PPCoin is NOT a decentralized cryptocurrency

[smoothie]

I agree. Claiming you (Sunny Drag Queen) spent $100,000 to $200,000 of development time on PPC is EGO.

beat me too it smoothie...did he not take it in bitcoin too? 

Is this in reference to the 250BTC that RealSolid begged to be paid? lol...

[1713910307]

1713910307

[1713910307]

1713910307

[1713910307]

1713910307

[1713910307]

1713910307

[DiCE1904]

I agree. Claiming you (Sunny Drag Queen) spent $100,000 to $200,000 of development time on PPC is EGO.

beat me too it smoothie...did he not take it in bitcoin too?  

Is this in reference to the 250BTC that RealSolid begged to be paid? lol...

yup, thats right...why not take it in PPC or Scamcoin?

[killerstorm]

I am perfectly willing to engage in discussions however to my disappointment only cunicula among the self-proclaimed proof-of-stake experts seems to be capable of civil discussions.

Civil or not, my formula is the ONLY estimate of cost of double-spend attack for PPCoin (as far as I know). Ironically, I demonstrated that attacking PPCoin's PoS is somewhat hard and thus it might be secure.

Without this estimate it's just faith-based currency. Like, Sunny King's intuition says that this code is secure, then it must be it! All praise Sunny King!

I don't see much merit in your so-called security analysis.

People try to find holes in crypto constructs all the time. For example, best known preimage attack on SHA-256 is: "41-round SHA-256 out of 64 rounds with time complexity of 2^253.5 and space complexity of 216". It is completely theoretical since it doesn't even attack full SHA-256 and 2^253 time complexity is absolutely impractical.

But these kind of theoretic attacks are very important since they show that even very clever people cannot find ways to attack SHA-256. We were able to get some confidence in this crypto function only after years of analysis.

But Sunny King wants people to simply trust him...

I understand your criticism, but coblee also thinks the type of attacks you are concerned with are not practical when you presented the same argument to his litecoin proposal.

Litecoin proposal is PoS+PoW, you have pure PoS. It is a completely different thing.

Also, bribery isn't the only way to attack PPCoin, one having access to considerable amounts of "stake" can try to do that. Practical double-spend attacks require much less than 50% of coins.


If Sunny King has no trust in theories, perhaps we can show it in practice? We can organize a fund which would purchase as much ppcoin as possible. Then it will try to perform double-spend attacks... Alternatively, fund can bribe people to use their stake.

The problem I see with your camp is that you guys have too much ego and think only your proof-of-stake design is good. The so-called critics (except for cunicula) did not give even a tiny credit to ppcoin team and me.

1. I don't have my own proof-of-stake design.
2. I think that PPCoin is interesting and Sunny King is likely a smart guy.
3. However Sunny King has too much ego which likely hurts his currency.

I only hear regurgitation of how your design is more legitimate and superior blah blah plus a lot of dirty words thrown on ppcoin.

Yeah I guess those people who try to attack SHA-256 all have too much ego, they simply should have trusted SHA-256 designers.

I am sorry I cannot acknowledge this type of 'criticism' as constructive.

Sure, you can just dismiss formula which estimates costs of attack simply because a guy who wrote that formula doesn't sing you praises. That's how it works among mature people.

No you didn't contribute to ppcoin, with or without your 'harsh criticism' I was going to introduce the v0.2 improvement to ppcoin, which I entirely came up with by myself.

Yeah I know, you developed it for 9 months, then two weeks after release you found a way to make it much better and completely different. Your sudden enlightenment has nothing to do criticism you read on forums.

I hope you can realize the error in your ways and start engaging in meaningful discussions without unreasonable attack on ppcoin and me.

Apparently spending several hours on analysis and writing down a couple of formulas doesn't count as meaningful now.

As for unreasonable attacks, you should probably send a message to that guy who found 2^253 attack on a weakened SHA-256: his attack is just unreasonable, he shouldn't have published that paper. Likely he's just too mean and has too much ego and doesn't want to engage in meaningful discussions.

I think you are smart and maybe can contribute some good ideas if your mind is in the right place. As I said before I wish everyone of us can look deeper and realize that maybe we work towards the same larger goal so we can throw away our petty differences and be respectful to each other.

Oh, how cute, so when will you publish detailed design documents and analysis so we can discuss it?

IIRC you said that you have it, but you don't want to share it with anyone.

[DiCE1904]

I am perfectly willing to engage in discussions however to my disappointment only cunicula among the self-proclaimed proof-of-stake experts seems to be capable of civil discussions.

Civil or not, my formula is the ONLY estimate of cost of double-spend attack for PPCoin (as far as I know). Ironically, I demonstrated that attacking PPCoin's PoS is somewhat hard and thus it might be secure.

Without this estimate it's just faith-based currency. Like, Sunny King's intuition says that this code is secure, then it must be it! All praise Sunny King!

I don't see much merit in your so-called security analysis.

People try to find holes in crypto constructs all the time. For example, best known preimage attack on SHA-256 is: "41-round SHA-256 out of 64 rounds with time complexity of 2^253.5 and space complexity of 216". It is completely theoretical since it doesn't even attack full SHA-256 and 2^253 time complexity is absolutely impractical.

But these kind of theoretic attacks are very important since they show that even very clever people cannot find ways to attack SHA-256. We were able to get some confidence in this crypto function only after years of analysis.

But Sunny King wants people to simply trust him...

I understand your criticism, but coblee also thinks the type of attacks you are concerned with are not practical when you presented the same argument to his litecoin proposal.

Litecoin proposal is PoS+PoW, you have pure PoS. It is a completely different thing.

Also, bribery isn't the only way to attack PPCoin, one having access to considerable amounts of "stake" can try to do that. Practical double-spend attacks require much less than 50% of coins.


If Sunny King has no trust in theories, perhaps we can show it in practice? We can organize a fund which would purchase as much ppcoin as possible. Then it will try to perform double-spend attacks... Alternatively, fund can bribe people to use their stake.

The problem I see with your camp is that you guys have too much ego and think only your proof-of-stake design is good. The so-called critics (except for cunicula) did not give even a tiny credit to ppcoin team and me.

1. I don't have my own proof-of-stake design.
2. I think that PPCoin is interesting and Sunny King is likely a smart guy.
3. However Sunny King has too much ego which likely hurts his currency.

I only hear regurgitation of how your design is more legitimate and superior blah blah plus a lot of dirty words thrown on ppcoin.

Yeah I guess those people who try to attack SHA-256 all have too much ego, they simply should have trusted SHA-256 designers.

I am sorry I cannot acknowledge this type of 'criticism' as constructive.

Sure, you can just dismiss formula which estimates costs of attack simply because a guy who wrote that formula doesn't sing you praises. That's how it works among mature people.

No you didn't contribute to ppcoin, with or without your 'harsh criticism' I was going to introduce the v0.2 improvement to ppcoin, which I entirely came up with by myself.

Yeah I know, you developed it for 9 months, then two weeks after release you found a way to make it much better and completely different. Your sudden enlightenment has nothing to do criticism you read on forums.

I hope you can realize the error in your ways and start engaging in meaningful discussions without unreasonable attack on ppcoin and me.

Apparently spending several hours on analysis and writing down a couple of formulas doesn't count as meaningful now.

As for unreasonable attacks, you should probably send a message to that guy who found 2^253 attack on a weakened SHA-256: his attack is just unreasonable, he shouldn't have published that paper. Likely he's just too mean and has too much ego and doesn't want to engage in meaningful discussions.

I think you are smart and maybe can contribute some good ideas if your mind is in the right place. As I said before I wish everyone of us can look deeper and realize that maybe we work towards the same larger goal so we can throw away our petty differences and be respectful to each other.

Oh, how cute, so when will you publish detailed design documents and analysis so we can discuss it?

IIRC you said that you have it, but you don't want to share it with anyone.

Tip sent for being one of the best posts I have seen here. Well done Killerstorm, well done.

[smoothie]

I am perfectly willing to engage in discussions however to my disappointment only cunicula among the self-proclaimed proof-of-stake experts seems to be capable of civil discussions.

Civil or not, my formula is the ONLY estimate of cost of double-spend attack for PPCoin (as far as I know). Ironically, I demonstrated that attacking PPCoin's PoS is somewhat hard and thus it might be secure.

Without this estimate it's just faith-based currency. Like, Sunny King's intuition says that this code is secure, then it must be it! All praise Sunny King!

I don't see much merit in your so-called security analysis.

People try to find holes in crypto constructs all the time. For example, best known preimage attack on SHA-256 is: "41-round SHA-256 out of 64 rounds with time complexity of 2^253.5 and space complexity of 216". It is completely theoretical since it doesn't even attack full SHA-256 and 2^253 time complexity is absolutely impractical.

But these kind of theoretic attacks are very important since they show that even very clever people cannot find ways to attack SHA-256. We were able to get some confidence in this crypto function only after years of analysis.

But Sunny King wants people to simply trust him...

I understand your criticism, but coblee also thinks the type of attacks you are concerned with are not practical when you presented the same argument to his litecoin proposal.

Litecoin proposal is PoS+PoW, you have pure PoS. It is a completely different thing.

Also, bribery isn't the only way to attack PPCoin, one having access to considerable amounts of "stake" can try to do that. Practical double-spend attacks require much less than 50% of coins.


If Sunny King has no trust in theories, perhaps we can show it in practice? We can organize a fund which would purchase as much ppcoin as possible. Then it will try to perform double-spend attacks... Alternatively, fund can bribe people to use their stake.

The problem I see with your camp is that you guys have too much ego and think only your proof-of-stake design is good. The so-called critics (except for cunicula) did not give even a tiny credit to ppcoin team and me.

1. I don't have my own proof-of-stake design.
2. I think that PPCoin is interesting and Sunny King is likely a smart guy.
3. However Sunny King has too much ego which likely hurts his currency.

I only hear regurgitation of how your design is more legitimate and superior blah blah plus a lot of dirty words thrown on ppcoin.

Yeah I guess those people who try to attack SHA-256 all have too much ego, they simply should have trusted SHA-256 designers.

I am sorry I cannot acknowledge this type of 'criticism' as constructive.

Sure, you can just dismiss formula which estimates costs of attack simply because a guy who wrote that formula doesn't sing you praises. That's how it works among mature people.

No you didn't contribute to ppcoin, with or without your 'harsh criticism' I was going to introduce the v0.2 improvement to ppcoin, which I entirely came up with by myself.

Yeah I know, you developed it for 9 months, then two weeks after release you found a way to make it much better and completely different. Your sudden enlightenment has nothing to do criticism you read on forums.

I hope you can realize the error in your ways and start engaging in meaningful discussions without unreasonable attack on ppcoin and me.

Apparently spending several hours on analysis and writing down a couple of formulas doesn't count as meaningful now.

As for unreasonable attacks, you should probably send a message to that guy who found 2^253 attack on a weakened SHA-256: his attack is just unreasonable, he shouldn't have published that paper. Likely he's just too mean and has too much ego and doesn't want to engage in meaningful discussions.

I think you are smart and maybe can contribute some good ideas if your mind is in the right place. As I said before I wish everyone of us can look deeper and realize that maybe we work towards the same larger goal so we can throw away our petty differences and be respectful to each other.

Oh, how cute, so when will you publish detailed design documents and analysis so we can discuss it?

IIRC you said that you have it, but you don't want to share it with anyone.

Killerstorm, Now that is fucking ownage on a whole new level. Good job.

Hey Sunny, I'd like to see your reply to Killerstorm's post. 

Show us all how much ego we have please...

[Sunny King]

The point about egos is on point. Most criticism (not all) is driven by personal feelings. This type of criticism is just noise and should be ignored.

That said, killerstorm raised a very important point. The workings of PPC are opaque. Learning the  protocol requires sifting through the code. It is not reasonable to expect outsiders to do this.

This makes it very difficult for outsiders to analyze PPC. A new white paper which contains details sufficient to implement ppc independently would solve this problem.

Sunny has to be the person to write this. Sonny, lay out the protocol details and let these details speak for themselves.

Right now my priority is operational and security issues. Design paper may be updated in the future but there is no guarantee at this moment. Unfortunately that's how things are done outside ivory tower. I feel with the design paper + source code out there if you truly want to do some analysis of the algorithm you already have all you need, not out of the norm even for pure research oriented work you'd have to make some effort to understand things.

You can also help to make the learning curve a bit less steep, by creating some wiki articles/discussion topics for example.

[Sunny King]

Sigh, killerstorm, I already replied to your formula the same day I don't think they are correct. Whatever you believe, you can feel all superior and think your 'security analysis' is all foolproof, and warrant personal attacks and smear campaigns of ppcoin.

Sorry I don't think a real researcher on these issues act like you do. They are probably more level headed and responsible. So I guess we'd have to part our ways then.

[ElectricMucus]

Actually there is a method to provide accuracy, it's called a mathematical proof.

Of course that requires alot of work research and skills, and somebody capable enough to do it wouldn't even fork the bitcoin code but start over.

[killerstorm]

Sigh, killerstorm, I already replied to your formula the same day I don't think they are correct.

I don't think so. You replied with an asymptotic approximation of my formula which shows that splitting stake into many pieces doesn't help. (Which is understandable.)
I guess this confirms that you accept my formula, or at least you don't have a better formula. Otherwise you would have shown your own numbers to dismiss mine.

So, well, maybe indeed my formula isn't correct. It was a very quick and crude analysis anyway. So where is YOUR formula?

You've designed this proof-of-stake system, so you must have some estimate for cost of double-spend attack, right? Right?

IIRC you said that one needs at least 50% of stake to own the network. Can you show at least some sketch for a proof for this?

Or -- gasp -- you don't really have any mathematical estimate, just your intuition? This really shows how security is your priority.

Note that Satoshi have published security analysis in his paper. See section 11 in the Bitcoin paper. Satoshi wrote two pages of text to explain fairly basic probabilistic model, then he included a C program which does the calculation and gave concrete numbers of several scenarios (i.e. 5 confirmations is enough to get less than 0.001 probability of double spend from attacker who has 10% of network's hashing power).

Do you think that Satoshi was in ivory tower when he wrote that?

(Now, guys, this was a real ownage.)

Whatever you believe, you can feel all superior and think your 'security analysis' is all foolproof,

I never said it is. If you have something better show me that I was wrong.

and warrant personal attacks and smear campaigns of ppcoin.

Is it a smear campaign if I just state facts?

Sorry I don't think a real researcher on these issues act like you do. They are probably more level headed and responsible. So I guess we'd have to part our ways then.

Yeah that will surely shield you from criticism

I'm not writing it for you, idiot, I'm writing it for people who consider 'investing' into ppcoin. They have a right to know.

I do not ask people to trust me, I ask people to question you before they get involved. That's all.

Again, nothing personal.

[killerstorm]

Actually there is a method to provide accuracy, it's called a mathematical proof.

Of course that requires alot of work research and skills, and somebody capable enough to do it wouldn't even fork the bitcoin code but start over.

I don't think it's really that hard. For example, Satoshi's analysis of proof-of-work security is something undergrad math student should be able to do.

PPCoin is quite a bit harder to analyze (which is a bad thing), but numeric simulation isn't hard, again something undergrad student should be able to do.

Sunny King definitely knows both math and programming. If he haven't done simulation this is just because he doesn't give a fuck about research, as long as people trust that his coins are valuable and buy them.

Also, in many companies, particularly ones which work with important, mission critical things, programmers are required to write specification and tests before they start coding.

[Sunny King]

You are right I don't have a math analysis of how much coins are needed to attempt control of block chain. First it's more difficult than Satoshi's design, secondly I think there maybe other practical attacking vectors that I have missed so putting a math formula there as the final say on security is a bit misleading as well. So no I don't think I am ready to do this type of analysis. I think I have mentioned this before.

I did not claim that you need 50% coins to control ppcoin block chain. Much less of that would be enough.

It may not match your expectations but I did what I can to contribute, rather than sitting there and accusing other people being lazy and greedy while they are the ones doing the real work. How convenient.

If you are so helpful then why don't you polish your analysis and continue discussion on the security properties? Instead you would just launch your personal crusade to attack me and ppcoin project. If you worried so much about investors then why I haven't seen one pm from you describing the vulnerability of ppcoin and discuss with me ways of fixing it? I have received quite a number of pms but none are from the detractors as their main goal is to discredit ppcoin in public.

However given all that I have endured from you, you are still welcome to pm me if you truly wish to discuss about security analysis of ppcoin. Otherwise we would just have to part our ways.

[iddo]

You are right I don't have a math analysis of how much coins are needed to attempt control of block chain.

Nevermind that you didn't analyse your protocol, I haven't even seen evidence that you know how the protocol works. Remind us again why you refuse to post the protocol specifications? Maybe someone else wrote parts of the code and disappeared, leaving you clueless? IMHO killerstorm is being far too respectful towards you than he should be.

[smoothie]

You are right I don't have a math analysis of how much coins are needed to attempt control of block chain.

Nevermind that you didn't analyse your protocol, I haven't even seen evidence that you know how the protocol works. Remind us again why you refuse to post the protocol specifications? Maybe someone else wrote parts of the code and disappeared, leaving you clueless? IMHO killerstorm is being far too respectful towards you than he should be.

Agreed.

How can you not have a math analysis of something you created. Oh wait...maybe because it wasn't you right?

No need to properly inform people of how your new system works, just get it out there and all the kiddies will buy it because it is a "crypto-thingie".

[AndyRossy]

You are right I don't have a math analysis of how much coins are needed to attempt control of block chain.

Nevermind that you didn't analyse your protocol, I haven't even seen evidence that you know how the protocol works. Remind us again why you refuse to post the protocol specifications? Maybe someone else wrote parts of the code and disappeared, leaving you clueless? IMHO killerstorm is being far too respectful towards you than he should be.

Agreed.

How can you not have a math analysis of something you created. Oh wait...maybe because it wasn't you right?

No need to properly inform people of how your new system works, just get it out there and all the kiddies will buy it because it is a "crypto-thingie".

You are right I don't have a math analysis of how much coins are needed to attempt control of block chain.

Nevermind that you didn't analyse your protocol, I haven't even seen evidence that you know how the protocol works. Remind us again why you refuse to post the protocol specifications? Maybe someone else wrote parts of the code and disappeared, leaving you clueless? IMHO killerstorm is being far too respectful towards you than he should be.

Do you really think, you're on the same understanding level as killerstorm as you seem to be trying to implying the same understanding as him. Even though he disagrees he actually seems to be relatively intelligent.

[smoothie]

You are right I don't have a math analysis of how much coins are needed to attempt control of block chain.

Nevermind that you didn't analyse your protocol, I haven't even seen evidence that you know how the protocol works. Remind us again why you refuse to post the protocol specifications? Maybe someone else wrote parts of the code and disappeared, leaving you clueless? IMHO killerstorm is being far too respectful towards you than he should be.

Agreed.

How can you not have a math analysis of something you created. Oh wait...maybe because it wasn't you right?

No need to properly inform people of how your new system works, just get it out there and all the kiddies will buy it because it is a "crypto-thingie".

You are right I don't have a math analysis of how much coins are needed to attempt control of block chain.

Nevermind that you didn't analyse your protocol, I haven't even seen evidence that you know how the protocol works. Remind us again why you refuse to post the protocol specifications? Maybe someone else wrote parts of the code and disappeared, leaving you clueless? IMHO killerstorm is being far too respectful towards you than he should be.

Do you really think, you're on the same understanding level as killerstorm as you seem to be trying to implying the same understanding as him. Even though he disagrees he actually seems to be relatively intelligent.

Oh nice try to change the subject on an important point. The intelligence insults don't work very well on me. Keep trying though, it is entertaining.

Like I asked in the other thread, does Sunny Drag Queen pay you in PPC by the hour or the minute to keep detracting from the SHADINESS of all things that are PPC?

lol 

[smoothie]

@Sunny and @AndyRossy,

How about that EGO claim of Sunny's eh? Someone has a huge ego claiming their development time into PPC which they have no formula, have no analysis, and have an incomplete white paper is worth $100k-$200k and that bitcoin development is ONLY worth about $500k, don't you think?

So funny that many of the claims that are made are so true of yourselves in your attempts to continually detract attention from PPC and the important questions that people have asked and will continue to ask.

[killerstorm]

You are right I don't have a math analysis of how much coins are needed to attempt control of block chain.

OK, so let's put it straight. The purpose of proof-of-stake, and of blockchain protocol in general, is to prevent double-spends.

You claim that you've invented a crypto currency which uses proof-of-stake to prevent double-spends. But you don't know whether this protection is actually strong.

Too much cognitive dissonance... I'll give you an analogy:

"Hey guys, I've invented a new kind of tank armor, it's very lightweight, thus it's much more efficient and will likely replace other kinds of armor in future. You ask what damage it can withstand? Well, I don't know really, I neither can do modeling nor I can test it in practice. But how about this: you'll make some tanks with it and use it in battlefield, so we'll see what explosions and shells it can deal with. By the way, my recipe for coating is all open, so any material expert can analyze it."

First it's more difficult than Satoshi's design, secondly I think there maybe other practical attacking vectors that I have missed so putting a math formula there as the final say on security is a bit misleading as well.

It's not a "final say", it's a basis, a very first block for a proof-of-stake design. Proof-of-stake's purpose is to prevent double-spends, so first and foremost you need to check how good is your scheme against double-spends. Once you know it's good enough you can consider other "attacking vectors".

And I don't think it's hard, you probably can come up with a good estimate in a couple of days if you have skills. If you don't want a theoretic solution, you can do a simulation. It isn't hard to implement, again just a couple of days worth of work.

(Control of the blockchain is a different thing, by the way. It's obvious that one who controls blockchain can do double-spends, but small scale reorgs -- and thus double-spends -- are possible with much less effort, and this is what matters for security of payments first and foremost.)

It may not match your expectations but I did what I can to contribute, rather than sitting there and accusing other people being lazy and greedy while they are the ones doing the real work. How convenient.

Logic escapes you here. Again, perhaps analogy can help: suppose you build houses and I build bridges. Suppose I've noticed house you're building when I was walking in my spare time, and as I know a bit about structural integrity I've noticed that house you're building might collapse at any time. So I ask you to check your calculations (I might be missing something) and I also tell other people that they shouldn't go inside that house since it can collapse and kill them.

So now you say that you don't have calculations, but that's OK because you are the only one who builds houses. And apparently I shouldn't comment because I build bridges, not houses.

Does it make sense?

I do not work on proof-of-concept schemes, but I still can comment on them. It really isn't convenient because I don't get anything out of it, I do it in my spare time to entertain myself.

If you are so helpful then why don't you polish your analysis and continue discussion on the security properties?

That's simply not what I do, I'm not an expert on that matter. You see, your problem is that real experts do not even want to touch your stuff because they don't want to dig into your code to guess the details. They just have better things to do. So you only get attention from guys like me which do it just for entertainment.

If you publish a better paper MAYBE you'll get more attention from real experts. But I cannot guarantee you anything, of course.

BTW I've already mentioned a couple of times what you can do to improve security.

Instead you would just launch your personal crusade to attack me and ppcoin project.

It isn't a crusade, I'm just warning people about situation about ppcoin because a lot of people do not get it, they cannot do analysis on their own and they trust you.

But I didn't post anything about ppcoin at least for a month... Smoothie resurrected old topic which was relevant only before you released v0.2 (?). I just posted an update here, and that's all.

If you worried so much about investors then why I haven't seen one pm from you describing the vulnerability of ppcoin and discuss with me ways of fixing it?

ppcoin is vulnerable by design, you can't fix it unless you implement significantly different algorithm. Do you want me to do your work for you or something?

However given all that I have endured from you, you are still welcome to pm me if you truly wish to discuss about security analysis of ppcoin. Otherwise we would just have to part our ways.

Yeah, that's ok. I'm already quite bored with this ppcoin stuff.

[markm]

So basically its another SolidCoin, and isn't even willing to actually claim he is not simply solidCoin back again under another username?

-MarkM-

[AndyRossy]

You are right I don't have a math analysis of how much coins are needed to attempt control of block chain.

OK, so let's put it straight. The purpose of proof-of-stake, and of blockchain protocol in general, is to prevent double-spends.

You claim that you've invented a crypto currency which uses proof-of-stake to prevent double-spends. But you don't know whether this protection is actually strong.

Too much cognitive dissonance... I'll give you an analogy:

"Hey guys, I've invented a new kind of tank armor, it's very lightweight, thus it's much more efficient and will likely replace other kinds of armor in future. You ask what damage it can withstand? Well, I don't know really, I neither can do modeling nor I can test it in practice. But how about this: you'll make some tanks with it and use it in battlefield, so we'll see what explosions and shells it can deal with. By the way, my recipe for coating is all open, so any material expert can analyze it."

First it's more difficult than Satoshi's design, secondly I think there maybe other practical attacking vectors that I have missed so putting a math formula there as the final say on security is a bit misleading as well.

It's not a "final say", it's a basis, a very first block for a proof-of-stake design. Proof-of-stake's purpose is to prevent double-spends, so first and foremost you need to check how good is your scheme against double-spends. Once you know it's good enough you can consider other "attacking vectors".

And I don't think it's hard, you probably can come up with a good estimate in a couple of days if you have skills. If you don't want a theoretic solution, you can do a simulation. It isn't hard to implement, again just a couple of days worth of work.

(Control of the blockchain is a different thing, by the way. It's obvious that one who controls blockchain can do double-spends, but small scale reorgs -- and thus double-spends -- are possible with much less effort, and this is what matters for security of payments first and foremost.)

It may not match your expectations but I did what I can to contribute, rather than sitting there and accusing other people being lazy and greedy while they are the ones doing the real work. How convenient.

Logic escapes you here. Again, perhaps analogy can help: suppose you build houses and I build bridges. Suppose I've noticed house you're building when I was walking in my spare time, and as I know a bit about structural integrity I've noticed that house you're building might collapse at any time. So I ask you to check your calculations (I might be missing something) and I also tell other people that they shouldn't go inside that house since it can collapse and kill them.

So now you say that you don't have calculations, but that's OK because you are the only one who builds houses. And apparently I shouldn't comment because I build bridges, not houses.

Does it make sense?

I do not work on proof-of-concept schemes, but I still can comment on them. It really isn't convenient because I don't get anything out of it, I do it in my spare time to entertain myself.

If you are so helpful then why don't you polish your analysis and continue discussion on the security properties?

That's simply not what I do, I'm not an expert on that matter. You see, your problem is that real experts do not even want to touch your stuff because they don't want to dig into your code to guess the details. They just have better things to do. So you only get attention from guys like me which do it just for entertainment.

If you publish a better paper MAYBE you'll get more attention from real experts. But I cannot guarantee you anything, of course.

BTW I've already mentioned a couple of times what you can do to improve security.

Instead you would just launch your personal crusade to attack me and ppcoin project.

It isn't a crusade, I'm just warning people about situation about ppcoin because a lot of people do not get it, they cannot do analysis on their own and they trust you.

But I didn't post anything about ppcoin at least for a month... Smoothie resurrected old topic which was relevant only before you released v0.2 (?). I just posted an update here, and that's all.

If you worried so much about investors then why I haven't seen one pm from you describing the vulnerability of ppcoin and discuss with me ways of fixing it?

ppcoin is vulnerable by design, you can't fix it unless you implement significantly different algorithm. Do you want me to do your work for you or something?

However given all that I have endured from you, you are still welcome to pm me if you truly wish to discuss about security analysis of ppcoin. Otherwise we would just have to part our ways.

Yeah, that's ok. I'm already quite bored with this ppcoin stuff.

What exact simulation do you want ran, I will run it. 

Andy

[cunicula]

What exact simulation do you want ran, I will run it.  

Andy

I would run the simulation too. However, Sonny needs to provide a detailed explanation of the random process that generates proof-of-stake blocks.

I cannot read the code. I cannot write a simulation if I don't know what I'm simulating.