Bitcoin Forum
March 28, 2024, 07:59:09 AM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 2 3 [4]  All
  Print  
Author Topic: Optimal pool abuse strategy. Proofs and countermeasures  (Read 30451 times)
BombaUcigasa
Legendary
*
Offline Offline

Activity: 1442
Merit: 1000



View Profile
June 13, 2011, 12:18:25 PM
 #61

It has no effect on the payout from this pool. But once the payout from this pool, due to the length of its current round, is too low, you hop to a pool where it's higher.
Right. So you benefit by ditching the pool with a way longer round (so your investment in that pool is higher considering the time you put in, but still low considering what you could have gotten if you stayed) to a pool that found a new block. The only draw-downs to this method is when you have to switch between pools that still haven't finished a round and you go back and forth, and when you go into a fresh round, but because you stay too long in the fresh round pool, the other pool you ditched could end the round has a shorter round which is worth more than the long one, for which you don't get anything because you left).
1711612749
Hero Member
*
Offline Offline

Posts: 1711612749

View Profile Personal Message (Offline)

Ignore
1711612749
Reply with quote  #2

1711612749
Report to moderator
1711612749
Hero Member
*
Offline Offline

Posts: 1711612749

View Profile Personal Message (Offline)

Ignore
1711612749
Reply with quote  #2

1711612749
Report to moderator
1711612749
Hero Member
*
Offline Offline

Posts: 1711612749

View Profile Personal Message (Offline)

Ignore
1711612749
Reply with quote  #2

1711612749
Report to moderator
It is a common myth that Bitcoin is ruled by a majority of miners. This is not true. Bitcoin miners "vote" on the ordering of transactions, but that's all they do. They can't vote to change the network rules.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1711612749
Hero Member
*
Offline Offline

Posts: 1711612749

View Profile Personal Message (Offline)

Ignore
1711612749
Reply with quote  #2

1711612749
Report to moderator
1711612749
Hero Member
*
Offline Offline

Posts: 1711612749

View Profile Personal Message (Offline)

Ignore
1711612749
Reply with quote  #2

1711612749
Report to moderator
drlukacs
Sr. Member
****
Offline Offline

Activity: 854
Merit: 253


l0tt0.com


View Profile
May 01, 2013, 02:12:30 AM
 #62

I have written a description of the optimal pool abuse strategy (for a single pool) with proofs and calculations. Available here:
http://bitcoin.atspace.com/poolcheating.pdf

Raulo, you have a mathematical error on page 1, in equation (4).

Your \xi depends on n. Consequently, you cannot pass to limit only in part of the expression.

The expression q:=1- (1/2^32* D)  is a real number < 1. Consequently, Q(n)=q^n -->0 as n --> \infty.

This makes perfect sense, because the probability that you will "almost surely" (in the sense of probability theory) find a block if you wait long enough (infinitely long).


|.
WHIRLWIND
|
█▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█
        ▄▄▄██▀▀▀▀▀▄▄         █
     ▄▄██▀▀▄▄▀▀▀▀▀▄▄▄        █A
    ▄██▀▄██▀▄▀▀▀ ▄▄ ▄▄▄▄     █
   ███ ██▀▄▀     ▄▄▀▄▄ ▀█▄   █
  ███ ███ █        ▀▄ █▄ ██  █
  ███ ███ █         █ ██ ██  █
  ███ ███ █        ▄▀ █▀ ██  █
   ███ ██▄▀▄     ▀▀▄▀▀ ▄█▀   █
    ▀██▄▀██▄▀▄▄▄ ▀▀ ▀▀▀▀     █
     ▀▀██▄▄▀▀▄▄▄▄▄▀▀▀        █
        ▀▀▀██▄▄▄▄▄▀▀         █
█▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄█
|.
  No Fee    Ultimate Privacy  
|.
ANONYMITY
MINING CAMPAIGN
|.
MIX NOW
|
Meni Rosenfeld
Donator
Legendary
*
Offline Offline

Activity: 2058
Merit: 1054



View Profile WWW
May 01, 2013, 06:49:29 AM
 #63

I have written a description of the optimal pool abuse strategy (for a single pool) with proofs and calculations. Available here:
http://bitcoin.atspace.com/poolcheating.pdf

Raulo, you have a mathematical error on page 1, in equation (4).

Your \xi depends on n. Consequently, you cannot pass to limit only in part of the expression.

The expression q:=1- (1/2^32* D)  is a real number < 1. Consequently, Q(n)=q^n -->0 as n --> \infty.

This makes perfect sense, because the probability that you will "almost surely" (in the sense of probability theory) find a block if you wait long enough (infinitely long).
It's not an error, though tricky and somewhat unclear.

He is assuming that \xi is constant while n and D are variable. For \xi=2, for example, he is considering a case that the hashes calculated are twice the average needed; he then considers what happens when D, and correspondingly n, go to infinity (continuous case). In this case the chance of not finding a block is indeed exp(-2).

1EofoZNBhWQ3kxfKnvWkhtMns4AivZArhr   |   Who am I?   |   bitcoin-otc WoT
Bitcoil - Exchange bitcoins for ILS (thread)   |   Israel Bitcoin community homepage (thread)
Analysis of Bitcoin Pooled Mining Reward Systems (thread, summary)  |   PureMining - Infinite-term, deterministic mining bond
drlukacs
Sr. Member
****
Offline Offline

Activity: 854
Merit: 253


l0tt0.com


View Profile
May 01, 2013, 01:08:23 PM
 #64

It's not an error, though tricky and somewhat unclear.

He is assuming that \xi is constant while n and D are variable. For \xi=2, for example, he is considering a case that the hashes calculated are twice the average needed; he then considers what happens when D, and correspondingly n, go to infinity (continuous case). In this case the chance of not finding a block is indeed exp(-2).

So, is there an implicit assumption that n and D are linearly related?

You see, I have no problem with the observation that finding a block has a Poisson distribution. But the "proof" provided as it stands is simply wrong, unless D is a function of n,  and \xi is the limit of their ration when n tends to infinity.

|.
WHIRLWIND
|
█▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█
        ▄▄▄██▀▀▀▀▀▄▄         █
     ▄▄██▀▀▄▄▀▀▀▀▀▄▄▄        █A
    ▄██▀▄██▀▄▀▀▀ ▄▄ ▄▄▄▄     █
   ███ ██▀▄▀     ▄▄▀▄▄ ▀█▄   █
  ███ ███ █        ▀▄ █▄ ██  █
  ███ ███ █         █ ██ ██  █
  ███ ███ █        ▄▀ █▀ ██  █
   ███ ██▄▀▄     ▀▀▄▀▀ ▄█▀   █
    ▀██▄▀██▄▀▄▄▄ ▀▀ ▀▀▀▀     █
     ▀▀██▄▄▀▀▄▄▄▄▄▀▀▀        █
        ▀▀▀██▄▄▄▄▄▀▀         █
█▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄█
|.
  No Fee    Ultimate Privacy  
|.
ANONYMITY
MINING CAMPAIGN
|.
MIX NOW
|
Meni Rosenfeld
Donator
Legendary
*
Offline Offline

Activity: 2058
Merit: 1054



View Profile WWW
May 01, 2013, 03:00:21 PM
 #65

It's not an error, though tricky and somewhat unclear.

He is assuming that \xi is constant while n and D are variable. For \xi=2, for example, he is considering a case that the hashes calculated are twice the average needed; he then considers what happens when D, and correspondingly n, go to infinity (continuous case). In this case the chance of not finding a block is indeed exp(-2).
So, is there an implicit assumption that n and D are linearly related?

You see, I have no problem with the observation that finding a block has a Poisson distribution. But the "proof" provided as it stands is simply wrong, unless D is a function of n,  and \xi is the limit of their ration when n tends to infinity.
The assumption is explicit = \xi is defined as n / (2^32 D), meaning that D = n / (2^32 \xi).

And yes, in this calculation n and D both go to infinity at a specified ratio \xi. The assumption that \xi is fixed was not explicitly written but it follows from context.

D doesn't have to "go to" infinity in real life for the calculation to show that if D is sufficiently large, then for any n the probability of not finding a block is roughly exp ( - n / (2^32 D)).

1EofoZNBhWQ3kxfKnvWkhtMns4AivZArhr   |   Who am I?   |   bitcoin-otc WoT
Bitcoil - Exchange bitcoins for ILS (thread)   |   Israel Bitcoin community homepage (thread)
Analysis of Bitcoin Pooled Mining Reward Systems (thread, summary)  |   PureMining - Infinite-term, deterministic mining bond
camaro69327
Newbie
*
Offline Offline

Activity: 59
Merit: 0



View Profile
May 03, 2013, 12:09:31 AM
 #66

June 13, 2011, 12:18:25 PM  <<<<WTF last post in this thread.



Posted on: May 01, 2013, 02:12:30 AM
 Posted by: drlukacs


So why did you resurrect a dead thread on cheating?? Most pools conteract this...
drlukacs
Sr. Member
****
Offline Offline

Activity: 854
Merit: 253


l0tt0.com


View Profile
May 03, 2013, 01:13:29 AM
 #67

June 13, 2011, 12:18:25 PM  <<<<WTF last post in this thread.



Posted on: May 01, 2013, 02:12:30 AM
 Posted by: drlukacs


So why did you resurrect a dead thread on cheating?? Most pools conteract this...


I was thinking about what is the most "fair" reward system. I was interested on what others have written about the topic. Meni's paper on the topic (which I have yet to finish reading) struck me as more deep and thorough.

I am not sure if I would call it cheating. In the case of Teracoins, some kind of algorithm  that makes hash rates more even would actually benefit the entire community.

|.
WHIRLWIND
|
█▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█
        ▄▄▄██▀▀▀▀▀▄▄         █
     ▄▄██▀▀▄▄▀▀▀▀▀▄▄▄        █A
    ▄██▀▄██▀▄▀▀▀ ▄▄ ▄▄▄▄     █
   ███ ██▀▄▀     ▄▄▀▄▄ ▀█▄   █
  ███ ███ █        ▀▄ █▄ ██  █
  ███ ███ █         █ ██ ██  █
  ███ ███ █        ▄▀ █▀ ██  █
   ███ ██▄▀▄     ▀▀▄▀▀ ▄█▀   █
    ▀██▄▀██▄▀▄▄▄ ▀▀ ▀▀▀▀     █
     ▀▀██▄▄▀▀▄▄▄▄▄▀▀▀        █
        ▀▀▀██▄▄▄▄▄▀▀         █
█▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄█
|.
  No Fee    Ultimate Privacy  
|.
ANONYMITY
MINING CAMPAIGN
|.
MIX NOW
|
organofcorti
Donator
Legendary
*
Offline Offline

Activity: 2058
Merit: 1007


Poor impulse control.


View Profile WWW
May 03, 2013, 03:53:22 AM
 #68

June 13, 2011, 12:18:25 PM  <<<<WTF last post in this thread.



Posted on: May 01, 2013, 02:12:30 AM
 Posted by: drlukacs


So why did you resurrect a dead thread on cheating?? Most pools conteract this...


I was thinking about what is the most "fair" reward system. I was interested on what others have written about the topic. Meni's paper on the topic (which I have yet to finish reading) struck me as more deep and thorough.

I am not sure if I would call it cheating. In the case of Teracoins, some kind of algorithm  that makes hash rates more even would actually benefit the entire community.



I'm not sure how your last comment relates to the strategy suggested by Raulo in his paper.

Bitcoin network and pool analysis 12QxPHEuxDrs7mCyGSx1iVSozTwtquDB3r
follow @oocBlog for new post notifications
gyverlb
Hero Member
*****
Offline Offline

Activity: 896
Merit: 1000



View Profile
May 03, 2013, 03:10:50 PM
 #69

June 13, 2011, 12:18:25 PM  <<<<WTF last post in this thread.



Posted on: May 01, 2013, 02:12:30 AM
 Posted by: drlukacs


So why did you resurrect a dead thread on cheating?? Most pools conteract this...


I was thinking about what is the most "fair" reward system. I was interested on what others have written about the topic. Meni's paper on the topic (which I have yet to finish reading) struck me as more deep and thorough.

I am not sure if I would call it cheating. In the case of Teracoins, some kind of algorithm  that makes hash rates more even would actually benefit the entire community.



I'm not sure how your last comment relates to the strategy suggested by Raulo in his paper.

Terracoin retargets it's difficulty on each block (unless it changed its algorithm recently: the dev has already pulled a 24h mandatory update out of his hat forking the chain like that). Some people are mining Terracoin only when it's more profitable than other coins: this has similar effects than the ones happening when a pool is hoppable...

P2pool tuning guide
Trade BTC for €/$ at bitcoin.de (referral), it's cheaper and faster (acts as escrow and lets the buyers do bank transfers).
Tip: 17bdPfKXXvr7zETKRkPG14dEjfgBt5k2dd
Meni Rosenfeld
Donator
Legendary
*
Offline Offline

Activity: 2058
Merit: 1054



View Profile WWW
May 03, 2013, 03:32:17 PM
 #70

I am not sure if I would call it cheating. In the case of Teracoins, some kind of algorithm  that makes hash rates more even would actually benefit the entire community.
Not sure what you mean but IIRC the formulation in AoBPMRS treats difficulty changes properly, it will work even if the difficulty changes frequently.

1EofoZNBhWQ3kxfKnvWkhtMns4AivZArhr   |   Who am I?   |   bitcoin-otc WoT
Bitcoil - Exchange bitcoins for ILS (thread)   |   Israel Bitcoin community homepage (thread)
Analysis of Bitcoin Pooled Mining Reward Systems (thread, summary)  |   PureMining - Infinite-term, deterministic mining bond
drlukacs
Sr. Member
****
Offline Offline

Activity: 854
Merit: 253


l0tt0.com


View Profile
May 03, 2013, 05:42:13 PM
 #71

I am not sure if I would call it cheating. In the case of Teracoins, some kind of algorithm  that makes hash rates more even would actually benefit the entire community.
Not sure what you mean but IIRC the formulation in AoBPMRS treats difficulty changes properly, it will work even if the difficulty changes frequently.

The question was how I came to this topic. The answer is that I was looking for some kind of algorithm (or even implementation) to hop to a different coin, as opposed to a different pool, when the difficulty goes up.

|.
WHIRLWIND
|
█▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█
        ▄▄▄██▀▀▀▀▀▄▄         █
     ▄▄██▀▀▄▄▀▀▀▀▀▄▄▄        █A
    ▄██▀▄██▀▄▀▀▀ ▄▄ ▄▄▄▄     █
   ███ ██▀▄▀     ▄▄▀▄▄ ▀█▄   █
  ███ ███ █        ▀▄ █▄ ██  █
  ███ ███ █         █ ██ ██  █
  ███ ███ █        ▄▀ █▀ ██  █
   ███ ██▄▀▄     ▀▀▄▀▀ ▄█▀   █
    ▀██▄▀██▄▀▄▄▄ ▀▀ ▀▀▀▀     █
     ▀▀██▄▄▀▀▄▄▄▄▄▀▀▀        █
        ▀▀▀██▄▄▄▄▄▀▀         █
█▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄█
|.
  No Fee    Ultimate Privacy  
|.
ANONYMITY
MINING CAMPAIGN
|.
MIX NOW
|
Pages: « 1 2 3 [4]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!