SBF likely off the hook for misplaced FTX funds after cops bust SIM swap ring

The recent indictment of a massive SIM-swapping ring may mean convicted crypto conman Sam Bankman-Fried is innocent of at least one allegation still hanging over his head: The theft of more than $400 million in crypto hacked from wallets belonging to his crypto firm, FTX, just before it declared bankruptcy. As reported earlier …

[Blazde]

Non-transitive comparison breaks glibc qsort

I ran into this problem in real-world code many, many years ago and have the traumatic flashback to this day every time I use custom comparison. It's not all that difficult to mess up a complicated implementation with multiple branching conditionals, and you're one of the lucky ones if the sort crashes (or hits a bounds check now). At the time I figured 'of course this mysterious segfault that took hours to diagnose is all my fault' but now, in 2024, I think both glibc and any to-be-discovered broken callers should have a CVE.

My 2 cents anyway. Good that it's fixed.

[Michael Wojcik]

Re: Non-transitive comparison breaks glibc qsort

Yes, I'm not persuaded by the glibc team's finger-pointing either. They're technically correct (the best kind of correct) that the contract requires a transitive comparison function, but that's no excuse for not practicing defense-in-depth and adding the bounds check. Well-written libraries do not assume perfection from their callers.

[ChoHag]

Re: Non-transitive comparison breaks glibc qsort

> Well-written libraries

Found the problem.

[Paul Smith]

FTX theft...

"Powell was reportedly arrested in Chicago last week and is being held without bond "

If I had successfully stolen $400 million, I would a) not still be in Chicago in mid-winter and b) have a sufficiently good lawyer that the idea of being denied bail was laughable.