also you have to write it in a language where there are no such things as private methods, you just pass function objects around and anyone on the internet can call any of your functions so you better have a big old stack of boilerplate at the start of each function that checks that it's being called from where you expected

[every computer programmer runs out of the room screaming]

zedprime
Jun 9, 2007

yospos
The boolean spoonerism is much less embarrassing when you put it that way.

novamute
Jul 5, 2006

o o o

Hammerite posted:

ok, so how would you like to write a computer program, that handles nominally enormous amounts of money*, and if money* changes hands it can't be reversed if anything went wrong, but also you have to write it in a language where there are no such things as private methods, you just pass function objects around and anyone on the internet can call any of your functions so you better have a big old stack of boilerplate at the start of each function that checks that it's being called from where you expected

[every computer programmer runs out of the room screaming]

Don't worry, it's in Rust so it's Safe™

Mad Dragon
Feb 29, 2004

novamute posted:

https://twitter.com/AGlasgow12/status/1503795820310761472/photo/1

Not quite that dumb but still dumb. Solana lets you pass what are effectively function pointers and the attacker provided their own implementation of what the bridge was assuming would be a built-in to validate the signature.

He went on to post this, which is quite that dumberer.

Only registered members can see post attachments!

HootTheOwl
May 13, 2012

Hootin and shootin

El Spamo posted:

code is law, two wrongs make a rightfalse match true

Ups_rail
Dec 8, 2006

by Fluffdaddy
some idiot dm d me something about disney doing nft

god

Bean
Sep 9, 2001

Ups_rail posted:

some idiot dm d me something about disney doing nft

god

I’m a pixel artist. I’m not amazing, I’m not famous. I still have to deal with these idiots trying to hit me up on twitter to make their next big drop or whatever the gently caress. I just chiseled one of these fucks out of my discord DMs.

EoinCannon
Aug 29, 2008

Grimey Drawer
I've gotten several nft proposals just from having a few 3d things on artstation and instagram, all with a comical lack of understanding about how 3d art works.
Haven't gotten any for a month or so, I hope everything's OK in the using other people's IP for grifting space

Ups_rail
Dec 8, 2006

by Fluffdaddy

Bean posted:

I’m a pixel artist. I’m not amazing, I’m not famous. I still have to deal with these idiots trying to hit me up on twitter to make their next big drop or whatever the gently caress. I just chiseled one of these fucks out of my discord DMs.

Do you ever get people wanting you to make porn?

Illuminti
Dec 3, 2005

Praise be to China's Covid-Zero Policy

Ups_rail posted:

Do you ever get people wanting you to make porn?

Just ask him to make you some porn.

Also, of course he does

Collateral Damage
Jun 13, 2009

Juul-Whip posted:

next time we'll just find someone willing to go to jail to preserve our bags!
https://twitter.com/LNPBP/status/1501930914129010688
That's some impressive hair splitting.

"I didn't hand over all my money, I only handed over my wallet which happened to contain all my money."

The Kins
Oct 2, 2004
In videogame news, a studio that managed to break out of Licensed Mobile Game Hell with a Power Rangers fighting game that was better than a Power Rangers game in Anno Domini 2019 had any right to be is coming to the scam party fashionably late and making very few friends in the process.

https://twitter.com/nWayGames/status/1504239839905935361

Hammerite
Mar 9, 2007

And you don't remember what I said here, either, but it was pompous and stupid.
Jade Ear Joe

Collateral Damage posted:

That's some impressive hair splitting.

"I didn't hand over all my money, I only handed over my wallet which happened to contain all my money."

that hair splitting is vital to their worldview, tho. it's in defense of a treasured principle of cryptobros. They all believe ardently in crypto being Provably Secure and Backed By Math etc. so anything that points out that the lack of usability, lack of consumer protections, lack of redress when things go wrong, capacity of individuals to compel actions from others or put them under duress, etc... detracts from that security from the perspective of an actual user, is anathema to them. you are required to look only at the cryptosystem qua mathematical system and concede "yes, as far as that goes, it is secure". if you look at what the system is like for a real person to try and interact with and factor that into your assessment of how secure it is, you'll arrive at a less rosy conclusion, and they'll fight tooth and nail against any such ideas, because unlike the simplistic beep boop robot viewpoint they prefer, it doesn't at all flatter cryptocurrency.

Darth TNT
Sep 20, 2013

The Kins posted:

In videogame news, a studio that managed to break out of Licensed Mobile Game Hell with a Power Rangers fighting game that was better than a Power Rangers game in Anno Domini 2019 had any right to be is coming to the scam party fashionably late and making very few friends in the process.

https://twitter.com/nWayGames/status/1504239839905935361

It's always fun to read the comments.

Darth TNT
Sep 20, 2013
https://kotaku.com/pepe-frog-nft-lawsuit-sue-dao-matt-furie-halston-thayer-1848663957

quote:

Furie had formed a Decentralized Autonomous Organization, or DAO called PegzDAO and on October 8 auctioned off a single NFT representing the image above, while at the same time clearly stating that aside from the one being auctioned, there would be 99 more NFTs representing the same image made and kept in the DAO’s possession and never put up for sale.

As Web3 Is Going Just Great report, a man by the name of Halston Thayer went on to win the auction, spending the cryptocurrency equivalent of $537,084. He was no doubt thrilled with his unique purchase until a couple of weeks later, when PegzDAO released 46 of those other 99 NFTS—which, remember, represent the exact same image as the one Thayer paid half a million dollars for—for free.

quote:

This action arises from Defendants’ unlawful, unfair, and fraudulent business practices, which includes their unfair, deceptive, untrue, and misleading advertising and wrongful actions with respect to an auction for a particular nonfungible token (“NFT”) that led Plaintiff and others to grossly overbid on the NFT. Plaintiff therefore brings this action for fraudulent inducement, intentional and negligent misrepresentation, unfair competition and unlawful business acts and practices, breach of contract, breach of the implied covenant of good faith and fair dealing, and unjust enrichment.
:allears:
NFT's are really the second dumbest thing, the dumbest being the investors.

Sinecure
Sep 10, 2011
The best part is that the other ones were indeed never put up for sale :master:

Durzel
Nov 15, 2005


I don't envy a regular old judge trying to make any sense of that case.

I know the lawyers involved have no idea what they're writing in the motion, it's just an assemblage of crypto words and concepts with some legal boilerplate hanging off of them, like tinsel.

Oscar Wild
Apr 11, 2006

It's good to be a G
https://twitter.com/mikeinspace/status/1503754795848450061?t=mj8KkG0zIt0n-qUOcZfgfA&s=19

Bitcoin: incorrect+incorrect=correct

There Bias Two
Jan 13, 2009
I'm not a good person


See? Two wrongs do make a right!

Adbot
ADBOT LOVES YOU

ynohtna
Feb 16, 2007

backwoods compatible
Illegal Hen
C'mon, be reasonable.

What are the chances of two (2!) function parameters on a publicly accessible API both being invalid simultaneously? It's got to be like millions to one if not more, right?

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply