Hacker News new | past | comments | ask | show | jobs | submit login

it's pretty clear why competent, responsible developers are not participating in this space -- we're too frightened by possible government sanctions

Where's 'rayiner? He'll love this.

Writing bitcoin software is like writing crypto. You need to get it exactly right.

But instead of starting with a spec written down that the crypto community tears to pieces, instead the developers eat their own dogfood. No, change that: they build critical infrastructure out of their own dogfood. All before it's ever been vetted by the really smart people.

I'd say competent people don't write Bitcoin marketplaces that handle real money for the same reason competent people don't write their own home-grown crypto and then make it a single-point-of-failure for their entire business.




The arrogance here is unfortunate. First, you start out with a remark reminiscent of a high school bully. Do you really need a co-conspirator to share in your attempt to ridicule someone?

Also, you're pretty uninformed about the history of Bitcoin. Satoshi did start with a spec, or at least a white paper (yes, the lack of a proper spec for Bitcoin has been a major problem). Satoshi presented the white paper to the cryptography e-mail list several months before releasing the software. He got some feedback at that time, and then he got significant feedback when upon his initial release, which he integrated into the protocol.

This list included many of the top cryptographers in the cryptocurrency space, including Hal Finney and Adam Back.

You can find all these discussions, and the original release at: http://nakamotoinstitute.org/

Finally, with the exception of the transaction malleability issue, the failures in exchanges have had nothing to do with cryptography, but rather with basic secure software development practices and architectures.


I'm talking about exchanges, not the protocol itself.

Every exchange seems to be a bespoke system and that is just begging for trouble.

They should publish their architecture, then publish their source code, and then make sure that smart people have tried as hard as they can to find all the weaknesses in their stuff, and then turn it into a business.

Of course, there are business reasons not to do that: someone else can use your verified source, someone else can get a first-mover advantage, you might not get the smart people to pay attention, you might not know when it's ever good enough, and (the more pernicious idea) is the worry that seeing the source will give the attackers ways of attacking your stuff.

They fail for the same reasons that secret crypto systems fail. I fully understand why they are doing it, but it's still doomed to failure.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: