5 ms·
>Most likely, Ethereum itself (the "engine") will be effectively error-free - probably as good as the Linux kernel - once it reaches 1.0. "will be effectively
by voidlogic 10y ago
>Most likely, Ethereum itself (the "engine") will be effectively error-free - probably as good as the Linux kernel - once it reaches 1.0.
"will be effectively error-free" != "probably as good as the Linux kernel", not even close :D
- aab0 10y agoThe security history of the JVM suggests that one shouldn't be optimistic there either.
- rtpg 10y agocounterpoint: I haven't really heard of any "javascript escaping the container" bugs in a really long time (excepting node.js-related issues)
- ChristianBundy 10y agoJavaScript doesn't run on the JVM.
- cloudjacker 10y agothanks for saying this, sometimes I'm like "wow" on hackernews comments, because you kind of assume people know what they're talking about but then its like not really.
- rtpg 10y agoI know that Javascript isn't run in the JVM, my point was that it's possible to write a virtual machine that doesn't get exploited every 5 minutes. the JVM is a bit special because there are a large amount of escape hatches, native code and a complex trust model, which has caused a lot of the exploits you end up seeing.
- astrodust 10y agoJavaScript has several mature, thoroughly scrutinized implementations. Ethereum has one brand new implementation. To put it mildly: There will be blood.
- andrewflnr 10y agoThere are at least two ethereum implementations, the main one and one in Rust.
- danfinlay 10y agoThere are actually eight different implementations at this time, although the go client has a slight majority of users according to ethstats.net http://ethdocs.org/en/latest/ethereum-clients/index.html http://ethdocs.org/en/latest/ethereum-clients/index.html
- TheDong 10y agoFunny, most pwn2owns there are multiple successful escapes of any of a number of js sandboxes. I hear about it at least yearly, if not more often.
- Chris2048 10y agoBut. JS was designed with this in mind, and has been tested for it for years. It's actually one of the greatest strengths of JS, but I imagine it was a lot of work (except, perhaps, maybe functional languages).
- colm__colm 10y agoThe ethereum VM does not offer allow of functionality. You cant read or write to hard disk. You cant access the Network card. There for the attack surface is much smaller then Linux. It will probably be better than the Linux Kernel due to this.
- eru 10y agoThe linux kernel is and has been pretty buggy, especially by cryptographic standards.