Conversation

Notices

1. Embed this notice
   Molly White (molly0xfff@hachyderm.io)'s status on Tuesday, 10-Oct-2023 10:18:28 JST Molly White

   The fraud was in the code

   The jury got a taste of code review as they examined a falsified "insurance fund" and the infamous FTX → Alameda Research "backdoor".

   https://newsletter.mollywhite.net/p/the-fraud-was-in-the-code

   #SBF #FTX #crypto #cryptocurrency #newsletter

   • clacke likes this.
   • Embed this notice
     Mike Myers (0x0fff@infosec.exchange)'s status on Tuesday, 10-Oct-2023 10:18:27 JST Mike Myers

     in reply to

     @molly0xfff my favorite part of this write up…

     “Note to self: if you’re going to write code to do fraud, make it messy and unreadable to reduce the chances it’s later put in front of a jury as evidence.”

     I was literally thinking this as I was reading the previous paragraph, and then BOOM! There it was lol.

     clacke likes this.
   • Embed this notice
     Mᴀʀᴋ VᴀɴᴅᴇWᴇᴛᴛᴇʀɪɴɢ (brainwagon@mastodon.social)'s status on Tuesday, 10-Oct-2023 10:18:29 JST Mᴀʀᴋ VᴀɴᴅᴇWᴇᴛᴛᴇʀɪɴɢ

     in reply to

     @molly0xfff It's becoming increasingly hard for me to continue my believe in a universal modicum of human decency. Sure, Bankman-Fried was a shuckster, but he was enabled by a bunch of tech people who knew what he was asking them to do was inherently fraud.

     clacke likes this.
   • Embed this notice
     David Zaslavsky (diazona@techhub.social)'s status on Tuesday, 10-Oct-2023 10:18:32 JST David Zaslavsky

     in reply to

     @molly0xfff "Note to self: if you’re going to write code to do fraud, make it messy and unreadable to reduce the chances it’s later put in front of a jury as evidence." 😂

     clacke likes this.
   • Embed this notice
     Guillaume Ross (g@irrelephant.co)'s status on Tuesday, 10-Oct-2023 10:18:34 JST Guillaume Ross

     in reply to

     • CatSalad🐈🥗 (D.Burch) :blobcatrainbow:

     @catsalad @molly0xfff Most of the jokes I include in email is to lighten the mood in future litigation

     clacke likes this.
   • Embed this notice
     CatSalad🐈🥗 (D.Burch) :blobcatrainbow: (catsalad@infosec.exchange)'s status on Tuesday, 10-Oct-2023 10:18:35 JST CatSalad🐈🥗 (D.Burch) :blobcatrainbow:

     in reply to

     @molly0xfff 😹

     Note to self: if you’re going to write code to do fraud, make it messy and unreadable to reduce the chances it’s later put in front of a jury as evidence.

   • Embed this notice
     Dana Fried (tess@mastodon.social)'s status on Tuesday, 10-Oct-2023 10:18:50 JST Dana Fried

     in reply to

     @molly0xfff sweet jesus, they just typed out the fraud didn't they? No attempt to obfuscate?

     clacke likes this.
   • Embed this notice
     Bill, organizer of stuff (wcbdata@vis.social)'s status on Tuesday, 10-Oct-2023 10:18:52 JST Bill, organizer of stuff

     in reply to

     @molly0xfff A toast to every developer who's been asked to write something like this and just rolled their eyes and said no.

     clacke likes this.
   • Embed this notice
     clacke (clacke@libranet.de)'s status on Tuesday, 10-Oct-2023 10:18:52 JST clacke

     in reply to

     • CatSalad🐈🥗 (D.Burch) :blobcatrainbow:
     • David Zaslavsky

     @diazona It works on infosec.exchange, because:

     infosec.exchange/about
     

     > v4.2.0-rc2+glitch

     
     Whereas:

     techhub.social/about
     

     > v4.2.0

     
     The GlitchSoc Mastodon fork vs mainline Mastodon

     @catsalad

   • Embed this notice
     David Zaslavsky (diazona@techhub.social)'s status on Tuesday, 10-Oct-2023 10:18:53 JST David Zaslavsky

     in reply to

     • CatSalad🐈🥗 (D.Burch) :blobcatrainbow:

