Some questions and concerns

Developers
1

Hi there, I’m a developer from DFinance and we have some questions:

  1. Recently, the pjljw subnet is unstable. Is there any way to migrate canisters from 1 subnet to another subnet? If so, how to migrate the data within the canisters?

  2. Is there any suggestion on how to backup the canister data? If the subnet is down(unlikely) or canister hacked(very possible when it comes to financial applications), we need to restore the state back to the original state to eliminate the effect of hacking, so I think maybe we need a way to backup canister data.

  3. Is there any security audit services for the Internet Computer ecosystem now? Especially for Motoko. Security is the most important thing for a new ecosystem, especially when it comes to financial applications. TheDAO hack could have killed Ethereum, we don’t want that kind of thing happen to the Internet Computer.

3 Likes
2

My non-authorative take on that:

  1. Canister migration is not implemented, but at least it was taken into consideration. In particular the mapping from canister id (which you surely want to keep) to cansiter is flexible enough to change it for some or all canisters.

  2. For now: implement backups in application logic (a query method that checks that the caller is you). I predict we’ll get the ability to inspect the full cansiter state, which is also important for debugging, including suitable authentication, but I haven’t seen it on any roadmap yet, so don’t expect it to be done before your need backups.

  3. I am not aware of a security audit of Motoko.

2 Likes
3

Thanks for the reply :slight_smile: