Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - AsymmetricInformation

Pages: [1] 2 3 4 5
1
General Discussion / Re: Are people really this ignorant of BitUSD?
« on: March 17, 2015, 12:16:03 am »
This is a sad, sad thread. As ABL warned my similarly-minded friend, this will probably be pearls before swine, but I suppose I just can't resist the opportunity to do the right thing.

AB and GM are more than aware of Bitshares and DPoS, they just think that neither are any good, or even worth spending any time talking about. They laugh at 1:19:54 because all of the proof of stake ideas floating around today are just repeats of what was tried (and abandoned) in 2011 or earlier.

Having corresponded with Blockstream about this in particular, I know that at 1:21:28 Adam Back refers to "Working on What?" in my own anti-PoS blog post ( http://www.truthcoin.info/blog/pow-and-mining/ or, more specifically, his post https://bitcointalk.org/index.php?topic=907157.0 ). Then they discussed Nothing-At-Stake, and finally 1:23:45 AB refers to stake-grinding (from Poelstra's paper). All of that is in my post, and, in fact, after writing my post, multiple early Bitcoin-wizards wrote to me to basically say "You seem like a smart guy, you shouldn't waste your time on this because we've all moved on a long time ago. No knowledgeable people care about proof of stake anymore. Try working on X instead."

It is as RH comments here ( http://lesswrong.com/lw/gt/a_fable_of_science_and_politics/ ). That "people who learn the answer leave the conversation".

At 1:25:05, and 1:27:08, GM is poking fun at Bitshares (among other things).

As for BitUSD, there is no clear documentation of the constantly-shifting, constantly-ridiculous technical and economic methods by which BitUSD is constructed. There are too many examples of this to list, try https://bitsharestalk.org/index.php?topic=4692.msg59823 and note that "Howard" at http://www.truthcoin.info/blog/bitusd/ couldn't even source the BitUSD interest rate after several days of searching. All kinds of new, untested stuff (delegate feeds, market-matching algorithms) has been thrown together in an essentially embarrassing way.

Out.

2
General Discussion / Re: Consensus Markets
« on: August 26, 2014, 04:44:49 pm »
As one of the authors of the wikipedia article on Schelling Focal points, I'm afraid I have to ask that people stop linking to it as an explanation for BitUSD, as the logic of that argument is greatly flawed. A small sample of reasoning for this is already on the forums: https://bitsharestalk.org/index.php?topic=3553.msg46514#msg46514

However, you may instead link to this: http://en.wikipedia.org/wiki/Battle_of_the_sexes_(game_theory) which contains a game very similar to BitAssets if one pursues the Correlated Equilibrium mentioned in P3 of the Equilibrium Analysis section. The "commonly observed randomizing device" would of course be the publicly available exchange rate.

This model of BitAssets is probably the best one...I'm sorry to say (in my opinion) most of the other attempts at explaining BitAssets are nonsense. Note that this model isn't complete, as it does not include the margin call (which, I have been persuaded, is a weak point in the BitAsset scheme). It also doesn't address DPoS, front-running, market manipulation, etc. of course.

3
In long range NaS, the attacker has access to many private keys that used to own BTS (some assume 51% stake worth). With this he can control 100% of the delegates, at the cost only of recovering old private keys that are no longer in use. This may cost very little, as old private keys are not worth much to their previous owners, but the attacker can buy them (and check that he is getting what he paid for) and use them to attack the network. Over time, the number-of-old-private-keys increases drastically, as does the stake-of-old-key, the age-of-key, and the potential-attack-damage. So over 50 years or so this might be a problem.

If he cannot ever accumulate 51% worth of old-private-key, (it appears to me based on my current understanding) in dpos he can still eventually control 100% of the delegates with <51% old-stake by selectively broadcasting valid tx and controlling certain few addresses and ex-delegate accounts. For example, the normal network history might have some individuals rise from #107 and #108 up to #97 and #98, displacing my delegate at position #99. If I control the alternative chain, I can instead avoid brodcasting the tx that bumps my delegate.

4
What do you mean when you say "Nope"? This is the long-range NaS as described by everyone I could find who wrote about it.

Which of the 6 steps do you disagree with?

Step 4... they tell their computer to build a completely different blockchain history....

Their computer could only produce 1 block every 110 seconds and thus their chain would be 1% the length of the real history.   Unless you controlled enough shares to completely change the 101 delegate slate to one you control you will never be able to create a longer chain.

At t= -12 years, yes this may be the case. But, I assume the protocol has something in place if delegates miss blocks, and so blockchains that contain missed-blocks can continue without the protocol collapsing. As the attacker re-writes history, he will eventually manipulate 'who becomes a delegate' in his fake chains. Once he controls the delegates, he can hit 100% of the blocks for the next 12 years. Because legitimate blocks are sometimes missed accidentally, his chain might be longer after 12 years (although it would have an easily-detectible "era" of 1% delegate-participation).

And this is highly sensitive to the setup. If someone knew certain "old" private keys (key to something that held a lot of BTS funds 12 years ago, or was a delegate 12 years ago), or made certain preparation transactions, it can just get much easier. These are the long run NaS problems, and I'm not sure they can be solved by using protocol rules. PoW is more Physics than it is Computer Science or Game Theory. But perhaps attacks can be made to be prohibitively difficult.

5
What do you mean when you say "Nope"? This is the long-range NaS as described by everyone I could find who wrote about it.

Which of the 6 steps do you disagree with?

6
The 'Nothing at Stake' is indeed that people would sign two different blocks at the same time, but the true danger is that people can do this at any time.

For example:
[1] Someone was a delegate.
[2] 12 years from now when the person is no longer a delegate, they decide to attack the network.
[3] They take the current valid chain, and cut off the 12 years of blockchain-history that have passed.
[4] They then tell their computer to build a completely different blockchain-history.        Without a proof of work requirement they can do this 'for nothing'
[5] Repeat [3-4] millions of times, to make many similar chains.                                      Without a proof of work requirement they can do this 'for nothing'
[6] Sybil attack the network and try to drag people onto one of them.

PoW clients choose the chain which is longest, but PoS clients must use something else. My understanding is that Mr. L believes that long-run consensus is not a significant concern, and that wallets will be able to find the right chain by themselves without much help and without significant risk.

7
General Discussion / Re: Legal Trouble for Delegates
« on: July 30, 2014, 01:22:26 pm »
Why couldn't they make the same claims about all cryptocurrency and then ban Bitcoin? Why would Bitshares make it on their radar?
Did you read what I wrote? Nothing in life can be 'banned', in the sense that you can magically prevent it from happening. Bans are enforced with arrests, with Bitcoin there is no one to arrest but with dpos there are 100 people. Bitcoin, BTS, and most particularly"BitUSD" (and others) are likely to be banned, crippling the BitsharesX experiment. Its a very simple and boring point.

I don't really understand the points you're even trying to make.
I'm sure you can if you try.

8
General Discussion / Re: Legal Trouble for Delegates
« on: July 29, 2014, 10:25:46 am »
In the long run the legal issue isn't much of an issue at all. Distributed networks are hard to destroy just take a look at how the music and film industry did with pirating through bit torrent.
First, there is a question of scale: each film or mp3 is its own small project, and the music/film industries DO take them down, but the full system -including users who reupload content- regenerates quickly. With BTSX, the goal would be for one network to operate with high reliability, gain a large market depth, be seen as reliable to average computer-users. This leads to one big/important network. If by shutting down "100 golden dpos bittorrents", it destroyed all torrenting on the internet, then the bittorrent network would be weak (and this shutdown would be carried out as often as possible). I don't think you can "start up BitUSD again", the same way someone uploads another copy of the latest Game of Thrones (and law enforcement will understand that).

Second, dpos is not really a distributed network like bittorrent or Bitcoin. With bittorrent, anyone can step up and provide a replacement data-source ("be a seeder"), and with Bitcoin mining, anyone can step up and offer replacement tx-validation ("be a hasher/miner"). I don't fully understand dpos, but I don't see how individuals 101-200 can provide a perfect "replacement" service for individuals 1-100. Certainly it will not be identical, and probably not even close, because "the second 100" will have less experience, less reputation, less originally-at-stake, less support from the disorganized/confused tx-tapos-voters, and might react to the experience of their predecessors' downfall.

I don't see anything illegal here but if you guys are so concerned about this just vote for Greek delegates.. We always had and we will always have true democracy andwe will always have the right to believe what we want irrespective of what other governments worldwide try to impose.
My understanding is that your entire country is now owned by Germany / EU, in an almost-perfect example of Not Democracy.

9
General Discussion / Re: Legal Trouble for Delegates
« on: July 29, 2014, 12:22:31 am »
I'm not a lawyer, and I hadn't really planned to represent my position in a debate, but I just want to point out a few things.

1. "US senators complain" is not the same as "illegal". Regrettably, in 2014 only the former is important.
2. The US has arrested non-Americans in many ways and on many occasions. I also point out that, instead of being arrested, "terrorist financiers" might just get killed via drone.
3. Even though the next 100 people may step up in line and continue the BTS-service offering, these people might be reluctant to do so. Moreover, they will have no reputation, may themselves be NSA employees, etc.

Again, I don't plan to run a full debate, the above points are very obvious to me. I anticipate some here to raise objections to which there are, again, obvious rebuttals. I don't really plan on pursuing the point, it was just something that crossed my mind, so if I don't respond please do not assume it is because I would have nothing to say.

10
General Discussion / Legal Trouble for Delegates
« on: July 29, 2014, 12:05:36 am »
This is a continuation of a small comment I made here: https://bitsharestalk.org/index.php?topic=6304.msg84176#msg84176

My reasoning was just that US Senators might complain about BitUSD transfers, or even BTS transfers, claiming them to be money-laundering / tax-evasion / terrorist-financing. The NSA would then physically locate the 100 delegates and the government would throw them all in prison, as was done to so many Bitcoin predecessors.

Not wanting to derail the thread, which was about additional responsibilities for delegates, I just thought I would manually move the discussion here.

11
General Discussion / Re: BitAsset Market Manipulation Security
« on: July 28, 2014, 03:13:55 am »
merockstar has it right.

To be more specific...
I do not know of any laws that a delegate could be accused of violating.
...that is crazy. What about AML / SAPs (terrorist financing/tax-evasion)/ KYC, before we even touch the entire world of SEC / Treasury / FED regulations?

Put simply: If US senators start complaining, what then? Of course the NSA will know the physical location of the delegates' computers.

Dpos certainly has a powerful regenerative force, in that delegates 101 through 200 can just just step up and keep the system moving, but (I argue) the entire value-proposition of Bitcoin was that there would be nothing for an attacker (government / moral or otherwise) to shut off. It was LibertyReserve without a target. 100 people is smaller than most organizations...if a few executives from a-Canadian-bank-that-allowed-individuals-to-withdraw-money-from-InTrade can be arrested while vacationing in the USA and face 5 years in prison, so can essentially anyone.

12
General Discussion / Re: BitAsset Market Manipulation Security
« on: July 27, 2014, 11:33:12 pm »
The feeds are not even critical...  if an attacker can get 51% of the feeds and and have enough stake to manipulate the market then they can destroy one BitAsset... the chain would fork and people would continue.
You shouldn't really worry about what I have to say, I haven't had the opportunity to think through this at all. But forking the chain can be profitable via double spends, can't it? I just attack a small or medium sized BitAsset, while selling BTS on an external exchange. After the fork I get my BTS back.

I would really just prefer you to turn it on, I think, than keep theorizing about it.

13
General Discussion / Re: BitAsset Market Manipulation Security
« on: July 27, 2014, 09:59:36 pm »
Sounds like being a delegate is a lot of (crucial) work, and you might be arrested (LibertyReserve had way more than 100 employees). Maybe all of the delegates can be from Switzerland, or something.

This is going to be pretty complicated to analyse now...I suspect that with 12 delegates comes instant victory. Getting 12 might even be easy, if 88 are going to be left in the dust, you wouldn't want to be one of those 88. 1 for free if you are a delegate yourself... I don't know when I'll have time to try and figure this out.

14
General Discussion / Re: drltc's Trustee Technical Discussion Thread
« on: July 26, 2014, 10:03:23 pm »
Let me clarify.

[1] I see that Gold is trading for $1000. Lowest ask: $1100, highest bid: $900. There are several asks above 1100.
[2] I feel that I would pay up to $1500 for 1 Gold. "What a deal! They're just giving it away...I can't wait to make another gold-plated N64 controller!"
[3] I place a trade: 'Buy 1 Gold for $1100'

[4*] At this point, someone "runs in front" of my trade (knowing that I want it at $1100), and places their own 'Buy 1 Gold for $1100'

[4*] Then I get frustrated...my order did not go through! I try again: 'Buy @ $1200', 'Buy @ $1300', 'Buy @ $1500'. Each time the trade is front-run and I don't get my gold!

The change in price does NOT have to be specific to me. What if I observed a gold mine collapse (decreasing the supply of gold and increasing its price)? In a world without front-running, I could profit by trading to reveal this information. However, if someone front-runs me, they'll get all the reward. Why should I even bother? Front-running destroys a market's ability to aggregate information. The problem is greatest in prediction markets, which directly concern information.

How does the matching algorithm discourage this from happening?

15
General Discussion / Re: drltc's Trustee Technical Discussion Thread
« on: July 26, 2014, 09:32:35 pm »
Lets address the issues here:

1) front running ... this particular issue does not apply given my matching algorithm.  The person placing the order will get the same price regardless of what any other party does.   In fact, one could argue that the blockchain earns revenue by intentional front-running and that the shareholders are the ones to benefit from it.   

Suppose every buyer wants to maximize the probability that their order is filled, subject to the constraint that the price is less than HPBWP (Highest Price Buyer Is Willing To Pay).  Obviously, a buyer can achieve these goals by setting a bid price equal to HPBWP.

However, the person who assembles the block might have a better option which achieves the same goals.  Since they know all other transactions in the block, they can compute exactly where in the order their transaction will be.  They can then compute the best Ask price at that point in the sequence, and set their order to that price (Best Ask At Time Of Execution or BAATOE).

There is value in the spread HPBWP - BAATOE.  One goal of BitShares X is to capture this value and return it to shareholders.  If the person who assembles the block has the capability to input their own transaction as the last transaction in the block, they can effectively circumvent the capture mechanism and extract the value for themselves.

My solution is a protocol design which requires all transactions to be signed by several randomly chosen notaries to be included in a block.  Thus a single notary or a small group of colluding notaries cannot perform the above attack.

I request a follow-up to this from Bytemaster, as it seems that the proposed matching algorithm actually does not prevent front-running, nor mitigate the (very real) damage.

Pages: [1] 2 3 4 5