Title: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: cinnamon_carter on May 30, 2015, 04:00:21 AM Let me say first that I am not an enemy of alt coins.
I am involved with several alt coin projects some of which are actually quite successful and have run a few things myself in the past with 'limited' success or challenges which I learned a lot from. I was a 'guest' to these testosterone filled forums for a long time (how long I honestly don't remember) since I used to just pop by when I heard something big going on. I really only joined one day before I launched my own first coin project so I could post in the alt coin forum. The all male crowd was always a turn off to me even back to the days when minerd seemed like the most amazing innovation ever. I always thought bitcoin was a great idea but never thought it would ever have come as far as it has .... If I did I would probably be a member of the inner elite few who mined a lot early..... but that is another story for another time.... I have no regrets. Even years ago there was a lot of bs around. After all in a public forum when people can say what they want you can expect a certain amount of 'static' or 'junk' among the normal honest discussions, remarks, bad jokes, and some very brilliant posts that I have learned many things from. Today the level of outright lies and also what I suspect are 'shills' or people running extra accounts to make threads longer and longer seems to have reached a level higher than the number of alt coins released ever. What did the guy in Apocalypse Now say 'It piles up so fast you need wings to stay above it' ? I have decided not to name or shame any specific coins or developers. I will speak in 'general' and you will have little difficulty finding many examples. I am not out to slam anyone in particular. I do believe there is a lot of great work going on but it can be lost in the shuffle of endless scams. The purpose of me starting this thread is to: 1) State my opinion on the general dishonesty I see in the alt coin scene in particular the projects that have self moderated threads and even more particular those with self moderated threads AND proof of developer ratings. 2) By not moderating this thread allow those who feel differently than I do to voice their own opinions or concerns or offer proof I am wrong. 3) Encourage people to do their own research and if you are not qualified to do your own research (read code on github, test code ect...) suggest a few things to look out for. Here are some facts. If you think I am wrong please do post the evidence in this thread. a) None of the current proof of developer or similar 'services' that exist do anything more than 'say' they checked someones identification and other information. They do not review any source code nor do they have qualifications to do so. They use unsecure methods like e mail or skype instead of secure measures like a signed pgp key or a signed (bitcoiin or other) transaction. Their work is not published using pgp or any other known secure verifable process. b) Self moderated topics have a place in the forum but if you are starting a coin a self moderated topic allows the 'moderator' or person who started the topic to delete posts they don't like or posts that are critical of the project. c) If you release anything open source on github either a cryptocurrency , a miner, a video game, anything else......anyone in the world can review your code and compile and test the program to see if it does what it is supossed to do and how well it works and also if it does things it is not supossed to do. d) It is possible for someone to launch a coin (or other open source project) and 'release' wallets or clients that do not match the code that is 'called' the source code on github in such a way these 'rogue' clients will still work with the network. e) It is possible for someone to launch a coin (or other open source project) and begin the network running rogue code that is never released on github or to the 'public' while the published source code and builds are different but will still function on the network. f) An 'honest' project that is released to the public can only expect to move so fast. If a coin is ninja (quick) launched and there are 3 pools at launch the pool operators had to have the code before launch or the pool would not be ready. If the pools are available an hour later (or longer) that would be more expected. This may be ok as long as the pools did not start mining before the official launch. g) Maintaining a network (over time) is an expense and also can be a lot of work. If a network has no 'nodes' to connect to it will not function. IRC has banned bitcoin and alt coin clients for years so when a coins wallet has 14 connections they are all ip to ip direct connections only. h) No matter what is said in a launch thread the purpose most people code and launch alternative coins or pay someone to do it for them is with the hope of making bitcoin or money. As time has gone on the methods employed have become more and more sophisticated but usually the intent is the same. i) A majority of people who mine coins are also doing so with earning profit in mind. Most people cannot see any other reason they would ever mine a coin unless it was going to personally benefit them in some way. j) A small few in number of what I would consider legit and trustworthy developers (people who can write code from scratch and design original or different features vs. someone who can just clone a coin) actually disagree with my opinion and have been rated by one or more services. In my eyes it gives these non-legit 'services' fake credability. Discussion and more facts: There was a coin release (just one example here of many of what kind of money these schemes bring in ) that was sold at an ipo at a popular exchange months ago and sold out making way over 400 bitcoin. It promised several features/ideas. Proof of developer gave it the highest rating possible and the coin (still now) has a self moderated topic on this forum. It never delivered the features promised and although it is still traded on more than one exchange not long after launch it was heavily dumped. So in my eyes those responsible basically robbed well over 400 bitcoin in an operation that took a few days time and a couple fancy posts and with souce code cloned from other coins that anyone who can clone a coin could have deployed in a few hours or less. Some people feel that if a person is not smart enough to protect themself or if someone gets ripped off , screw them, they deserve it or it is ok. This 'Caveat Emptor' idea is how I used to look at things myself. I still sympathize with those who feel like this. One thing that started to change my opinion was when I noticed some people who cannot read code but want to invest in alt coins actually believed this proof of developer concept meant something. It means nothing. Zero. Just because someones identity is known or they are 'endorsed' by another party who is supossed to be qualified to offer such an accolade is no guarantee they are honest or competent. They could still plan a dishonest project like the one I just described (and believe me there are more like this than I can honestly count - some appear more successful than others) with the sole intention of never delivering what was promised and walk away with a nice amount of btc/money for doing absolutly nothing. Suppose they are actually honest. What if the new innovation they want to sell to the masses fails or they fail to code it. What if it breaks or has vulnerabilities. It is possible but I personally have yet to observe what I consider a 'legit' project as an ipo. I have never invested in any. I did look at a few and thought ' wow that seems like a cool idea' .... but I never was convinced that anything real took place until I actually saw it work. So what do you do ? Avoid a project with a self moderated thread. What else can I say. If no critical remarks are on that thread in these times in this forum something is wrong and it can be the most legit project ever and people will still probably say some negative stuff. If not self moderated and you are not able to examine the code post to the thread and ask for someone to look it over and answer your questions or to show you where 'specific' things are. Never be afraid to ask questions. If the developer answers you great but seek opinions from others also when possible. Do not think that a project that is only has ten or twenty pages long must not be alive and happening since if it was really all so good it would have five hundred pages. There are alt coins running for years that have quite short threads here in this forum. Those projects are quite legit and doing well. There are also coins that I watched as recently as last week when the forum came back online in which the thread went from 1 page to over 60 pages inside of a few hours. This is not natural. I suspect shills or people recruited on purpose for the new coin launch. (that particular coins page count is still growing rapidly !!) Be cautious of coins that 'change' the distribution of the supply after launch. I know a a few coins that I consider 100% legit and done by talented teams that have changed things after launch. Maybe they changed the algorithm or the dificulty retargeting. There may be very good reasons for this. Some coins may have changed the number of coins a block or the block time but if it is a major change ( lets say something that cuts the total supply to 25% of the original or less) or cuts the amout of time of mining the entire supply (lets say from 20 years to 2 years) I would take a pass. Please run alt coin wallets in a virtual machine or at least not on your regular computer. Always do a check of the client on virus total. I realize some coins have false positives but if it comes up with a virus total of more than a handful and they are showing up as trojans, keyloggers ect.... run screaming. It has happened more than once and it will happen in the future. (I am referencing item 'd' above) where someone releases a coin and the source compiles clean so if someone who always builds their own wallets like me uses it they won't have any problems but if someone downloads the initial client it has an unwanted payload. Some of these had a virus total of zero since the crooks wrote their own custom payload. Remember that some long term members of this forum have sold their accounts so just because a coin was launched by someone who is 'legendary' does not mean it is as it appears. Actually you are more likely to see sr. or hero member accounts that were 'purchased' . How do you know that the developer did not hide a premine of a million coins (like in section 'e' above) from everyone ? These hidden premines cannot hide from a full abe block crawler or someone examining the blockchain. When I want to check something out I build my own full abe block crawler in private to look over a network. (The one provided by a development team can in theory be coded to display what it wants you to see although I am not aware of this ever actaully happening.) Yes you can examine a network from the classic 'satoshi' client itself but not as easily as with the abe style interface. Don't waste your time on things that seem too good to be true. Don't buy or pay for a coin that promises something before it is actually released and proves it can do what it promises it will. Honest and competent developers will always release the source code to the public and welcome critics. Premined coins obviously should be avoided with very rare exception. I see some coins that are premined and it says 5% of the supply is premined .... but the number of coins in the five percent is large vs. what will be mined out in the next year... obviously that premine of 5% means much more if it represents 25% or 50% of the total supply that is available after 6 months or one year. I have no personal problem with 'ninja' or quick launches if the other dynamics of the coin is fair. This gives people who happen to be lucky enough at launch to start mining to get a few coins but no so many that they end up owning 20% of all the mined coins !! Watch out for the instamine ! If 20% of a coins supply is mined in the first day take a pass. Consider any coin that has a short time frame for anything: like a short time frame for proof of work or all coins are mined in a week , ect.... an automatic throw away. Think of a salesperson saying to you 'hey you have to buy now since they will all be gone tomorrow' ..... Proof of work is best. Proof of stake?? Sorry I cannot support it because of security issues. At one time I was a true believer in proof of stake and even personally launched an alt coin that was proof of stake. I can tell you it took a while for me to realize that without centralized checkpointing and control (like ppc has) proof of stake has some security issues in particular since many alt coins use an older codebase of bitcoin to start from. I don't want to go technical in this post but I personally know several ways that can really produce 'unusual' or 'undesired' results with a proof of stake coin. Some of these you need to be able to change code around and compile your own attack client or node and some of these flaws are exploitable by someone with some coins in a regular wallet just by changing the clock on a windows computer. Even with the centralized checkpointing system that ppc was using proof of stake fails to solve /resolve what is called the byzantine generals problem. (you can google that with or without bitcoin if you want to learn about it and why it is important). Finally I will say I think proof of stake has potential for the future but there is no substitute for proof of work. Regarding the 'centralized' concept of checkpointing I realize some proof of work coins use this to a lesser or greater extent to secure the block chain from attack. I don't think anything centralized is good. If an individual like me or you can compile the code, run a node and it will work with everything that is my personal test. Other important things to remember with alt coins or any coin. Unless you are mining solo, hopefully the pool you are a member of is being run honest and with updated software by experienced people. Recently there was a 'bug' (some called it a 'backdoor') or vulnerability discussed in these forums for strantum mining that allowed upper and lower case letters in hex. numbers to not be properly checked. While most bitcoin pools I know of have updated something like this allows someone who exploits it to steal (not from a coin network) from the other miners in a pool by submitting false shares they did not mine. Most pools regularly get 'attacked' in various forms. In fact I would extend that to say that pretty much any type of large or even partially successful project tends to get attacked to some degree over time. Stick with pool operators who are known and reliable that have the experience to handle things if you expect to be paid. There are no guarantees in cryptocurrency. It is a gamble. I sometimes have mined a few coins that are not even traded on an exchange or ones that are but are 'unpopular' or 'unprofitable' .... I like to check out different technology and learn things. I am not suggesting you be like me but I am suggesting that the technology is often overlooked or misunderstood by many who frequent this forum. An example of this is that many believe that alt coins with multiple algorithms like x13, x23 , x77 , ect.... are more secure than a single algorithm. Sorry that is not true in fact the opposite is true. There has been a lot of scientific research done on this and experts in cryptography agree and have published verified studies that adding more algorithms not make encryption more secure than using a single algorithm. That does not mean these multiple algorithm coins have no security only they are as secure as the weakest of the algorithms used. Any coin network or blockchain is only as safe as the difficulty. The lower the difficulty the easier it is to attack. The higher the difficulty the more difficult it is to attack. If a coin is launched and the development team does not have resources to secure the blockchain or if not enough people are mining to secure the blockchain you should be careful. Some projects grow over time and become more secure as more people mine. Just don't think that a blockchain that is using scrypt 1024 is secure at a difficulty of 2. In closing I do want to say we should all be greatful to 'Satoshi' and many other brilliant developers who have improved the codebase over the years on which almost all alt coins are built. There are also some fantastic teams of alt coins out there who are very talented and are running very honest coins. Some alt coins actually have some features that are in some ways 'ahead' of bitcoin in technology or security in concept although certainly not in difficulty (which is the main measure of how much trust you can place in a blockchain). The purpose of this was just to encourage the 'real' people out there to seek out the right things and stay away from the wrong things when making choices so you won't get burned. All great successful things generally take time to develop and grow. Look how many years bitcoin has been running ? Don't expect a coin running two days on a self moderated thread with a rating of five stars from some 'free service' where the person who gave that rating and the person who is called the 'developer' cannot even write or compile hello world to be the bitcoin killer. It won't be. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: Vlad2Vlad on May 30, 2015, 04:10:55 AM Theymos should make this is a sticky in the alt-coin section. Every newbie should read it! Thanks for posting it! Cheers! Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: moko666 on May 30, 2015, 11:34:23 AM A good information, a complete version of this should be added to altcoin announcement.
Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: cathat on May 30, 2015, 11:55:02 AM A very interesting reading!
Thanks you. bye Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: muddafudda on May 30, 2015, 12:15:53 PM Agree 100%. +1
Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: bathrobehero on May 30, 2015, 12:36:22 PM Well done, very well put together.
Also, I've never thought about chaining algos could be as secure as the weakest algo in the link but looking into it you're right. +1 for sticky. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: JohnnyBTCSeed on May 30, 2015, 01:38:54 PM Hear, hear.
Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: cinnamon_carter on May 30, 2015, 03:13:55 PM Thanks to everyone who liked the post.
If you want additional information about the security of combining hash functions this pdf is a bit long (and may be a little technical for a casual reader) but offers a good, valid discussion. http://ai.stanford.edu/~xb/crypto06b/blackboxhash.pdf (http://ai.stanford.edu/~xb/crypto06b/blackboxhash.pdf) Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: billotronic on May 30, 2015, 03:20:49 PM This is an AMAZING post full of great info.
Only part I take issue with is your silliness about PoS being insecure. Please, point me to an example of working PoS exploits. I know of one and its simple to fix. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: sdmathis on May 30, 2015, 03:47:06 PM Great Information!! A must read for EVERYBODY.
Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: cinnamon_carter on May 30, 2015, 06:00:17 PM Regarding proof of stake the 'clock drift' is the most obvious / known current issue on a 'majority' of alt coins using it presently.
My intention is not to discuss details that can teach people how to attack proof of stake coins that exist now. To stick with concepts I think this post by one of the developers of Ethereum (which actually presents a case why proof of stake is a viable option) is a good reference. Some present models are torn apart. https://blog.ethereum.org/2014/11/25/proof-stake-learned-love-weak-subjectivity/ (https://blog.ethereum.org/2014/11/25/proof-stake-learned-love-weak-subjectivity/) additional information here https://docs.google.com/document/d/13_FSQ1Koq8uLvqTaSvZdb6OT2SpUZZq53vFiiDQj4qM/edit?pli=1 (https://docs.google.com/document/d/13_FSQ1Koq8uLvqTaSvZdb6OT2SpUZZq53vFiiDQj4qM/edit?pli=1) And here https://blog.ethereum.org/2015/01/10/light-clients-proof-stake/ (https://blog.ethereum.org/2015/01/10/light-clients-proof-stake/) His solution however is 'Centralization' --- :o Personally I do not wish to support mandatory centralization. Even if it means the network will be more expensive to maintain. I believe 'Satoshi' once predicted that eventually the popularity and price of bitcoin could start to impact the cost of resources necessary to produce it. One can make the point to say 'bitcoin is centralized now' ; well it may be to a certain degree but it still functions as a decentralized network. As I stated initially I still think proof of stake has future potential but I honestly believe there is no current substitute for proof of work. Maybe one will be developed. The best test of how strong/secure/good any particular code is to release it open source to the world and allow some time for people to look for ways to improve it or exploit it. In particular when there is a 'reward' (like coins that can be traded on an exchange) for people who successfully 'attack' or 'find holes' in published code it may cause developers to improve the code and find solutions. This has even happened with bitcoin and if you want to consider proof of stake ppc also has certainly 'improved' from where it was at the time of release to now. Thank you for the feedback. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: futureofbitcoin on May 30, 2015, 06:12:37 PM the best way to avoid scams in the wild west is to avoid the wild west.
Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: sdmathis on May 30, 2015, 06:27:39 PM the best way to avoid scams in the wild west is to avoid the wild west. Fortunately, most people don't feel that way. The best way to avoid scams is through education. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: Spoetnik on May 30, 2015, 07:42:08 PM It's really simple..
Does new XYZ coin beat Bitcoin ? no ? Then it's crap posted to make some guy or guy(s) money. Get it ? Come on there is THOUSANDS of Altcoins and they KNOW BETTER they know damn well that there new innovative coin does not have a chance of hell at going anywhere long before it's posted publicly. There needs be no complicated analysis here what so ever. Only reason to do that is to try and build up your own cred for your own projects.. aka: I'm a legit dev and my coins are legit and the other guys are scammers. nice try guys and *girls LOL AND hey do you KNOW peoples private mental motivations ? NO ? then how do you know they have bad intentions or not ? ..you don't. I see no reason why 99% of the last few thousands coins were posted. If an Altcoin can not reach the level Bitcoin has so far and surpass it then it's pointless. And I am tired of asking so called *legit devs why they didn't just use Testnet LOL Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: sdmathis on May 30, 2015, 10:40:01 PM It's really simple.. Does new XYZ coin beat Bitcoin ? no ? Then it's crap posted to make some guy or guy(s) money. Get it ? Come on there is THOUSANDS of Altcoins and they KNOW BETTER they know damn well that there new innovative coin does not have a chance of hell at going anywhere long before it's posted publicly. There needs be no complicated analysis here what so ever. Only reason to do that is to try and build up your own cred for your own projects.. aka: I'm a legit dev and my coins are legit and the other guys are scammers. nice try guys and *girls LOL AND hey do you KNOW peoples private mental motivations ? NO ? then how do you know they have bad intentions or not ? ..you don't. I see no reason why 99% of the last few thousands coins were posted. If an Altcoin can not reach the level Bitcoin has so far and surpass it then it's pointless. And I am tired of asking so called *legit devs why they didn't just use Testnet LOL Most alts can rightly claim to be an improvement on Bitcoin, so that doesn't really mean anything. Of course most devs are in it for a quick buck. That's the whole reason why people need to be careful, and that's why the OP took the time to write his post. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: futureofbitcoin on May 31, 2015, 02:23:28 AM the best way to avoid scams in the wild west is to avoid the wild west. Fortunately, most people don't feel that way. The best way to avoid scams is through education. Fortunate for scammers? The best way to avoid scams is to avoid the risk in the first place. There's no arguing about that. If you're willing to take the risk for a potential return, you have to recognize that as smart and educated as you may be, it still could be an elaborate scam, or it simply doesn't work out. If you're 100% adverse to being scammed, don't do this. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: NattyLiteCoin on May 31, 2015, 02:54:13 AM Thank you for the thoughtful post, it was refreshing. Found this little diddy on the GitHub:
https://github.com/litecoin-project/litecoin Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: TheMystic on May 31, 2015, 02:57:10 AM the best way to avoid scams in the wild west is to avoid the wild west. Fortunately, most people don't feel that way. The best way to avoid scams is through education. Fortunate for scammers? The best way to avoid scams is to avoid the risk in the first place. There's no arguing about that. If you're willing to take the risk for a potential return, you have to recognize that as smart and educated as you may be, it still could be an elaborate scam, or it simply doesn't work out. If you're 100% adverse to being scammed, don't do this. Bitcoin is part of the Wild West, so I assume that you're here purely for entertainment. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: tss on May 31, 2015, 05:36:39 PM only 2 ways to avoid scams in the alt coin scene
1) avoid the alt coins completely 2) be the scammer Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: gjhiggins on May 31, 2015, 06:51:11 PM Also, I've never thought about chaining algos could be as secure as the weakest algo in the link but looking into it you're right. That's rather a charitable perspective. I'm less charitably disposed: folklore combiners such as chaining cannot be proven to improve security but also cannot be proven not to weaken it, hence a FAIL by basic crypto principles. The culprits responsible for inventing and promulgating this twaddle: “Quark uses nine rounds of secure hashing from six different algorithms to make Quark transactions super secure.” https://web.archive.org/web/20131204202238/http://www.qrk.cc/ Media bunnies, pah. Cheers Graham Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: YarkoL on June 01, 2015, 08:07:52 AM Essential stuff and worthy of being elevated to a sticky, which will not happen, so I guess it needs to be bumped regularly by the community. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: HCLivess on June 01, 2015, 09:31:54 AM Bump. Well-written.
Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: Daedelus on June 03, 2015, 04:54:55 PM Proof of work is best. Proof of stake?? Sorry I cannot support it because of security issues. At one time I was a true believer in proof of stake and even personally launched an alt coin that was proof of stake. I can tell you it took a while for me to realize that without centralized checkpointing and control (like ppc has) proof of stake has some security issues in particular since many alt coins use an older codebase of bitcoin to start from. I don't want to go technical in this post but I personally know several ways that can really produce 'unusual' or 'undesired' results with a proof of stake coin. Some of these you need to be able to change code around and compile your own attack client or node and some of these flaws are exploitable by someone with some coins in a regular wallet just by changing the clock on a windows computer. Even with the centralized checkpointing system that ppc was using proof of stake fails to solve /resolve what is called the byzantine generals problem. I presume you have only looked at Peercoin's POS (coinage) implementation? Nxt would pay you bounties if you could show your ideas are applicable to their algo (doesn't use coinage or rely on centralized checkpointing). Clock computer would be interesting to know more about. I believe Nxt client's will accept tx's from up to 15 sec in the future IIRC to allow for latency in the network, I presume. PM me or start a new thread or go to nxtforum.org if you are interested in the bounties. Quote Regarding the 'centralized' concept of checkpointing I realize some proof of work coins use this to a lesser or greater extent to secure the block chain from attack. I don't think anything centralized is good. If an individual like me or you can compile the code, run a node and it will work with everything that is my personal test. How about using decentralized checkpointing? Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: sdmathis on June 03, 2015, 05:40:33 PM Proof of work is best. Proof of stake?? Sorry I cannot support it because of security issues. At one time I was a true believer in proof of stake and even personally launched an alt coin that was proof of stake. I can tell you it took a while for me to realize that without centralized checkpointing and control (like ppc has) proof of stake has some security issues in particular since many alt coins use an older codebase of bitcoin to start from. I don't want to go technical in this post but I personally know several ways that can really produce 'unusual' or 'undesired' results with a proof of stake coin. Some of these you need to be able to change code around and compile your own attack client or node and some of these flaws are exploitable by someone with some coins in a regular wallet just by changing the clock on a windows computer. Even with the centralized checkpointing system that ppc was using proof of stake fails to solve /resolve what is called the byzantine generals problem. I presume you have only looked at Peercoin's POS (coinage) implementation? Nxt would pay you bounties if you could show your ideas are applicable to their algo (doesn't use coinage or rely on centralized checkpointing). Clock computer would be interesting to know more about. I believe Nxt client's will accept tx's from up to 15 sec in the future IIRC to allow for latency in the network, I presume. PM me or start a new thread or go to nxtforum.org if you are interested in the bounties. Quote Regarding the 'centralized' concept of checkpointing I realize some proof of work coins use this to a lesser or greater extent to secure the block chain from attack. I don't think anything centralized is good. If an individual like me or you can compile the code, run a node and it will work with everything that is my personal test. How about using decentralized checkpointing? I took it to mean all POS coins based off of Peercoin (which is most, but not all) POS coins. Some, such as Blackcoin, VeriCoin, etc... have changed their code to increase security. And then there is NXT which was coded from scratch. It's good that you brought that up because there are people who might think that all POS coins are insecure. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: Spoetnik on June 03, 2015, 07:49:07 PM It's really simple.. Does new XYZ coin beat Bitcoin ? no ? Then it's crap posted to make some guy or guy(s) money. Get it ? Come on there is THOUSANDS of Altcoins and they KNOW BETTER they know damn well that there new innovative coin does not have a chance of hell at going anywhere long before it's posted publicly. There needs be no complicated analysis here what so ever. Only reason to do that is to try and build up your own cred for your own projects.. aka: I'm a legit dev and my coins are legit and the other guys are scammers. nice try guys and *girls LOL AND hey do you KNOW peoples private mental motivations ? NO ? then how do you know they have bad intentions or not ? ..you don't. I see no reason why 99% of the last few thousands coins were posted. If an Altcoin can not reach the level Bitcoin has so far and surpass it then it's pointless. And I am tired of asking so called *legit devs why they didn't just use Testnet LOL Most alts can rightly claim to be an improvement on Bitcoin, so that doesn't really mean anything. Of course most devs are in it for a quick buck. That's the whole reason why people need to be careful, and that's why the OP took the time to write his post. you mean *HER post ..read more carefully ;) And you didn't get it. A lot of the time new features can be applied to abandoned / dead coins or even existing projects.. after all there is MANY asking for more dev help. So why do we see a new coin posted with an IPO/ICO etc instead of someone adding a new feature to an existing coin ? $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ And don't forget if you devs wanted to ? you could write and submit codeforo Bitcoin itself.. It's not like you HAVE to make your own coins and play this whole I'm more credible than some other guys here game.. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: cinnamon_carter on June 04, 2015, 12:41:05 AM Just because an alt coin exists and forked from bitcoin does not automatically discredit it as junk.
If there was ONLY bitcoin I would never have even joined the forum. I certainly admire the work of the bitcoin team. I read their updates and comments on github almost every day and have for some time. Even reading commits from a few years ago I have learned many things. Anyone who feels all alt coins are scams or shit coins (Which is certainly the opinion held by many) is entitled to their beliefs but I wonder why they would even bother visiting the alt coin section of this forum. (which ironic as it may sound I was told generates the most traffic and revenue for this forum) If for you btc is all there is then you may be most happy among those who want to develop and work on bitcoin. I thought about submitting pulls for btc myself a while ago however I think the core team generally handles things on their own and I see little opportunity or incentive for myself doing that. It appears from me watching them at work for a while if you are not all ready a regular you won't be accepted. (To me peer recognition of ones skills or contributions are more important than monetary compensation..... ) I could be wrong. Maybe someday if I see something I could contribute that would be of value I will submit it and see what happens. One thing over time I have started to wish was different about bitcoin is how the reward structure was set up. Long gone are the glory days of 50 btc a block. In about a year the days of 25 wlll be gone. And you all probably know the rest.... With such a large amount of coins done early the advantage to those who got in early is much greater that the potential opportunity to someone who wants to get in now. Yes I have read the original white paper and probably every post by 'satoshi' in the forum here and many many other things...... I wonder if history were replayed where the block reward stayed steady or had a more gradual gentle decline what would have happened ?? Maybe bitcoin is successful in part because of this aspect. Still coins that offer a fixed or more gradual reduction are personally more to my liking. I add these personal preferences of mine as afterthoughts only. Thanks to those who have suggested the admins of the forum pin this thread. I don't think that would eve happen like bitcoin itself the forum is carefully operated by a tight group. I am certainly not among that clique nor do I seek it. I would not object if they removed my name /personal opinions and just posted the facts or added them to one of the existing pinned threads. Even if they only posted 'some' of the facts it would be ok with me. I am not seeking any personal credit or recognition. To answer those on nxt and the proof of stake questions, I have looked it over but not real close. I do not own any and never experimented or tested it.. I have read the work and research of others however and (at least to me) I think the papers I posted earlier from the Ethereum developer are very well written and his logic applies not only to any coin based on older (or newer) ppc code bases but also to nxt. I am not knocking nxt on 'tech' specs although I think any ipo where initial coins are created out of nothing but code and sold to others and build a system that just generates more coins is something that has a reward structure contrary to what I feel is fair. You can disagree if you like. I am not saying it is a scam only that some things surrounding nxt I heard about (mostly in this forum and on twitter) like coins vanishing for example have been brought up often enough that I believe it has happened. It is more likely a glitch if it actually happened not something done intentional. I can imagine a future where releasing an alt coin would be treated by figures of authority like trying to issue your own paper money and have it used for the exchange of goods/services where you live. I bet eventually people who