No you need to have currency units in the PAST. That is the basis for the nothing at stake problem. No, that's not what "Nothing at stake" means. What you are describing is a history attack. It's a different kind of vulnerability. I described how Nxt currently mitigates it a few posts earlier, in #67. You don't need 51% of the coins just 51% of the active stake. In no currency can 100% of the money supply be used for minting. If it was then the currency couldn't be used for anything else.
The value used for forging can be very close to 100%, though. In Nxt, when you transfer coins you have to wait a day before you forge with them, but all the coins you didn't transfer can continue to forge. I get the impression you think coins used for forging are somehow locked up, like in a special account. That doesn't happen. If you get paid 1000 NXT salary at the start of the month, you'll be forging with that money every day after the first. If you spend 30 NXT/day on living expenses, after 15 days you'll have half your money left, and will be forging with it. Most of the money you've paid to other people will probably be sitting in their accounts for more than a day, so will be forging for them. Most of the coins can, and probably will, be forging for whoever owns them.
|
|
|
Or all IPO+PoS coins for that matter, because in the beginning someone had 100% of the coins. Are you confusing "Nothing at Stake" with "History Attack"? Nxt mitigates history attacks by not allowing block-chain re-organisations past 720 blocks. That means we don't have to worry about the founders mounting an attack with ancient coins. Thanks for the reply. My pleasure. Does any other PoS coin have such a "rewind" limitation like NXT's 720?
I don't know. Nxt is open source and has its clones, and I guess the clones have the same rules, but I don't know about PoS coins which are more original. I gather Peercoin use centralised check-points instead.
|
|
|
Less than 70 vs at least a 1000. It is a huge difference.
I'm not sure initial distribution matters (and I'm even less sure it should). What we should be comparing is the distribution both currencies have on a given calendar day. So when NEM launches, it has a 1000 or so holders, and on the same day Nxt has 43,000 or so. How does that make NEM better? I'm also not convinced that an initial wide distribution helps, especially if a lot of those people got their coins for free. Many of them will cash in immediately for free money, and many more will sit back and let other people make the currency worth something. You'll get a lot of bystander apathy. I admit, I'm doing this with other coin give-aways. Why not? Part of why Nxt has been successful is that the relatively few Nxt whales knew the onus was on them to make the currency a success. We will se it in Volume and price stability after lunch. It will be interesting. I bet on NEM ![Cheesy](https://bitcointalk.org/Smileys/default/cheesy.gif) no such cappital conentration like in NXT That would be amazing. Historically, wealth tends to concentrate. The Pareto Principle says that after enough time, 80% of the assets are owned by 20% of the people. I will be astonished if NEM somehow overcomes this aspect of human nature. More likely, even if NEM does have a "better" distribution at launch, it will quickly get worse, as some people dump for a quick profit while others, who have more faith in the coin, buy up. You're always going to get a mixture of rich and poor people.
|
|
|
Sorry my ignorance regarding NXT, but someone could just start as many nodes as he wants and have majority of them?
Yes. Nxt also has the notion of "hallmarking" a node, which means it is associated with an account and therefore a stake. Other nodes tend to trust hallmarked nodes more. I would still rather have big centralized pools than someone having the power to control the network without owning any hashing power or even 51% of the coins (even if he had them at one point, he can sell them off and then attack the network - attacking it at no cost).
How does your PoS deal with that, fork it to an earlier stage? haha
Nxt deals with it by not allowing block-chain re-organisations past 720 blocks. That means the attacker has a narrow window for making the attack. That is in addition to the usual difficulty of acquiring a large enough stake to make the attack feasible. For comparison, in a PoW currency it would go: - Buy hashpower.
- Attack PoW.
- Sell hashpower.
for a near-zero cost attack. In Nxt it would go: - Buy stake.
- Wait 1440 blocks so that stake can forge.
- Sell stake.
- Attack PoS (within 720 blocks).
In both cases, the hard part is step 1. The difference in the ordering of last two steps is just a few hours. The PoW attacker has the advantage that they can sell off their hashpower at a gradual pace, without crashing the market. With Nxt, they'd have to carry out their attack within 12 hours of selling, so they'd have to sell quickly. Basically, buying 51% of Nxt is going to cost a fortune, and dumping 51% of Nxt would itself crash the price never mind the attack; and the attacker would lose a lot of money from the price crashing before they could sell their entire stake. So the notion that this attack has no cost is ludicrous.
|
|
|
Proof of stake is useless to people who want to use online wallets for their altcoin, since most online wallets keep the income for themselves. As do exchanges that gain POS shares in balances.
