skysight-inc/HackerNews huggingface dataset:
There was a similar case a few years ago, where a guy made off with hundreds of thousands of dollars by exploiting a bug in a video poker machine. The casinos sued him, claiming the money was fraudulently obtained. His lawyer claimed he had won by entering a combination of buttons that he was legally entitled to enter and so there was no fraud. The court agreed and the guy won his court case.

Here, whether a court decides that his ether coins were fraudulently obtained is going to depend on how the court interprets the contract in question. These ethereum contracts are supposed to be fully integrated (meaning all of the contract terms are contained therein and no outside terms can be introduced). Since the attacker's actions were explicitly authorized by the contract (since the contract is the code), then it's entirely possible a court will find that it wasn't fraud. The really key question is whether the contract is integrated, which is basically the central contract law concept behind ether in the first place.

However, I suspect a court would not be friendly toward the idea of eliminating dispute resolution. Especially an American court. It militates against many of the core common law and constitutional principles of American jurisprudence.

I expect that a court will rule that the contract is void because of unilateral mistake. When one party misunderstands the terms of a contract, and the other party is aware of this and exploits it, the court will generally grant rescission (cancelling the contract and putting the parties back in the position they were before the contract, e.g. by transferring the ether coins back to their former owners) or reformation (rewriting the contract terms to reflect what the mistaken party thought they were).

One can argue that the point of ether is to eliminate mistake and similar doctrines that account for human fallibility, but the court will probably say that you can't contract away a doctrine about contract formation itself. Anyway, it would be a super interesting law suit, and definitely would challenge many of ether's most important legal implications.
SSHFS is a part of Fuse. Repository: https://github.com/libfuse/sshfs
I used to busk with a friend on NYC subways. We each made $100 a day for 6 hours of singing consistently.
Go home gruez - you're drunk.
Is it a con, though? I don't know much about DAO but everything I've read recently suggests that this situation, at the very least, is a lot more nuanced.
Why the obsession with 3 letter short names? Why "typ" and not "type". I'm sore the overhead can be ignored and the parser doesn't care.
Current rates:

AT 20%, BE 21%, BG 20%, CY 19%, CZ 21%, DE 19%, DK 25%, EE 20%, EL 23%, ES 21%, FI 24%, FR 20%, GB 20%, GR 23%, HR 25%, HU 27%, IE 23%, IT 22%, LT 21%, LU 17%, LV 21%, MT 18%, NL 21%, PL 23%, PT 23%, RO 20%, SE 25%, SI 22%, SK 20%, UK 20%

That's the standard rate. Average is 21.5%.

For things that qualify for a reduced rate, here are the current reduced rates:

AT 10%, BE 12%, BG 9%, CY 9%, CZ 15%, DE 7%, DK 0%, EE 9%, EL 13%, ES 10%, FI 14%, FR 10%, GB 5%, GR 13%, HR 13%, HU 18%, IE 13.5%, IT 10%, LT 9%, LU 14%, LV 12%, MT 7%, NL 6%, PL 8%, PT 13%, RO 9%, SE 12%, SI 9.5%, SK 10%, UK 5%

The average is 10.2%.
Rajshahi: the city that took on air pollution – and won
Serious question, not trolling: Why do many HackerNewsen seem to feel that global warming is a bad thing? For all we know, the changes brought on by a warmer climate may be great for humanity as a whole.
>>... to include common law arbitration protocols.

That's a great example of the sort of ambiguity that an arbitrator must deal with. Do you mean to refer to "the common law" as in the body of law descending from the brits, or do you mean the common law principals of precedent and authority? Or do you mean only the concept of precedent by which past decisions under similar fact patterns are used to inform decisions regarding new fact patterns. I have some assumptions based on your choice of language and my best guesses as to your cultural background, but good luck finding a machine capable of such understanding. If we crack that, then much of our culture is moot and the robots can be left to run things.
The story here is Prop 13. Homeowners are incentivized not to make improvements to their home, so that their property taxes remain tiny.

https://en.wikipedia.org/wiki/Prop_13
My first impressions of it are that the portrait oriented monitor actually looks very stylish. There is something almost futuristic about it.
This is what I wanted to ask about. I don't even know what language this is. Is Transfer even a legit function, and if not, does this language just keep on chugging for non-existant function calls?
Well, ​Dr. Chris Reitwiessner is in charge of the solidity project I believe.

I have been told he's not big on functional / richly typed systems, but I don't have any actual knowledge.
It's hard to justify a statement like "it's clearly theft" given the amount of time and money and legal resource that was used in the Google/Oracle case about the use of an API.
If the contract code can be upgraded by the majority of involved parties, it would be simple to buy 51% of the voting power and change the code to pay out everything else. Each takeover would double your wallet. Am I missing something here?
c = checkout
d = diff
ds = diff --staged
l = log --all --graph --oneline --decorate
s = status --short --branch
g = grep --break --heading --line-number
ff = merge --ff-only
puff = pull --ff-only
purr = pull --rebase
mnc = merge --no-ff --no-commit
ignore = update-index --assume-unchanged
unignore = update-index --no-assume-unchanged
ignored = !git ls-files -v | grep '^[[:lower:]]'
3D Printed Driverless Bus Hits the Road
"Simple Contracts are Better Contracts" has always been the mantra of the Ethereum and DAO team. Most times when a security question was raised, "simple contracts" was their defacto answer [1].

This exploit suggests that the most competent developers in this space, who always preached simple contracts, are not yet able to consistently write secure contracts.

Also, the OP states the importance of being able to update a contract. As of last year that meant the original contract MUST include a self-modifying code provision. Self-modifying code doesn't align well with keeping your code simple.

As an aside, "contracts" are Ethereum's raison d'être and the Ether currency value is largely based on adoption. Even though this exploit did not expose a flaw in the Ethereum block chain, the Ether sell-off is an expected consequence.

Lastly does anyone have a link to the original contract code and how it could be rewritten so that it isn't vulnerable to this exploit ?

[1] https://www.youtube.com/watch?v=cahj4WJtp20
Q&A at 42m44s is relevant.

Edit: corrected time stamp for above video
You're in luck. All the new gTLDs cost $30+. Many are a couple hundred dollars or even a couple thousands per year.

The main reason is that most companies don't think it's necessary to pay thousands of dollars per year as a recurring REGISTRATION FEE.
Βελτιώστε τις επιδόσεις σας στο με σεξ με μερικές ασκήσεις – escorts|
Uh... despite that, US carbon emissions have dropped over 500 million metric tons from their peak levels. I don't see any movement in that direction from China and India.

Actions speak louder than words, after all.
That seems incredibly low, was it a while ago? Considering how much money I see people connect sitting silently with a cardboard sign, I would think performing in NYC would net a lot more.
How Do I Learn Some Functional Programming?
You're being pedantic. Contracts explicitly specify the arbitrator, such as AAA or JAMS. More info at http://arbitrationnation.com/arbitrationnation-roadmap-when-...
I prefer the 'dark playground'[0] explanation. It's more useful at understanding and coming up with different ways of dealing with it when those listed in the shyal article fail.

[0]: http://waitbutwhy.com/2013/10/why-procrastinators-procrastin...
Sure. The thread's origin refers to TLS. Like some others have said, this is a UI/UX issue, and the UI needs to exist in the browser/curl/httpclient, as that takes the role of the client in the TLS handshake. The existing UX for selecting -- and managing -- keys and certificates is bad, and the cognitive load of these to the user is high. We don't know what a good UI would looks like because no one has made one yet, but the competition is existing 2nd factors: hardware token generators, software token generators, confirmation emails, confirmation texts, etc.

I assume by Web API you meant some functionality hook exposed in the browser which the website/webapp can access, like WebRTC [1], or web workers and others [2][3].

The sort of API you entertain would be useful for application-level authentication, but from the perspective of the end-user, it would fulfill a similar purpose to password managers. Bootstrapping this identity to contain useful data is the biggest issue. There is a similar proposal by security researcher Steve Gibson called SQRL [4], which sends a site-specific public key to a website generated from a master key the app keeps. This scheme is pretty good but it's designed to mint uncorrelatable, anonymous identities, so you're not 'jdc' at HN and other places, but [RANDOM STRING] at HN, and [DIFFERENT RANDOM STRING] at some other site.

I am, however, curious how you'd envision a web app would hook into such an API, and what functionality it would offer.

[1] https://developer.mozilla.org/en-US/docs/Web/API/WebRTC_API
[2] https://docs.webplatform.org/wiki/apis#List_of_all_APIs
[3] https://developer.mozilla.org/en-US/docs/WebAPI
[4] https://www.grc.com/sqrl/sqrl.htm
I think after sleeping on it that I agree with you, this is more likely the outcome of bad refactoring. You can read the code commits on github if you like; I don't have them handy, unfortunately.

transfer is a very poorly named function, of that there is no doubt. And Transfer is badly named as well.

transferAndLockTokens vs LogTransfer would be much, much better.
Previous discussion (other URL) https://news.ycombinator.com/item?id=11927891 (227 points, 6 hours ago, 96 comments)

I'll copy a comment by verroq https://news.ycombinator.com/item?id=11928645 (but there are a few similar comments there)

> This letter is fake. Signatures do not match. Flag and move on.

> . https://www.reddit.com/r/ethereum/comments/4oo1io/an_open_le... .
Exactly. If you write a crummy contract but believe it is sound, then set out to convince other people of it soundness, and they sign up and pour their money in, and then the contract leaks, who's responsible? ... well, next minute: lawyers.

We'll first have to invent, and deploy at scale, the immutable person before we can have the perfect contract 100% of the time.

So long as people change, minds are fallible, misunderstandings and disagreements continue to occur, interpretation and intent are going to be fuzzy.
Coming out the closet
Intent is simply the will of the party manifest. If each party presents their will, there is no misunderstanding. Conflicts of will can be treated like merge conflicts and resolved in the meat space.
Because the phone is more secure using one time tokens instead of a semi permanent 16 digit number
That seems like the least of our problems, what with the use of gigatons of coal, oil, and natural gas.

Also, I'm willing to limit use of coal, oil, and natural gas. I'm not willing to eat less steak.
https://en.wikipedia.org/wiki/Fallacy_of_quoting_out_of_cont...

edit:
A tried and true technique of propagandists. Propagandists also love censorship, which on HN is implemented with down votes.
Where are the huge numbers of $160,000 salaries coming from? It's like a delta function right at that one level. Is that a standard starting package for major firms?
It's probably a bad thing.

From what little I understand: the earth has a lot of carbon dioxide and methane sequestered in permafrost, deep water, and ice. As the average temperature increases, the rate at which these gases are released also increases. So we're in a fairly dangerous positive feedback loop, because it doesn't take much of a temperature change for a lot of the places we live to become uninhabitable.
Show HN: Pouces – input method for iPhone
Pouces combines taps and swipes to allow fast text entry and its six regions enable to input text without looking at the input window but rather the text being written.

Current features include:
• Fast access to numbers
• Support accented characters
• Quick input for capital letters
• Text replacement
• Quick delete

I would like to get some feedback on usability and/or features from anyone willing to try it out, here are some promo codes:

1 YAW47JNEEETR
2 L96MNJ4RHN6Y
3 3PHP3MYM3HEL
4 66NNKA4AHHMY
5 6W43JFTE44N4
6 3L9JW4THRKTT
7 A9JKJE3F4A6N
8 3REJYPWLPXYE
9 J9Y6AEHM6436
10 3KRKT6RTM6KY
11 EX3YTAFRLHWP
12 4KFX93A73X4J
13 XMLKAF66WLLM
14 9ALX6XETFMH6
15 AEHM7RJTEA6K

app store ($1.99) link : http://itunes.com/app/pouces
Russia is ranked third in the list of countries with the highest immigration behind US and Germany.

Germany moved up to second place in 2015 due to Merkels invite to Africa and the Middle East, the 10 preceding years Russia was always on 2nd place behind US.

So much for Gulags and unwelcoming Russians.

https://en.wikipedia.org/wiki/List_of_countries_by_immigrant...
Pretty clear to me that he's talking about creating/evolving new common law, in the vein of the living body of common law descending from the Brits
That's because Hunter S. Thompson was interesting in and of himself.
Total envy! There is an Alto in the Heinz-Nixdorf-Museum, but it is not functional.

Seeing one of these machines in action would be awesome. (Is there an emulator available?)
> this typo apparently hasn't yet been fixed in the repos

IIUC, once an Ethereum program is started, it cannot be killed or fixed. If so, updating the gitbub repo would be pointless at this time.
yes, but (and I'm biased), it seems plausible that a higher percentage of engineers enjoy a larger fraction of their work than law associates. I have no numbers to back this up, but very few people pick up corporate law as a hobby.
Snapchat is starting a magazine
I can recommend reading Practical Object-Oriented Design in Ruby by Sandi Metz to every programmer out there. This is so much important to understand basics of Code Design. Even if you think you will not be doing any functional or object-oriented programming, still, go ahead and read it.
The biggest problem I see with the code at https://github.com/slockit/DAO/ is absense of the unit tests. The code looks complex, how the hell can you make sure that it's right?

The Solidity wiki doesn't have a single entry on testing either:

https://github.com/ethereum/wiki/wiki/The-Solidity-Programmi...
> Yes we share a common Earth, but we do have conflicting interests on it.

True. But here I was thinking that we're above wanting to cut down the expense on heating for few million of our neighbours at the expense of fucking over the lives of several billion.
Right, Signed Cookies.

JWT doesn't make the claim that it's a new concept, you are assuming as much. It's a standard and as you correctly gleaned and like most other standards, comes with a lot of benefits, best practices, is battle tested and ready-to-use in your favorite frameworks.

It becomes even more useful if you application serves multiple clients such as browsers, iOS applications and so forth because you can hit the ground running without having to reinvent anything.
Out of curiosity, do you buy albums outright, or not listen to enough music to justify paying monthly?
(1) Evolution is not random. Mutation may be random, but feature selection is based on a rule.

(2) There is a goal: species survival.

(3) The only rule is that whatever aids (2) is a rule for purposes of (1).
They had artificial suns in orbit to bathe those in sunlight.
Let's say it is easier (I can't comment on that), but instead of requiring industry to party for the waste they make, isn't it a huge subsidy to allow them to keep all their profits and make taxpayers pay for cleaning up their mess? That sounds like the wrong kind of incentive.

The oil industry already gets insane incentives at taxpayer cost. I don't feel like adding to them.
I didn't realise you meant "take money and also give them your client list in return". If you're going to add strings like that to your question, the answer will obviously be no.
Well, at least IS an idea, yes, but its effects at middle and long term are still untested. Could release again the carbon to the air in the next summer. A 400 years old tree on the other side...
Lab-grown diamonds are about to be everywhere
Why Not Mix Signed and Unsigned Values in C/C++?
I'm the same way, and along with that I don't use aliases directive in my gitconfig either. I create bash scripts that are named git-* that way I can be more advanced in them without having a crappy experience creating them.
Bailing out the DAO undermines the core value propositions of Ethereum - contract immutability (stability) and decentralization. I understand that the argument is "this is a special (ie, too big to fail) case; however, who can be sure?

IMO the better way to handle this is to acknowledge the mistake and let it fail. It's embarrassing I get it. Honestly, the big bank types who threw millions at this tech without doing due diligence deserve to lose their shirt. It's called speculation for a reason.

If the core team cares about the long term credibility of the project with the people who real matter - the tech community - they will not bail it out.

Edit:

For anyone interested, there's a really great discussion on this subject at the Ethereum reddit
https://www.reddit.com/r/ethereum/comments/4oiqj7/critical_u...
Not that I give many to any buskers or beggars, but I'd rather give money to people that are not causing noise pollution rather than to people that are.
One "philosophical difference" that you need to know about is that comments like these aren't allowed here:

> I know I'll get napalmed for saying this

> And if you downvote this, tell me why, otherwise I'll just assume you are with those that want to exploit me and others.

Please reread the HN guidelines, particularly the last two: https://news.ycombinator.com/newsguidelines.html. If you're going to comment here, please follow them.

The "why is this on HN" genre is also pretty lame.
I'm having trouble fact-checking this, do you have a source?
LinkedIn’s Complicated Bet on the Future of Work
Test cases...code review... How about type checking??

The idea of writing financial software without taking every available precaution to verify correctness is insane to me.
Obviously your down-voters don't remember Tom Lehrer's "Wernher Von Braun" lyrics.
It's intentionally misspelled, ostensibly to avoid old-school newsroom confusion with "lead," the linotype separators that sat between lines on a printing press. It's debated whether it's a word that was actually used back then, though.
He didn't say we didn't need police.
You know exactly what he meant. You are using the word design in a different way than him.

There's absolutely a part of the brain that specializes processing visual information, just as there are organs throughout the rest of your body that specialize with other different tasks.
Well, the climate change might not be catastrophic per se, but I wouldn't be so sure about population movements it'll force, or its effect on global food supply.

It would be a damn shame if technological civilization collapsed into war and famine just because the average temperature on the planet rose a few degrees. But it feels quite likely.
It's not better in context frankly
Yes but that is a flesh-and-blood arbitrator. We are talking about coding the arbitration process into a machine. Being pedantic is exactly what happens when one tries to express cultural norms in the exact terms used by mechanisms.
Chat app Line makes over $270m a year from selling stickers
Is this mostly fuel efficiency in vehicles? I can't imagine solar is having that kind of impact yet, is it? (It would be great if it were.)
Perhaps something like the precautionary principle?

We know from past experience that previous temperatures are tolerable. If we do not know for sure what would happen with temperatures higher than what we have experience for (if we think it could be somewhat good, but could also be completely devastating), then it is safer to not go to higher temperatures than previously experienced, at least until we have sufficient evidence that higher temperatures would be beneficial, or at least not devastating.

The scientific consensus currently seems to be that the chances of it being devastating are pretty high, and are higher than the chances of it being good instead by the same degree, and therefore, it seems best to avoid the increase in temperature.
For example:

either party to this contract submit a signed request for arbitration within the escrow period of this contacts then

1) a panel of 3 arbiters from the New Atlantis Common Law Arbitration Group will be selected at random.

2) 50-ETH will be set aside for court fees.

3) The panel can execute any 1 of 5 events by submitting 2 of 3 signed tokens. If the panel cannot arrive at a consensus, one token will execute at random.

Many competing standard arbitration packages will develop.
A number of internet forums have branched off from HN to fill niches that HN doesn't fill. I'm beginning to think that somebody needs to fork a forum for Schadenfreude. We don't want comments like this here.
"You know, I don't do things like that. I'm a public figure."

Jesus what a self-important thing to say while not outright denying it.
This was a great system.

The more I research into Xerox's papers and manuals for Interlisp-D, Smalltalk and Mesa/Cedar systems, the more I become convinced it was a big step back to the industry the adoption of inferior systems like UNIX.

Thankfully many traces of those ideas are now in Windows, Mac OS X, Android and iOS, Language Playgrounds and many IDE workflows.
The JWT has to fit inside HTTP headers, which means it's not unlimited in size. The default header size limit varies by web server, but once you get above 8k it becomes a game of "which reverse proxy is choking on these headers this time?".

It's compounded by the fact that a lot of web servers (ie. nginx) have a global header size that limits all of your headers together, not just any one header, which means your JWT size limit is nondeterministic, especially if have large-ish cookies in your request.

There's standard ways to include the JWT in the request body, like form encoding, but that doesn't work for GET requests, so in practice everyone uses the Authorization header.
I understand your point, but your example of height is odd because we do value height, even if just subconsciously.

http://blogs.wsj.com/atwork/2014/06/09/tall-ceos-how-height-...
http://www.apa.org/monitor/julaug04/standing.aspx
and explicitly precludes any fallback to traditional systems in its documentation.

Which is, of course, nonsense. You can't document your way outside the law. Not in any country I'd want to live or conduct business in anyway.

If enough of any one persons money is involved you can bet there are lawyers right now trying to working out who to sue.
It's probably a temperature thing? A metal roof probably gets really hot. I have no idea what the temperatures there are though...
These days, some displays allow you to rotate them between landscape and portrait orientiation.

At work, I have a 24 inch TFT in portait mode which I use mostly for coding (and other tasks where vertical space is valuable). It is very nice, because e.g. in text processing, a whole page fits the screen nicely.

In a way, we have that with tablets and phones, too.
The Living Computer Museum in Seattle has a running Alto, but I haven't seen it. I've used the Salto emulator: https://github.com/brainsqueezer/salto_simulator
The consequences of correction can be worse than the initial wrongful act