Bitcoin Forum
May 29, 2024, 01:33:53 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 [37] 38 39 40 41 42 43 44 45 46 47 48 49 50 51 »
721  Other / Archival / Re: delete on: September 16, 2011, 09:22:28 PM
I have some SC I want to exchange for BTC, any place to do that right now?

Sorry, seams like ScamCoin is out of commission. I've some SC too... I'll sell them for 1,000 BTC ea. (Hey! Now they're collectibles!  Grin )



Eh, oh well...I only had like 78 anyways, but still wanted to get rid of them.  I thought I heard something about people in an IRC channel buying them?  Don't know why they would be though, so maybe I read that wrong.

I will gladly buy solidcoins for Geist, at 1-to-1 ^__^
722  Alternate cryptocurrencies / Announcements (Altcoins) / Re: [ANNOUNCE] New alternate cryptocurrency - Geist Geld on: September 16, 2011, 07:51:31 PM
Well, in a connection sac of some kind, the interval of the blocks you're building with your pals (or with yourself, if you got really isolated totally "alone" and still continued mining somehow) should probably drop, not rise, since you start at higher (native net) difficulty and then adjust lower (which Geld does in less than a minute).

Anyways, very interesting blocks. Maybe we should invite theymos ? I heard he likes blockchains.

P.S.:
Oh, and miners on Geist definitely should open incommings and increase maxconnections=

Having more than 125 can hardly hurt if increased within reason.
723  Economy / Speculation / Re: Dead Cat Bounce ??!! on: September 16, 2011, 07:24:07 PM
oh umm and some filthy man told me as it wont be used for drugs and illegal issues any more it will vanish as in a pyramid scheme!!

is a pyramid scheme something related to Egypt ?

I know little of stock trading, but I can assure you that bitcoin will remain to be used in drug trade irrespective of bitcoin exchange price trends.

"Bitcoin" + "GPS-aided single-use randomized dead drops" = "very reliable and safe way to trade drugs".

Just sayin'

So would be using fiat money +  "GPS-aided single-use randomized dead drops" = "very reliable and safe way to trade drugs". Isn't that how it's done now? All they do now is use secure comms for the locations.

In fact, the strength of bitcoin isn't so much the pseudonymity, but the public ledger.

Vanilla fiat money are harder to transfer via digital means without leaving a fairly fat paper trail, and cash is annoying in the requirement to physically exchange it which can get tricky in a setup like that.

Also, a large sum of fiat money tends to either occupy lots of space or attract unwanted scrutiny when moved around in digital representation.

Generally, bitcoin is very comfy in this regard and as our troll friend correctly points out, makes "dirty hands" type of action  exceedingly hard.
724  Other / Archival / Re: Delete on: September 16, 2011, 07:14:32 PM
Is i0 even maintained anymore ?

Yeah Fusebox took over it, he forked the new client about two weeks that allowed it to live.

Ah, oky Smiley

Anyways, this is as good time as any to remind the interested parties that Geist is not burdened by any bizarre licenses so no need to ask me before seeking inspiration in its git ^__^
725  Other / Archival / Re: Delete on: September 16, 2011, 07:06:02 PM
Is i0 even maintained anymore ?
726  Alternate cryptocurrencies / Announcements (Altcoins) / Re: [ANNOUNCE] New alternate cryptocurrency - Geist Geld on: September 16, 2011, 06:59:00 PM
I've been mining with 6 ghash and just now I saw that I found 5 blocks in a row. Immediately, I realized something is not right. I can't be that lucky. After a few minutes, I saw that these 5 blocks all got orphaned. I assumed that due to network issues, I was disconnected enough to build up my own block chain, which got wiped out when I reconnected.

Unfortunately, I think these problems will get worse as the network grows.
Interesting. I wonder how things will play out as we start hitting 100, 200, 300 GH.
Won't matter if we have 100 TH. After a few quick blocks, difficulty will adjust, and we'll be right back to 15 second blocks.

Well it's more about the number of nodes than the network hashrate. With a lot of nodes, block information will have to be sent to all the nodes. So there will be a lot of data sent around. Nodes that are unaware of the latest block, will be splitting the chain. So there will be a lot of collision and chains merging. Will be interesting to see if the network can handle it.

Well, that's exactly why I brought up the issue of "how many nodes per a Big Pool" (I PMed Tycho of the deepbit fame, btw)

seems to me that Nodes That Matter in modern bitcoin are, quite frankly, a handful, and the rest could just send them tx "the lean way" and keep the blockchain just for the purpose of feeling themselves like Ye Olde Coin Archiviste.

As for those blocks, there was always in excess two minutes between them (intervals irregular, in one case in excess of 7 minutes), so it does not appear to be exactly a block streak.

That does not disprove the hypothesis that coblee and his peers got sequestered into a "low-diff" fork, but there are other explanations too, like some less than kind person mining on-and off, rushing in at minimum diff, mining till it adjusts, stopping to let it drop (usually missing the norm and going a mite below), then mining again, rinse-repeat.

P.S.:
Someone should write a goddaymn visual block explorer that would allow to visualize orphans and such in relation to main chain  In 3-D Wink
727  Alternate cryptocurrencies / Announcements (Altcoins) / Re: [ANNOUNCE] New alternate cryptocurrency - Geist Geld on: September 16, 2011, 05:54:52 PM
I've been mining with 6 ghash and just now I saw that I found 5 blocks in a row. Immediately, I realized something is not right. I can't be that lucky. After a few minutes, I saw that these 5 blocks all got orphaned. I assumed that due to network issues, I was disconnected enough to build up my own block chain, which got wiped out when I reconnected.

Unfortunately, I think these problems will get worse as the network grows.

If you (or anyone else) ever find another "bizzaro streak of blocks", please do a getinfo and see if you have connections, and if so, how many. Because if you have like 6-8 connections and get such a streak, then likely something more that just "connection loss" is afoot.

Having said that, if network issues start causing orphaning of large ammount of blocks, that could be detected when studying the blockchain. According to ArtForz, so far there is no indication that the amount of orphans "on whole" is higher that normal.

P.S.:
coblee, could you PM me the timestamps and txid  on those orphans (should be in listtransactions) ?

728  Bitcoin / Development & Technical Discussion / Re: Bitcoin Protocol Extension For Credit on: September 16, 2011, 05:12:39 PM
Um, why would people mine that master blockchain ?
729  Other / Archival / Re: delete on: September 16, 2011, 04:57:03 PM
We would fork, and if our fork was better, Gavin's version would fade away. Everyone currently holding Bitcoins has an incentive to keep the rules consistent.

Exactly because average joe users would know how to find the correct forked versions and would be keeping an eye out for forks and what not.  Plus an influx of mildly technically capable miners would know to do the same thing. lol



If deepbit, BTCguild and slush switch to Version B, it's gameover for version A right there.

Just sayin'
730  Alternate cryptocurrencies / Altcoin Discussion / More Solidcoin Bashing/Defense (split from Be Safe thread) on: September 16, 2011, 02:59:54 PM
LOL it's an open source project - there are no 'leaders' as you describe them.
No one can force anyone to do anything.
You must be new here. Never heard of the cult-of-solidcoin?

Judging from the fact that at least one pool and who knows how many soloers have disagreed with Queen Bit of Solidcoin and refused to shut down, it's neither really a cult nor particularly solid.
731  Alternate cryptocurrencies / Announcements (Altcoins) / Re: [ANNOUNCE] New alternate cryptocurrency - Geist Geld on: September 16, 2011, 12:15:40 PM

As far as I understand, BGP flap is basically a route dying and un-dying fairly rapidly due to something cute happening in a given ISP's network, which suggests that normally they should be fairly irregular and territorially contained... but the issue is absolutely worth looking into, since it makes Geist a fascinating subject of study irrespective of various "plainly pragmatic" considerations.


I might be wrong, but I think 2112 was trying to point out the inevitable situation of a transaction transmitted over to a network, and getting lost or terribly delayed (even with the very fast Geist blocks) because there is a high enough probability that it never manages to be included in a block which is not orphaned later. This probability will be amplified as more nodes and miners join the network. It might still be OK now with less than 100 nodes active (assumption, again I might be wrong about this number).

This issue can be caused by BGP route flaps, TCP timeouts, torrent software overloading your line, bad cabling, local Ethernet switch flap or any other issue that can impair a user's connection to the network (the Geist network that is) for 10-30 seconds. These events would be a non-issue with a slower chain and definitely a non-issue with most Internet services (except Real time video/audio conferencing which cannot afford more than 1sec delay).

Well, geist obviously is more network-sensitive and there obviously is a blockrate/decentralization tradeoff at work (I think I said that in post one), and point of Geist experiment is, in part, to see exactly how this tradeoff works out on a "live" network that experiences all the live influences.

Geist, however, is quite ready to trade decentralization for blockrates (up to a point of course Wink), which I also stated in my first post, and what concerns me most is that network effects that impede Geist decentralization will also impede pool operation, thus also impeding the partial centralization and thus making further increase in Geist hashrate problematic at best.

They would probably first give up on trying to use Geist as a transaction medium.

Well, "thin" clients don't download the blockchain proper anyways, so theoretically nothing keeps people from sending their tx to all the well-known "big miner" geist nodes first, then the "plebes", thus maximizing the likelihood of those ending up in a block quite soon, or some other, smarter optimization of the way the net handles transactions (I'm not quite smart enough to come up with those by myself, admittedly Wink ).

Bitcoin will need many of those optimizations too if it grows "huge enough", and this is why it might be worthwhile for the community to play around with Geist, IMHO.

In the end, yes, it is quite possible that "audaciously fast blocks" will cause either insurmountable scaling issues or problems of sustaining a good enough connection to force your tx in even if some optimizations in transaction transmission by "lean" clients are in place.

The point of Geist is 1) try to find that out in a "live" setting 2) try to seek amendments to overcome those issues 3) see if some of those optimizations are also worth implementing in Bitcoin
As far as I have read about Geist, it brings many innovative features, but in my view the fast blocks collide (pun intended) with the innovations.

If worst comes to worst, there's nothing in the nature of Geist that would prevent gearing down the blockrate while adjusting the subsidy and retarget to leave economics intact (or maybe even give folks some temporal single-issue of pseudo deflation if they shall so demand, though I refuse on general principle to set a hard upper limit on number of Geists in existence. "Coin regeneration" FTW Wink ), however such course of events will be a huge blow to Geist's stance and appeal, even despite all the knowledge gained when assessing the causes which could lead to such an unfortunate and radical solution.

Still watching to see how this goes.

Interesting things will happen when pools will start to get deployed.

P.S.:



I am a bit iffy on the deeper intricacies of the "how does pool form" theory, so,  how many pool nodes connected to the bicoin network (as opposed to miners connected to pool, which as far as I understand have no particular reason to even be aware of the blockchain since they only deal with the pool's share anyways) does on average each of the "big fishes" of pool business represent ?
732  Alternate cryptocurrencies / Altcoin Discussion / Re: Comparative confirmation security of different alt block chains on: September 16, 2011, 10:18:21 AM
So, basically, in terms of "confirmation values", confirmations that are longer are more valuable in situations where an attacker has exceeded 51% (The "match the network" part) and is about to retroactively edit past blocks ?

It also works for attackers that have less than 50%. I gave average values. It's possible for an attacker to get lucky and solve enough blocks to match the network even with less than 50%.

I don't think there's any advantage to longer confirmations if the attacker is only trying to maintain control and is not replacing historical blocks.

I think I see what you're getting at.

In case of maintaining control (the "gambler's ruin" scenario, as outlined in Satoshi's paper), the lower complexity of a block is offset by  much narrower timeframe you have to solve them and feed them to the net.

In case of overwriting historical blocks, the "timeframe consideration" works differently since the block is, well, historical, is that correct interpretation of what you are saying ?

P.S.:
Isn't "replacing historical blocks" exclusively a 51-er thing since you need to be able to at least match the production rate of the "good nodes" in order to be able to take a stab at replacing the previous block and not having your rewrite overrun by the output of "good nodes" ?
733  Alternate cryptocurrencies / Altcoin Discussion / Re: New Ixcoin fork -> I0coin on: September 16, 2011, 09:53:14 AM
Quote
You do know what is in the Geist genesis block, don't you Smiley ?
No I don't! Enlighten me please  Smiley

"That is not dead which can eternal lie, And with strange aeons death may die" (in case you wonder, that's H.P. Lovecraft, a wonderful horror writer)

Alt chains pretty much can not really die (the fact that RS failed to "consensually shutdown" SC illustrates that nicely)

As for i0, it has about 30 Ghashes on it. Makes perfect sense someone tried to overwrite it for sheer evulz.
734  Alternate cryptocurrencies / Altcoin Discussion / Re: Hypothetical currency with decentralized monetary policy on: September 16, 2011, 09:17:55 AM
So you believe over 51% of coin holders will intentionally vote against price stability, making the currency useless?

That is entirely plausible.

Also, anonymous vote systems, even ones with complex mathematical magics securing a reliable crypto-pseudonym, are very hard to get right.

For a really obvious one, you can not (should not) neglect time a node spends online when assigning "voting power", otherwise, on the voting day, you will find yourself flooded with strange "noob nodes" that never transacted and never mined, and just arrived to cast votes and disappear.
735  Economy / Economics / Re: Naked Short Selling Bitcoin on: September 16, 2011, 08:52:09 AM
It seems to me you are operating under the assumption that bitcoin is " money".
My personal views are really immaterial. My personal position is in reaction to the various efforts to legitimize bitcoin as an investment vehicle in the EU. People whom I would otherwise respect (like eg. various Pirate Party functionaries) got involved with some frauds and/or fly-by-nights. The bitcoin millieu had attracted a lot of various social sediments. Unlike the run-of-the-mill financial frauds the bitcoin promoters feel that by operating on the uncharted territory they are free from any legal constraints of the existing societies.

It is quite fortunate that the frauds attraced by bitcoin are also typically unsophisticated and small time frauds. They get really surprised that the laws against their favourite scam are on the books for a long time, just under a different name.

Well, as far as "investment vehicle" is concerned, in my very humble Belorussian opinion, any thing people are ready to pay for can be an investment vehicle, irrespective of whether it is remotely sane (in the sense that it does not have to pass giggle test) or technologically sound.

Gold price is quite apparently so huge only due to a very long-lived "glitch" in human perception of value. If a fairly unspectacular element (that isn't even fissionable   or something, lol) can have absurdly huge price just because market is full of agents with a kind of weird response to the very notion of "gold", so can abstract  digital thingamabobbles made of some kind of eldritch mathemagics, if the market just accumulates enough agents with a peculiar response to the notion of abstract    thingamabobbles born   out of weird math Wink
736  Alternate cryptocurrencies / Announcements (Altcoins) / Re: [ANNOUNCE] New alternate cryptocurrency - Geist Geld on: September 16, 2011, 08:26:09 AM
Hm, so basically the issue is that the split chains might get longer... but doesn't the BTC algo define "canonicity" in terms of which has most work, and not most "block count" ?

*Not an expert here*  But how I understood it was that splits are just as valid up until they either are overtaken by the "main" or overtake the "main" and become the main line, it doesn't necessarily mean they did anything bad but it is a mild competition for longest chain.... thusly if you hypothetically are getting length 10 splits you have to additionally ensure that your minimum transactions have to take that into account just in case one of the splits really is rogue.

As far as I understand, the splits are managed (and the "boss" chain is selected) based upon how much work went into a chain, with the most "laborious" chain "winning" and overtaking the other.

Hm,  at this point I think additional expert opinion is worth inviting, since is seems to me that time can not directly factor into the gambler's ruin like that.
I'm not an expert, but I used to eat lunches with some experts. Here's the main difference between Satoshi's approach and yours:

Satoshi made an assumption of type "assume a spherical cow in a vacuum", or in his case "assume that the interblock period is long enough to consider the underlying network observable." In other words he can neglect the inter-node transmission time and consider the time to be a discrete interblock periods.

You made an assumption of type "assume a fat cow on a muddy field", or in your case "assume that the interblock period is as short as a decent computer can squeeze them through a decent home-style Internet pipe." In other words you cannot neglect network observability, your inter-node transmission time is on the same order as a TCP/IP timeout and a BGP route flap. Thus the time in your security model cannot be discretized to just interblock period. You have to consider other cases, eg. your node is getting flapped between two competing versions of the block-chain that are producing blocks on the even/odd half-periods.

Now, from reading your previous posts I can tell that you posses both skill and attitude to solve this type of problems. Perhaps Geist Gold requires a "block-chain flap dampening patch" the same way as BGP protocol required "route flap dampening"?

Anyway, the true expert would answer: "Do you want me to write a research grant proposal?"

Well, the issue under discussion was somewhat different, but I find your post fascinating.

However, first and foremost my initial assumption was "hey, wouldn't it be nice to make a chain with really, really fast blocks and see if it dies screaming" (which it so far did not, and is taking it like a trooper so far  Cheesy). Now that this is out of the way, I find the issue of low-level protocol effects on Geist fascinating (though somewhat saddening because it's quite above my ability to investigate without significant outside help)

I am, however, somewhat perplexed by the idea that BGP flaps can be smooth and regular enough to repeatedly oscilate poor   Geist between two versions of the chain...

As far as I understand, BGP flap is basically a route dying and un-dying fairly rapidly due to something cute happening in a given ISP's network, which suggests that normally they should be fairly irregular and territorially contained... but the issue is absolutely worth looking into, since it makes Geist a fascinating subject of study irrespective of various "plainly pragmatic" considerations.

I'd give you a research grant but I can only pay an impressive sum either in Belorussian Roubles or in Geists, and I'm reasonably certain that Geist is a more viable form of "sorta-money" (not intended as a claim of monetary viability of Geist Geld Wink )
737  Alternate cryptocurrencies / Altcoin Discussion / Re: Comparative confirmation security of different alt block chains on: September 16, 2011, 07:47:03 AM
Maybe someone with a better knowledge of probability will prove me wrong, but this is my understanding:

To replace 6 blocks, you need to make the same number of blocks that the network makes over a period of time and then re-do the blocks you want to replace. So currently with Bitcoin it'd be 12.5 Thash/s to match the network plus a fixed (7,500,000,000,000,000 * 6) hashes to replace the last 6 blocks.

If Bitcoin had a larger block interval, you'd have the same 12.5 Thash/s to match the network, but replacing the last blocks would take many more hashes. So confirmations would represent more work and be somewhat more valuable.

So, basically, in terms of "confirmation values", confirmations that are longer are more valuable in situations where an attacker has exceeded 51% (The "match the network" part) and is about to retroactively edit past blocks ?

Hm, that's not verily nice, but at least if you're right, that 6 confirmations in Bitcoin and 6 confirmations in say Solidcoin or Geist confer the same "amount of security" (I know it's a poor choice of words) as long as attacker has not matched/exceeded the network (which was the scenario presented).


Oh, I wrote my answer down in the wild west of "Alternate Cryptocurrencies" forum.

https://bitcointalk.org/index.php?topic=42417.msg528330#msg528330

I presume not many readers of this forum go down to that demilitarized zone, so I'm copy-pasting it here.

I'm not an expert, but I used to eat lunches with some experts. Here's the main difference between Satoshi's approach and yours:

Satoshi made an assumption of type "assume a spherical cow in a vacuum", or in his case "assume that the interblock period is long enough to consider the underlying network observable." In other words he can neglect the inter-node transmission time and consider the time to be a discrete interblock periods.

You made an assumption of type "assume a fat cow on a muddy field", or in your case "assume that the interblock period is as short as a decent computer can squeeze them through a decent home-style Internet pipe." In other words you cannot neglect network observability, your inter-node transmission time is on the same order as a TCP/IP timeout and a BGP route flap. Thus the time in your security model cannot be discretized to just interblock period. You have to consider other cases, eg. your node is getting flapped between two competing versions of the block-chain that are producing blocks on the even/odd half-periods.

Now, from reading your previous posts I can tell that you posses both skill and attitude to solve this type of problems. Perhaps Geist Gold requires a "block-chain flap dampening patch" the same way as BGP protocol required "route flap dampening"?

Anyway, the true expert would answer: "Do you want me to write a research grant proposal?"

Oh, holly-molly, now we have two competing forum threads of different lengths Wink

Anyways, this particular question pertains to the issue of whether two networks with different block rates (including two networks with different block rates that are well within the "known safe" window", as in my hypothetical scenario above)

Methinks it would be best if this thread was left to the discussion of statistic peculiarities pertaining to "two networks with different blockrate in a vacuum, which has "more security per validation" against attacker with less-than-51% of network", and continue the fascinating discussion of possible effects of time-sensitive aspects of low-level internet protocols and associated research grants (which I sadly can only pay in GeistGeld or Belorussian Roubles, and I strongly advise taking any cryptocoin over Belorussian Rouble Sad ) in the main GG thread (everyone is invited, BTW)
738  Alternate cryptocurrencies / Altcoin Discussion / Comparative confirmation security of different alt block chains on: September 16, 2011, 01:34:12 AM
Hello!

As it is widely (maybe Wink ) known, there are numerous alt blockchains now, with different target block  rate.

Since yours truly has given "life" to a blockchain with a particularly short block rate (a block per 15 seconds, doing remarkably nice so far), a discussion has started as to how exactly, from mathematical perspective, does security of a "single confirmation" compare between two blockchains with different target block rate.

Assume two blockchains with exactly same total network performance  
Assume that one of them (A) has a "target" block generation rate of one block per ten minutes, and another (B) has a target block generation rate of one block per 100 minutes (for ease of calculation)

Assume each chain has an attacker with 30% of overall total hashrate  of attacker's respective network.

Each attacker is trying to pull a double-spend against a transaction per classic "gambler's ruin" scenario in his respective network.

Which attacker would have an easier time ? (or, to put it differently, which network has "more security" to its single confirmation and how does one go about comparing it?)

Thank you very much.
739  Alternate cryptocurrencies / Announcements (Altcoins) / Re: [ANNOUNCE] New alternate cryptocurrency - Geist Geld on: September 16, 2011, 01:22:25 AM
Um, I am no actuarian coblee, but it seems to me that the original bitcoin paper does not state that probability of attacker success is a function of time.

Instead, it says that "Given our assumption that p > q, the probability drops exponentially as the number of blocks the attacker has to catch up with increases"

Again, I might be missing an elephant in the room of these arcane mathematications, but it appears that probability of attacker's success is claimed to drop off with the number of blocks, not the time spent making them, which would mean that "6 valid blocks in a net running at block per 15 secs" are as hard to overpower as  "6 valid blocks in a net running at 1 block per 10 minutes" (assuming hashrate distributions for attacker and good guys match in both of them, of course).

Yes, the the original paper does say that, and it's true. 6 GG confirms is much more secure than 5 GG confirms, which is much more secure than 4 GG confirms. But the paper doesn't say anything about comparing the security between 10 min blocks and 15 sec blocks. Given the same block times, each additional confirmations makes the probability of successful attack drop off exponentially. But if you try to compare the 2 chains, 1 BTC confirmation is as secure as 40 GG confirmations.



Hm,  at this point I think additional expert opinion is worth inviting, since is seems to me that time can not directly factor into the gambler's ruin like that.
It is entirely a function of block confirmations, but there is an element of time dealing with split chains.  I would theorize that with increased split chains due to smaller block times (I suspect that happens in GG as well), and the increased likelihood that they can grow longer than in the slower alternate coins such as bitcoin.  You have to account for block confirmations and a little bit of a time element (enough blocks to cover the majority of the lengths of typical chain splits) .... so while you might incur more risk with 6 that BTC you don't have to get obscene and force enough blocks to cover an hour....  I would guess 10 or up to 15 should suffice but that is just a semi-educated guess.

Hm, so basically the issue is that the split chains might get longer... but doesn't the BTC algo define "canonicity" in terms of which has most work, and not most "block count" ?

BTW, studying Geist's (hypothetical?) propensity for growing "longer" side-chains is an interesting prospect in itself...

P.S.:
Started a thread in technical about comparing security of a single validation in different alt chains.
740  Alternate cryptocurrencies / Announcements (Altcoins) / Re: [ANNOUNCE] New alternate cryptocurrency - Geist Geld on: September 16, 2011, 12:40:03 AM
Thus, 1 is neat, 2 is secure, 3 is verily secure, everything above 3 even more secure to the point of paranoia at 6 and "you should probably buy something on Silk Road" at above 6
You need to run your Geist Gold proxied through Tor to understand why you are wrong. Satoshi was probably over-conservative. You are certainly over-optimistic.

Lolcust, I think you are overly optimistic about this. 6 geist confirmations is definitely not enough to be secure. A common misconception about bitcoin is that the number of confirmations determines how safe your transaction is from a double spend attack. In reality it's how much time since your transaction that determines how safe it is. This is because the amount of time determines how likely an attack will succeed.

For example, if an attacker has 33% of the network hashrate, he has to be twice as lucky than the other miners in order to create more blocks than everyone else. It's much more likely to be twice as lucky for a period of 90 seconds (6 geist confirmations) than it is for a full 1 hour (6 bitcoin confirmations).

Um, I am no actuarian coblee, but it seems to me that the original bitcoin paper does not state that probability of attacker success is a function of time.

Instead, it says that "Given our assumption that p > q, the probability drops exponentially as the number of blocks the attacker has to catch up with increases"

Again, I might be missing an elephant in the room of theses arcane mathematications, but it appears that probability of attacker's success is claimed to drop off with the number of blocks, not the time spent making them, which would mean that "6 valid blocks" are still "6 valid blocks".
Thus, 1 is neat, 2 is secure, 3 is verily secure, everything above 3 even more secure to the point of paranoia at 6 and "you should probably buy something on Silk Road" at above 6
You need to run your Geist Gold proxied through Tor to understand why you are wrong. Satoshi was probably over-conservative. You are certainly over-optimistic.

Lolcust, I think you are overly optimistic about this. 6 geist confirmations is definitely not enough to be secure. A common misconception about bitcoin is that the number of confirmations determines how safe your transaction is from a double spend attack. In reality it's how much time since your transaction that determines how safe it is. This is because the amount of time determines how likely an attack will succeed.

For example, if an attacker has 33% of the network hashrate, he has to be twice as lucky than the other miners in order to create more blocks than everyone else. It's much more likely to be twice as lucky for a period of 90 seconds (6 geist confirmations) than it is for a full 1 hour (6 bitcoin confirmations).

Um, I am no actuarian coblee, but it seems to me that the original bitcoin paper does not state that probability of attacker success is a function of time.

Instead, it says that "Given our assumption that p > q, the probability drops exponentially as the number of blocks the attacker has to catch up with increases"

Again, I might be missing an elephant in the room of these arcane mathematications, but it appears that probability of attacker's success is claimed to drop off with the number of blocks, not the time spent making them, which would mean that "6 valid blocks in a net running at block per 15 secs" are as hard to overpower as  "6 valid blocks in a net running at 1 block per 10 minutes" (assuming hashrate distributions for attacker and good guys match in both of them, of course).

I guess that could be easily tested by having one of the multi-gigahash dudes trying to mine through TOR and mining for 10 mins, then through I2P's cancerous outproxy and mine for 10 mins, then directly and again 10 mins. We could compare the number of blocks accepted by the net and see if TOR or I2P result in notable loss.
I'm sorry I wasn't clear first time around. I edited my post too late.

The real test of your future coin laundry will involve setting up a Tor's hidden service. The connections "Tor<->clearnet" only test less than half of the Tor's privacy stack. To get a real statistics you'll have to setup your ghetto box behind a hidden service to connect "Tor<->Tor". Only then it will you test the full Tor stack: "hidden service directory resolution" + "connection from you to rendezvous-point" + "rendezvous-point delay" + "from rendezvoud-point to the hidden server".

If you regularly use Tor then please look up Hidden Wiki for the hidden bootstrap nodes for the original Bitcoin and try to resync the normal "bitcoind" through them after a weekend offline. Then you could try the same feat with your variant.

People frequently complain about 10 minute block interval of the original Bitcoin as way too slow. It is slow, but it reliably bootstraps through Tor. With your 15 second block intervals the bootstrap will be realy a feat of networking.

Hm, so basically, it will always lag behind the chain because full hidden server is so damn slow. Quite plausible a problem (I guess Bitcoin would always lag behind on, I dunno, GPRS then).

But as long as Geist can stand its ground on "vanilla nets", that strikes me as a fairly remote problem that might be solved by clever lean client design (whether it really can is another matter)

TOR is not nice but hey, you see my response right ? So mission accomplished *bush pic*
Well, Theymos and bitcointalk.org crew aren't really hiding. Your coin laundry will have to run hidden.


Hm, well, one might hypothetically try to have the laundry proper run "lean" and only have the "consumer-facing front" and associated proxy wallets to run G propper.... Hm. Not a bad idea it seems, I'll run it by a certain someone later...

Lolcust, I think you are overly optimistic about this. 6 geist confirmations is definitely not enough to be secure.
I'm inclined to agree. The bitparking I0Coin exchange stopped accepting blocks last night when it detected a chain reorg going back 10 blocks, past the 10 confirmations required for a deposit. So even with 90 second blocks, 10 wasn't enough. That chain only has half the hash rate of GG though.

Again, I might be failing to note an elephant here, but it seems quite explicitly stated in the Satoshi paper that attack success probability drops off with number of blocks, not time spent making them.

As for poor little i0, for the love of everything good, there are currently merely 29.811 Ghashes on i0coin.

If all people mining Geist right now conspired to overrun i0coin, it is not entirely unlikely that we could   do it (not intended to actually incite anyone towards harming the poor little coin)
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 [37] 38 39 40 41 42 43 44 45 46 47 48 49 50 51 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!