5 ms·

IOTA is amateur hour. The author implemented their own hashing algo, "curl", which is used all over the place in IOTA, until recently including signing trans

by Buttes 9y ago

IOTA is amateur hour. The author implemented their own hashing algo, "curl", which is used all over the place in IOTA, until recently including signing transactions. Researchers were able to produce distinct transactions with colliding signatures [1]. Depending on whether you believe the author, either they did it intentionally for the implied purpose of attacking competing forks (as they claim), or unintentionally because they're incompetent. Neither situation sounds good to me. IOTA also relies on a closed-source "coordinator" for consensus. They call it "training wheels". Who knows if their "tangle" will actually work in production. Crazy to me that people are pumping so much money into it w/o any due diligence. [1] https://github.com/mit-dci/tangled-curl/blob/master/vuln-iota.md https://github.com/mit-dci/tangled-curl/blob/master/vuln-iot...

jgh 9y ago
Not to mention the whole ternary thing...
wpietri 9y ago
Wow. I'm not a crypto expert, but the one thing I'm sure of is that no individual should ever create their own crypto algorithms. Of course, we're talking about a space where somebody can repurpose their Magic The Gathering code and call themselves a currency exchange, so maybe I shouldn't be too surprised.
- Klathmon 9y ago
  >Of course, we're talking about a space where somebody can repurpose their Magic The Gathering code and call themselves a currency exchange, so maybe I shouldn't be too surprised. Stop judging things by what they were, unless of course you think the aerospace industry is a space where 2 brothers can build a plane out of wood and push it off a cliff...
  - bitxbitxbitcoin 9y ago
    Or that the aerospace industry is the space that consists of whatever those 2 brothers were doing prior to pushing the wood off of the cliff.
  - wpietri 9y ago
    Oh, I'm definitely judging it by the titanic failure it turned into: https://en.wikipedia.org/wiki/Mt._Gox https://en.wikipedia.org/wiki/Mt._Gox
    - Klathmon 9y ago
      I know very well what you are referring to, however Mt. Gox was one of the first exchanges, and it in no way is indicative of the industry now. Bitcoin is very new, created in 2009, didn't see any real usage until 2010/2011, Mt. Gox blew up in early 2014, and now in 2017 most exchanges follow KYC laws, are built on real trading systems, and can't be compared to Mt. Gox any more than you can compare a Boeing 777 to the wood gliders that mankind first flew on.
      - wpietri 9y ago
        My point was that the cryptocurrency world is enormously tolerant of clown-shoes levels of operation, ones where it's hard to tell whether the people are incompetent or just scammers. Key differences between Mt Gox and the Wright Brothers are that a) the financial industry was well established in 2010, and b) the Wright Brothers were not offering commercial flights to a general audience on their wooden gliders. The first means that Mt Gox was run by idiots who ignored all of the established best practices around running a financial company. (And was given money by same.) The second means that even if you were right, that Bitcoin was just too new to do well, then they were grossly negligent in offering services to the general public and managing hundreds of millions of dollars in assets. Of course, the incompetence at scale continued long after Mt Gox. E.g., https://en.wikipedia.org/wiki/The_DAO_(organization) https://en.wikipedia.org/wiki/The_DAO_(organization) You may be right that there are now some adults running well-regulated businesses. But that doesn't mean the space isn't full of scam artists, Dunning Kruger goofs, and wide-eyed technoutopian marks. We only have to look at the latest ICO announcements to see that, at best, enthusiasm has run ahead of competence.
        Klathmon 9y ago
        Mt. Gox was a massive fuck up, i'm not denying that. They had no business being in the space. But at the same time nobody else was taking it seriously. Look back over the history of banks. Do you really think no "bank" ever lost significant amounts of money? Do you really think there aren't still scam artists and assholes trying to steal people's money? Just the other day my mother got called again by people asking for her social to "fix her credit", does that mean that the incompetence of the financial industry is still at an all time high? Cryptocurrencies have a lot in common with traditional finance industries, but they are different enough that the previous systems don't work. It's very much the "wild west" right now (which i'll point out there were established "governments" at the time of the "wild west"). The space is still new, and if you are risk averse you should stay away from it, but painting the entire industry as idiots and children makes you look like the idiot.
- cyphunk 9y ago
  The "never create your own crypto" meme is a destructive one. There are many cases where existing algo's will not fit the purpose and one needs to create a new one. Most often this is required in mediums where resources are constricted. From personal experience new-brew crypto was often unavoidable in broadcast conditional access systems. I'm not saying this to defend IOTA crypto, at all. I am saying it because HN is full of genuine crypto profs and experts repeating the no new algo meme and lynch mobbing anyone that disagrees.
  - bitxbitxbitcoin 9y ago
    Does HN prefer the never say never meme?
  - wpietri 9y ago
    Sure. The common wisdom matches common situations. For people who aren't experts, I would much rather have that rule than not. Experts know when to break the rules.