"Useless" if you think the use of crypto-currency is to increase wealth by mining/forging. In Nxt, forging is more about securing the network than it is about gaining revenue. In PoS, anyone can forge, but no-one will get rich from it. Does NXT suffer from the "nothing at stake" vulnerability?
"Nothing at Stake" is a chimera; a theoretical problem that has never been seen in the wild. Currently Nxt does not suffer from forgers forging on every chain they see. There is reason to believe it never will. Or all IPO+PoS coins for that matter, because in the beginning someone had 100% of the coins. Are you confusing "Nothing at Stake" with "History Attack"? Nxt mitigates history attacks by not allowing block-chain re-organisations past 720 blocks. That means we don't have to worry about the founders mounting an attack with ancient coins.
|
|
|
"Nothing at stake" is in any case a chimera. It's a hypothetical beast that's never been seen in the real world. The idea makes some sense for currencies with a high block reward, but for a PoS currency that doesn't pay interest, like Nxt, the potential gains from forging on multiple forks are tiny, and not worth the loss of security. Remember that in PoS the forgers with the most to gain from shenanigans are also the ones with the biggest stake to lose if the currency does get broken. Upshot is that no-one forges Nxt on multiple forks today, and they likely never will.
Seems like similar logic to what most people agree is an acceptable amount of risk with Bitcoin(>%50 attacks). Up to a point. Nothing at Stake is a two stage thing. In the first stage, selfish forgers forge on every chain they see, to avoid losing fees from picking the wrong chain. In the second stage, someone mounts an attack; one which would have failed if forgers only forged on one chain, but succeeds because of the selfish multi-chain forging. Currently we aren't yet at stage one. Stage two, an actual attack, is therefore currently not possible. With Bitcoin 51% attacks, there are also two stages. The first stage is to acquire 51% of the hashing power. The second stage is to use that power to attack. The difference is that Bitcoin has actually reached the first stage: there have been entities that could have attacked if they wanted to. You're right in that the reason GHash.io didn't attack is that doing so would have destroyed their own business, and that's also the reason Nxt forgers don't forge on multiple chains.
|
|
|
And don't forget the main problem about POW and this is the most important one.... every investor or long term buyer has to pay to the miner for securing the blockchain. POS coins investor don't they them self are doing their part to secure it and get even PAID!
I can put bitcoins in cold storage, like a paper wallet, brain wallet, or USB drive, and it costs me nothing to secure it. Actually, your coins are losing value due to inflation. Bitcoin is currently a highly inflationary currency, with roughly 10% more coins created every year. That means coins you hold lose 10% of their value per year. The value you lose is paid to miners. The 10% loss of value is obscured by the volatility of Bitcoin, and historically because of increases in demand. That doesn't change the fact that you are paying a lot of money to miners to secure your holdings. Think about it. Miners spend millions of dollars on mining rigs. Where do you think that money comes from? It's like credit cards were free to use, and paid for by the government printing a few billion extra dollars each year and given them to the credit card companies. Inflation is the most subtle tax.
|
|
|
Less than 70 vs at least a 1000. It is a huge difference.
I'm not sure initial distribution matters (and I'm even less sure it should). What we should be comparing is the distribution both currencies have on a given calendar day. So when NEM launches, it has a 1000 or so holders, and on the same day Nxt has 43,000 or so. How does that make NEM better? I'm also not convinced that an initial wide distribution helps, especially if a lot of those people got their coins for free. Many of them will cash in immediately for free money, and many more will sit back and let other people make the currency worth something. You'll get a lot of bystander apathy. I admit, I'm doing this with other coin give-aways. Why not? Part of why Nxt has been successful is that the relatively few Nxt whales knew the onus was on them to make the currency a success.
|
|
|
because in proof of stake coins, there is a master node responsible for checkpointing and alerts. I wish people wouldn't talk as if all PoS algorithms were the same. Nxt doesn't use check-points. Doing a rollback in Nxt would be about as hard as doing one in Bitcoin. Standard Proof of stake is dead. If I owned 5% of a coin and colluded with 5 other people who also held 5% we could attack the network easily.
This is equally a problem for Bitcoin. You would need to own 5% of the hashpower rather than 5% of the coin; either way it is a big investment. Thing is, if you own 25% of Nxt, and you destroy the currency, you've destroyed your own money. Where-as with PoW you can own enough hashpower to destroy a currency without owning any of that currency. Afterwards you can move onto another currency that uses the same PoW algorithm. Currencies have been destroyed this way (when they were young). You can imagine if bitcoin was PoS and this happened, you would have 1 person that controls the entire network. Instant death. Again, the analogy with Bitcoin is one faction gaining 25% of the hashing power. And it's happened - Ghash.io has been close to 51%. It seems it's far more likely to happen in a PoW currency, even the most mature one, than in a mature PoS. Obviously, GHash.io has not meant instant death for Bitcoin.
|
|
|
Hi, is it correctly labelled digital currency, virtual currency or cryptocurrency ? Which label will prevail ? Thanks
Distributed crypto-currency. "Distributed" is important to be clear that there is no central government or organisation backing the currency, but is usually inferred. I prefere digital. Everyone knows what "digital" is (no they actualy do not know but they think they do so it's cool).
It's not specific, though. A private currency like Amazon Coins is digital. Crypto is too much "secret"
"Crypto" is accurate. Being based on cryptography is one of the defining attributes of this kind of currency. And words like "secret" or "private" aren't necessarily bad.
|
|
|
"Nothing at stake" is in any case a chimera. It's a hypothetical beast that's never been seen in the real world. The idea makes some sense for currencies with a high block reward, but for a PoS currency that doesn't pay interest, like Nxt, the potential gains from forging on multiple forks are tiny, and not worth the loss of security. Remember that in PoS the forgers with the most to gain from shenanigans are also the ones with the biggest stake to lose if the currency does get broken. Upshot is that no-one forges Nxt on multiple forks today, and they likely never will.
|
|
|
My "personal" judgement is NXT is a get rich quick scam through a promise of exponentially growing appreciation of value for the coin. A "new generation" pump and dump scam coin if you might say so.
There is absolutely no need to start a new one when even the "future" planned features would work for Bitcoin existing chain (Except the DNS [expiring] entries),
For any NXT developer reading this. For god sake if that is the case name your price and start a crowdfunding time frame. Make the feature and give it to the Bitcoin community. Get your money and move on. Here you got the money and you made the feature, WITHOUT REINVENTING THE WHEEL
Stop the bullshit hypocrisy or your NXT guys will look like fools. If any of your alt. coin developers want my btc, you are better working for it. Innovation is good, competition is good but claiming you are the one chain and others re-inventing the wheel is the most idiotic. Changing the quoted words to refer to Nxt doesn't work, because Nxt is too different to Bitcoin, both in philosophy and in implementation, for them to apply, and the Bitcoin community is too conservative. Bitcoin does not want a multitude of different transaction types. It doesn't want Proof of Stake - it's still happy with Proof of Work. It's not even interesting in fixing long-standing flaws like transaction mutability, or failure to relay double-spend attempts. All the development work is being done outside of the core, on wallets and suchlike, and that's how the community wants it. There's no way Nxt ideas would ever be accepted by Bitcoin. It had to be a new block-chain. Where-as Nxt is pretty open to new features. It has an architecture that can cope with them. So there's much less reason to fork Nxt or start a rival to it.
|
|
|
Is this a good idea or not?
It would be more user friendly to have "remember secret phrase for this session" checked by default on login so the users won't have to enter the secret phrase sending a message/bid each time. If that isn't secure, maybe there could be a 4 to 6 digit pin number that the user could use instead of entering the whole password again. The app should disable the pin number and require full password after 5 unsuccessful pin numbers are used. So the login screen would look like this: "Remember password during this session" checked by default Under it, a text field that would say "pin number for the session" (only 4 to 6 numbers allowed) Nice Idea, Just keep it up. I will in fact revise this idea Remove "Remember password during this session" totally and just have "pin number for the session" (only 4 to 6 numbers allowed) I'd prefer the opposite. Don't input the password on the login screen at all. Input the account number instead. You shouldn't need the password just to look at the state of your account, because the information is publicly available on the block-chain. Further, the login screen should strongly encourage the account number use RS format. That would eliminate problems with people mistyping and opening the wrong account without realising, and then panicking because they don't realise they've done. The only time you should need your password is when creating a transaction. At which point the client already knows the account number, so it can verify they match and explain exactly what has happened if they don't. If you must, at this point have the option to remember the password for the session. Ideally the login screen would remember the last used account number, so you wouldn't actually have to type it. Better still, remember the last few accounts and let the user pick one from a list. Better still, have the screen show useful summary information about the known accounts right from the start: individual balances, plus total balance for all accounts, etc. Most people have more than one Nxt account so multiple accounts ought to be easier to manage. I'm not keen on having another PIN. I already have to keep track of the account number and password; I don't need yet another identifier to remember. 4-6 digits is no easier to copy & paste than 50.
|
|
|
A year is 24*365=8760 hours. If I put in 100,000,000 NXT and 8760 hours, I get 75,735.24 NXT per year. I have no idea what your figure is, but it's orders of magnitude too small. The return is 0.07573524% pa. If you have 100 next you would generate 0.11 nxt in a year. I make it 0.0757352 NXT/year. The return is 0.0757352% pa, exactly the same (to the precision given). Again I'm not sure where your figure comes from; 112 divided by a million would be 0.000112 NXT, so your poor man is getting roughly 1000 times the return of the rich man. I do wonder if your 0.11 should be 0.112 but losing a significant digit. starting 10.00002% - after 1 year 10.00004% vs starting 0.000010% - after 1 year 0.000010011%
So the poor guy gets a 0.000000011% increase in wealth after one year and the rich guy gets a 0.00002% increase. I'm not sure what you are doing there. Expressing their wealth as a fraction of the total market cap? Why? My point was, if we consider the ratio between the rich man's wealth and the poor man's, that ratio is not affected by forging. They both make the same percentage return on their capital. If the entire economy consisted of two guys, one with 99% of the coins and the other 1%, after a year of forging the situation would be the same. The site you linked doesn't take compounding into account, but it doesn't affect this, because they are both at the same rate. It also doesn't take into account the costs of running a forging node, which are fixed and more than a poor person may be able to afford. Leased forging mitigates that. In any case, these are real-world issues of economies of scale that will arise in any currency.
|
|
|
The way I read it, the individual forgers will choose a minimum fee they are willing to accept. There has to be a minimum minimum, to discourage spam. And that's the system we have now, with the minimum minimum 1 NXT. You can pay a higher fee if you want, but forgers aren't allowed to accept transactions paying less than 1 NXT. The minimum minimum could be lower, but it really needs to be per-byte not per-transaction (because it's bytes that take space in the block-chain forever), and changing to per-byte isn't as trivial as updating a number.
|
|
|
No one is complaining. The minimum is 1 nxt, they were simply stating a fact.
The nxt fee is being reduced to 0.1 nxt in the next version and I think I read something about the decentralised marketplace coming out then too.
There are plans to shift to a per-byte fee rather than a flat fee, so bigger transactions will cost more than small ones. I don't know when that will happen. It's perhaps worth emphasising that 1 NXT is the minimum, and some transaction types cost more. Currently it costs 1,000 NXT to register a new asset, for example. The fees are used to discourage spam as well as to reward forgers.
|
|
|
3 - Per outer quote above, the network should relay, and not drop, double-spends. This makes #2 above much more effective. The actual double-spend transaction is the best alert, because it is signed by the person double-spending. Anything else would require a trusted 3rd party. As long as the double-spend is relayed in a way that no-one will confuse with a single-spend. They shouldn't be relayed as a normal transaction. Possibly the alert should embed both transactions. That makes it a neat, clear-cut proof of attempted fraud in a single message. Then again, normally the alert is being sent to the same nodes that the original transaction was relayed to, so perhaps that's not necessary. no, this is to easy to use for spamming the network with transactions. Only the first double-spend needs to be relayed; subsequent ones can be dropped because a single double-spend transaction is enough to establish that a double-spend attempt is in progress and alert the merchant. So spamming is limited. If you want to limit it more, only relay/alert double spends if the amount is, say, at least triple the current dust level. So a spammer can either send a million transactions with 5431 satoshi each, or 333,333 with 16293 satoshi each plus 333,333 "free" double-spends alerts. The cost to the spammer is the same, as is the bandwidth cost to the network. (And the double-spends don't get added to the block-chain so we gain there.) In practice, 16293 satoshi is small enough that thieves aren't going to bother trying to double-spend it, and most merchants can accept the risk that they will. (We can juggle the numbers depending on the actual cost of the alert, and whatever the dust level is nowadays, but you get the idea.)
|
|
|
What about the concept of detecting double spends in bitcoin nodes and notifying merchant? This has been proposed before, and was just having discussion with someone from Bitsimple on this (they suggested it). They were saying you as a merchant or more likely a service the merchant is using, can deploy a bunch of nodes across the globe (not a huge number, but maybe 10-50). Merchant get's your transaction and does wait like 10 seconds, but no more. If any of the service's nodes see a second transaction trying to spend the same bitcoins, it notifies the merchant POS/wallet system. If no second transaction is seen in 10 seconds it is considered 'safe'.
It would help further if nodes that detected double-spends either relayed them, or, better, relayed an alert that a double-spend was being attempted.
|
|
|
and market forces will drive the profit margins to be narrower than they are now, putting it further out of reach of people without super-low-cost energy. This might result in some centralization of mining power, but probably no worse than the current GHash.IO situation.
I hope that the mining hardware will become cheaper as it becomes more standard, more commoditised and longer-lived. It will fall within the reach of people who don't necessarily have super-cheap electricity, but who are able to make use of the waste heat. I'm hoping it will become a way for hobbyists to heat their homes.
|
|
|
|