     @catsalad hmm let's see

     > "⁠:minecraft_dirt:⁠"

   • Embed this notice
     CatSalad🐈🥗 (D.Burch) :blobcatrainbow: (catsalad@infosec.exchange)'s status on Tuesday, 10-Oct-2023 10:18:54 JST CatSalad🐈🥗 (D.Burch) :blobcatrainbow:

     in reply to

     • David Zaslavsky

     @diazona
     Like this→ > "⁠:minecraft_dirt:⁠"

     "⁠:minecraft_dirt:⁠"

   • Embed this notice
     David Zaslavsky (diazona@techhub.social)'s status on Tuesday, 10-Oct-2023 10:18:55 JST David Zaslavsky

     in reply to

     • CatSalad🐈🥗 (D.Burch) :blobcatrainbow:

     @catsalad whoa how did you get blockquote formatting

   • Embed this notice
     R Hunter Gough ?? (luvcraft@mastodon.social)'s status on Wednesday, 11-Oct-2023 05:34:54 JST R Hunter Gough ??

     in reply to

     @molly0xfff <Groucho Marx voice> "I've heard of committing fraud, but this is on a whole other level!"

     clacke likes this.
   • Embed this notice
     TransitionState (transitionstate@mstdn.social)'s status on Wednesday, 11-Oct-2023 05:34:59 JST TransitionState

     in reply to

     @molly0xfff So you're saying if I want to do fraud I need to brush up on that Fortran 77?

     clacke likes this.
   • Embed this notice
     clacke (clacke@libranet.de)'s status on Wednesday, 11-Oct-2023 05:35:00 JST clacke

     in reply to

     • CatSalad🐈🥗 (D.Burch) :blobcatrainbow:
     • David Zaslavsky
     @catsalad @diazona Yeah, the sanitization is in the client/frontend, the backend doesn't mutate posts (I think).
   • Embed this notice
     CatSalad🐈🥗 (D.Burch) :blobcatrainbow: (catsalad@infosec.exchange)'s status on Wednesday, 11-Oct-2023 05:35:01 JST CatSalad🐈🥗 (D.Burch) :blobcatrainbow:

     in reply to

     • clacke
     • David Zaslavsky

     @diazona @clacke Interestingly enough, Fedilab rendered your post like mine, even if the web version doesn't..

   • Embed this notice
     David Zaslavsky (diazona@techhub.social)'s status on Wednesday, 11-Oct-2023 05:35:02 JST David Zaslavsky

     in reply to

     • clacke
     • CatSalad🐈🥗 (D.Burch) :blobcatrainbow:

     @clacke @catsalad Ahh I see. Thanks!

   • Embed this notice
     David Zaslavsky (diazona@techhub.social)'s status on Wednesday, 11-Oct-2023 05:35:05 JST David Zaslavsky

     in reply to

     • clacke
     • CatSalad🐈🥗 (D.Burch) :blobcatrainbow:

     @catsalad @clacke whoa 🤯

     Actually that's pretty nice, but I guess of limited usefulness given that it's just one client

   • Embed this notice
     clacke (clacke@libranet.de)'s status on Wednesday, 11-Oct-2023 05:35:05 JST clacke

     in reply to

     • CatSalad🐈🥗 (D.Burch) :blobcatrainbow:
     • David Zaslavsky
     @diazona @catsalad That's very interesting. The client is actually receiving HTML, but it still goes in and prettifies it? I wonder how many clients are doing that. If one client is doing it, I'm assuming it's not alone.
   • Embed this notice
     clacke (clacke@libranet.de)'s status on Sunday, 15-Oct-2023 21:54:51 JST clacke

     in reply to

     I misunderstood what it was about, libranet.de/display/0b6b25a8-2… is the real answer.

     My point here was that a client can reveal formatting that the web interface hides, and that's still true, but in this case it was about Fedilab going beyond that.