Hacker Newsnew | comments | show | ask | jobs | submit | codesuela's comments login

this, that page just causes FF to crash silently on Ubuntu FF

reply


> As can be seen in the code, the two targeted URLs are github.com/greatfire and github.com/cn-nytimes, which are mirror sites for GreatFire.org and the Chinese New York Times. GreatFire and NYT both use GitHub to circumvent the online censorship performed by the Great Firewall of China (GFW).

-----


I read that. Can someone shed some light over the motivation of the attacks?

-----


Defending against an DoS-attack costs money. People try to spend as few money as possible.

So, the theory is that the attacker wants github to take the repos down by making it costly to not do so.

-----


Escrow, funds are only released once the buyer confirms that he received the shipment. If you have a ton of outstanding orders, you are going to have a lot of funds frozen in escrow.

-----


Bitcoin allows transactions that only become valid once 2 of 3 people sign them. If the three people are buyer, seller, and arbitrator, you can have escrow without trusting a third party. There have already been commercial services along those lines.

Seems to me that any dark service that doesn't do it that way probably shouldn't be trusted.

-----


The article mentions that Evolution provides such a service, but it didn't get heavily used. Quoting from the article

>That system, would require at least two out of three parties in a transaction—the buyer, the seller, and Evolution’s administrators—to sign off on a deal. But due to its complexity, buyers rarely used the feature.

Edit: apparently this does not use bitcoins version of it, but their own that requires them to hold the funds in escrow. Which seems pretty stupid.

-----


Once again user experience trumps security

-----


>arbitrator

Is the arbitrator not a third party?

-----


Not one that you need to trust.

-----


You need to trust either the buyer or the arbitrator actually. In this case some money might have been lost due to malicious buyers (and the absent arbitrator).

-----


You have to trust the arbitrator to make fair decisions, but the arbitrator has no ability to steal the money.

The transaction simply moves funds between buyer and seller. If buyer and seller both sign the transaction, it completes without the arbitrator's involvement. If buyer and seller dispute, then the one who hopes to complete the transaction signs it and contacts the arbitrator, who will either sign, or not sign, but either way never gets possession of the funds.

-----


If both the buyer and the arbitrator are anonymous, how do you know that they aren't the same person?

-----


They're actually pseudonymous, so they can have reputations. If the other party insists on an arbitrator you've never heard of, you probably shouldn't agree to those terms.

-----


The arbitrator will usually be known by reputation, i.e. always the same key id.

-----


I thought the whole point of bitcoin was that it was peer-to-peer with no chargebacks or centralized middlemen?

-----


The bitcoin model alone doesn't fit buying drugs online. The purpose of escrow is a mutually agreeable middleman to facilitate a transaction, especially when parties that do not trust each-other can not exchange goods and payment in person.

-----


I still don't understand how this helps though - couldn't the person still get their shipment and claim they never received it in order to trick the middleman to return their funds?

How does the middleman have any ability to investigate or know who to believe?

-----


In one model of escrow, the middleman receives both the goods and cash before distributing them to the other parties. Potentially doing some inspection of goods at the time too.

In another model, more common on the internet, the middleman holds the money from the buyer while the seller ships the goods to the seller. They can't guarantee the buyer does not lie to the middleman, but it changes the incentive structure around fraud. Especially so when the middleman runs or has connections to the marketplace.

-----


A side benefit, but I wouldn't say the whole point. There are some cases where middlemen are necessary - the difference being that they're a lot more avoidable with BTC than they are in meatspace. (Credit cards, authorities who rob people carrying large amounts of cash, and so on.)

-----


I'm not positive that bitcoins offer much more protection from robbery than cash, given the situation here.

-----


They offered protection, though didn't they? Evolution had multiescrow, they wouldn't have gotten those funds would they have?

-----


I'd much rather have someone charge up fraudulent charges on my credit card than Bitcoin, I would much more likely be getting that money back and letting the CC fraud department deal with it. That guarantee is a major selling point of why so many people use credit cards in the first place.

-----


Solution 5: Use ES6

-----


So what are you saying? Its OK to hurt people who don't fit in?

-----


I think he was referring to testosterone gel ( http://www.drugs.com/cdi/testosterone-gel.html )

Also testosterone is used in anti ageing procedures ( http://fusion.net/story/42619/why-testosterone-is-the-drug-o... )

-----


I actually interpreted it as the parent comment. For instance if you have a really bad poison oak they prescribe prednisone ( http://en.wikipedia.org/wiki/Prednisone )

-----


sounds like elections in America

-----


fyi you dont need an extension, Chrome has native click to play support

-----


AFAIK just big tuna is expensive, like a large whole fish. What you get in the cans are small tuna.

-----


they actually just rate whether the App permissions match the users expectations.

-----

More

Guidelines | FAQ | Support | API | Lists | Bookmarklet | DMCA | Y Combinator | Apply | Contact

Search: