Top all-time · #4267
blog.comae.io
Company blog · blog.comae.iosecurity
blog.comae.io is the company blog at blog.comae.io, writing about security. Since 2017, 18 different Hacker News readers have linked it 20 times, most often “The $280M Ethereum bug”. No feed was found, so read it on the site itself.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN commenters link this blog's analysis of the 2017 Parity multisig bug when arguing that Ethereum contract code is risky, and its WannaCry retrospective. The comments cite the posts without judging the writing.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- The $280M Ethereum bug3 people · 3 mentions · first linked 2017-11-07
- Lessons from TV5Monde 2015 Hack3 people · 3 mentions · first linked 2017-06-11
- Petya.2017 is a wiper not a ransomware3 people · 3 mentions · first linked 2017-06-28
- Smart Contract Languages Development to Follow2 people · 2 mentions · first linked 2017-12-29
- WannaCry – The largest ransom-ware infection in history2 people · 2 mentions · first linked 2017-05-13
- WannaCry – Decrypting files with WanaKiwi and Demos2 people · 2 mentions · first linked 2017-05-19
- DEF CON 25: Porosity Decompiling Ethereum Smart-Contracts2 people · 2 mentions · first linked 2017-07-31
What Hacker News says?
I stopped trusting Ethereum in 2017 at the Parity multisig bug: https://blog.comae.io/the-280m-ethereums-bug-f28e5de43513 Even in the bug fix there wasn't any unit testing involved. I'm using multisig to store all my Bitcoins, so it scared me extremely. With Bitcoin I read through the multisig code (stack machine) before putting money onto the blockchain. With Ethereum the code changes so fast, that with all the har…
Comment linking /the-280m-ethereums-bug-f28e5de43513
on “Ethereum 2.0 – Minimum deposit reached”Submitted WannaCry – New Variants Detected as a story · 265 points
HN discussionThey may have changed it in recent versions, but for a long while, functions were public by default (i.e. anyone can call them). Defaulting to open is a huge security flaw and the reason behind the Parity bug https://blog.comae.io/the-280m-ethereums-bug-f28e5de43513
Comment linking /the-280m-ethereums-bug-f28e5de43513
on “DSLs for Ethereum Contracts”Submitted WannaCry – The largest ransom-ware infection in history as a story · 138 points
HN discussionThere is a lot of independent analysis pointing at North Korea[0][1][2][3] The infosec industry are extremely skeptical of attribution especially coming from government - it took a long time for a higher-certainty attribution to be established in the Sony and Bangladesh reserve bank cases, and there are still open cases of attribution in other incidents Along with technical evidence, Wannacry also fits the North Kor…
Comment linking /wannacry-links-to-lazarus-group-dcea72c99d2d
on “WannaCry: End of Year Retrospective”Submitted The $280M Ethereum bug as a story · 30 points
HN discussionSubmitted Petya.2017 is a wiper not a ransomware as a story · 10 points
HN discussionSubmitted Petya.2017 is a wiper not a ransomware as a story · 5 points
HN discussionSubmitted WannaCry – Decrypting files with WanaKiwi and Demos as a story · 4 points
HN discussionSubmitted WannaCry - Decrypting files with WanaKiwi as a story · 3 points
HN discussionSubmitted Smart Contract Languages Development to Follow as a story · 2 points
HN discussionSubmitted DEF CON 25: Porosity Decompiling Ethereum Smart-Contracts as a story · 2 points
HN discussionSubmitted WannaCry – The largest ransom-ware infection in History as a story · 2 points
HN discussionSubmitted Going beyond log files, accepting memory as its own format as a story · 1 points
HN discussionSubmitted Smart Contract Languages Development to Follow as a story · 1 points
HN discussionSubmitted How to Decompile Ethereum Smart-Contracts as a story · 1 points
HN discussionSubmitted Lessons from TV5Monde 2015 Hack as a story · 1 points
HN discussionSubmitted Petya.2017 is a wiper not a ransomware as a story · 1 points
HN discussionSubmitted Lessons from TV5Monde 2015 Hack as a story · 1 points
HN discussionSubmitted Lessons from TV5Monde 2015 Hack as a story · 1 points
HN discussion
