Bitcoin Forum
May 24, 2024, 08:57:57 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 ... 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 [168] 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 ... 368 »
3341  Other / Politics & Society / Re: Petition to Nationalize Banks on: November 12, 2011, 01:37:25 PM
Bookmarked.  We will see in 10 years.  My guess is that 99% of population won't be using Bitcoin in 10 years.  Still if 1% is it would be a massive win for Bitcoin (although not being a significant threat to VISA).

I'd wager 99% of the Bitcoin users available now won't be using it in ten years/

Easy to say, but how would you define that wager?  You can't identify how many use it now, you would have to make guesses.  How many users do you think there are?
3342  Other / Beginners & Help / Re: Newbie restrictions on: November 12, 2011, 01:35:24 PM
These restrictions just end up making a ton of garbage posts.

That's true, but garbage posts that can usually tell us if you are a bot or not. 
3343  Bitcoin / Development & Technical Discussion / Re: Suggested MAJOR change to Bitcoin on: November 12, 2011, 01:28:12 PM
The math presented in this thread is incomplete, IMHO.  All a block is in this regard is a unit of measurable proof-of-work performed.  Just because such proof-of-work can be conveiently modeled around the unit, doesn't mean that the unit doesn't still represent the work that is done to create a block; and the work done is a continuous stream of proof-of-work.
Meaningless and inconsequential--blocks don't have inherent difficulties. If the pool operator gives me a block it could take me a billion hashes to find a solution--or I could get it on the first try. How long it takes is just dumb luck in choosing the right (or wrong) starting nonce.

They still represent an average difficulty to find one, which is why they are used as a standard unit in the probability calculations to start with.  Just because someone could get lucky and find a block on the first try doesn't mean that the odds of an attacker have improved, nor does it mean that the block represents just what work one node preforms to create the block.  It represents the, often unknown, average amount of work that the whole honest network must perform to produce a block.  The point that the percentages of hashing power still apply regardless of the block interval is true, for if an attacker can produce 51% of the hashing power of the network it doesn't matter what the target interval actually is.
3344  Bitcoin / Bitcoin Discussion / Re: Instant POS on: November 12, 2011, 05:37:34 AM
How is this more safe from a double-spend? Couldn't the buyer pull off a Finney attack by finding a block, including in it a transaction that transfers the bitcoins on the private key QR code to another address, and not broadcasting the block until he's left the store?

It likely doesn't change the risks of a Finney attack in any meaningful way, either good or bad.  Such an attack requires 1) a large minority percentage of the hashing power 2) excellent timing and 3) luck.  It's also very easy for the party that has been defrauded to know what happened, even if the transaction is a fairly anonymous in-person transaction.  It's extremely unlikely that such an attack would even be attempted for anything except a highly portable and high value item, and there are not many that fit that bill that an anonymous buyer can just walk into a store and buy with cash and walk out.  Certainly not without  being on video.  There is literally no single item in a Wal-Mart store that would qualify.  Maybe a gold coin dealer, but those guys don't even assume that the cash is genuine.  I know of no case of anything that you could buy for cash and carry that would remotely justify the resources required to even attempt such an attack.  Although a finney attack can theoretically reduce the percentage of network hashing power to perform a double spend to less than a majority, the risks of such an attack are IMHO remote.  Anyone selling such a high value item is just going to insist upon confirmations, and you will get used to the idea.  We wait a half hour or more to buy a new car while they check our credit, why would it be different with bitcoin?
3345  Bitcoin / Development & Technical Discussion / Re: Suggested MAJOR change to Bitcoin on: November 12, 2011, 05:17:40 AM
The topic of workable instant POS solutions for bitcoin have been worked to death on this forum.  I've participated in many of those threads.  Is the search function, I'm not the one obligated to make the case that anything needs to change, nor that I'm wrong about the security model.  The math presented in this thread is incomplete, IMHO.  All a block is in this regard is a unit of measurable proof-of-work performed.  Just because such proof-of-work can be conveiently modeled around the unit, doesn't mean that the unit doesn't still represent the work that is done to create a block; and the work done is a continuous stream of proof-of-work.

As far as a POS system, there are a number of workable models that have been proposed by myself and others.  The most likely future solution, IMHO, is a side-channel network that allows bitcoin 'banks' such as more sophisticated online wallet services to securely communicate with each other in real time, verifying to each other that the client does have such a balance with much the same result as how an electronic check is processed today.  No, this would not be terriblely anonymous; but still more so than using a credit card for purchases today.  The vast majority of people don't need anoninimty in every little daily transaction anyway.
3346  Bitcoin / Development & Technical Discussion / Re: Suggested MAJOR change to Bitcoin on: November 11, 2011, 08:53:30 PM

No, it's not. The proof-of-work is a Poisson generator, meaning that the expectation value for the attacker follows an decaying exponential, which is itself a function of the number of Poisson events--i.e, the number of confirmations. So the probability of overtaking the honest chain after 6 blocks on the 2min intervals is exactly the same as 6 blocks on 10min intervals--hashes/block doesn't figure into the equations anywhere at all.

The global hash rate is important, it's just assumed to be static in the comparisons because there is no way to know what the proper hash rate should be or would be.  But if one assumes that the pool of honest hashing power is the same regardless of the target interval, a 2 minute block does represent roughly one-fifth the brute force security of a 10 minute block.  The statistical analysis of a confirmed block does matter somewhat, but isn't the most important factor in the security of the blockchain, the difficulty of reversing the honest block is.  No matter how you look at it, the difficulty of reversing a confirmed 10 minute block is about 5 times harder than reversing a confirmed 2 minute block...

I understand that, but that is not a meaningful distinction in the context of this thread or in the practicalities of attacking bitcoin. If I have 30% of the global hash power and overnight bitcoin changes from 10min blocks to 2min blocks, my likelihood of executing a double-spend after X confirmations is negligibly different before and after.

Yes it is would be 5 times harder if the honest network magically increased to 5x it's original size, but that's not what will actually happen if the block interval is changed.
That's not at all what I said.  And no, simply switching the target interval from 10 to 2 does not mean that the confirmations are as secure after any particular number of blocks.  At two minutes, 30 confirmations are roughly as secure as 6 are now.  The confirmations themselves are not magic, they only represent an amount of time passed since your transaction was recorded.  It's the time(multiplied by the difficulty) that creates the security.

Quote

...Latency will matter if Bitcoin is ever successful enough to process significant numbers of transactions comparable to Visa or Paypal, particularly for the sole miners and end user nodes on the edges of the network.  The core miners (and pools) will probably be very well connected to one another, but the edges is where the latency will be greatest.

If bitcoin ever reaches Visa-level of adoption, we will likely see many federated, industrial mining operations connected by direct fiber-optic connections. Latency will be no higher than it currently is with bitcoin or Visa (a few seconds, typically).


Maybe, maybe not.  The interval is still arbitrary and the logic for 10 minutes remains as sound as it would be for 2 minutes.  IT would certainly be much longer for edge of network solo miners.  Keep in mind, at a Visa level of transaction processing, each block would be around 10 gigs.  At 2 minutes, each block would still be around 2 gigs, but the multi-connection thing multiplies the burden  upon the nodes.

Quote
to ensure your safety, you would have to wait a hour anyway.
it does not matter if you wait 6*10min or 30*2min.

its the same security, the blockchain is only proof of time.
No, that's simply not true by any meaningful measure (see my previous post), although it's a commonly repeated myth on these forums.

That statement is equating security/safety with number of hash operations needed to undo a transaction. But that would only be true if work stopped on the honest chain. In actuality, the only thing that matters (and the math shows this) is percentage ownership of the global hash rate, and the likelihood of pulling off that attack decreases geometrically with the number of confirmations, regardless of block interval length.

It's not a myth.
3347  Other / Off-topic / Re: Is it possible for large corporations to exist without lending? on: November 11, 2011, 05:40:11 PM
Yes, but it is very hard - some corporations even like keeping debt on the books.

It's pretty much impossible for many financial institutions and investments firms to exist without heavy leverage though. (no, I'm not talking about fiat money)
Makes sense regarding financial institutions - they wouldn't have much to lend out without borrowing heavily themselves.

Which is fine, such institutions don't actually produce anything.  They will continue to exist to whatever extent the market requires them, which would likely be a fraction of the current need.
3348  Other / Beginners & Help / Re: Newbie restrictions on: November 11, 2011, 03:21:20 PM
I guess this is a pretty sensible idea, 4 hours online and 5 posts isn't really hard to achieve, so for the most part it should wean out those people that come here to quickly troll/spam, as they'd actually be required to put in a little effort before they can do such a thing.
Yup, that's the point.  And nor is the newbie section unwatched.  If you have an unanswered question, ask it.
3349  Bitcoin / Development & Technical Discussion / Re: Suggested MAJOR change to Bitcoin on: November 11, 2011, 03:07:22 PM

No, it's not. The proof-of-work is a Poisson generator, meaning that the expectation value for the attacker follows an decaying exponential, which is itself a function of the number of Poisson events--i.e, the number of confirmations. So the probability of overtaking the honest chain after 6 blocks on the 2min intervals is exactly the same as 6 blocks on 10min intervals--hashes/block doesn't figure into the equations anywhere at all.

The global hash rate is important, it's just assumed to be static in the comparisons because there is no way to know what the proper hash rate should be or would be.  But if one assumes that the pool of honest hashing power is the same regardless of the target interval, a 2 minute block does represent roughly one-fifth the brute force security of a 10 minute block.  The statistical analysis of a confirmed block does matter somewhat, but isn't the most important factor in the security of the blockchain, the difficulty of reversing the honest block is.  No matter how you look at it, the difficulty of reversing a confirmed 10 minute block is about 5 times harder than reversing a confirmed 2 minute block.  The choice of a 10 minute target interval is certainly arbitrary, but a 2 minute target is no less arbitrary; and the rational for choosing 10 minutes is sound.  Latency will matter if Bitcoin is ever successful enough to process significant numbers of transactions comparable to Visa or Paypal, particularly for the sole miners and end user nodes on the edges of the network.  The core miners (and pools) will probably be very well connected to one another, but the edges is where the latency will be greatest.
3350  Other / Politics & Society / Re: Intellectual Property - In All Fairness! on: November 11, 2011, 01:44:55 PM

Stealing intellectual property is aggression.  If someone is persuaded to invest money on the basis of patent protection and you steal the property, that is aggression.


Even theft of real property isn't always aggression, it's theft.  A 'cat burgler' is a sneek thief, but does not threaten anyone in doing so.  Copying of copyrighted data isn't theft, it's copyright infringement.  Theft is taking something that belongs to another, and thus denying them the ability to utilize their own property.  Copying of copyrighted data does not prevent the copyright holder from utilizing the data in exactly the manner originally intended.
3351  Bitcoin / Development & Technical Discussion / Re: Suggested MAJOR change to Bitcoin on: November 11, 2011, 06:27:57 AM

Quote
Faster time between blocks would also be burdensome on low trust light clients— which don't need to know much but they do need to know the block headers.  Requiring 4x the storage on mobile phones is not nice.
Um ... do any of these exist?

Yes.
3352  Other / Off-topic / Re: Is it possible for large corporations to exist without lending? on: November 11, 2011, 01:56:32 AM
Yes.  My Voip provider is very proud about being entirely a debt free corporation.
3353  Other / Politics & Society / Re: Petition to Nationalize Banks on: November 11, 2011, 01:12:21 AM
The last thing that we want to happen is the bankers gain access to the legalized force of the state even more directly than is presently so.
3354  Bitcoin / Development & Technical Discussion / Re: Suggested MAJOR change to Bitcoin on: November 11, 2011, 01:03:50 AM
Very few transactions are vulnerable to this type of attack thus the value of making a breaking change seems inconclusive.
Once again: if the change was deemed beneficial, it wouldn't need to justify the breaking change all by itself but if we have this discussion now, we can potentially implement this once a breaking change is necessary for other reasons.

We've had this discussion, and several like it, many times on this forum over the past two years.  I can assure you, the answer is no the target interval will not be changed.  For all the reasons already presented to you and others as well.
3355  Bitcoin / Development & Technical Discussion / Re: Suggested MAJOR change to Bitcoin on: November 11, 2011, 12:59:25 AM
Well, that depends on what the paywall is for, but as a smallish solo miner I'd sure like to get a few songs/ebooks/games for free every month from every website that accepts 0 confirmation transactions. The combined incentive for an attacker might make this quite attractive! But then again, this would promote solo-mining which is probably a good thing for Bitcoin after all Wink

The thing with websites and digital goods is that such an attack could be completely automated - the miner doesn't have to do anything, just make a small script that quickly buys all kinds of stuff before he issues a block that reverses the transaction.

This would only work once, because it would be evident that such an event has occurred after the fact.  It would be fraud, and easily provable, and thus carries the same legal risks; and would immediately crash your "credit" with those affected vendors.  If this happens enough, those vendors will not accept bitcoin so easily without identifying information; but anonimity was never a certainty.  I have no anonimity with any of the vendors that I have traded with, it's just that no one else outside of the transaction has that data like is necessary with Paypal or Visa transactions.  Said another way, the transaction isn't tied to my identity in records except those that the vendor may keep.  Don't count on being anonymous to your vendors.
3356  Bitcoin / Development & Technical Discussion / Re: Suggested MAJOR change to Bitcoin on: November 11, 2011, 12:24:36 AM
I think DeathAndTaxes has brought up some very good arguments as to why 0 confirmations is just fine to just about every transaction type.  I've always had a hunch that direction, but never bothered to do the research and figure out why.

But, the fact of the matter is, I've never heard of anyone successfully executing a double-spend attack.  Until we do hear of that happening, why are we so worried about it?

I agree that merchants should seriously look in to using 0-confirmation transactions.  It would help Bitcoin become more viable, and encourage people to use Bitcoins for purchases.
Well the double spend has happened on one of the exchanges with a scamcoin (not sure which one)

I think you might be thinking of the supernode being spoofed in Solidcoin, which was a different event.  Bitcoin doesn't use supernodes for this exact reason.
3357  Bitcoin / Development & Technical Discussion / Re: Suggested MAJOR change to Bitcoin on: November 11, 2011, 12:20:30 AM
a determined attacker may still find a way to do it efficiently.


If such a method exists, sure.  But once that method is known, there will be countermeasures.  The double-spend attack is defensible, even with zero confirms, if the vendor has good connectivity.

Quote

 Bitcoin just offers no inherent security below 1 confirmation.

That's not true, it's just that the current client doesn't presently offer sidechannel checks.  For example, a vendor's client could accept a zero confirm transaction at face value with very little risk by doing the following...

1) check that the transactions presently have the funds according to the client's own copy of the blockchain (presently done)
2) send the transaction out to all of it's peers except one, and wait until it returns to itself via the final peer.  (not presently done)  

If the saved peer returns the transaction, or no double spends are discovered from this peer in ten seconds, then assume that the transaction is valid and give the guy his Big Mac.  If there is a double spend attack underway, then either the saved peer will return the transaction that your client sent, or another one.  If it sends another one, deny the purchause.  If it sends back your transaction, it doesn't likely matter that there could be another transaction out there, because your's dominates the network.  The finney attack alters the picture somewhat, but unless you're trying to sell a new car via a drive up window, the values justify the (small) risks of accepting that transaction.  If you are selling stuff online, you can accept the transaction tenatively; and cancel the shipment of goods if the transaction fails.  If you are selling something digital in nature, such as an mp3, simply use delayed redirection for the download to allow the above ten second checks to occur.
3358  Bitcoin / Development & Technical Discussion / Re: Suggested MAJOR change to Bitcoin on: November 11, 2011, 12:04:11 AM
There are numerous reasons for not reducing the target interval, both present and future.  No network would be able to handle the propagation delays with a target of two minutes and a transaction volume anywhere near what Paypal processes on average.  There have been numerous threads in the past about how to process real time bitcoin transactions via channels external to the bitcoin network, as well as simply gauge the risks of accepting an unconfirmed transaction at face value for lower value transactions.

In short, no.
3359  Other / Off-topic / Re: SPUF Hacked and Steam as well on: November 10, 2011, 11:58:32 PM
This might be a good time to bring up Bitcoin as an alternative payment method for Steam.  I've brought it up before, but they just ask me to put it up on their forum to gauge interest, and I don't have a forum account at all.  I play games, but I don't talk there.
3360  Bitcoin / Bitcoin Discussion / Re: Instant POS on: November 10, 2011, 10:33:42 PM
He did, but forgot to mention that the QR code must also include the bitcoin address for the change.  If a private key, a bitcoin address, and perhaps a small checksum of the first two, can be included on a qr code that fits onto a cell phone screen, this is a doable solution.

Dash7 would still be better, though.
Pages: « 1 ... 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 [168] 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 ... 368 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!