4 ms·

It is signed - has anyone checked the signature?

by zby 10y ago

curiousgal 10y ago
It's useless unless you know who signed it; have a public key. Fake. The real "hacker" made millions shorting ETH before the attack.
- robk 10y ago
  I'm curious where one could actually place this volume of short sales on ETH if true.
  - curiousgal 10y ago
    Exchanges deal with a great amount of volume. https://mobile.twitter.com/EthereumWiki/status/743905989682855936 https://mobile.twitter.com/EthereumWiki/status/7439059896828...
- cheez 10y ago
  This is actually brilliant and is almost a no lose situation. * Outcome 1: ETH is forked -> ETH value goes to 0, the shorted currency is pure profit minus interest * Outcome 2: ETH is not forked -> Hacker gets $50 million These are only the technical outcomes but the only social outcome I can see is a lot of suing going on. My suspicion is that it is unlikely that anyone will succeed in a legal challenge, but I'm not a lawyer.
  - curiousgal 10y ago
    Of course legal challenge won't be fruitful. In the eyes of the law using an exploit on an vulnerability found in a contract will still be interpreted as malicious or even criminal and thus illegal,
    - julian_1 10y ago
      I don't understand your certainty - the point about law is that there is an exception to every rule. Courts enforce contracts that contain unfavorable terms all the time. And malciousness is not a part of contract law. It's true that contracts can be set-aside (though not always) when they have a criminal basis, but it's not at all clear that this is the case here. There was an unequivocal and unilateral offer made to the world in the text - that will be hard to read down as anything other than an intention to contract.
- zby 10y ago
  I assume that the DAO hack involved some signed operations.
  - curiousgal 10y ago
    You're right but you can't sign a message from a contract, only from an external account. The ECDSA at the bottom is not valid. Valid ECDSA signatures are 65 bytes ending with 0x00 or 0x01. This one ends with 0x20.
- deleted 10y ago
  [deleted]

It is signed - has anyone checked the signature?

by zby 10y ago

It is signed - has anyone checked the signature?

It's useless unless you know who signed it; have a public key. Fake. The real "hacker" made millions shorting ETH before the attack.

robk 10y ago
I'm curious where one could actually place this volume of short sales on ETH if true.
- curiousgal 10y ago
  Exchanges deal with a great amount of volume. https://mobile.twitter.com/EthereumWiki/status/743905989682855936 https://mobile.twitter.com/EthereumWiki/status/7439059896828...
cheez 10y ago
This is actually brilliant and is almost a no lose situation. * Outcome 1: ETH is forked -> ETH value goes to 0, the shorted currency is pure profit minus interest * Outcome 2: ETH is not forked -> Hacker gets $50 million These are only the technical outcomes but the only social outcome I can see is a lot of suing going on. My suspicion is that it is unlikely that anyone will succeed in a legal challenge, but I'm not a lawyer.
- curiousgal 10y ago
  Of course legal challenge won't be fruitful. In the eyes of the law using an exploit on an vulnerability found in a contract will still be interpreted as malicious or even criminal and thus illegal,
  - julian_1 10y ago
    I don't understand your certainty - the point about law is that there is an exception to every rule. Courts enforce contracts that contain unfavorable terms all the time. And malciousness is not a part of contract law. It's true that contracts can be set-aside (though not always) when they have a criminal basis, but it's not at all clear that this is the case here. There was an unequivocal and unilateral offer made to the world in the text - that will be hard to read down as anything other than an intention to contract.
zby 10y ago
I assume that the DAO hack involved some signed operations.
- curiousgal 10y ago
  You're right but you can't sign a message from a contract, only from an external account. The ECDSA at the bottom is not valid. Valid ECDSA signatures are 65 bytes ending with 0x00 or 0x01. This one ends with 0x20.
deleted 10y ago
[deleted]