pshc

20 ms·

211.
by pshc 5y ago
If you want to fight, maybe it becomes a battle of attrition fighting psychos on their own level. I think it's more of a win to be the bigger person and live your own life, especially after how much he's already accomplished.
212.
by pshc 5y ago
Perhaps management is complicit? Given they are a pressure cooker culture with even more secrecy than your average org, this might be normal for them.
213.
by pshc 5y ago
I guess we’ll find out Soon(TM). Trustless computation is the plan. Maybe it’s possible to build a system that’s correct/antifragile enough, when you restrict yourself to some hundreds of lines of code tops?
214.
by pshc 5y ago
I think it speaks to the reality of a development process lead by humans in uncharted territory. Figure it out, audit it, test it for a long time, eventually cross fingers and blow the fuses. After that, either it successfully becomes a per
215.
by pshc 5y ago
I've used Hop too. Transfers are naturally limited to however much liquidity Hop has, though. Edit: Sorry for being disingenuous and unnecessarily curt in my reply. I didn't mean to. I'm in some kind of weird zombie mode this
216.
by pshc 5y ago
The folks at Optimism would certainly hit the pause button on that withdrawal before it escaped, if there aren't already limits and automatic controls in place. It takes 7 days to withdraw L2->L1 via the standard bridge. (They have
217.
by pshc 5y ago
This was a critical success for Optimism's bug bounty program, if anything? No one got rug pulled. Optimism's liquidity could have been drained in the worst case, and still ETH L1 would remain unaffected.
218.
by pshc 5y ago
I was looking into Helium yesterday due to news coverage. "Proof of coverage" is a bunch of hot air, sorry. It's not resistant to Sybil attacks and GPS location is easily forged. Seems like a scheme to push hardware units tha
219.
by pshc 5y ago
Regardless of their tone, fivea is correct to point this out as myopic. The grandparent comment argues about semantics and provides information that is technically correct, but not in a useful sense. To say that "CORS decreases securit
220.
by pshc 5y ago
Hahah, alright. I'll grant you that. The lock:CORS metaphor was tenuous at inception, and now it is truly vaporized.
221.
by pshc 5y ago
Good question... most likely an oversight, or maybe it's to discourage lazy server operators from packing every response's headers with 50 origins.
222.
by pshc 5y ago
If you have a lock with no keys, it's a non-starter; the door has no purpose. You'd be better off sealing the entrance with bricks. If you offer a website with an API then CORS is an enhancement in that you're helping protect
223.
by pshc 5y ago
Interesting, I would love to hear more and/or read the lyrics!
224.
by pshc 5y ago
You're right, gathering multisigs would be much safer than gathering SSS shares because you wouldn't be carrying around bits of the private key.
225.
by pshc 5y ago
Wow. > Taihuttu has two hiding spots in Europe, another two in Asia, one in South America, and a sixth in Australia. > We aren’t talking buried treasure – none of the sites are below ground or on a remote island – but the family to
226.
by pshc 5y ago
Yeah, a hardware wallet is good, although for a billion dollars, 100 hardware wallets would be better. Could even go so far as to split a private key into seven horcruxes using Shamir's Secret Sharing and bury them in locations around
227.
Vitalik Buterin on shape rotators vs. wordcels(twitter.com)
8 points by pshc 5y ago|15 comments
228.
by pshc 5y ago
I would wager most contracts deployed these days are immutable. Upgradable contracts are frowned upon in the space, moreso every day. But given that humans are prone to making mistakes, when code is fresh and unproven, proxies are a practic
229.
by pshc 5y ago
I wonder if the brainiacs at OpenAI could train a neural net on human-written C -> Rust translations.
230.
by pshc 5y ago
Off the top of my head sourdough, Clubhouse, everything on TikTok, Animal Crossing, Amongus…
231.
by pshc 5y ago
If fully automated, this would be quite slick.
232.
by pshc 5y ago
That would be a good fix, and it is a glaring omission. But the contract can't be upgraded, so all existing contracts depending on wETH would have to be migrated or replaced too.
233.
by pshc 5y ago
I agree that deploying the full 777 would be too costly, yes, and probably open up reentrancy attacks. But one simple check in the transfer function would have saved this person half a million. I would gladly pay that tiny extra bit of gas
234.
by pshc 5y ago
It is a tool to convert ETH into an erc-20 compatible token. ETH itself can only be spent by the private key, whereas users can grant contracts the permission to manage the user's WETH for them.
235.
by pshc 5y ago
Also, ERC-777 tokens were supposed to fix this egregious problem by having all transfers check with their destinations (through hooks). There are also various similar extensions to ERC-20 I believe. Unfortunately, practically no one uses 77
236.
by pshc 5y ago
A word with three vowels to start would probably give many tells
237.
by pshc 5y ago
Quietly corrupting data and shipping with the wrong default settings is what MySQL is all about! Keeps the consultants busy.
238.
by pshc 5y ago
The point of a signed timestamp (and/or challenge string) is that it demonstrates the signature is freshly generated, proof that the device is authentic right then and there. An old copied signature would not have this property.
239.
by pshc 5y ago
Yes. I regret not being more clear in my original comment, because the scheme I alluded to is an application of public key cryptography, such as Certificate Authorities, and is not about cryptocurrencies specifically.
240.
by pshc 5y ago
> So if you purchase an NFT, you need to make a local copy of the actual data? If you purchase one that’s worth say >4 figures then, yes, yes you should! Also at that point, you’re either part of the 1% or at the very least owe some d

More ›