like to stay in the shadows won't be able to run coins at all. Eventually like other industries regulation will creep in. Everyone who sells insurance, traditional financial products ect.. in the United States has to have a license (or several licenses) to do so. The people who get licensed for all these things have to get background checks, probably give fingerprints and other things too and pass examinations and pay money to 'maintain their licenses' so they can 'stay in business'...... The second funniest thing of all is regulation of this nature gives birth to an entire layer of a secondary industry that makes a living charging those who need the licenses fees to conduct these examinations and other things (a lot of time this is the government itself who is in control by charging people to be 'licensed'. The funniest thing of all is the government and some people will have everyone believe this is all done to protect us......... after all no licensed insurance person, licensed banker, licensed stockbroker, licensed bank, licensed mortgage officer ect has ever ripped anyone off. Only those working without a license rip people off ... right.... ;) If anything I think it is actually more accurate to say --- if you want to work in certain industries you pay the organized crime bosses (in this case that is usually the government) a little tribute for the benefit of being allowed to bilk the public. And everyone just goes along.... And you actually get a piece of paper that says you are legally entitled to do this. I am sure there are honest people in all these businesses also but all the licensing does is add a layer of cost and for these types of business to operate which is of course passed on to all their customers. I sure hope I am wrong and no law is ever passed that limits the running of an open source project. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: Daedelus on June 06, 2015, 08:14:36 PM To answer those on nxt and the proof of stake questions, I have looked it over but not real close. I do not own any and never experimented or tested it.. I have read the work and research of others however and (at least to me) I think the papers I posted earlier from the Ethereum developer are very well written and his logic applies not only to any coin based on older (or newer) ppc code bases but also to nxt. I am not knocking nxt on 'tech' specs although I think any ipo where initial coins are created out of nothing but code and sold to others and build a system that just generates more coins is something that has a reward structure contrary to what I feel is fair. You can disagree if you like. I am not saying it is a scam only that some things surrounding nxt I heard about (mostly in this forum and on twitter) like coins vanishing for example have been brought up often enough that I believe it has happened. It is more likely a glitch if it actually happened not something done intentional. So you don't own any, never experimented with it or tested it... but are happy to repeat absurd things you have heard on twitter that you acknowledge might not even have happened? Please post a link where anyone's Nxt has disappeared. You also seem to imply there is inflation ("generates more coins") which isn't the case. There is no inflation in Nxt. Vitalik's description of weak subjectivity describes Nxt Concensus mechanism (see the comments section, ChuckOne co-ordinates Nxt core dev team). Vitalik has also briefly discussed Nxt's algo on nxtforum almost a year ago where he was satisfied with the approach, based on his knowledge at the time. That's the idea behind Slasher. It's good against short-range attacks, but not long-range ones (see my article). Good news. Against long-range attacks we r protected by the extra consensus rule that forces to stick to a branch with the highest rate of transactions belonging to the same economic cluster (https://nxtforum.org/news-and-announcements/economic-clustering/). So basically you use transactions-as-proof-of-stake. That sounds reasonable; it's as good as I can think of at this point, although it has the moderately-serious-but-not-fatal flaws that I described in my On Stake article. I eagerly await a full whitepaper description and open source code of your complete protocol so both myself and more formal academics can properly whack at the specifics. I would like your comments on this: https://raw.githubusercontent.com/vbuterin/scalability_paper/master/scalability.pdf In it Vitalik defines a term known as cyrptoeconimically secure and gives a proof where he says Nxt satisfies the criteria. A Nxter then went on to show what he believed was the proof that Nxt was secure (I can find the link if required but it was taken form the paper) Taking all this into account, I don't see how you can come to the conclusion that Vitalik thinks Nxt can be lumped in with other POS no more than a flaw in a scrypt algo can be applicable to a SHA256 coin. They may be in the same family (being POS, POW) but two different animals. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: cinnamon_carter on June 07, 2015, 12:50:26 AM i guess sooner or later some people were bound to show up when proof of stake is mentioned and of course the coin they want to discuss is nxt, not anything else. Look if you like nxt good for you. If you want the documentation I based my comments on use google and look up what people say about it. Also keep in mind the 'source' code was not initially available https://bitcointalk.org/index.php?topic=394916.0 (https://bitcointalk.org/index.php?topic=394916.0)
If you disagree with my opinion or the opinion of the Ethereum dev. about proof of stake and the concepts he cited be my guest. One fact about this altcoin forum around here in general I have noticed Certain coins seem to have some type of 'protected' watchers that are watching all unmoderated threads. I won't name coin names. There are several. Most coins if you post a negative comment on their thread it will be ignored or others may join in. Rare will someone defend the coin in fact the most you may see if someone , maybe on the development team tell you if you don't like the coin don't mine it and gtfo. Now ---- certain coins --a select few -- things seem to happen differently. If a negative comment without much merit is posted like 'this coin sucks' , it won't take long for others to say they like it and just post other items..... this 'forum bumping' technique is a very old tactic and even employed by the United States and likely other governments to sway public opinion on certain things normally related to politics. This is not a conspiracy theory there are published foia documents that confirm it. If a negative comment is posted to a coins thread that actually has some foundation and or documentation to it as to what flaw exists or why they will not support it.... a different approach is used. Multiple accounts slam that user, often following other posts they made elsewhere here in this forum and negate them even to the point of stating things like 'you post negative comments about several coins' .... ect.... Some people have even been confronted online or in person and threatened. I know of a few confirmed incidents like this. If a coin thread has a multitude of people responding or even paying attention to every negative or questionable item posted about that coin proceed with caution. Honest , fair, legit and real open source projects have nothing to hide and no place to hide it. Their code is released to the world and can be tested by anyone. Personally I think if you are using any cryptocurrency at all and it is not 100% open source from day one you should seriously reconsider your position but in the end it is up to you. Coins you think are run by party x could actually be under control of someone else, like a government agency, organized crime ring or many many other things/people ..... use your imagination. In closing I will say I stand behind all prior posts I made here. If you have FACTS that refute anything I stated post them to the thread. I don't care if anyone likes my opinions or agrees with them or feels differently. Also, you may want to think twice about attempts to bother me personally as it has happened in the past when I have criticized things. I don't care how many fake sock puppet accounts come of of the sky. I am not afraid of you, whatever government agency you work or are in informant for or what other organizations you are associated with. I can say this with confidence since I am not a criminal. If someone tries to push me around I will look through your coin /code/ everything else and I am very skilled at finding out vulnerabilities and information. If provoked I will publish my work. That aside, when left alone I tend to allow a 'confrontation' with another to be a one time thing and not go looking to screw with other people. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: kennyP on June 07, 2015, 02:51:32 AM i guess sooner or later some people were bound to show up when proof of stake is mentioned and of course the coin they want to discuss is nxt, not anything else. Look if you like nxt good for you. If you want the documentation I based my comments on use google and look up what people say about it. Also keep in mind the 'source' code was not initially available https://bitcointalk.org/index.php?topic=394916.0 (https://bitcointalk.org/index.php?topic=394916.0) If you disagree with my opinion or the opinion of the Ethereum dev. about proof of stake and the concepts he cited be my guest. One fact about this altcoin forum around here in general I have noticed Certain coins seem to have some type of 'protected' watchers that are watching all unmoderated threads. I won't name coin names. There are several. Most coins if you post a negative comment on their thread it will be ignored or others may join in. Rare will someone defend the coin in fact the most you may see if someone , maybe on the development team tell you if you don't like the coin don't mine it and gtfo. Now ---- certain coins --a select few -- things seem to happen differently. If a negative comment without much merit is posted like 'this coin sucks' , it won't take long for others to say they like it and just post other items..... this 'forum bumping' technique is a very old tactic and even employed by the United States and likely other governments to sway public opinion on certain things normally related to politics. This is not a conspiracy theory there are published foia documents that confirm it. If a negative comment is posted to a coins thread that actually has some foundation and or documentation to it as to what flaw exists or why they will not support it.... a different approach is used. Multiple accounts slam that user, often following other posts they made elsewhere here in this forum and negate them even to the point of stating things like 'you post negative comments about several coins' .... ect.... Some people have even been confronted online or in person and threatened. I know of a few confirmed incidents like this. If a coin thread has a multitude of people responding or even paying attention to every negative or questionable item posted about that coin proceed with caution. Honest , fair, legit and real open source projects have nothing to hide and no place to hide it. Their code is released to the world and can be tested by anyone. Personally I think if you are using any cryptocurrency at all and it is not 100% open source from day one you should seriously reconsider your position but in the end it is up to you. Coins you think are run by party x could actually be under control of someone else, like a government agency, organized crime ring or many many other things/people ..... use your imagination. In closing I will say I stand behind all prior posts I made here. If you have FACTS that refute anything I stated post them to the thread. I don't care if anyone likes my opinions or agrees with them or feels differently. Also, you may want to think twice about attempts to bother me personally as it has happened in the past when I have criticized things. I don't care how many fake sock puppet accounts come of of the sky. I am not afraid of you, whatever government agency you work or are in informant for or what other organizations you are associated with. I can say this with confidence since I am not a criminal. If someone tries to push me around I will look through your coin /code/ everything else and I am very skilled at finding out vulnerabilities and information. If provoked I will publish my work. That aside, when left alone I tend to allow a 'confrontation' with another to be a one time thing and not go looking to screw with other people. Good OP cinnamon_carter, well done! I do disagree with most of your opinions on NXT though, but I do agree with you that some coins have over zealous supporters who jump out and stomp on any criticism of their favorite coin. Some NXT community members do this quite a bit, but IMO the NXT zealots are reacting to what appears to many as a deliberate bias AGAINST NXT by many crypto users. I like NXT but can see its faults too, and I am quite amazed at how crypto news sites like coinndesk completely ignore NXT, and some bitcoin heavy hitters still accuse NXT of being a scam, which is clearly ridiculous to any open minded person. Despite many obvious faults (the distribution, which was fair but only attracted a small number of stakeholders) most fair minded people can see the obvious merit in the tech, and as a long time lurker on the NXT forum, you can't help but be impressed by the NXT communities enthusiasm and ability to get things done. IMO there has been, and still is, an almost deliberate campaign against NXT by the majority of early bitcoiners, and that's actually had the effect of bonding the NXT people more tightly together, and that's making the NXT community far stronger than ALL other coin communites IMO. I'm not a tech guy so have to 'trust' others assessments on the merits of NXT tech, but the NXT communities effectiveness is on display to everyone, and part of that effectiveness is a willingness for some NXTers to defend/promote NXT in various forum threads. Sometimes it might be annoying, but it is effective, especially when sites like coindesk go out of their way to ignore NXT, which IMO looks almost like a possible conspiracy against NXT. Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: Daedelus on June 07, 2015, 08:45:02 AM i guess sooner or later some people were bound to show up when proof of stake is mentioned and of course the coin they want to discuss is nxt, not anything else. Look if you like nxt good for you. If you want the documentation I based my comments on use google and look up what people say about it. Also keep in mind the 'source' code was not initially available https://bitcointalk.org/index.php?topic=394916.0 (https://bitcointalk.org/index.php?topic=394916.0) If you disagree with my opinion or the opinion of the Ethereum dev. about proof of stake and the concepts he cited be my guest. One fact about this altcoin forum around here in general I have noticed Certain coins seem to have some type of 'protected' watchers that are watching all unmoderated threads. I won't name coin names. There are several. Most coins if you post a negative comment on their thread it will be ignored or others may join in. Rare will someone defend the coin in fact the most you may see if someone , maybe on the development team tell you if you don't like the coin don't mine it and gtfo. Now ---- certain coins --a select few -- things seem to happen differently. If a negative comment without much merit is posted like 'this coin sucks' , it won't take long for others to say they like it and just post other items..... this 'forum bumping' technique is a very old tactic and even employed by the United States and likely other governments to sway public opinion on certain things normally related to politics. This is not a conspiracy theory there are published foia documents that confirm it. If a negative comment is posted to a coins thread that actually has some foundation and or documentation to it as to what flaw exists or why they will not support it.... a different approach is used. Multiple accounts slam that user, often following other posts they made elsewhere here in this forum and negate them even to the point of stating things like 'you post negative comments about several coins' .... ect.... Some people have even been confronted online or in person and threatened. I know of a few confirmed incidents like this. If a coin thread has a multitude of people responding or even paying attention to every negative or questionable item posted about that coin proceed with caution. Honest , fair, legit and real open source projects have nothing to hide and no place to hide it. Their code is released to the world and can be tested by anyone. Personally I think if you are using any cryptocurrency at all and it is not 100% open source from day one you should seriously reconsider your position but in the end it is up to you. Coins you think are run by party x could actually be under control of someone else, like a government agency, organized crime ring or many many other things/people ..... use your imagination. In closing I will say I stand behind all prior posts I made here. If you have FACTS that refute anything I stated post them to the thread. I don't care if anyone likes my opinions or agrees with them or feels differently. Also, you may want to think twice about attempts to bother me personally as it has happened in the past when I have criticized things. I don't care how many fake sock puppet accounts come of of the sky. I am not afraid of you, whatever government agency you work or are in informant for or what other organizations you are associated with. I can say this with confidence since I am not a criminal. Wow. If you didn't want a discussion just say so, no need to go so far off into distance. Coming back to reality, if someone is saying the sky in green when all evidence supports that it is blue, then you are going to get people questioning you about it. No conspiracy theories required. I want to discuss Nxt as all serious research attempts so far have shown it to be secure, in the face of all Nothing@Stake fudders. See the work of Concensus research > https://bitcointalk.org/index.php?topic=897488.0 Here's the summary: To summarize the discussion, known claimed attacks on proof-of-stake distributed consensus algorithm(and concrete implementations) at the moment: 1. Short-range attack - attacker can offer better chain started few blocks behind current canonical chain. The attack is possible at the moment, the only likely outcome though is just gathered fees increase for an attacker. In our simulations this kind of attack is possible mostly when a long delay occurs due to low target. By the way, the attack has positive aspect for network, as it shorten delays average between blocks. So attacker gets extra fees for a good job done ;D 2. Long-range attack - attacker can start fork hundreds or thousands blocks behind current chain. From our investigations the attack isn't possible. 3. Nothing-at-stake attack - not possible at the moment! Will be possible when a lot of forgers will use multiple-branch forging to increase profits. Then attacker can contribute to all the chains(some of them e.g. containing a transaction) then start to contribute to one chain only behind the best(containing no transaction) making it winner. Previous statements on N@S attack made with assumption it costs nothing to contribute to an each fork possible and that makes N@S attack a disaster. In fact, it's not possible at all to contribute to each fork possible, as number of forks growing exponentially with time. So the only strategy for a multibranch forger is to contribute to N best forks. In such scenario attack is possible only within short-range e.g. with 25 confirmations needed 10% attacker can't make an attack. And attack is pretty random in nature, it's impossible to predict whether 2 forks will be within N best forks(from exponentially growing set) for k confirmations. So from our point of view the importance of the attack is pretty overblown. 4. History attack - attacker can buy whale's private key for $5 and build alternative story. Solved with some checkpoints now, located behind max rollback possible, so the solution is not so scary in terms of centralization etc. If you know any other kind of attack, please add. Please note IPO properties of a concrete coins etc isn't related to proof-of-stake distributed consensus problems. And Consensus Research is going to work on better proof-of-stake prototyping & implementation ! You can repeat these findings with the models published with the results, if you see fit. I am still interested in the details of your attacks on POS (as I asked about above), as I have seen a few try similar ideas in the past and they don't work in Nxt. Maybe yours will? And if so, it would good to know about them. Quote If someone tries to push me around I will look through your coin /code/ everything else and I am very skilled at finding out vulnerabilities and information. If provoked I will publish my work. That aside, when left alone I tend to allow a 'confrontation' with another to be a one time thing and not go looking to screw with other people. Again wow. Are these the only conditions under which you review ideas? Title: Re: How to be careful and avoid scams in the wild west of the alt coin scene -part 1 Post by: Nxtblg on June 07, 2015, 02:44:00 PM Also, you may want to think twice about attempts to bother me personally as it has happened in the past when I have criticized things. I don't care how many fake sock puppet accounts come of of the sky. I am not afraid of you, whatever government agency you work or are in informant for or what other organizations you are associated with. I can say this with confidence since I am not a criminal. If someone tries to push me around I will look through your coin /code/ everything else and I am very skilled at finding out vulnerabilities and information. If provoked I will publish my work. That aside, when left alone I tend to allow a 'confrontation' with another to be a one time thing and not go looking to screw with other people. "You go, girl!" :) Unfortunately, the heads are so hot around here that I can see the need to make a pre-emptive threat. Not my policy: by habit, I silently seethe when angered but remain polite. (By throttling, I hope to reach a happy day when I can let the usual heated words just roll off my back as I shrug them off.) But as far as Daedelus is concerned, there's no need to worry about him. He's not aggressive, he's defensive. If he bothers you personally, I'd be shocked. |