Bitcoin Forum
May 05, 2024, 04:56:17 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Poll
Question: How would you donate to this proposal?
I would not donate - 52 (44.4%)
With proposal modications I posted in the thread - 2 (1.7%)
Public release - 17 (14.5%)
Private release for Monero only - 24 (20.5%)
Public release Kickstarter only - 3 (2.6%)
Private release for Monero Kickstarter only - 4 (3.4%)
Public release BTC escrow only - 8 (6.8%)
Private release for Monero BTC escrow only - 2 (1.7%)
I will donate instead to Gmaxwell, Shen, & perhaps Denis (forum post request) - 5 (4.3%)
Total Voters: 117

Pages: « 1 2 3 4 5 6 7 8 9 10 11 [12] 13 14 »  All
  Print  
Author Topic: Zero Knowledge Transactions  (Read 18613 times)
TPTB_need_war (OP)
Sr. Member
****
Offline Offline

Activity: 420
Merit: 257


View Profile
October 21, 2015, 08:57:53 AM
Last edit: October 21, 2015, 09:12:48 AM by TPTB_need_war
 #221

I thought smooth was too busy to reply but he replied in private because I had locked the thread. So here is my reply and includes everything he wrote. I assume he wrote this for public consumption.

Quote
All of these parasitic "features" can be removed by a competing forks, e.g. as Monero has apparently done to BBR.

Monero didn't do anything to BBR. Monero launched first.

My point is that the existence of XMR without that parasitic fee made it largely unnecessary to make another fork of BBR to remove it. Being first or second seems irrelevant.

The example I cited of BBR was that in fact no one has forked BBR to remove the fee, even with the developer being completely MIA. If the fee is reasonable (1% in the case of BBR, though the exact number that is tolerable is situation dependent) then network effects and inertia will cause people to just pay it. If you overreach (as in the case of BCN with its 82% ninja premine), then yes people will fork and not pay it.

As I had pointed out later in my prior post on this issue, it can be that since ostensibly BBR has lower adoption (no offense intended to boolberry), there simply isn't the available resources to fork it can remove the parasitic fee. My point is that if your coin is scaling out to the world in potential, then opportunity for someone to fork and remove the fee and the world maybe preferring that fork is probably greater. Although it is possible that the inertia makes it impossible to do such a hard fork. Yet I think it is very likely that if BBR was Bitcoin, many people would have made the argument and actions to remove a 1% fee on the entire world's debasement or mining income (is the 1% on all mining income including transaction fees?).

It seems like a potentially viable funding model for a coin until it gets large adoption. Yet for that reason, it probably isn't viable. I assume boolberry isn't making enough money on that fee to justify working a lot on the coin lately.

Again I reiterate that it seems to me the only model of development funding which seems viable is to sell the programming work to produce the initial code base which should have some major new feature for crypto that drives interest and adoption. Or try to mine your own coin at a "fair launch", but this requires getting people to basically ignore your launch ANN or some hidden form of premine or instamine (or as apparently in the case of many Monero developers means your coins are worth roughly the same or less than the cost you mined them and this is probably why there is no pump or fast appreciation of the speculation price occurring for Monero). Or go for the donations model of methodical open source that produced Linux and Gimp. But please note, many people are paid high salaries to work on Linux because corporations have a vested interest in Linux. This may be what is missing from Monero's economics. Monero can not afford your or my time. Monero can only afford volunteer experts or people from countries with a very low average salary for programmers such as Ukraine and Russia (but I doubt any of the experts working on Monero are inexperienced developers from these countries and the experienced ones have surely learned their true value on the international stage).

Everyone has told me that Monero developers are impoverished if just considering their gains from the Monero project. Thus they must be participating for ideological reasons, or some vision that one day the gains will come as the code base reaches certain levels of capabilities. For me 10 years waiting for gains is too long to wait. And a 10 bagger over 10 years is only a 26% per annum gain. Seems like a long time to wait with a very high risk of failure for such a low annual return. Inflation will eat probably 1/3 of that gain. There is some hope that with the coming economic collapse in 2016 that interest in anonymity will increase and Monero will benefit by being the technologically most advanced anonymous coin. That may be so. And they should focus on anonymity since that is where they are already strong and perfect that as their highest priority first (because they already made that their core focus and rewriting a code base is generally considered a very chaos inducing and dumb decision).

Quote
then the only opportunity to make a profit is either adding services and products to the ecosystem or participating in the ramp up of the value via the adoption of (demand for) the asset.

Okay, this is exactly the Monero model then.

Well you must mean adding services or products to the ecosystem, because the ramp up in the price hasn't happened as it did for other altcoins. And due to the "fair distribution" it should not happen ever. Monero can only appreciate by significant adoption that is not driven by speculative fever. Thus they will have to do some serious marketing into new demand for crypto. Or anonymity will have to naturally gain significant new adoption. But generally I think people adopt crypto, before adopting anonymity. Anonymity takes a while to learn about. Users are much more likely to look at other general crypto features first as being most important when they first come to crypto.

How to drive demand and network effects for new adoption is one of the key challenges of crypto. I have my plans and ideas about how to do this. I don't think such a viable plan and action will come from group action. It requires a creative force and leadership to push it in a certain direction. If I had to explain by committee my ideas, I'd spend more time jawboning thus removing the time to actually implement. And then one of the people in the discussion would go tell some others who would steal the ideas and launch a coin before I ever was able to. Open source as a model for profit driven innovation doesn't seem always to be well matched. Open source is for the finished product and the decentralized community that results from finishing the programming and releasing the protocol.

Quote
Also even if one registers the securities (as Ethereum may or may not have done, I didn't check)

Ethereum did not register any securities afaik. They are relying on the positioning of their presale being a product (access token to the network). May or may not work. May work in practice even if it is technically incorrect. The real world is not a law school classroom.

I hear there will be lawsuits. The USA security law seems to be quite clear. When you sell a share in something where you have an ongoing controlling interest which the purchasers of the share depend on for the value of the share, then you have sold investment securities.

Work in practice requires perhaps that either they've paid off someone at the SEC which may be the case since I noticed that Vitalik received a $100,000 grant from Peter Thiel, and because none of the investors bring a lawsuit or complain to the authorities. The SEC does not bring cases against their own (e.g. Peter Thiel).

Quote
another interesting thing is that if BBR's dev is no longer working on the coin, then even though he is receiving a revenue stream, then he is not really a controlling entity. Hmmm. That is another funding model in the sense that although the world can eventually remove that parasitic fee, if it is insignificant enough to motivate others to do so and for as long as the tech in that coin is more compelling than what the world has created otherwise, then that parasitic fee can sustain and if the dev is not working on that fork any more (after the initial crowdfund and delivery of debugged product), then there is an argument that he was never a controlling entity and only selling a product in exchange for an income and feature in the product.

Yup.

Yes but as I argued at the start of this reply, I am wondering if the level of income that can come from that is worth it. You wouldn't have significant transaction fees in low adoption. You'd need to be taking it from debasement so then it is basically equivalent to the level of premine for a static money supply. So if 1% of the money supply of a low adoption coin is worth it. Seems like it is just better to sell some coins in a crowdfund. Gimicks don't really payoff. Either you go for making your coin big and show the world you intend to, or you do some gimick that will show the world you are preventing it from becoming big. And given my interpretation of securities law risks, being an ongoing lead developer paid from some revenue stream taken from the coin, appears too close to being a controlling entity unless you actually stop doing any actions to maintain control (i.e. don't let all commitments and upgrades come through you only as the master and don't coordinate with others that do as if you are working together as a unified controlling entity). Even then given the ongoing revenue stream, it is probably necessary to do nothing at all on the coin, because it can be perceived that the exclusive control over the revenue stream is a factor which would cause the community to see you as the controlling entity. It is expectation of investors that matters in securities law. Where they expecting you to control the outcome of the development and thus performance of the investment.

The concept of a lead developer should be for producing the initial launched code base (debugged). Ongoing the lead developer should be a spiritual leader concept where his repository is widely respected, but not where every thing is controlled through him. Decentralized version control. Decentralized choices for the current code employed by nodes of the coin. The lead developer can lead quite effectively without retaining absolute control. Natural born leaders such as Linus Torvalds are respected because they are really good at what and how they do it. Being very intelligent is one important aspect, but there are other qualities that make a great leader. And note Linus is very frank and does piss people off. But he is usually correct.

Quote
all those were innovative at least is some facet (e.g. marketing for Dogecoin, and Scrypt hash mining for Litecoin)

No Litecoin was a clone of Tenebrix without the premine, identical to how Monero cloned BCN without the premine. Litecoin had zero to do with the innovation of using Scrypt for mining (limited though that may be). It was 100% a "fair distribution" play (which worked!).

My point is that Litecoin positioned itself with Scrypt so it was ready to receive the GPUs from Bitcoin when ASICs arrived. They probably didn't plan that, just got lucky. But they did choose the name Litecoin and market it as the silver is to gold concept. Are you sure it was "fairly distributed"? I've head of various things that refute that, such as those who got a lot of cheap coins when they were the first to port GPU mining to Scrypt. What worked apparently was the marketing, the timing, and the cheap coins motivating some to pump it. The innovation wasn't Scrypt alone, but in combination with the marketing and the luck on attaining "unfair distribution". Markets don't appear to work properly when the powerlaw distribution of wealth is eradicated with a fair distribution. Fair distribution is communism. It doesn't reward anyone for being first or producing more creativity. It destroys the value of production.

Open source is a tool, not a religion. Those who make "fairness" a religion will suffer I bet. Open source isn't really about fairness and transparency of all things. It is about sharing that which there is the predominant economic incentive to share. But not all things should be shared at all times. Should I share my house with everyone and leave my door open to all. Should every idea be shared, or is it better to go develop the idea and then release it in terms of those who have the vision to invest earliest. Wealth is unequally distributed so that those with the best ability of discerning and implementing improvements are entrusted with the most capital to do so (wealth migrates to those who are serially successful at doing so). Inequality is necessary in order to lift the prosperity of those even at the bottom of the wealth curve.

I know you know all those points of view. I am just stating for the readers and so you know I know also. And to see how you might relate your thoughts to this.

Quote
Monero had a very fast mining curve, so those who mined at the very start would have gotten more coins

Not really that fast (certainly compared to fast mine coins like ducknote, quark, etc.). Mining the very first day was only a little over 2x the coins as now. This is basically the same as BTC or LTC, although those took 4 years to get to halving, Monero took 18 months. I don't think "very fast" is really accurate (obviously subjective).

Okay then that further supports the argument that Monero's distribution is too fair.

Quote
It appears the only way to have gotten rich speculating in Monero thus far was to have mined it very, very early

There is NO WAY to have gotten rich speculating in Monero so far (other than possibly active trading).

So there was never a point where the difficulty was low, not even the first day of mining?

So that explains it, no one got cheap coins.

The whole damn coin is only worth a few million. How much could any one person have made on it. If you mined 100% of the outstanding coins not the first day (literally impossible) for a cost of $0 (also impossible) you would have made a few million now in paper profit which you wouldn't be able to cash out due to liquidity.

Even a $100,000 cash out if I had mined it for $1,000 in rented hardware would qualify as "rich" for me at this point in my life, lol.

If anyone gets rich on Monero it will be in the future when there are large gains, which have not happened yet for anyone. You can still buy now for a price of approximately zero, help to construct a system that succeeds on a much larger scale and make an enormous profit!

Okay so this explains why so many Monero folks suggest this to me. Btw, I have never looked at $4 million market cap as the right price to enter a coin. As a lead developer I want to enter at $100,000 market cap. The earlier investors should enter at < $1 million market cap.

Because unless you challenge Bitcoin or expand the crypto userbase, then the realistic upside for any altcoin right now is in the range of $10 - $100 million market cap. If you happen to create a Bitcoin killer or a product that causes new adoption outside of Bitcoin, then we can start talking $billion market cap potential.

I understand there is great hope that crypto adoption will spread in general, but it is also quite possible that by the time that happens some new development will have changed the landscape. To look too far into the long-term when dealing with technology that is unfinished and in great flux is very, very risky investment. So no, I am not very motivated by a $4 million market cap, lead by a group that thinks the way that they do about the way to organize development, marketing, and distribution. I would be fighting with a core culture that is different than my philosophy of venture capital formation.

This is exactly what most of the people who have made a lot of money on Bitcoin did. (I'm not suggesting you do this, and I agree with your later comments about your personal style of working alone. I'm actually impressed you are self-aware, grounded and realistic enough to recognize that. I was just pointing out that it is a realistic possibility.)

Thank you. Yeah I don't want to force another group to change their culture to match mine. I understand that if I become a Monero developer, then I must change. Besides they really don't need me, they have enough really smart people contributing (smarter than me in their fields of focus, e.g. Shen-Noether is more knowledgeable about wide ranging cryptography and algebraic algebra than myself). And I could change if that was my only option to survive. I am capable of subjugating myself. But I don't think it is wise for me to do so because there is still so much opportunity to create in this crypto space. Btw, there is a slight cultural difference between you and I which is what makes me apprehensive about whether we are fit to co-develop a project. I wanted to protect you from my idiosyncrasies. Skills wise we appear to be really well match in that we are each strong in the area where the other may be slightly weaker.

My main mitigating issue is I stopped being self-funded this year and my health issue drained me over the past 3 years. So I became sort of discombobulated (as well as in foggy brain for example in September) and fretting over what to do. But I've had reasonably solid health since I started the antibiotics + NAC. And even more stable thus far since I added the alpha lipoic acid, and restarted my 20,000 IU daily vitD3 and daily coenyzmated B-complex. But in these 16 days of reasonably good concentration (and no exercise since that horrible relapse), I've had 3 days where I had mild relapse and one of those days I had a horrible relapse (6 days into the antibiotics). So I can't tell yet if I am finding a cure. Exercise seems to trigger relapse but if I don't exercise eventually I get worse (or that was my experience in the past but now I am on a new therapy). And I need to review information others have given me. And maybe lose more time searching for diagnostic tests. Damn this health really fucked me up from what I wanted to do in crypto. But maybe now finally I have it under control. We will see over the coming week and weeks.

Quote
Compare to Dash (DarkCoin's) rise from near $1 million to $53 million marketcap ... Why?

othe explained this pretty pretty well but I will expand that when you have a coin with a very small float (because the insiders instamined it and didn't dump into the pump, at least not right away) then it becomes highly volatile and people come in to play zero sum trading games. The end result of that is a few people with all the profits and most of the rest of the community either nonexistent or so far underwater that they give up and move on. It is not a healthy way to build anything, except profits for a few rich and talented traders. Good for them.

I am not saying I like the greater fool theory of investing. I am saying that apparently nature does and a theory is that anyone who tries to do otherwise may under perform.

If you want to produce a product or service and build long-term value, then don't go public. Just sell your products and services at a profit and serve your customers. But that won't apply here, because crypto-currency is inherently a public token system.

Thus I assert Monero is trying to apply an ethics which is unnatural in the space in which they are applying it.

As the lead developer, I shouldn't concern myself with trying to void nature, and instead should make sure that my innovations and creations are widely exposed to the market. The market price can do what ever it is going to do, and the usership due to the value of the creations can continue on. Speculative traders provide a service to the market by promoting the creations far and wide in exchange for their profits. This is symbiosis at play.

If you feel you are good at playing the speculative trading game, you should stop messing around with developing coins and just trade. The achievable ROI if you are skilled is extremely high and the your money problems will be over and you can do what you want with the rest of your life, including developing revolutionary technologies. If you don't feel you are good at playing the speculative trading game, you should ignore these market dynamics and stop trying to chase a pump because you will just lose money to the better traders when you try to do it.

Speculative traders are opportunists. They spend their time with their eyes and ears open waiting to leverage some lead developer who is good at creating. If lead developers spent all their time doing that, then they wouldn't be good at creating. Thus the division-of-labor applies. The two can come together to provide the symbiosis so that the developer is financially motivated as well as creatively motivated.

If a developer has earned a lot of capital and wants to change vocations to become eyes and ears, the problem is (as was my case when I had 18,000 oz of silver in 2007 at the $21 price) that we are not naturally attuned to be speculators. After 2002 when I was a millionaire (inflation-adjusted), I was always off doing some creating (all nighters coding, researching tech, learning Haskell, etc) when I should have been 100% focused on my investments, thus I ended up losing all my wealth due to be unprepared. The typical absent minded scientist that is too busy to even take a shower or care that the socks he grabbed are two unmatched colors. I predicted the rise from $25 to $48 of silver back in a published article on marketoracle in 2010, but when the time came to sell at $48, I called my broker in Philippines and he said he can't sell there are no buyers. I was in physical and I should have been in paper silver! Ideological shit trapped me! I made so many errors like that. Then got sick at the very moment that Bitcoin was developing (2012). I have learned my lesson about focusing on core talent, interest, and vocation.

Quote
then your coin is going to suffer from a boom and bust

Let me make an interesting observation. There has been little in the way of boom and bust in Monero. Yes there was a small pump or two but if you look at the market cap chart, it is still in the same range it has always been (few million). This is VERY unusual.

Indeed. That was the observation I was making and leading me to propose this theory about required symbiosis with speculators. You can argue it as a positive for Monero, but I positing a theory that is a negative.

Most other coins (including all the ones you mention as your highly pumped examples) are WAY below their historical range.

But of the ones that had any semblance of unique and worthwhile features, they remained in the Top 10 once they got there. The core usership was grown.

Monero has suffered a bit from weak price action as more coins have been distributed, but not so much as to destroy the market cap. There are some people -- not even early adopters -- who are net profitable in Monero now (who bought last year in the 0.001 to 0.0015 range). Most of the rest are slightly down (bought between 0.002 and 0.004) but not so far down as to throw in the towel. This is basically healthy, especially given the state of the overall market. Huge pumps and dumps are not.

Speculator performance != user performance. Users of the coin buy to use the product not for appreciation.

Some have argued that huge volatility is a negative for adoption for currency use case. Well I disagree. Volatility is necessary for the speculation case. And for the main use case the crypto can beat fiat and credit cards which is microtransactions, then I argue volatility will be mostly irrelevant. I will have to show in the future why. Not now.

Quote
What I would propose is to create new coin with the killer feature that challenges Bitcoin specifically block chain scaling

1. That is sort of already "hot" feature being claimed by Bitshares, Dash, BTC's lightning network, and maybe others. If you want to be "first" you better hurry up and you are probably too late.

May be too late. Seemed I looked at the tech for those three and they all are lacking in some significant way. I will look again and comment later.

2. Okay, but do it because you think it will succeed, not because some whale traders will (may) come in and rape your community, and maybe you can dump a small amount of your coins to them at a profit. You won't be able to dump a lot unless you can outtrade them, and you can't (probably).

I basically take the attitude that I should be invested in my own work. And that speculators are going to do what they are going to do. And that I should be smart about when I take some partial profits and when I reinvest in my own work, holding a core position long-term. One of the key things is never again will I hold the majority of my investments in something I can't trade with my finger at a moment's notice. Thus physical gold is out of the question, except as a long-term holding. Also remember as a lead developer I hold the trading weapon of when to announce new developments and release them.

I think the developer should be excel at his role and responsibilities and the tools which he is most expert at deploying. He should not try to control what is not his role, rather roll with it deploying his natural tools and role.

Quote
May explain also why PoS coins have had ramps?

Somewhat. As I said the whale traders look for opportunities where there is way to get in at a low price, a small (remaining) float, and tight control (if not by them then by others who they believe they can front run on the back end of the pump) over remaining supply. Then they make a play. If they're good at what they do (and the ones still doing it certainly are), then they can be successful. The starting conditions have to be there.

Rather than see them as the enemy, one could look at them as natural; and my attitude is for as long as you don't actively collude (e.g. discuss and coordinate a market manipulation) in a way that makes you culpable under the law. A small float early on is a good thing and then the float widens over time. Speculator purchasing low, reducing the float, then sitting on the ask to drive speculative fever is free market activity and performing a service to the market by drawing many others interest and then basically turning them into long-term shrills for the coin because they are underwater. Some boom and busts during this process seems to be natural and beneficial to growing the userbase and adoption as well as funding the development.

Quote
Cryptonote does wipe ass on one aspect of anonymity, but anonymity is more of an all or nothing proposition

No it isn't. It is only an all or nothing proposition if you want to be anonymous from the NSA (and I respect your goal of doing that certainly). As you move down the hierarchy of observer capabilities, the extent to which imperfect solutions become useful increases. (I think even against the NSA this may be true because they won't devote infinite resources to every single potential target.)

Right. But sell that to a market. I don't trust anonymity because Tor and I2P are not sufficient. Thus I don't assume I am truly anonymous. One of the reasons I did this recent expose in this thread about the securities law research I did recently, is because I realized I couldn't really be anonymous. And the desire to be anonymous so I wouldn't be culpable to securities law is why I had long-stated I wouldn't announce a coin in my name. But after much reflection (and now desperation) I realized that to be legal I really need to avoid a controlling entity on the coin entirely. And I couldn't be anonymous to the government. And that I wouldn't worry about the government attacking me over anonymity, because I wouldn't even be the one pitching that feature. I would focus more on scaling and anonymity could be implemented as a plugin.

Right now there is an entire industry being developed to analyze the explicitly public Bitcoin blockchain and use it for commercial (and probably what I will call "lightweight intelligence" meaning low level law enforcement, private investigators, insurance industry, competitive, etc.) purposes quite similar in overall scope to the currently-pervasive web tracking. That is something that is certainly addressed (if imperfectly at the moment) by Monero's obscured blockchain even if you do little to nothing about network-level monitoring, and certainly even if you don't become secure against pervasive network-level monitoring.

Well but the anonymity has to be combined with some useful features to make it even worthwhile to be using crypto currency any way. I don't think deciding to put all a companies financial trades on Monero is very realistic absent some incentives other than just anonymity on a block chain. Many businesses aren't even using a block chain so they don't need anonymity on a block chain. First you have to get them interested in using block chains, and so the first step is they will be looking for features to motivate block chain use. Later they may get around to wanting anonymity, but by that time others will have added anonymity to those other products that provide more features compelling businesses to adopt block chain.

Quote
I think I remember I had thought of a way to do rings with balances.

There is a paper addressing balance ledgers with homomorphic encryption. I don't remember what qualified reviewers said about it when it was released.

Quote
For me even using masternodes to limit supply is a clever innovation. You are thinking idealistically that the goal is to produce technology. But technology is useless if it doesn't produce market results.

Short term volatility that attracts whale groups and gives your the wider community whiplash is not positive "market results" in my opinion. If you want long term market results then these supply manipulations are irrelevant or harmful.

I don't know if Evan consciously designed masternodes to limit float. He I think was just trying to find a way to solve the jamming problem of CoinJoin that I was pointing out to him. Serendipity of nature. Perhaps Monero is too anal? (trying too hard to control ideologically) I have always felt something culturally alienated from Monero. I think it is something like this desire to be holier than thou. I have appreciated though all the tech interaction, the 10 BTC and all that, so please don't take my words as one-sided. Just throwing out there other ways of theorizing about it. I am not sure.

Quote
think you can effectively pump some copycoin with nothing to get investors excited about other than the attempted pump?

This is totally wrong. Those coins get pumped all the time, even ignoring the fact that LTC and DOGE were  literally copy coins. I mean smaller more obscure and more worthless ones. That is the bread and butter for pump groups. Sure there is always some spin about how the coin is going to succeed to help drive the pump (pull in ouside money). That is part of the game. But it doesn't take much, and creative pumpers are very good at making much out of little (especially to an audience of suckers without good skills to evaluate the claims).

What I was thinking was you can't pump some featureless copycoin to the Top 10 and have it remain there. Sorry sometimes my typing fingers are struggling to keep up with my mind. Takes so long to write these long discussions.

Quote
As I have always said, the "fair distribution" was the initial death blow to Monero. I have said that so many times. There is no incentive to create any momentum, neither in capital structure nor in development

The pumps you cite don't really create momentum at all. Once the pump is over there is less momentum than ever. LTC is slowly dying. DOGE may or may not be. Both certainly lack what you call "momentum" today, a year or two after their big pumps.

That is because they stopped adding features. Dash and Bitshares haven't stopped. And none of those coins had really Bitcoin killer features. Bitshares is still trying to. I need to go study again their Bitshares 2.0.

DASH may or may not be (at least they seem to be continuing development). If anything Monero has (or at least may have -- time will tell) more "momentum" than any of these coins. Think of the momentum of freight train compared to a hot rod or a motorcycle.

Monero certainly has more intellectual developers contributing. And this attracts a certain breed of community that are strongly in belief that if you get a bunch intellectual guys contributing on open source, then you have a powerful freight train.

Again I am not sure. I can see your cryptographer matched my best effort on the convergence of rings and homomorphic value.

Competing is exciting. I get to play sport again but on the programming field. Whether the communities see any released competition from me or not is totally dependent on my health.

Quote
When Linus started, he didn't port FreeBSD or other Unix OSes

He started with something that had some good ideas but was extremely rough, unfinished, and largely unusable. Very similar to Monero in fact.

But the problem is that for Monero to implement something Bitshares DPOS they would have to complete restructure their block chain code and probably their database code, etc.. Major rewrites of large code bases become progressively unlikely or unwise. The larger the code base becomes, the more unlikely to rewrite it.

You and I know that but many readers may not.

Quote
There is no way to really force an upgrade on an established decentralized community

Now you get it (I think).

Yet othe says Monero forces a hard fork every 6 months.

Btw I was very, very sleepy when we were discussing burned upgrades.

Quote
Are we closer to agreement now?

Yup.

Quote
So what is unsettled from my view is whether a methodical model such as Monero is superior to a model that raises a lot of capital

Superior? Who knows. Only way to find out is to continue to try. You point out a lot of problems with these "raise a lot of capital" models, legal ones included. I have pointed out others. So maybe Monero's model actually sucks, but sucks less. Or maybe it sucks more. Who can say.

Agreed only theories and the few anecdotal cases we have as evidence thus far.

And I am not 100% sure that Monero is doing what they need to do to be immune from USA securities law. Appears there is some things they are going which appear to be like an organized controlling entity. Of course much less likely culpability than what Evan or Ethereum have done.

Quote
Speculative investing is not holding a gun to anyone's head. Everyone is free to make their own decisions.

On this I agree with you, and it is a somewhat unpopular view among "responsible" coin developers. Investors are adults and if they want to trade badly and lose their money, that's their problem. But I also don't think that setting up a situation for whale groups to come in and rape the less-skilled traders in your community (which is always going to be most of it given the distribution of trading skills) in order to leave and take the BTC and/or fiat with them is good for a coin long term either. I wouldn't say immoral, just strategically ineffective. But who knows if one of these massively pumped coins ends up succeeding in a major way (thus far none has), I will be proven incorrect.

I am not sure either. See my argument that those underwater become promoters for the coin instead of throwing in the towel. especially if there is ongoing hope from new developments and a strong tech from the outset.

Quote
if a coin is undergoing hard forks then it really isn't decentralized in the purest/strictest sense

That's mostly true. No one claims otherwise. Still you can't actually FORCE people to adopt a hard fork. They could reject it and stick with the old protocol  (even if that requires modifying the open source on their own).

Same argument could have been made against my burnable code coins. But in reality the investors don't control the mining nodes, so thus I think your response is incorrect.

Quote
Monero work is fit for those coders who have made already a lot of money and want to make an ideological contribution to crypto. Or who are young and live for example in Ukraine or Russia

Or people who have another financial motive for doing it. For example, starting or investing in ecosystem businesses. Raymond called that "Indirect Sale-Value Models". Others have written the same thing about open source (I don't remember if earlier or not, so I'm trying to avoid giving incorrect credit).

Agreed. I also have that motivation (e.g. the dating site I created but needed permission-less micropayments so I shut it down). But it is too indirect and removed from my current financial stress.

Quote
Except one problem. Bitcoin's block size can't scale to large data [regarding factom]

Factom doesn't store large data on the blockchain. It stores only a hash and then stores its data elsewhere, so in a sense it could be viewed as a sort of "solution" to the block chain size, not a victim of it.

Then it isn't really decentralized. Do it isn't a solution to decentralized block chain scaling.

Finally some unsolicited advice.

Work on something outside of crypto and get paid for it. The money is way better and easier. Someone with your intelligence and skill set can be paid good money for all sorts of things. Then having the financial security you need you can focus on building crypto, either part time or after your are done with the other work.

Trying to: a) get rich from crypto, b) get enough low-risk income to support yourself and resolve financial problems from crypto, and c) ESPECIALLY doing both at the same time, is like getting blood out of a stone right now. Go where the money is.

And d) trying to do it with past 3 years history of chronic fatigue syndrome and pain/headaches that limit production.

But the problem is #d also may limit what I can get hired to do outside of crypto as well. Really I have to solve my health issue or better prepare to live in the jungle eating grass.

As for doing a job outside of crypto first, as you said it is do or die time on block scaling. And I have invested a lot to come up to speed on crypto and designs. It is do or die time. The work outside of crypto will still be there.

1714928177
Hero Member
*
Offline Offline

Posts: 1714928177

View Profile Personal Message (Offline)

Ignore
1714928177
Reply with quote  #2

1714928177
Report to moderator
1714928177
Hero Member
*
Offline Offline

Posts: 1714928177

View Profile Personal Message (Offline)

Ignore
1714928177
Reply with quote  #2

1714928177
Report to moderator
Every time a block is mined, a certain amount of BTC (called the subsidy) is created out of thin air and given to the miner. The subsidy halves every four years and will reach 0 in about 130 years.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714928177
Hero Member
*
Offline Offline

Posts: 1714928177

View Profile Personal Message (Offline)

Ignore
1714928177
Reply with quote  #2

1714928177
Report to moderator
1714928177
Hero Member
*
Offline Offline

Posts: 1714928177

View Profile Personal Message (Offline)

Ignore
1714928177
Reply with quote  #2

1714928177
Report to moderator
TPTB_need_war (OP)
Sr. Member
****
Offline Offline

Activity: 420
Merit: 257


View Profile
October 21, 2015, 11:28:42 AM
 #222

As I said, I think Bitshares is flawed but let me reserve final opinion until I get more feedback and do more study. I will be covering the other contenders in the following post as my time allows:

https://bitcointalk.org/index.php?topic=1153740.msg12745519#msg12745519

Move that discussion over to that appropriate thread.

TPTB_need_war (OP)
Sr. Member
****
Offline Offline

Activity: 420
Merit: 257


View Profile
October 21, 2015, 04:24:14 PM
Last edit: October 21, 2015, 07:39:13 PM by TPTB_need_war
 #223

Both smooth and r0ach have mentioned Dash working on a new block chain scaling design. The only information I found on this as follows:

https://dashtalk.org/threads/rebranding-and-scalability.4254/

I have a reasonable sure idea what Evan is thinking. I expect the weaknesses of his design I expect he is conflating distributed and decentralized and uses the later term where he should use the former. Yes the masternodes are distributed but if you give them any discretionary power then you have the problem of power corrupts absolutely. Remember masternodes can be purchased.



Edit: I found the following information:

https://dashtalk.org/threads/development-update-oct-19-2015.6429/

https://dashtalk.org/threads/dash-team-at-bitcoin-wednesday-amsterdam-presentation.6287/page-6 (see last post on page)

Appears to be something like this Open Transactions white paper:

http://stashcrypto.com/how-it-works/


So Evan is planning to allow a quorum of masternodes to confirm a transaction through thresholded multisig. He will move transaction confirmation off chain, similar to the InstantX which moved certain transactions presigned to certain outputs off chain to the masternode. The transaction's hash will determine I assume which quorum the transaction is routed to.

So yes he is doing exactly what I expected him to do. The weakness is that a little bit of corruption in the masternodes and you have either chaos of a block chain that is double-spent or loss of fungible permission-less commerce. The difficulties are in coordination overhead (DoS, etc), fungibility, and verifiable global coherence. The security model of crypto currency either has to be proven to still be in force, or he has to explain how he has modified the security model and why his alternative is secure. The Bitcoin security model is that any full node can download the entire block chain history and verify everything.

Evan claims immunity to 51% attacks. I also claimed this is in my design in recent months. He didn't mention that in the March post, so assume he (or Dash people) read my posts. (remember the masternode concept originally started back when Darkcoin was created when I was in discussion in the forum with Evan about the weaknesses of his first design for Darkcoin).

I know how he intends to achieve 51% attack immunity. But I think he will lose verifiable global coherence. I claimed that feature knowing that I could not commit these shortcut errors in design that I assume he is making. Any way, I haven't seen his design, so let's see if I end up being correct. Perhaps they will read this post and try to correct the mistakes they were going to make.



Edit#2: found this and seems to confirm to me that he is doing it the way I expected him to do it. Not enough details are revealed for me to determine how he is handling the issues I stated above.

...
In this video Evan  explains decentralized oracles, is a must watch to understand subquorums.

https://www.youtube.com/watch?v=uGh43BQrxK0

Quick and possibly daft question on the method for selecting the 10 masternodes. The 10 nodes to handle a transaction are selected by the 10 nearest transaction IDs for the 1000 Dash transaction needed to set up the masternode (I think). Is that vulnerable to the malleability issues Bitcoin is seeing at the mo? ie. could transaction IDs be modified to direct to a small number of malicious masternodes?



Unless I'm mistaken, it's based off the block hash, not the transaction IDs.

All security is inherited from the mining network, which basically is deterministically setting up the quorum system, in a way that is provable. For example when you use DAPI, it will do something like create a transaction from Xaddr1 to Xaddr2 for 10 DASH. You then get back your command, a result status and all of the signatures from the quorum participants. You as the end user will know what quorum is activated for that node already, so you can tell if they're lying.

In terms of scalability, if we have 3300 masternodes and a quorum size of 10, that means we can handle 330 requests at once. If the average time per request is about 100 ms, that means we can do 3300 requests per second. The estimate is based on the fact that the network is also doing maintenance at all times (propagating blocks, shard updates, syncing clients, etc), so I'm guessing ~50% of a fully utilized network will go to other activities. Therefore we end up with 1650 requests per second.

Also we're going to aim for your average every day user, so we're talking just a few requests per month. So how many users can we support if they use 15 requests per month? 86400*1650*30/15 = 285,120,000. Ok, 285 million, that's pretty good.

What about reducing the collateral to 500 DASH? Now we have 6600 masternodes and can handle 570 million users. Isn't the masternode count going up anyway? Yep. That number should hit about 700M about when we launch. This is why it says 500-1500 tx per second, I guess that should say "requests per second" because it's not really accurate. Also the 700M should be a range also, that's the high end, the low end is 285M for current Dash requirements.

I've done a lot of guesswork to figure out these numbers, we'll see how close I am when we start seeing some serious adoption. Either way the system is built to scale with adoption in a way nothing else can, it should be pretty cool. I figure if we start to see a good deal of adoption and usage, we'll always either ask for more storage, processing power or reduce the collateral to split the network before it becomes an issue . They'll be good problems to have and we'll have lots of solutions available.



Edit#3: It doesn't appear this is aimed at block chain scaling rather only at faster confirmation times for transactions. Because it appears that all the confirmation records have to come back to the block chain. So you still need huge blocks and lots of CPU power to verify all the confirmation records. He is authorizing a quorum to preconfirm the transaction before the block confirmation.

1) How are the masternode locks enforced in the network? How do you force miners to not mine a double spent transaction?
2) Is it possible that there is a competing locked transaction? If that transaction has a higher fee (double spend attempt), I guess the miners rather confirm the transaction with the higher fee...
3) Masternodes don't get fees to lock transactions? What is the incentive to do the work? How are the masternode rewards distributed? How can the network "know" that masternodes are online and doing the work in stead of just being idle to have a lower bandwidth usage?
4) I wonder how you can have so much transactions per second? (the slide shows 500-1500) I read that bitcoin is limited to 7 transactions per second. I showed that it seems impossible to lock 350 transactions simultaneously with 3500 masternodes, unless you allow overlap. But that should be avoided, because it can happen that a masternode has the power to decide which of the 2 transactions he confirms during a double spend attack.

1.) There is code that scans all incoming blocks for transaction locks when accepting transactions and blocks. This means that a block that contains a conflicting transaction will be automatically rejected.
2.) The answer to this one is 3 fold.
    a. Currently if there are conflicting locks on the network, they will actually cancel each other. 2 conflicting locks doesn't really give miners a choice, it just removes instantX and goes back to proof of work.
    b. The quorums are selected by inputs though, so you'll get the same quorum for the same transaction even with a different fee. This means, they would have already decided and no conflicting lock would be issued.
    c. The new improved way is to use the quorum timestamp, then take the earliest one always.



Edit#4: I realized his claim of immunity against 51% attacks is probably not true. Because if the minority refuses to honor the collusion between some masternodes and 51% of the mining hashrate, then those masternodes can stop responding to the minority block chain, thus forcing the minority chain either to violate its own protocol or be orphaned. Or he may have in his protocol that masternodes are excluded when they stop responding, but if 51% of the masternodes are gone then it means 51% of the money supply has probably gone from the minority chain too, because in Dash coins are conflated with masternodes. So this could collapse the value of the minority chain in exchange markets. Overall it doesn't look like "immunity" against 51% attacks because the masternode is very much a concept of he who has the money rules the coin.

TPTB_need_war (OP)
Sr. Member
****
Offline Offline

Activity: 420
Merit: 257


View Profile
October 22, 2015, 12:24:30 PM
Last edit: October 22, 2015, 01:50:25 PM by TPTB_need_war
 #224

I am going to unlock the thread again in case any one wants to comment.