by Buttes 9y ago

jgh 9y ago

Not to mention the whole ternary thing...

wpietri 9y ago

Wow. I'm not a crypto expert, but the one thing I'm sure of is that no individual should ever create their own crypto algorithms. Of course, we're talking about a space where somebody can repurpose their Magic The Gathering code and call themselves a currency exchange, so maybe I shouldn't be too surprised.

Klathmon 9y ago
>Of course, we're talking about a space where somebody can repurpose their Magic The Gathering code and call themselves a currency exchange, so maybe I shouldn't be too surprised. Stop judging things by what they were, unless of course you think the aerospace industry is a space where 2 brothers can build a plane out of wood and push it off a cliff...
- bitxbitxbitcoin 9y ago
  Or that the aerospace industry is the space that consists of whatever those 2 brothers were doing prior to pushing the wood off of the cliff.
- wpietri 9y ago
  Oh, I'm definitely judging it by the titanic failure it turned into: https://en.wikipedia.org/wiki/Mt._Gox https://en.wikipedia.org/wiki/Mt._Gox
  - Klathmon 9y ago
    I know very well what you are referring to, however Mt. Gox was one of the first exchanges, and it in no way is indicative of the industry now. Bitcoin is very new, created in 2009, didn't see any real usage until 2010/2011, Mt. Gox blew up in early 2014, and now in 2017 most exchanges follow KYC laws, are built on real trading systems, and can't be compared to Mt. Gox any more than you can compare a Boeing 777 to the wood gliders that mankind first flew on.
    - wpietri 9y ago
      My point was that the cryptocurrency world is enormously tolerant of clown-shoes levels of operation, ones where it's hard to tell whether the people are incompetent or just scammers. Key differences between Mt Gox and the Wright Brothers are that a) the financial industry was well established in 2010, and b) the Wright Brothers were not offering commercial flights to a general audience on their wooden gliders. The first means that Mt Gox was run by idiots who ignored all of the established best practices around running a financial company. (And was given money by same.) The second means that even if you were right, that Bitcoin was just too new to do well, then they were grossly negligent in offering services to the general public and managing hundreds of millions of dollars in assets. Of course, the incompetence at scale continued long after Mt Gox. E.g., https://en.wikipedia.org/wiki/The_DAO_(organization) https://en.wikipedia.org/wiki/The_DAO_(organization) You may be right that there are now some adults running well-regulated businesses. But that doesn't mean the space isn't full of scam artists, Dunning Kruger goofs, and wide-eyed technoutopian marks. We only have to look at the latest ICO announcements to see that, at best, enthusiasm has run ahead of competence.
      - Klathmon 9y ago
        Mt. Gox was a massive fuck up, i'm not denying that. They had no business being in the space. But at the same time nobody else was taking it seriously. Look back over the history of banks. Do you really think no "bank" ever lost significant amounts of money? Do you really think there aren't still scam artists and assholes trying to steal people's money? Just the other day my mother got called again by people asking for her social to "fix her credit", does that mean that the incompetence of the financial industry is still at an all time high? Cryptocurrencies have a lot in common with traditional finance industries, but they are different enough that the previous systems don't work. It's very much the "wild west" right now (which i'll point out there were established "governments" at the time of the "wild west"). The space is still new, and if you are risk averse you should stay away from it, but painting the entire industry as idiots and children makes you look like the idiot.
cyphunk 9y ago
The "never create your own crypto" meme is a destructive one. There are many cases where existing algo's will not fit the purpose and one needs to create a new one. Most often this is required in mediums where resources are constricted. From personal experience new-brew crypto was often unavoidable in broadcast conditional access systems. I'm not saying this to defend IOTA crypto, at all. I am saying it because HN is full of genuine crypto profs and experts repeating the no new algo meme and lynch mobbing anyone that disagrees.
- bitxbitxbitcoin 9y ago
  Does HN prefer the never say never meme?
- wpietri 9y ago
  Sure. The common wisdom matches common situations. For people who aren't experts, I would much rather have that rule than not. Experts know when to break the rules.