/biz/ - Business & Finance

>h-hodl fellow marines, d-don't sell!

>>21650157
>Who the FUCK is Jason Parser and why do I keep hearing about her?

>>15280058
>Cheynlink solvz the ooowracle problm

Chainlink's strategy for security isn't very good. They seem to think that if they describe a large enough volume of different mechanisms, that no one will be able to find a bug in that tangled mess.

A key concept we will use to simplify this analysis is that a mechanism can only be as secure as it's weakest part. As stated in the chainlink white paper: "The security of any system is only as strong as its weakest link"

It is almost always a bad idea to layer different oracle security mechanisms on top of each other, since the resultant mechanism will be as insecure as the least secure of the component mechanisms.

The layers of oracle in-security implemented in Chainlink are:

api data-source
data source aggregation
non-spendable reputation
spendable reputation
certifications
trusted hardware

The chainlink team is already aware that trusting a central api provider is not a secure oracle. From the chainlink white paper "There is, of course, noperfectly trustworthy data source. Data may be benignly or maliciously corrupted due to faulty web sites, cheating service providers, or honest mistakes."

In particular, the cental person running the API could choose to change the data provided over time, or to give different data to different parts of the oracle to cause oracle participants to lose their reputation. In this way, the person who controls the api can not only corrupt data from their own api, they can cause other parts of the oracle system to break down.

Trusting an api data source is a level 4.1 security.

>>12538686
I quickly got distracted when, as expected, a linktard walked in, hoping to empty his bags.

I don't get it, 90% of coins mentioned here seems to be trolling, is ChainLink troll or not? Small team that doesn't say much but apart from that, isn't the idea great? What did I miss?