After all, it looks like Monero cryptographer Shen-Noether's design for this Holy Grail of on-chain anonymity where Cryptonote one-time rings are combined with homomorphic value hiding can do the same functionality as my design can. My white paper was completed in July all by myself. Shen's white paper was only completed in October and he interacted with some from Blockstream and apparently others.

The difference in our two designs appears to end up only in terms of efficiency. His design works with Blockstream's Confidential Transactions. My design works with an unpublished version of Denis Lukianov's Compact Confidential Transactions which contains my improvements to make it even more compact and probably 3-4 times faster (pending tests).

So you can compare CCT to CT and see that my design should have a better than 850% size advantage (see section 4.6 Comparison to CT) and the performance should also be faster than Shen's:

http://voxelsoft.com/dev/cct.pdf#page=10

Bitshares explains why efficiency of transactions is very important if you want to minimize transactions fees while maximizing the number of validating mining (PoW or PoS) nodes listening on the network:

http://wiki.bitshares.org/index.php/DPOS_or_Delegated_Proof_of_Stake#Scalability

My white paper will eventually be published of course. Some coin may get it secretly to implement first before it is published.

I am not totally against selling the exclusivity for it to Monero, but I don't think that is their development model. Monero is going after the open source model where to get paid you need to be paid by your company to work on Monero, e.g. Blockstream is paid $21 million to work on these technologies and I assume Shen-Noether would like to impress them and maybe increase his work offers due to increased recognition of his achievements. I am not even a part-time mathematician so I have no chance/motivation in hell of using my paper to increase my chances of gaining lucrative ongoing employment as a mathematician. Thus I seek to maximize the benefit or effect my work can impart to myself and the community which is most aligned with my direction in crypto. Had I known that Shen and some of the best cryptographers from Bitcoin were working intensely on this, I would not have expended the effort to design what is better left to those people who are paid to do this full-time. It was a tangent from my usual vocation as a programmer. I did it because I thought no one else was going to solve it soon and I wanted to know how I could implement rings without that damn requirement for power-of-10 balances in Cryptonote. I think Monero will eventually redesign what I did, or they can wait until mine is published. It isn't really big problem for them. Their model is the methodical march forward of the open source model.

I personally still believe having the best tech and being first mover in a market with it, can add stature for a coin and/or ecosystem.

rangedriver
Hero Member
*****
Offline Offline

Activity: 714
Merit: 504



View Profile
October 22, 2015, 12:58:25 PM
 #225

I am going to unlock the thread again in case any one wants to comment.

After all, it looks like Monero cryptographer Shen-Noether's design for this Holy Grail of on-chain anonymity where Cryptonote one-time rings are combined with homomorphic value hiding can do the same functionality as my design can. My white paper was completed in July all by myself. Shen's white paper was only completed in October and he interacted with some from Blockstream and apparently others.

The difference in our two designs appears to end up only in terms of efficiency. His design works with Blockstream's Confidential Transactions. My design works with an unpublished version of Denis Lukianov's Compact Confidential Transactions which contains my improvements to make it even more compact and probably 4 times faster (pending tests).

So you can compare CCT to CT and see that my design should have a better than 850% size advantage and the performance should also be faster than Shen's:

http://voxelsoft.com/dev/cct.pdf#page=10

My white paper will eventually be published of course. Some coin may get it secretly to implement first before it is published.

I am not totally against selling the exclusivity for it to Monero, but I don't think that is their development model. Monero is going after the open source model where to get paid you need to be paid by your company to work on Monero, e.g. Blockstream is paid $21 million to work on these technologies and I assume Shen-Noether would like to impress them and maybe increase his work offers due to increased recognition of his achievements. I am not even a part-time mathematician so I have no chance/motivation in hell of using my paper to increase my chances of gaining lucrative ongoing employment as a mathematician. Thus I seek to maximize the benefit or effect my work can impart to myself and the community which is most aligned with my direction in crypto. I think Monero will eventually redesign what I did, or they can wait until mine is published. It isn't really big problem for them. Their model is the methodical march forward of the open source model.

I personally still believe having the best tech and being first mover in a market with it, can add stature for a coin and/or ecosystem.

Nice to see this thread unlocked - was starting to get a little irritating with the narrative hogging.

I think J.J. Abrams would be jealous at the amount of column inches and hype that you're currently generating.

When can we expect some meat and potatoes?

TPTB_need_war (OP)
Sr. Member
****
Offline Offline

Activity: 420
Merit: 257


View Profile
October 22, 2015, 01:00:43 PM
Last edit: October 22, 2015, 01:17:32 PM by TPTB_need_war
 #226

When can we expect some meat and potatoes?

How did I not answer that question already in the prior post to the best of my ability to predict the future scenarios?

hype that you're currently generating.

Could you please be more precise? What hype was that? We are in the Altcoin discussion thread. I have a thread about a radical improvement to Cryptonote which is even better than the Zerocash which was a technology that originally made a lot of people excited. And what have I hyped? I have sought the best value and direction for my invention while also evaluating Monero-Shen's comparable invention.

Having a dialogue with the community so as to learn what works and doesn't work seems to be a desirable trait.

hype1
hīp/
promote or publicize (a product or idea) intensively, often exaggerating its importance or benefits.

rangedriver
Hero Member
*****
Offline Offline

Activity: 714
Merit: 504



View Profile
October 22, 2015, 01:18:49 PM
 #227

When can we expect some meat and potatoes?

How did I not answer that question already in the prior post to the best of my ability to predict the future scenarios?

hype that you're currently generating.

Could you please be more precise? What hype was that? We are in the Altcoin discussion thread. I have a thread about a radical improvement to Cryptonote which is even better than the Zerocash which was a technology that originally made a lot of people excited. And what have I hyped? I have sought the best value and direction for my invention while also evaluating Monero-Shen's comparable invention.

Having a dialogue with the community so as to learn what works and doesn't work seems to be a desirable trait.

It's okay - it was a throwaway comment not designed to be in the perjorative. Consider it to be tounge-in-cheek.

As an investor I'm always keen for action - that was my point.
TPTB_need_war (OP)
Sr. Member
****
Offline Offline

Activity: 420
Merit: 257


View Profile
October 22, 2015, 01:21:45 PM
 #228

Okay thanks. I edited my post based on your tongue-in-cheek feedback, just to make sure I had links to where the estimates of the 850% size and 3-4 times performance gains are documented. I made that post today because following up on the estimates was on my todo list from the past couple of days.

I'll be happy to get off this anonymity issue and back on to other work where I feel I can create some intense action. The anonymity is important to me and now I am done with that for a while and just need to see if anyone wants to implement my design now. Otherwise it can wait for if I do my own coin.

TPTB_need_war (OP)
Sr. Member
****
Offline Offline

Activity: 420
Merit: 257


View Profile
November 01, 2015, 10:12:06 AM
Last edit: November 01, 2015, 10:31:27 AM by TPTB_need_war
 #229

Ten days later I found some time to follow up...

https://www.reddit.com/r/Monero/comments/3oi16k/ring_ct_for_monero_a_work_in_progress_comments/cw7kkvy

Quote from: myself
Quote from: Monero cryptograher Shen-Noether@NobleSir
No, I understood your point clearly: you clearly do not understand elliptic curve math: How do you know that zG is not z'G +aH without knowing z? At this point I've just been correcting your math for like 20 comments so I'm not sure how you expect me to take these comments seriously.

Pfff, you did not correct my math. You failed to grasp what I was stating.

My point is that for the commitment to the sum, even though the z is not zero, we know that the values on the base point H must sum to zero, because of the way ECC works, it is impossible to find values on the base point G that can offset any non-zero value from values on the base point H.

And then I proceeded to explain that since we know the sum is always zero regardless of the fuzz provided by z, then if we know the hidden values for the inputs and the outputs, then we know with high probability which of the i (out of the n possibilities) is the pi which signed the ring.

Dude your hubris is insane given that your implementation relies on CT, which requires 850% more space than my design which relies on CCT. Perhaps you've seen the comparative benchmarks in the updated CCT paper.

Also I have found another weaknesses in your design which I will be explaining in another post shortly.

Quote from: Monero cryptograher Shen-Noether @NobleSir
the points G and H aren't actually orthogonal, as H = xG for some G, it's just that no one actually knows what x that is (in fact in the ed25519 public key group "every" point is a multiple of the basepoint)

Btw, if you were thinking you were correcting me when you wrote that, then I suggest to you that presumption is the enemy of truth and the obfuscation fuel of overconfidence. Of course I know that! Why would you ass-u-me otherwise.

Quote from: myself
Quote from: lealana
@NobleSir,
I think it is time for you to move on from discussion with him. He obviously enjoys the attention. Anonymint is probably very intelligent but at this point it it may not be worth your time if you are constantly correcting his math.

I invented the technology and wrote a complete white paper in July three months before he releases a half-written draft, then I expend a week of my time for free giving him peer review in spite of his condescending attitude which always seems to seep back to the surface even after he stated he would stop being a jerk. And then I leave for 10 days because I thought this was settled and I come back here to find out you guys acting like 5 year olds again. Sheesh. Craving attention? Have you got screws loose in your head!

To help them with their delusions, I have taken to logging into my various Reddit accounts and up voting their posts and down voting my own posts. Hopefully that causes them to think more highly of themselves and stack on more overconfidence. Maximum overconfidence comes right before Humpty Dumpty has the great fall.

Quote from: myself
Quote from: Monero cryptograher Shen-Noether@NobleSir
Quote from: myself
Quote from: Monero cryptograher Shen-Noether@NobleSir
Quote from: myself
The implication is that an adversary doing combinatorial analysis on the block chain employing overlapping rings and hidden values extracted in different ways, e.g. users that employ Coinbase to do their transactions, can prove relationships across rings without knowing the private keys.

This part, it's not too hard to make the combinatorial type attack impossible using the pidgeonhole technique I mention in mrl_notesv0.3

https://github.com/ShenNoether/MiniNero/blob/master/mrl_notes_v0.3.pdf

In section "4.1 Example of the attack", why are you not acknowledging me as the first person to both communicate that sort of attack to smooth during the BCX incident in 2014 which I assume was relayed because the issue was subsequently mentioned in a Monero Labs Report and then sometime earlier this year I wrote down that tree case in a post in the Monero forum (and even explained that my solution would provide a method to prune the block chain) and they told me they had relayed this info to you and I believe you even replied there. So please give acknowledgement to prior art.

This point of traceable ring signatures is the "tag linkability" property referenced in the RingCT paper and has been thoroughly explored in Fujisaki / Suzuki 2007 "Traceable Ring Signatures" lemma 5.3 (in fact that lemma proves the solution in mrl_notes_v3 is not breakable using any combinatorial analysis).

My understanding is that tag-linkability is the property of traceable ring signatures such that the total number of signatures with unique (i.e. unlinked tags) cannot exceed the total number of ring members. From this follows obviously that if the total number of untagged signatures equals the total number of ring members, then all members of the ring have signed.

However, your pidgeonhole technique mention in mrl_notesv0.3 is a proposed solution preventing combinatorial (tree analysis) unmasking due to the implications of the tag-linkability property. Such a solution is additional art that exceeds the prior art in the Fujisaki / Suzuki 2007 paper. Notwithstanding that your pidgeonhole technique appears to me to be flawed as I will explain below, I claim to you that I provided the correct solution in writing as of June 13, 2015 in the Monero thread. Additionally I was claiming this solution since the BCX incident in 2014. There are other off-hand written mentions of this that can be dug up from forum archives. Smooth concurs that I did discuss with him combinatorial unmasking in 2014 and that he relayed that to you, which ostensibly was input for the subsequent MRL-0004 Monero Labs Report:
https://lab.getmonero.org/pubs/MRL-0004.pdf

Here are the Monero thread links for your verification (one of which you replied to):

https://bitcointalk.org/index.php?topic=583449.msg11770837#msg11770837
https://bitcointalk.org/index.php?topic=68655.msg11614538#msg11614538
https://bitcointalk.org/index.php?topic=583449.msg11663084#msg11663084
https://bitcointalk.org/index.php?topic=583449.msg11661985#msg11661985

Quote from: smooth
Quote from: myself
Btw, your stated solution attempts to be more general than the solution I stated which was simply to insure that all pubkey outputs mixed with the same set of pubkey outputs.

What's wrong with that? It's a write up from a theory perspective, so it is certainly within the scope to be general about it.

Because Shen's pidgeonhole technique appears to me to be flawed as I will explain below.

Quote from: smooth
Quote from: myself
Your proposed solution instead eliminates the possibility to prune the block chain.
No

Shen's pidgeonhole technique requires that every ring has to respect m < n, thus you'll never be able to see enough spends to be sure that a set of rings have spent all the pubkeys in those rings. Plus his technique appears to me to have other problems which I explain below.

Quote from: myself
Also I believe there are other combinatorial faults in your stated solution, but maybe not, I will need to think about it more deeply.

In any case, even if you apply my prior art solution from 2014, it doesn't completely address the risk of combinatorial cascade, because the additional knowledge which eliminates some of the pubkey outputs as candidates thus reduces the effective value of 'n' and you can't know how small 'n' has become because you don't know how much information the adversary will have.

Shen's pidgeonhole technique suffers from the fact that is violates the autonomy of ring signatures, because the signer can't autonomously know the state of all the rings the other members of the rings that his output has been included, and this only known once a chain reorganization becomes improbable. So there is no way for any ring to be signed reliably autononomously. And it can potentially cause a ring signer to have to search the entire block chain in the degenerate case.

Additionally as I explained previously as quoted above, there is no way to actually know the value 'n' because the adversary may have other ways of reducing 'n' by unmasking rings with side-channel information such as IP address correlations, etc..

Thus as I wrote before Shen's method is too general, highly incorrect and egregiously broken.

So please credit me with the prior art and then you need to implement my solution and not Shen's.

Lastly due to this fact, there is another flaw in Shen's design for integrating Cryptonote rings with CT hidden values. Since my solution for preventing combinatorial unmasking requires that ouputs mix always with the same set of mutual outputs when used in rings, this requires that each input to a transaction be mixed orthogonally to the other inputs. If instead multiple rings are conflated as in MG signatures that Shen employs in his CN + CT, then new combinatorial analysis vectors are enabled. Appears Shen can correct this by putting one input and one put in each MG signature and then using a separate CT only proof-of-sum to spend all those summed outputs into the desired summed outputs. This will drastically increase the size and performance complexity (overhead) of his CN + CT design.

I can really see that my design is far superior now.

P.S. given the egregious error that would have been in Monero had I not bothered to come back here after 10 days and endure the abuse I get from Monerotards, one would seriously have to doubt whether Monero is technically sound. Their attitude is their biggest enemy. Perhaps I should have kept my mouth shut and waited until you hard forked the broken design, then crashed your market price with this revelation. Surely I won't get any niceties for having done the honorable thing and not the one that could benefit me the most since I am a competitor to Monero.

generalizethis
Legendary
*
Offline Offline

Activity: 1750
Merit: 1036


Facts are more efficient than fud


View Profile WWW
November 01, 2015, 10:51:56 AM
 #230



To help them with their delusions, I have taken to logging into my various Reddit accounts and up voting their posts and down voting my own posts. Hopefully that causes them to think more highly of themselves and stack on more overconfidence. Maximum overconfidence comes right before Humpty Dumpty has the great fall.



LOL, I can't prove you didn't vote down your own comments, but hearing a man who claims to be as good a running back as Barry Sanders wax poetic on delusions of grandeur is about as much hypocrisy as I can stand. Look in the mirror next time you lecture about ego; I'm sure you'll like what you hear.

fluffypony
Donator
Legendary
*
Offline Offline

Activity: 1274
Merit: 1060


GetMonero.org / MyMonero.com


View Profile WWW
November 01, 2015, 01:08:02 PM
 #231

So please credit me with the prior art and then you need to implement my solution and not Shen's.

How on earth do you get that you have prior art?! Where is your published paper, predating Shen's, that describes your scheme???

Honestly, I'm too busy to have a circuitous discussion about this, so I'll let Wikipedia explain what prior art means:

Quote
Prior art (state of the art[1] or background art[2]), in most systems of patent law,[3] constitutes all information that has been made available to the public in any form before a given date that might be relevant to a patent's claims of originality. If an invention has been described in the prior art, a patent on that invention is not valid.

Information kept secret, for instance, as a trade secret, is not usually prior art, provided that employees and others with access to the information are under a non-disclosure obligation. With such an obligation, the information is typically not regarded as prior art. Therefore, a patent may be granted on an invention, although someone else already knew of the invention. A person who used an invention in secret may in some jurisdictions be able to claim "prior user rights" and thereby gain the right to continue using the invention. As a special exception, earlier-filed and unpublished patent applications do qualify as prior art as of their filing date in certain circumstances.

To anticipate the subject-matter of a patent claim, prior art is generally expected to provide a description sufficient to inform an average worker in the field (or the person skilled in the art) of some subject matter falling within the scope of the claim. Prior art must be available in some way to the public, and in many countries, the information needs to be recorded in a fixed form somehow. Prior art generally does not include unpublished work or mere conversations (though according to the European Patent Convention, oral disclosures also form prior art—see Article 54(2) EPC).

wpalczynski
Legendary
*
Offline Offline

Activity: 1456
Merit: 1000



View Profile
November 01, 2015, 01:23:57 PM
 #232



To help them with their delusions, I have taken to logging into my various Reddit accounts and up voting their posts and down voting my own posts. Hopefully that causes them to think more highly of themselves and stack on more overconfidence. Maximum overconfidence comes right before Humpty Dumpty has the great fall.





WOW... Just WOW....


TPTB_need_war (OP)
Sr. Member
****
Offline Offline

Activity: 420
Merit: 257


View Profile
November 01, 2015, 07:00:49 PM
Last edit: November 01, 2015, 07:14:26 PM by TPTB_need_war
 #233

The Monerotards just can't ever admit that someone else could do anything they couldn't do and give proper credit and respect where it is due. Sigh.

And then they wonder why their shitcoin is going no where and those who have the talent to make it go somewhere are not motivated to join with their sick attitudes.

You guys are hilarious. Keep making excuses to deny reality but it won't help you in the real world.

Not even one thank you for pointing an egregious error in Shen's proposed solution which could have enabled me to crash your market price had I withheld the information and supplied it after you implemented a hard fork with the design error. Instead I get verbal diarrhea about senile rage. My and the community wide anger against Monerotards, is because of for example your Shen's condescending verbiage and now more of it from all you key persons in the Monerotard community and even the lead developer.

How on earth do you get that you have prior art?! Where is your published paper, predating Shen's, that describes your scheme???

fluffypony, I provided links to the prior art that was published in public. If there is contention about the date of who published first, it is possible to go digging in AnonyMint's archives to find the earlier dated posts with the relevant information. Why do you waste my time with a post that shows you didn't even read the post I made that contains the links to the prior art (and the mention of earlier dated posts being in the earlier archives if necessary)? Do I waste yours?

WOW... Just WOW....



Very indicative of the brow beating mental disease of Monerotards.

smooth
Legendary
*
Offline Offline

Activity: 2968
Merit: 1198



View Profile
November 01, 2015, 07:04:03 PM
 #234

The Monerotards just can't ever admit that someone else could do anything they couldn't do and give proper credit and respect where it is due. Sigh.

I'm not really following it but look, to get credit you have to publish stuff, or release products or something. If you do your work in secret and don't release things, that has its own benefits, but credit is not one of them.

I did acknowledge on that thread the stuff that you came up with last year about combinatorial unmixing, but beyond that everything you have claimed to do is unreleased. If you get scooped, that goes with the territory.
TPTB_need_war (OP)
Sr. Member
****
Offline Offline

Activity: 420
Merit: 257


View Profile
November 01, 2015, 07:05:38 PM
 #235

I'm not really following it

If you took the time to read what I wrote, then you don't have to waste my and your time writing this. I provided links to the published prior art.

As for proving my white paper was finished before theirs, you ass-u-me I didn't sign a hash to a public block chain and that when I release my white paper, that I can't make all you eat your verbal diarrhea.

smooth
Legendary
*
Offline Offline

Activity: 2968
Merit: 1198



View Profile
November 01, 2015, 07:15:06 PM
 #236

when I release

Then there will be something to back up your claims, and basis for credit to be given. Currently there is not.
TPTB_need_war (OP)
Sr. Member
****
Offline Offline

Activity: 420
Merit: 257


View Profile
November 01, 2015, 07:19:54 PM
 #237

when I release

Then there will be something to back up your claims, and basis for credit to be given. Currently there is not.

For my demand that he cite my prior art, I only referred to the publish prior art on the combinatorial unmasking prevention, of which his published proposed solution is incorrect. Thus even if I published my solution now (instead of the June 2015 provided by my published prior art, and I also have posts on that same art from 2014 if necessary I can dig them up), I would still have the prior art on the correct solution.

If you are going to post, at least bother to get your facts straight by reading my post first.

smooth
Legendary
*
Offline Offline

Activity: 2968
Merit: 1198



View Profile
November 01, 2015, 07:30:55 PM
 #238

when I release

Then there will be something to back up your claims, and basis for credit to be given. Currently there is not.

For my demand that he cite my prior art, I only referred to the publish prior art on the combinatorial unmasking prevention, of which his published proposed solution is incorrect. Thus even if I published my solution now (instead of the June 2015 provided by my published prior art, and I also have posts on that same art from 2014 if necessary I can dig them up), I would still have the prior art on the correct solution.

If you are going to post, at least bother to get your facts straight by reading my post first.

Well I agree with you that your approach is close enough to his in terms of subject matter that it should be cited as prior related work at least. As to relative advantages and disadvantages of the techniques you will have to hash that out among yourselves, or just state your opinion, he'll state his and let readers (and ultimately the market, assuming either or both is ever implemented) decide.
TPTB_need_war (OP)
Sr. Member
****
Offline Offline

Activity: 420
Merit: 257


View Profile
November 01, 2015, 07:36:28 PM
 #239

Too much talk.

TPTB_need_war (OP)
Sr. Member
****
Offline Offline

Activity: 420
Merit: 257


View Profile
November 12, 2015, 05:35:43 PM
 #240

A suggested improvement to the Compact Confidential Transactions which my Zero Knowledge Transactions builds on:

Denis, on quick glance this appears to be superior to the current Distribute algorithm that appears in Appendix A of your paper:

http://math.stackexchange.com/questions/1276206/method-of-generating-random-numbers-that-sum-to-100-is-this-truly-random

Pages: « 1 2 3 4 5 6 7 8 9 10 11 [12] 13 14 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!