295 karma · joined July 17, 2011
The Ethereum Foundation is just the centralized marketing and governance organization that also lobbied the SEC not to classify it as a security because of how decentralized it is.
I haven't heard any convincing yes answers to all of these questions outside of financial instruments.
In general the solution would be some kind of class with .acquire and .release methods to create/recycle objects as needed. It comes up often enough that I'm a little surprised there isn't at least one or more popular libraries for it.
While I'm not completely convinced that the countermeasure of "spy mining" completely mitigates the attack, it does appear that this is not a new vulnerability. Further, if a pool had all of the hardware under one roof, it wouldn't be possible to spy at all which would reinstate all of the problems outlined in the paper.
Perhaps there remains some unexplored region in the limited yet flexible yet verifiable space of languages that was until now uninteresting.
The halting problem doesn't prevent playing whack-a-mole against previous exploits, but it ensures that proving more exploits do not exist is impossible. That's why I think a turing-complete language for smart contracts is a poor choice.
Perhaps you're saying that it's possible to analyze any particular program for known exploits once they've been discovered?
If only a subset of all programs can be completely analyzed as particular programs, what are the boundaries of that set?
I don't own any crypto assets myself, but I think that using a non-turing-complete scripting language for the bitcoin blockchain was a wise decision rather than a lack of vision.