Bitcoin Forum
May 05, 2024, 09:31:33 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: Trusting sellers of LARGE amounts of Bitcoins  (Read 2868 times)
casascius (OP)
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1386
Merit: 1136


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
February 04, 2011, 06:08:29 PM
Last edit: December 01, 2012, 11:24:40 PM by casascius
 #1

I was thinking that one of the biggest obstacles to people getting very much money into the Bitcoin economy is having to trust a total stranger...

you can either send lots of cash to somebody you've never heard of, or to a website you've never heard of... it would turn a lot of people off for large dollar amounts.

I would like to present an idea of a trustworthy way to clinch a large Bitcoin deal, in a manner that leaves the buyer with good legal recourse assuming the seller didn't deliver.  It's crypto-based, but also something that is likely to be recognized by the courts since they use this themselves: good old Adobe PDF.

Specifically, digitally signed using PDF's built in facilities (which requires getting a third party to issue you a certificate and key).  When you buy a key, you don't even get to see the private key.  It's generated and delivered on a USB hardware crypto token which does the signing for you.  This makes signed PDF's airtight against the defense, "someone hacked my machine and stole my private key".

So, someone would still be sending lots of USD to someone they've never heard of, but they'd have a pretty decent shot at suing them if they were to be ripped off.  That would make the sort of person with lots of money to buy BTC much more comfortable.

Anyone who is willing to pay about $450 for an Adobe-recognized USB digital certificate (in addition to buying the full blown Adobe Acrobat) can issue Certified PDF's that will be recognized as such from within the free Adobe Reader.  Would be a good expense for someone who sold big BTC regularly.

Here is an example certified PDF.

The fact that Adobe Certified PDF natively supports third party crypto-based time stamps is a nice plus.  It's built in and automatic as long as you have an internet connection when you sign a document.

https://casascius.com/AgreementToDeliverBitcoins.pdf

Comments Requested.
EDIT: to update URL since I no longer have the static IP in prior revisions of the post.

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper or hardware wallets instead.
1714901493
Hero Member
*
Offline Offline

Posts: 1714901493

View Profile Personal Message (Offline)

Ignore
1714901493
Reply with quote  #2

1714901493
Report to moderator
1714901493
Hero Member
*
Offline Offline

Posts: 1714901493

View Profile Personal Message (Offline)

Ignore
1714901493
Reply with quote  #2

1714901493
Report to moderator
1714901493
Hero Member
*
Offline Offline

Posts: 1714901493

View Profile Personal Message (Offline)

Ignore
1714901493
Reply with quote  #2

1714901493
Report to moderator
"With e-currency based on cryptographic proof, without the need to trust a third party middleman, money can be secure and transactions effortless." -- Satoshi
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
kiba
Legendary
*
Offline Offline

Activity: 980
Merit: 1014


View Profile
February 04, 2011, 06:23:02 PM
 #2

I dislike the idea of using the courts to enforce claim.

Garrett Burgwardt
Sr. Member
****
Offline Offline

Activity: 406
Merit: 256


View Profile
February 04, 2011, 06:25:32 PM
 #3

Some people would prefer it though. Just because you don't like something doesn't mean others wouldn't  Wink

I think it's a silly expenditure, and we already have the bitcoin-otc trust web, so I think that need is served.
Cusipzzz
Sr. Member
****
Offline Offline

Activity: 334
Merit: 250



View Profile
February 04, 2011, 06:32:23 PM
 #4

I like your thinking but several problems here:

1. Many people want to be anonymous, and will not be putting their real name on any document

2. What jurisdiction will you be suing in, as your counterparty is likely in a different country

3. Many sites that offer exchange/services for BTC (including mine) have a lot of reputational risk. It's a small community and word gets around fast - if they 'scammed' someone, the lost business/future revenue is likely several times worse than the scam amount, so it just doesn't happen. Also the otc web of trust as stated above is an effective method.

casascius (OP)
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1386
Merit: 1136


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
February 04, 2011, 06:40:44 PM
Last edit: February 04, 2011, 06:52:05 PM by casascius
 #5

1. Many people want to be anonymous, and will not be putting their real name on any document

Those people can use Bitcoin 4 Cash.  Besides, the document is to protect the buyer, not the seller.  One could just as well leave the buyer name blank, word the agreement so the buyer is the person who can prove he wired the money.  Besides, wiring money and using courts makes it hard to stay anonymous.

2. What jurisdiction will you be suing in, as your counterparty is likely in a different country

The buyer would probably feel good if the contract allowed for the buyer's home venue.  Typically, the seller isn't going to rip off the buyer, so it should be moot for the seller.  The whole point of this would be to convey good faith and confidence to the buyer.  The risk is for the buyer to decide - obviously less if it's in the same country, more if it's international, but certainly beats sending cash in the mail or having nothing at all.

3. Many sites that offer exchange/services for BTC (including mine) have a lot of reputational risk. It's a small community and word gets around fast - if they 'scammed' someone, the lost business/future revenue is likely several times worse than the scam amount, so it just doesn't happen. Also the otc web of trust as started above is an effective method.

John Doe MOneybags who thinks Bitcoin is a great idea (or is persuaded of it by someone he trusts) and has four or five or six figures to throw at it, is likely to be unfamiliar with the community, and doesn't regularly send cash to strangers in the mail.  Someone with that much money is familiar with the courts and, this sort of thing answers the question they ask: "What's my recourse"?

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper or hardware wallets instead.
casascius (OP)
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1386
Merit: 1136


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
February 04, 2011, 06:46:54 PM
Last edit: February 04, 2011, 07:05:40 PM by casascius
 #6

I think it's a silly expenditure, and we already have the bitcoin-otc trust web, so I think that need is served.

Courts and juries don't know what the bitcoin-otc trust web is, and won't for a very long time.  They are very familiar with Adobe PDF however, since they use it daily.

I dislike the idea of using the courts to enforce claim.

Someone with $50k to throw at Bitcoins may dislike the idea of sending $50k to a complete stranger with no recourse if the coins aren't delivered.  This would bridge that gap.

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper or hardware wallets instead.
Cusipzzz
Sr. Member
****
Offline Offline

Activity: 334
Merit: 250



View Profile
February 04, 2011, 06:50:54 PM
 #7


John Doe MOneybags who thinks Bitcoin is a great idea (or is persuaded of it by someone he trusts) and has four or five or six figures to throw at it, is likely to be unfamiliar with the community, and doesn't regularly send cash to strangers in the mail.  Someone with that much money is familiar with the courts and, this sort of thing answers the question they ask: "What's my recourse"?

I'd think John Doe would do a little due diligence. And if he thinks Bitcoin is a great idea, he surely understands the global, anonymous, and de-centralized nature that does not allow for typical recourse as if buying from Wal-Mart across the street. But hey, if there is a market for your signed PDFs, someone will likely do it. You can write up contracts for trading goldfish for jellybeans, or anything else. Will they be used, and can they be enforced is a different matter.
casascius (OP)
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1386
Merit: 1136


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
February 04, 2011, 06:58:53 PM
 #8

... But hey, if there is a market for your signed PDFs, someone will likely do it. You can write up contracts for trading goldfish for jellybeans, or anything else. Will they be used, and can they be enforced is a different matter.

Just to make clear, I'm not selling anything.  I have nothing to do with signed PDFs other than I bought the USB stick and can sign them and think they're one very strong way to accelerate Bitcoin's earning the trust of the public.

One buys such a thing from here: http://www.entrust.net/adobe-cds-certificates.htm

As a non-technological substitute, one could always draft such a contract, print it, notarize it, and mail it.  It just adds 1 day to execute a trade.  You do more than 10 or 20 of these in a year, and you just paid the same as your Adobe key with all the overnight delivery fees.

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper or hardware wallets instead.
Gavin Andresen
Legendary
*
Offline Offline

Activity: 1652
Merit: 2216


Chief Scientist


View Profile WWW
February 04, 2011, 07:02:44 PM
 #9

Good Idea.  I think the PDF signing is overkill, but Good Idea.

Here's a bitcoin business I want somebody to create and run:  "Coin on a Stick"

You sell USB sticks containing Mac and Windows versions of the latest bitcoin (including the entire block chain) plus a wallet file containing N bitcoins.

Sell them via Ebay or PayPal, and ship them ONLY to a PayPal-verified address.

The buyer has to trust you not to double-spend the coins in the wallet, and has to wait for delivery of the physical USB stick.  But they don't have to download or install anything (they should be able to just run bitcoin from the stick and transfer the coins to themselves or a mybitcoin or mtgox account).

But, since you are sending a physical product to a verified address, you'll be treated as any other merchant selling real goods by PayPal or the credit card companies.

How often do you get the chance to work on a potentially world-changing project?
caveden
Legendary
*
Offline Offline

Activity: 1106
Merit: 1004



View Profile
February 04, 2011, 07:30:13 PM
 #10

The idea of signed PDFs is interesting, but as gavin said, probably overkill for the moment. If there's some rich dude willing to put a five-digits amount on it, he'll probably find his way of doing it safely. Not to mention he probably wouldn't buy it all from one only person...

@Gavin, why would the seller in your scenario be anymore protected against paypal frauds than all others selling hard currency for paypal? Just the presence of a delivery address you think is enough?
casascius (OP)
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1386
Merit: 1136


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
February 04, 2011, 07:37:59 PM
 #11

If there's some rich dude willing to put a five-digits amount on it,...

I sense a level of doubt.

he'll probably find his way of doing it safely. Not to mention he probably wouldn't buy it all from one only person...

What do you have in mind?  Since the only ways now are to send cash into the ether, or wire money into the ether (from the perspective of a person unfamiliar with the community)... how do you answer "what's my recourse"?

To someone who indeed would be willing to put serious money on it, but who is not as familiar with computers and crypto like me, telling them "well, there's this forum you could go online and start posting messages and ruin their online reputation" is persuasive enough to get them to spend $200 (on the premise that they could just as well be gambling it in Las Vegas), but not $50k.

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper or hardware wallets instead.
Cusipzzz
Sr. Member
****
Offline Offline

Activity: 334
Merit: 250



View Profile
February 04, 2011, 07:42:59 PM
 #12

Many people will sell coins for cash/cashier's check in person, transfer on the spot - that would be an option for your rich man.

There is a list that has decent global coverage of people willing to do that. Don't tell me it's too inconvenient for your rich guy, or that he won't spend 200$ on a plane ticket to NYC to spend 50k USD on coins safely.


Gavin Andresen
Legendary
*
Offline Offline

Activity: 1652
Merit: 2216


Chief Scientist


View Profile WWW
February 04, 2011, 07:53:46 PM
 #13

@Gavin, why would the seller in your scenario be anymore protected against paypal frauds than all others selling hard currency for paypal? Just the presence of a delivery address you think is enough?

Yes, the delivery address and the fact that you're selling a physical product (the USB stick).

Kind of like how you used to be able to buy cheap OEM copies of software but they had to ship a token piece of hardware in the box so they could say they were hardware vendors...  (actually, can you still do that any more?)


How often do you get the chance to work on a potentially world-changing project?
casascius (OP)
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1386
Merit: 1136


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
February 04, 2011, 07:54:00 PM
 #14

Many people will sell coins for cash/cashier's check in person, transfer on the spot - that would be an option for your rich man.

There is a list that has decent global coverage of people willing to do that. Don't tell me it's too inconvenient for your rich guy, or that he won't spend 200$ on a plane ticket to NYC to spend 50k USD on coins safely.


Would he spend 2 days traveling to execute the transaction though?  Rich guys by definition have lots of money on their hands.  Time to blow on executing a transaction, maybe not so much.  And a trip to NYC planned at the last minute say from where I live (Utah) would be more like $1000, given the likely need to stay overnight, and how much it costs to purchase last minute travel.  Transacting via FedEx Overnight seems so much more economical...

Can you give the link to the list you mention though?

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper or hardware wallets instead.
casascius (OP)
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1386
Merit: 1136


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
February 04, 2011, 08:06:23 PM
 #15

Yes, the delivery address and the fact that you're selling a physical product (the USB stick).

Kind of like how you used to be able to buy cheap OEM copies of software but they had to ship a token piece of hardware in the box so they could say they were hardware vendors...  (actually, can you still do that any more?)


This too is a great idea...I'd be scared to do it myself, perhaps except for very small amounts that would be great as introductions to BC or as gifts.

The OEM requirement for software is a contractual requirement imposed by the vendor (Microsoft etc.).

On the other hand, if PayPal or the credit cards don't like what you do, they have no shame in yanking your money out of your own bank account without so much as asking if you care.  You would hope not to cross the price threshold where they begin see a "stick with coins" as being more about the coins than the stick.  I wonder if I sold a wallet full of Euro notes on eBay, how they'd look at it.

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper or hardware wallets instead.
Cusipzzz
Sr. Member
****
Offline Offline

Activity: 334
Merit: 250



View Profile
February 04, 2011, 08:07:06 PM
 #16

the google spreadsheet link appears to be down, but the list is linked off bitcoinme.com - you can check there.
n0m4d
Member
**
Offline Offline

Activity: 70
Merit: 10


View Profile
February 04, 2011, 08:23:23 PM
 #17


Here's a bitcoin business I want somebody to create and run:  "Coin on a Stick"

[...]

Sell them via Ebay or PayPal, and ship them ONLY to a PayPal-verified address.


+1

Sounds like an excellent mall kiosk business - cash only, and the ATMs are right there...

I'll take payment in BTC to run security.   Grin
nanaimogold
Sr. Member
****
Offline Offline

Activity: 661
Merit: 251



View Profile
February 05, 2011, 03:09:15 AM
 #18

All this has been hashed over and long since sorted out.

e-gold debuted in '96. Since then a great network of cashiers has been developed.

People regularly move large sums through established escrow services and exchangers. For example, WebMoney is a many many thousands of times larger than bitcoin but has the exact same fundamental security issues.

There is no problem to send a bank wire, or deposit cash at the counter. There are several other secure value communication vectors, some slow, some cheap, others not. Credit cards and Paypal do NOT work.

Hawala is well integrated into digital currency and settlement of huge values is trivial through bullion banks such as Anglo Far East. There are several other non-reversible currencies, well matured and well trusted that can be traded instantly for bitcoin without risk.

You guys don't realize this has all been done before and the solutions have been long tested. The pitfalls and the scams are the same as they have always been. Sure, the peer to peer nature of bitcoin is novel, but the channels to liquidity are exactly the same as all the other non-reversing digital currencies.

e-Bullion offered the crypto hardware to protect user accounts almost 10 years ago. e-gold could be spent through a cell phone almost 15 years ago. The concept of internet money is not new. Bitcoin was developed from this body of knowledge. It's a progression rather than a completely new invention.

It's only now that the major exchangers are starting to pick up bitcoin. For example GoldNow is about 12 years running, Nanaimo Gold is over 7. There are dozens more major internet cashiers that might yet pick up bitcoin. But that does not matter when you can safely trade any of these non-reversible digital currencies instantly in or out of bitcoin.

So your chosen exchanger does not support bitcoin? Buy some Pex or LR and trade that in and out of bitcoin. Once you have real on-line cash, it's no big deal to trade it for another flavour.


ShadowOfHarbringer
Legendary
*
Offline Offline

Activity: 1470
Merit: 1005


Bringing Legendary Har® to you since 1952


View Profile
February 05, 2011, 05:23:06 PM
 #19

Good Idea.  I think the PDF signing is overkill, but Good Idea.

Here's a bitcoin business I want somebody to create and run:  "Coin on a Stick"

You sell USB sticks containing Mac and Windows versions of the latest bitcoin (including the entire block chain) plus a wallet file containing N bitcoins.

Sell them via Ebay or PayPal, and ship them ONLY to a PayPal-verified address.

The buyer has to trust you not to double-spend the coins in the wallet, and has to wait for delivery of the physical USB stick.  But they don't have to download or install anything (they should be able to just run bitcoin from the stick and transfer the coins to themselves or a mybitcoin or mtgox account).

But, since you are sending a physical product to a verified address, you'll be treated as any other merchant selling real goods by PayPal or the credit card companies.

I like Gavin's idea much better than some proprietary PDF certificate which seems to be some sort of weirdness, which people will probably perceive as even more geeky than bitcoin.

maxvendor
Newbie
*
Offline Offline

Activity: 20
Merit: 0


View Profile
February 06, 2011, 12:23:46 AM
 #20

this is what safeorscam.com is for, exchangers are already on it

the PPD usb stick is a good idea. convince a 7-11 or gas station to carry it Smiley
or print out cards with a code, an exchanger somewhere then funds your account with BTC.

if i can take BTC codes for orders that would be awesome + 1

also post offices around the world are looking for new revenue, canada post especially. somebody sell BTC cards to them. existing voucher systems like Ukash or Paysafecards are full of bullshit rules and fees

Pages: [1] 2 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!