Bitcoin Forum
May 27, 2024, 03:13:35 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 2 3 4 [5] 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 »
81  Other / Archival / Re: delete on: October 07, 2014, 05:16:19 AM
As for "weighing in on Zoid," I fail to see what that has to do with anything. They are free to comment on anything or anyone they like, as are you or me.

Was a design decision not made to not adopt BBR's compression.

Wow, that is about the worst example you could come up with. You know as well as I do that rpteilla couldn't explain that feature good or bad if his life depended on it.

We have added patches from BBR when it has made sense to do so. On multiple occasions, and will do so in the future. Some user-visible features from BBR will likely be adopted in the future. Though probably not that one because we don't buy into the tiny constant factor benefit as important enough to give up verifabilty, and also, as i've explained before, we know how to do much more effective pruning.

Quote
"yeah we support that design decision"

You obviously have no real experience in this area. For one thing, they don't say that because they don't understand or pay attention to design issues closely enough to do so, if at all, and for another, if they did, we would still dismiss such comment from "investors" as not interesting. By contrast, we do pay attention when you or Zoidberg or other knowledgable people offer technical feedback. See how that works?

One truth about the inertia of groupthink, is that the participants can't even admit they are subject to it:

http://en.wikipedia.org/wiki/Groupthink

Your mistake is you think rpietila has to be involved in the design of a feature or decision to have influence on affirming that decision. In fact if developers are aware of the basic principles of key members of the community, those members can implicitly influence design decisions.
82  Other / Archival / Re: delete on: October 07, 2014, 05:13:38 AM
Quote
limited by the dynamic headroom of the initial innovation.

i do agree with this.  however it is much more normal for genuis inventions to be ruined by lack of adoption, maintenance, and improvement than it is for inventions to be limited by technological factors they did not originally take into consideration.

in fact often it is the improvements that raise the ceiling beyond what the original invention had.  

in a specific case there are examples - but the majority of failures rest on those three things IMO

The headroom is not knowable in advance. TFM frequently contradicts himself on this. He ignores the true wisdom of the bazaar.

robinwilliams, the Taleb distribution argues that the long-tails are more valuable. The internet was a long-tail. AOL and other networks were refined but the internet was zillions times more valuable in the end.

smooth, you missed my point which is that headroom is limited by the initial design decisions that can no longer be discarded. Whether it is estimable or not is irrelevant to my point about declining headroom each time a design decision is ratified and locked in stone due to political forces.

I have never stated I didn't want XMR to improve and even been actively trying to help it happen! What I called BS on, is this delusion about reality.

i feel the entire cryptocurrency world is majorly screwed and nobody is for sure what will work because it's unprecedented (except for tulip bulbs & beenie babies).   So sometimes we reference technology & sometimes we reference currencies and just pull stuff out of our ass that sounds good to us at the time.  

but none of us really have a fucking clue (or that's what i feel like sometimes)

From my perspective based on what I know (some has been shared publicly and some not), we might be screwed because we are moving too slow towards the major paradigm shifts needed.

For example, no one has solved the mining centralization dilemma yet.

And more importantly, the fiat world is rapidly moving to offer the 7 billion electronic payments, thus our potential market is being pulled from us.
83  Other / Archival / Re: delete on: October 07, 2014, 05:03:26 AM
As for "weighing in on Zoid," I fail to see what that has to do with anything. They are free to comment on anything or anyone they like, as are you or me.

Was a design decision not made to not adopt BBR's compression.

Humans gain confidence by herding, especially when subjective decisions are involved. The decision was likely made so no one would have to admit BBR did something innovative first (note I realize the utility of that innovation is arguable). Then all of your herded together to reaffirm it to yourselves.

Of course you will spin it in your mind as not being so. And I am prone to seeing it another way.

What I mean is that when you have a large volume of investment saying "yeah we support that design decision", it is reaffirms what was somewhat dubious and subjective.

Groupthink has an inertia once it gains momentum.
84  Other / Archival / Re: delete on: October 07, 2014, 04:59:12 AM
As for "weighing in on Zoid," I fail to see what that has to do with anything. They are free to comment on anything or anyone they like, as are you or me.

Was a design decision not made to not adopt BBR's compression.

Humans gain confidence by herding, especially when subjective decisions are involved. The decision was likely made so no one would have to admit BBR did something innovative first (note I realize the utility of that innovation is arguable). Then all of your herded together to reaffirm it to yourselves.

Of course you will spin it in your mind as not being so. And I am prone to seeing it another way.
85  Other / Archival / Re: delete on: October 07, 2014, 04:54:59 AM
Perception defines reality.

Did the tree fall in the forest if I never saw it and it decomposed before I got there? In my reality it never existed.
86  Other / Archival / Re: delete on: October 07, 2014, 04:48:00 AM
I was following rpietila's altcoin observer when this was discussed months ago, and I saw rpietila weigh in quite emphatically (as he has always done when I mention perpetual debasement) that he was against it. He later become slightly flexible to something like 0.1 to 1% debasement (which is entirely inadequate based on historical norms of debt issuance, etc... you won't change human nature with a crypto-currency!).

This decision was made long before his involved, as I said. You may disagree with the stated amount of perpetual debasement, which is fine as these debates go, but it has nothing to do with rpietila. I don't remember the exact exchange but my guess would be that if he "become slightly flexible" it may have been because he recognized it was going to happen regardless of his opinion.

Quote
So I call BS on him and his ilk not having any influence. He only agreed to buy your coin because he saw that you agreed with his premises.

He didn't "agree" to buy anything. He decided on his own. It was as much as surprise to us as anyone else, perhaps more so.

Do you realize how tiring this is? And you don't understand why there is so much angst?

You deny reality.

I saw with my own eyes that there was some probing about possibly changing that design decision while it was still early enough to do so, and I saw rpietila (and animorex) weigh on it, also saw them weigh in on Zoid, etc..

Sorry I don't believe this.
87  Other / Archival / Re: delete on: October 07, 2014, 04:42:17 AM
How can a project ignore the investors?

It's actually quite easy. Seriously. You adopt the mentality of being an open source software project and not a get rich quick scheme and it pretty much follows from there. Attempts to influence from investors that lack technical merit (which is generally all of them) are treated with derision or laughed at.

I really can't believe that we are the only project to ever approach things in this manner, but given how hard it seems to be for people to get the concept, perhaps we are.

I claim you are deluding yourself. That happens. Step outside it objectively.

The orthogonality can't exist.

The only way it is exists is for the whale to not like your premises from the start and stay away with his herding.

I am so happy rpietila is "attacking"joining monero. Keeps him (and animorex) far away from anything I do.
88  Other / Archival / Re: delete on: October 07, 2014, 04:39:15 AM
What has bothered me since the start was the marriage of open source with the investment herding. It feels like a massive conflict-of-interest, because as I pointed out, it impacts critically important design decisions.

Except you were and are wrong. Investors have never had any influence on any design decisions, most certainly not reptilia and debasement, as I explained that was not only wrong, but chronologically impossible -- by the way, are are aware that the stated design explicitly includes the possibility of perpetual debasement, and we are unanimously in favor of it?

I was following rpietila's altcoin observer when this was discussed months ago, and I saw rpietila weigh in quite emphatically (as he has always done when I mention perpetual debasement) that he was against it. He later become slightly flexible to something like 0.1 to 1% debasement (which is entirely inadequate based on historical norms of debt issuance, etc... you won't change human nature with a crypto-currency!).

So I call BS on him and his ilk not having any influence. He only agreed to buy your coin because he saw that you agreed with his fundamental premises.
89  Other / Archival / Re: delete on: October 07, 2014, 04:34:35 AM
Nobody is going to argue that rpietila hasn't had some influence on the Monero market.
I can't say the same about any design decisions, however I do believe smooth when he says he hasn't.

This argument of orthogonality is I am calling BS. There is some orthogonality but there is also leakage of course. How can a project ignore the investors?

There are design decisions that investors want (e.g. limited money supply) which are the antithesis of making a widely adopted currency.

Actually I believe you have had just as much (or close to it) influence on the market by divulging what so far appear to be undemonstrated vulnerabilities in the code.

I wish it were so, because I think investors will be protected from a Taleb distribution, but I doubt I have had any impact. If some XMR people are so paranoid is indicative of investment but very little adoption. If you had widespread adoption, you would be ignoring me entirely.

I also believe you are hoping any attack on Monero is successful.

I am hoping we all find out what the vulnerabilities are in any crypto-currency asap and move forward to building a widespread crypto-currency.

Facebook is preparing to offer friend-to-friend payments with ATM debit cards.

We have almost lost our chance...
90  Other / Archival / Re: delete on: October 07, 2014, 04:09:16 AM
I am not sure if I agree with you that rpietila destroyed Monero

It would be better for your own reputation if you did not misquote me, or quote out of context.

Who is confused?

You apparently, because I did not state anything about anyone destroying Monero.

Of course you did. I didn't intend to imply anything about your intended meaning, rather only the possible literal interpretations given the circumstances. Remember my father is an attorney. I suppose I learned it from him.

rpietila doesn't even have access to the repo, nor would he have any idea what to do with it if he did...

He's a user and self-appointed promoter.

If Mark Karpeles shows up here...

P.S. what I am trying to say is that I think rpietila contributed the political and organizational situation we have now, but I don't know if he solely responsible. And IMO the current situation is not so huge of a potential for the long-term (but I guess that could change depending what you guys have coming). Perhaps 'destroyed' is too severe. Better to say 'limited potential'. My personal opinion only subject to change depending on what is discovered and changes.

I think he also contributed politically to some design decisions, such as originally being against perpetual debasement.

You are one strange individual.

What is psychosis is the continued denial that rpietila was not part of anything that has transpired with Monero.

I mean I am not trying to put XMR down, but it is obnoxious to read that the moon is made of cheese.

If you will pull the Bill Clinton wordsmithing, then I will put the mirror in your face.

If am ever in similar delusion, I hope someone throws cold water on my face.

What has bothered me since the start was the marriage of open source with the investment herding. I am refuting that the two are orthogonal. It feels like a massive conflict-of-interest, because as I pointed out, it impacts critically important design decisions.

I have been bothered by the attempts to declare ring-signatures as the Holy Grail solution to anonymity. It seemed there was a push to suppress any further consideration and that all non-technical investors should move immediately to that technical conclusion.

I'd rather to give time to work through it technically so we can see what comes out the other side. I have tried to help investigate tradeoffs and attack mitigations for ring-signatures for example.

http://en.wikipedia.org/wiki/Nassim_Nicholas_Taleb#Philosophical_theories

Quote
His book The Bed of Procrustes summarizes the central problem: "we humans, facing limits of knowledge, and things we do not observe, the unseen and the unknown, resolve the tension by squeezing life and the world into crisp commoditized ideas". Taleb disagrees with Platonic (i.e., theoretical) approaches to reality to the extent that they lead people to have the wrong map of reality rather than no map at all.[17] He opposes most economic and grand social science theorizing, which in his view suffer acutely from the problem of overuse of Plato's Theory of Forms.

Relatedly, he also believes that universities are better at public relations and claiming credit than generating knowledge. He argues that knowledge and technology are usually generated by what he calls "stochastic tinkering" rather than by top-down directed research.

Taleb's writings discuss the error of comparing real-world randomness with the "structured randomness" in quantum physics where probabilities are remarkably computable and games of chance like casinos where probabilities are artificially built.[66] Taleb calls this the "Ludic fallacy". His argument centers on the idea that predictive models are based on Plato's Theory of Forms, gravitating towards mathematical purity and failing to take some key ideas into account, such as: the impossibility of possessing all relevant information, that small unknown variations in the data can have a huge impact, and flawed theories/models that are based on empirical data and that fail to consider events that have not taken place but could have taken place. Discussing the Ludic fallacy in The Black Swan, he writes, "The dark side of the moon is harder to see; beaming light on it costs energy. In the same way, beaming light on the unseen is costly in both computational and mental effort."

In the second edition of The Black Swan, he posited that the foundations of quantitative economics are faulty and highly self-referential. He states that statistics is fundamentally incomplete as a field as it cannot predict the risk of rare events, a problem that is acute in proportion to the rarity of these events.

One of its applications is in his definition of the most effective (that is, least fragile) risk management approach: what he calls the 'barbell' strategy which is based on avoiding the middle in favor of linear combination of extremes, across all domains from politics to economics to one's personal life. These are deemed by Taleb to be more robust to estimation errors. For instance, he suggests that investing money in 'medium risk' investments is pointless because risk is difficult if not impossible to compute. His preferred strategy is to be both hyper-conservative and hyper-aggressive at the same time. For example, an investor might put 80 to 90% of their money in extremely safe instruments, such as treasury bills, with the remainder going into highly risky and diversified speculative bets. An alternative suggestion is to engage in highly speculative bets with a limited downside. He asserts that by adopting these strategies a portfolio can be "robust", that is, gain a positive exposure to black swan events while limiting losses suffered by such random events.[68] Taleb also applies a similar barbell-style approach to health and exercise. Instead of doing steady and moderate exercise daily, he suggests that it is better to do a low-effort exercise such as walking slowly most of the time, while occasionally expending extreme effort. He avers that the human body evolved to live in a random environment, with various unexpected but intense efforts and much rest.

http://en.wikipedia.org/wiki/Taleb_distribution

Quote
In economics and finance, a Taleb distribution is a term coined by U.K. economists/journalists Martin Wolf and John Kay to describe a returns profile that appears at times deceptively low-risk with steady returns, but experiences periodically catastrophic drawdowns. It does not describe a statistical probability distribution, and does not have an associated mathematical formula. The term is meant to refer to an investment returns profile in which there is a high probability of a small gain, and a small probability of a very large loss, which more than outweighs the gains. In these situations the expected value is (very much) less than zero, but this fact is camouflaged by the appearance of low risk and steady returns. It is a combination of kurtosis risk and skewness risk: overall returns are dominated by extreme events (kurtosis), which are to the downside (skew).
91  Other / Archival / Re: delete on: October 07, 2014, 03:58:55 AM
Frankly I'm disappointed. I was expecting someone more like this:-



Ah you wanted the diabolical poses...

92  Other / Archival / Re: delete on: October 07, 2014, 03:33:23 AM
I am not sure if I agree with you that rpietila destroyed Monero

It would be better for your own reputation if you did not misquote me, or quote out of context.

Who is confused?

You apparently, because I did not state anything about anyone destroying Monero.

Of course you did. I didn't intend to imply anything about your intended meaning, rather only the possible literal interpretations given the circumstances. Remember my father is an attorney. I suppose I learned it from him.

rpietila doesn't even have access to the repo, nor would he have any idea what to do with it if he did...

He's a user and self-appointed promoter.

If Mark Karpeles shows up here...

P.S. what I am trying to say is that I think rpietila contributed the political and organizational situation we have now, but I don't know if he solely responsible. And IMO the current situation is not so huge of a potential for the long-term (but I guess that could change depending what you guys have coming). Perhaps 'destroyed' is too severe. Better to say 'limited potential'. My personal opinion only subject to change depending on what is discovered and changes.

I think he also contributed politically to some design decisions, such as originally being against perpetual debasement.
93  Other / Archival / Re: delete on: October 07, 2014, 03:27:29 AM
Reposting because I significantly edited this...

In selfish mining, you don't know if you are on the majority chain or not, so you don't know which of the double-spends was possibly sent by the majority and mixed by them

It might be possible to isolate which of the double-spends was seen by the majority by using a PoW consensus (which is basically a simple majority vote).

Then you must assume that any follow on txs to the attacker's double-spend were all his. But the problem is that consensus can't be reached always in one block, because the majority doesn't have 100% of the hashrate.

The attacker can also accept transactions, and spenders create txs autonomously.


Some will, but most won't (but as I said, "some" might be enough for your technique to be incompatible).

True you could unwind some (usually extremely) smallish percent of valid transactions and be compatible with my fix.

Ahem. The more I think about this, in the interim time while the majority tries to build a consensus about the (now both entirely public) double-spends over some number of blocks depending on the attacker's hashrate, the attacker can introduce a huge quantity of derivative txs thus the opportunities for valid txs to mix any one of those derivative mixed txs increases significantly. It is the autonomy of the mixing that is the qualitative difference between opaque block chains and transparent block chains which also have mixes, because CoinJoin-like mixing can wait for N confirmations.

You can't mitigate this with tx fees paid to the miners, because the attacker is paying himself!

So the only mitigation I can see is to send tx fees to the ether, but the problem is your block rewards decline to 0 in Monero (I know you didn't agree with that, but you were overruled).

And in any case, high tx fees are the antithesis of a currency. Remember Gresham's law, bad (debased) money drives good (non-debased) money out-of-circulation.
94  Other / Archival / Re: delete on: October 07, 2014, 02:51:20 AM
Some will, but most won't (but as I said, "some" might be enough for your technique to be incompatible).

True you could unwind some (usually extremely) smallish percent of valid transactions and be compatible with my fix.

The more I think about this, if you are waiting N confirmations to avoid a double-spend attack, then you also covered if your derivative tx gets unwound.

So perhaps I am mistaken that my fix is incompatible with opaque block chains.

However if my fix is also applied to network fragmentationtemporary rented hardware attacks where the number of blocks of the fork could be quite large, i.e. my solution can fix selfish mining and also automatically repair after temporary network fragmentationrented hardware attacks, then perhaps the number N becomes unreasonably large. In that case, that is a disadvantage for opaque block chains because the fanout of affected valid txs could become quite extensive (by your own admission upthread that blacklisting would fanout exponentially).

Edit: afaik Zerocash amplifies the incompatibility because all txs much be unwound.
95  Other / Archival / Re: delete on: October 07, 2014, 02:44:56 AM
In selfish mining, you don't know if you are on the majority chain or not, so you don't know which of the double-spends was possibly sent by the majority and mixed by them

It might be possible to isolate which of the double-spends was seen by the majority by using a PoW consensus (which is basically a simple majority vote).

Then you must assume that any follow on txs to the attacker's double-spend were all his. But the problem is that consensus can't be reached always in one block, because the majority doesn't have 100% of the hashrate.

The attacker can also accept transactions, and spenders create txs autonomously.
96  Other / Archival / Re: delete on: October 07, 2014, 02:38:44 AM
smooth,

Don't you understand that due to ring signatures there is never a private chain?

I can create a double-spend on a chain nobody else sees. Then I can mix the output of that double-spend with many txs that mix many as inputs (into the rings) many other outputs from valid txs all over the historical public block chain.

You have no way to prove which of those inputs was the follow on tx.

The attacker can create a multitude of the these txs.

In selfish mining, you don't know if you are on the majority chain or not, so you don't know which of the double-spends was possibly sent by the majority and mixed by them.

It is a fog.
97  Other / Archival / Re: delete on: October 07, 2014, 02:30:22 AM
You might also have to unwind some other (non-double) spends too though.

Exactly.

And if the attacker has half a brain, he will make sure he mixes his double-spends outputs with as much of the block chain as he can.

That does him no good. You still only have to unwind his spends. Him mixing with you does not affect your transaction one way or another.

Read more carefully please. I said mix his double-spend outputs, not inputs.

The other ones that get unwound are spends that derive from his (obviously) or ones that mix with his outputs (likely a small number, or zero if he is mining on a private chain, and not something he has any control over).

Selfish mining is not a private chain. Which of the double-spends do you unwind? Wink

Consider (possibly forced with DDoS) network fragmentation for example.
98  Other / Archival / Re: delete on: October 07, 2014, 02:24:32 AM
You might also have to unwind some other (non-double) spends too though.

Exactly.

And if the attacker has half a brain, he will make sure he mixes his double-spends outputs with as much of the block chain as he can. You might assume all mixes are the attacker but you can't prove that. With Zerocoin and Zerocash, it gets worse.
99  Other / Archival / Re: delete on: October 07, 2014, 02:13:45 AM
The only decision you can make is to let the longest fork win and destroy instantly all the conflicting value in the shorter fork, or you can put a maximum fork length rule so that the two forks live on simultaneously and the market decides how to value them.

Congratulations you have invented Bitcoin (i.e. the first alternative here). If you have proven something novel about the broader distributed consensus problem, or fully developed a way to build something novel and useful based on the second, that might interesting.

I have solved the selfish mining attack.

Not exactly. Selfish mining is an attack on Bitcoin.

And Monero and every PoW coin.

You have constructed a different system that (may) be secure against such an the attack. That could be interesting, depending on the other tradeoffs.

The only tradeoff I see thus far is it is not compatible with opaque block chains, e.g. Cryptonote, Zerocoin, Zerocash, and coming version of Anoncoin. Bitcoin, Litecoin, Dogecoin, Darkcoin could in theory implement my system. However it would require a hard fork I believe (need to analyze that more to be 100% sure).

If you can prove that the attack is not solvable in the first case (Bitcoin) that would perhaps be an interesting result that might get you some recognition (if you can convey it effectively). Even if no acceptable solution is provided or possible.

It is proven mathematically to be a solution using the same mathematical model as in the selfish mining paper.

It is too obvious why opaque chains are fundamentally incompatible with the solution, because they cannot unwind individual double-spends.

Edit: one could argue that is it not such a big deal, because if you implement the fix in the selfish mining white paper, then Monero is resistant to anything below 25% hashrate. My fix raises that to 50% but it is incompatible with opaque block chains. However with Bitcoin pools often approaching 50% of the network hashrate, then one can argue my fix is important.
100  Other / Archival / Re: delete on: October 07, 2014, 02:03:22 AM
The only decision you can make is to let the longest fork win and destroy instantly all the conflicting value in the shorter fork, or you can put a maximum fork length rule so that the two forks live on simultaneously and the market decides how to value them.

Congratulations you have invented Bitcoin (i.e. the first alternative here). If you have proven something novel about the broader distributed consensus problem, or fully developed a way to build something novel and useful based on the second, that might interesting.

I have solved the selfish mining attack. The solution is incompatible with opaque block chains. And I would choose the second rule once the coin had attained sufficient hashrate because network fragmentation is a very real possibility with the governments possessing internet kill switches.
Pages: « 1 2 3 4 [5] 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!