grey-area

Joined 14 years ago

Karma
24,214
Submissions
5,124
Member since
Apr 12
View on Hacker News

Recent submissions

Comment · 2 hours ago
The former CEO of Binance CZ has been banned from any contact with the company after a conviction for fraud and he's the one giving assurances here.

So there are good reasons to be skeptical of his statements.

Comment · 6 hours ago
Comment · 6 hours ago
Yes sure, it's not a panacea, but this is a use-case for which AI is quite suited. I'm not a huge fan of using to write without human intervention, so personally I'd want a lot of human involvement...
Comment · 6 hours ago
Vouched. Not sure why this was flagged.
Comment · 9 hours ago
Yes that's true it is more like the dot.com bubble in that regard - a useful technology which will clearly grow over time, but overhyped in the initial phases as everyone tries to be 'AI' in 2026, in 1999 it was online, whether it fits with their business or not.
Comment · 9 hours ago
Well, it depends really. Let's consider this scenario:

Binance has cold wallets and hot wallets. The hot wallets used to be small and therefore low value, but have grown to be huge, without anyone really paying attention. The hot wallets have much less ceremony attached to moving money, as they are required to move money multiple times a second to track customer inflows/outflows from the system. There are no controls or transaction limits on the hot wallet because it's just a bitcoin wallet (or set of wallets). The hackers got access to the system via the dev machine, found the hot wallet keys in the system (which it requires to function), and simply started draining it of funds, it turned out the hot wallets contained a LOT of funds.

That doesn't require in-depth knowledge of Binance operations, all they need is access to hot wallets via the keys which we know the app would need to have in order to use it.

The lack of controls on the Binance side here is astounding, but it does appear like they had no safeguards, limits or monitoring on the hot wallet in spite of the money involved, or if they did they kicked in too late.

Partly this is a problem with the crypto itself which underlies their system: it's designed to be permissionless and without controls slowing down or reversing transfers.

Comment · 10 hours ago
Why should we believe Binance when they say all customers will be made whole, and how will they do that, with what money?

It seems very unlikely they have $3-6B lying around ready to repay customer deposits. At the very least this would be catastrophic for them if they do lose all that money.

Have they re-enabled withdrawals yet? If I were a customer I'd be taking everything out as soon as possible.

Comment · 10 hours ago
Completely agree there is lots you can do to shut down exposed surface area.

Is encrypting data at rest useful when the app must have access to decrypt the data? What sort of scenarios do you use it for and where do the keys live?

Comment · 10 hours ago
The AI craze very much reminds me of the crypto craze a few years ago - lots of people new to the industry jumping on the latest trend and building tooling for something that doesn't need tooling, trying to sell shovels in a gold rush, but just spending years creating a gold-plated shovel which nobody needs instead.
Comment · 10 hours ago
Translating from one language/platform to another is something AI is very very good at, so this sounds like a good use of it, bonus points if they create a comprehensive test suite first.

Yes it will lead to new bugs, but the older code probably contains a ton of bugs already and is probably difficult to update (original writers long gone, docs out of date etc), so this is probably the best way out of that situation, as long as proper support is given afterwards so they don't end up in the same situation a year later (this is the hard bit).

The ra-ra commentary from the CEO is somewhat off-putting, but the idea is not all bad.

Comment · 11 hours ago
Comment · 18 hours ago
Yes not very happy with 1pass either, would rather move off them.
Comment · 21 hours ago
Yes all these auditing companies accept money to say that another company is doing just fine and ticks all the boxes and has assets etc. They all often lie, in small ways and large. I'm not sure why you think proving all are untrustworthy means some are trustworthy?

We'll see whether Tether has the assets they claim when the next crypto winter comes. Till then I think we'll have to agree to disagree.

Hardly anyone actually uses crypto anymore, silly ideas like NFT, rewiring the financial system, asset tracking and apps on the blockchain have died, and all that is left are the last bag-holders, fraud and extra-legal financial transactions.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton