Why Bitshares 2 not gone through a security audit?

Started by freedom, October 29, 2015, 12:12:05 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

noisy

There is a way of free audit on daily basis thanks to this: https://bitsharestalk.org/index.php/topic,19625.0.html

Of course this is not a replacement for true  security audit, but in my opinion, this could help with small bugs :)
Take a look on: [url="https://bitsharestalk.org/index.php/topic,19625.msg251894.html"]https://bitsharestalk.org/index.php/topic,19625.msg251894.html[/url] - I have a crazy idea - lets convince cryptonomex developers to use [url="//livecoding.tv"]livecoding.tv[/url]

BunkerChainLabs-DataSecurityNode

It's more cost effective to allow a bank or some other industry player looking to adopt to pay for this. It doesn't matter if we have it done, they would have it done again anyways.

Security audits tend to be of more concern to closed source projects for obvious reasons.. open source projects are open to peer review.. so anybody who finds anything can certainly report and contribute.

Some things just never get found in a timely manner though... anybody remember the bleeding heart not to long ago? :)
+-+-+-+-+-+-+-+-+-+-+
[url="//www.peerplays.com"]www.Peerplays.com[/url] | Decentralized Gaming Built with Graphene - Now with BookiePro and Sweeps!
+-+-+-+-+-+-+-+-+-+-+

rnglab

Quote from: maqifrnswa on October 29, 2015, 01:36:56 PM
Quote from: giant middle finger on October 29, 2015, 06:11:04 AM
where can I view the result's of bitcoin's security audit?

They have a full time security auditor:
http://bitcoinfoundation.org/bitcoin/welcome-sergio-lerner/
http://www.coindesk.com/bitcoin-foundation-sergio-lerner-security-role/
http://cointelegraph.com/news/113097/meet-the-bitcoin-foundations-newest-core-security-auditor-sergio-demian-lerner

Sergio Lerner used to be security consultant for BitShares on III times; before becoming Bitcoin core security auditor.
If we were going for an audit, and if he finds the time to., I think SDL wold be our best option.


maqifrnswa

maintains an Ubuntu PPA: [url="https://launchpad.net/~showard314/+archive/ubuntu/bitshares"]https://launchpad.net/~showard314/+archive/ubuntu/bitshares[/url] [15% delegate] wallet_account_set_approval maqifrnswa true [50% delegate] wallet_account_set_approval delegate1.maqifrnswa true

Pheonike

Quote from: giant middle finger on October 29, 2015, 06:11:04 AM
where can I view the result's of bitcoin's security audit?
Coinmarket cap, cost 4 biliion dollars.

Pheonike

If we want to get big money flowing it may be a necessary cost.

puppies

I am making some assumptions here, and I could be totally off base.  If we get a price on this I would not be surprised to see it come in over $100k.  I personally don't think we should spend $100k on a security audit.  I think that would be a waste of money that we should be paying to cryptonomex to improve bitshares.  If I am wrong and we can get an audit for significantly less then I would be all for it.
[url="https://metaexchange.info"]https://metaexchange.info[/url] | Bitcoin<->Altcoin exchange | Instant | Safe | Low spreads

Brekyrself

Is there certain individual or group people have in mind?  I believe this would be a great worker proposal.

Pheonike

I think that is a necessary worker proposal. It should be done.  Its the exact purpose of worker which is to improve the platform. I would support it.

puppies

I think the crux of the matter is that no one wants to spend their money on a security audit.  Do you think that your cost benefit analysis might come out a little differently if you were talking about spending out of your own pocket? 

If it's cheap, we can always do a worker proposal for it.  Has anyone looked into the cost?  I'm guessing it's prohibitive enough that we wouldn't even be able to get a worker proposal passed.
[url="https://metaexchange.info"]https://metaexchange.info[/url] | Bitcoin<->Altcoin exchange | Instant | Safe | Low spreads

fuzzy

WhaleShares==DKP; BitShares is our Community! 
ShareBits and WhaleShares = Love :D

freedom

Why Bitshares 2 not gone through a security audit?