5 ms·

The referenced post [0] came to the same conclusion as my first thought: this was very possibly an intentional security hole to allow someone on the team to get

The referenced post [0] came to the same conclusion as my first thought: this was very possibly an intentional security hole to allow someone on the team to get away with something. [0] https://amp.reddit.com/r/CryptoCurrency/comments/7wonkf/the_stolen_xrb_has_already_been_redistributedsold https://amp.reddit.com/r/CryptoCurrency/comments/7wonkf/the_...

StavrosK 9y ago
This echoes my experience, because this client-side check was definitely on the server side too, when, uhh, a friend tried to break it.
Nicksil 9y ago
Non-AMP link: https://www.reddit.com/r/CryptoCurrency/comments/7wonkf/the_stolen_xrb_has_already_been_redistributedsold/ https://www.reddit.com/r/CryptoCurrency/comments/7wonkf/the_...
- nothrabannosir 9y ago
  Ironically, that doesn’t work with JavaScript disabled. I don’t know what to believe, anymore ...
  - oneweekwonder 9y ago
    Does the old i version use js? https://i.reddit.com/r/CryptoCurrency/comments/7wonkf/the_stolen_xrb_has_already_been_redistributedsold/ https://i.reddit.com/r/CryptoCurrency/comments/7wonkf/the_st...
    - nothrabannosir 9y ago
      Ah, nice. Thanks. No it does not.
highace 9y ago
Don't attribute to malice what can be explained by stupidity ;) There's been a shockingly high amount of young inexperienced devs involved in building for crypto. I remember making similar mistakes when I was starting out as a dev... except I wasn't solely responsible for systems handling millions of dollars.
- ukulele 9y ago
  Therein lies my skepticism. It's an industry that seems to be full of "oops we lost your money, trust me" problems. Malice becomes a lot more likely when life changing sums of money are involved.
  - jpatokal 9y ago
    Remember, a lot of these cryptocoins started out as toys, experiments or get-rich-quick schemes that were never seriously designed to handle millions of dollars. MtGox is perhaps the classic example here: the biggest Bitcoin exchange of its time started out life as a Magic the Gathering trading cards exchange, and just kept on hacking on that shitty codebase until it inevitably got pwned.
- IntronExon 9y ago
  Counterpoint, Heinlein’s Razor. "Never attribute to malice that which can be adequately explained by stupidity, but don't rule out malice.”
  - beaconstudios 9y ago
    but then, any sufficiently advanced stupidity is indistinguishable from malice.
    - IntronExon 9y ago
      Very true, but the “means, motive, opportunity” test can help there. The motive here would be $170 million usd.
- 9y ago

StavrosK 9y ago

This echoes my experience, because this client-side check was definitely on the server side too, when, uhh, a friend tried to break it.

Nicksil 9y ago

Non-AMP link: https://www.reddit.com/r/CryptoCurrency/comments/7wonkf/the_stolen_xrb_has_already_been_redistributedsold/ https://www.reddit.com/r/CryptoCurrency/comments/7wonkf/the_...

nothrabannosir 9y ago
Ironically, that doesn’t work with JavaScript disabled. I don’t know what to believe, anymore ...
- oneweekwonder 9y ago
  Does the old i version use js? https://i.reddit.com/r/CryptoCurrency/comments/7wonkf/the_stolen_xrb_has_already_been_redistributedsold/ https://i.reddit.com/r/CryptoCurrency/comments/7wonkf/the_st...
  - nothrabannosir 9y ago
    Ah, nice. Thanks. No it does not.

highace 9y ago

Don't attribute to malice what can be explained by stupidity ;) There's been a shockingly high amount of young inexperienced devs involved in building for crypto. I remember making similar mistakes when I was starting out as a dev... except I wasn't solely responsible for systems handling millions of dollars.

ukulele 9y ago
Therein lies my skepticism. It's an industry that seems to be full of "oops we lost your money, trust me" problems. Malice becomes a lot more likely when life changing sums of money are involved.
- jpatokal 9y ago
  Remember, a lot of these cryptocoins started out as toys, experiments or get-rich-quick schemes that were never seriously designed to handle millions of dollars. MtGox is perhaps the classic example here: the biggest Bitcoin exchange of its time started out life as a Magic the Gathering trading cards exchange, and just kept on hacking on that shitty codebase until it inevitably got pwned.
IntronExon 9y ago
Counterpoint, Heinlein’s Razor. "Never attribute to malice that which can be adequately explained by stupidity, but don't rule out malice.”
- beaconstudios 9y ago
  but then, any sufficiently advanced stupidity is indistinguishable from malice.
  - IntronExon 9y ago
    Very true, but the “means, motive, opportunity” test can help there. The motive here would be $170 million usd.
9y ago