CuriousCosmic

78 ms·

931.
by CuriousCosmic 5y ago
What do you mean "rollback". You say this like this bank had version control and it wasn't just recently introduced.
932.
by CuriousCosmic 5y ago
Like others have already mentioned, that's a developer who saw the blood on the walls. They've likely seen this issue before and know the signs to look out for. It doesn't make them any smarter but it does mean they are wiser
933.
by CuriousCosmic 5y ago
I feel like there's a balancing point though. I've used Gentoo, Arch, Ubuntu, Debian, Fedora, RHEL, SUSE, and CentOS. I've found the most stable and least problematic distro to be Gentoo. After that was Arch and then the rest
934.
by CuriousCosmic 5y ago
Proof of Authority is extraordinarily useful but it's not inherently complex by any means (really it's just the old school consensus problems). I'd argue though that Proof of Authority definitely is the most useful outside of
935.
by CuriousCosmic 5y ago
I posted about this elsewhere in this thread but you might be interested in this paper: https://eprint.iacr.org/2021/1379 It gets about 50% efficiency compared to the current state of the art for the problem space with
936.
by CuriousCosmic 5y ago
You may be interested in this paper: https://eprint.iacr.org/2021/1379 It provides a Proof-of-Useful-Work algorithm that is resistant to pre-computation and most other weaknesses that would otherwise prevent useful wor
937.
by CuriousCosmic 5y ago
That... is a terrible idea for literally every reason.
938.
by CuriousCosmic 5y ago
Yep however I don't think I'd consider it to quite the same extreme. No doubt it was bad however proportionally to the size of the platform Cream's exploit was far more damaging. Like the rekt.news post mentions, it was more
939.
by CuriousCosmic 5y ago
This gets more into the political side of it. For developed nations, we'll see Central Bank Digital Currencies slowly replace the existing financial network. You can still get your flexible monetary policy, regulatory compliance, and r
940.
by CuriousCosmic 5y ago
Well the limitation of a spec ultimately is that they are only correct provided you follow the constraints the spec itself puts on the system. In that sense a formal spec is three parts. 1. A definition of the constraints of the system. The
941.
by CuriousCosmic 5y ago
Interestingly the project was audited but the audit was very surface level and basically concluded with "the code is derived from another project and doesn't have any glaring flaws however the project itself lacks decentralisation
942.
by CuriousCosmic 5y ago
This actually isn't quite correct. The original protocol actually had a formal spec that accompanied it. CreamFi chose to not maintain this spec. The spec constrained under what conditions the protocol could operate securely and (ignor
943.
by CuriousCosmic 5y ago
Formal Verification absolutely would have helped in this case. CreamFi abandoned the formal spec that Compound Finance used when they forked their code base. Had they maintained the spec and paid attention to the constraints that this spec
944.
by CuriousCosmic 5y ago
The point of the zero trust model is that while you as a normal person may trust someone, everyone has the means to verify without having to trust it. If the devs have written formal models for the system and verified that with a proof solv
945.
by CuriousCosmic 5y ago
A lot of people have migrated away from Java to better JVM languages. If Java actually keeps improving, there's a reasonable likelihood that people will stop migrating and those that have may come back to Java from these other langs. L
946.
by CuriousCosmic 5y ago
This really is one of the cruxes of decentralisation being built in at the protocol level. Even if centralised services exist, as long as one person exists who cares, the content lives on. Without decentralisation being supported at the pro
947.
by CuriousCosmic 5y ago
I'm pretty sure that's the point. It's a very tongue in cheek/sarcastic "blockchain will liberate us and save all our problems" comment parroting what you hear a lot of less informed & overly zealous indivi
948.
by CuriousCosmic 5y ago
You don't even need to make a transaction. Cryptocurrency based authentication mechanisms use the ledger as a "trust-less" root of trust. You know anything that's been on the ledger long enough is valid. From their all y
949.
by CuriousCosmic 5y ago
I don't know if Florida is apt. The state has one of the strongest economies in the US. In terms of GDP, the ranking goes California, Texas, New York, Florida, and then Illinois. As much as Florida gets dunked on in the US, it's s