Bitcoin Forum
May 09, 2024, 11:09:21 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2] 3 4 5 »  All
  Print  
Author Topic: Coin Validation misunderstands fungibility and could destroy bitcoin  (Read 29316 times)
Carlton Banks
Legendary
*
Offline Offline

Activity: 3430
Merit: 3074



View Profile
November 14, 2013, 09:08:40 PM
 #21

It attacks the property of one Bitcoin being as good as any other. If you can't understand why, well, I can't turn the cogs of logic in your head for myself.

Vires in numeris
1715252961
Hero Member
*
Offline Offline

Posts: 1715252961

View Profile Personal Message (Offline)

Ignore
1715252961
Reply with quote  #2

1715252961
Report to moderator
1715252961
Hero Member
*
Offline Offline

Posts: 1715252961

View Profile Personal Message (Offline)

Ignore
1715252961
Reply with quote  #2

1715252961
Report to moderator
TalkImg was created especially for hosting images on bitcointalk.org: try it next time you want to post an image
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715252961
Hero Member
*
Offline Offline

Posts: 1715252961

View Profile Personal Message (Offline)

Ignore
1715252961
Reply with quote  #2

1715252961
Report to moderator
1715252961
Hero Member
*
Offline Offline

Posts: 1715252961

View Profile Personal Message (Offline)

Ignore
1715252961
Reply with quote  #2

1715252961
Report to moderator
1715252961
Hero Member
*
Offline Offline

Posts: 1715252961

View Profile Personal Message (Offline)

Ignore
1715252961
Reply with quote  #2

1715252961
Report to moderator
adam3us (OP)
Sr. Member
****
Offline Offline

Activity: 404
Merit: 360


in bitcoin we trust


View Profile WWW
November 14, 2013, 09:17:15 PM
 #22

But isn't the purpose of CoinValidation to label adresses and not coins?

I don't get why the fungibility of coins is destroyed if only adresses are impacted?

All previous addresses that received the coin are listed on the public blockchain ledger.  From what was said I believe Coin Validation plans to look at the history of the addresses associated with coins.  If your coin was used 10 transactions ago by a silk road user, (eg seen entering the silk road address) then likely implications are you will not be able to spend your coin on any site using their system.

They hope it will be viral, ie because you dont want to hold coins you cant spend, you may also refuse to accept coins they do not white list.  Having them validate your coins will not be free and the uncertainty arising from not knowing if your coins will suddenly become less spendable will create fungibility problems.

There are costs associated with the fraud tracing validation, blacklisting and payment revocation.  eg its bad for merchants too, they cant rely on receiving money they can spend themselves.  This is why credit cards are expensive for merchants (3-5% + 30c).  This is one thing that makes bitcoin attractive for merchants and users - the fees are close to zero in comparison.  Coin blacklist/whitelistng (just different names for the same trend) damage the underlying  irrevocability which enables low cost transactions, and pulls bitcoins transaction cost up towards credit cards and paypal.

The problem is when fungibility degrades because everyone is mutually scared of accepting blacklisted coins the utility of the coin goes down, the cost of using the currency goes up and so its price falls.  It might literally collapse if the feedback loop picks up momentum as people sell non-white listed coins at steeper discounts in a race to the door.

This makes as much sense as a $100 note in your pocket disabling itself because 10 previous holders ago, someone stole it from a convenience store.

Someone posted on reddit about a 17th centur scottish court case (cant find the link now), where a bank was able to prevent legislation that would've had that implication - if you're left holding a stolen note, you lose it.  The court rejected the case based on the argument that doing so would be unfair and also destroy the fungibility and value of the currency.  Coin Validation want to reopen that 17th century mistaken (but defeated) court case.

Adam

hashcash, committed transactions, homomorphic values, blind kdf; researching decentralization, scalability and fungibility/anonymity
Carlton Banks
Legendary
*
Offline Offline

Activity: 3430
Merit: 3074



View Profile
November 14, 2013, 09:24:36 PM
 #23

Even this uncertainty has made one decision for me.

I've been thinking over getting new mining equipment. This confirms to me that it's definitely, definitely too much risk. Until we have a clear way forward, I cannot commit to something that could be a dead loss in 6-12 months.

If a movement amongst miners started to use mining to ban clean addresses from the blockchain, I would step up and even swallow a loss, but only if it had a good chance to break the usability of the clean list.

Vires in numeris
solex
Legendary
*
Offline Offline

Activity: 1078
Merit: 1002


100 satoshis -> ISO code


View Profile
November 14, 2013, 09:33:42 PM
 #24

Even this uncertainty has made one decision for me.

I've been thinking over getting new mining equipment. This confirms to me that it's definitely, definitely too much risk. Until we have a clear way forward, I cannot commit to something that could be a dead loss in 6-12 months.

If a movement amongst miners started to use mining to ban clean addresses from the blockchain, I would step up and even swallow a loss, but only if it had a good chance to break the usability of the clean list.

Don't get depressed by events such as coin validation / redlist censorship proposals. This is all part of the Gandhi ignore/laugh/fight/you-win paradigm.

The solution is a formal community funded bounty for CoinJoin and Zerocoin enhancements to the btc protocol.

Most bitcoiners are against address censorship. Software solutions are the defense and need to be built.

BldSwtTrs
Legendary
*
Offline Offline

Activity: 861
Merit: 1010


View Profile
November 14, 2013, 09:41:35 PM
 #25

But isn't the purpose of CoinValidation to label adresses and not coins?

I don't get why the fungibility of coins is destroyed if only adresses are impacted?

All previous addresses that received the coin are listed on the public blockchain ledger.  From what was said I believe Coin Validation plans to look at the history of the addresses associated with coins.  If your coin was used 10 transactions ago by a silk road user, (eg seen entering the silk road address) then likely implications are you will not be able to spend your coin on any site using their system.

They hope it will be viral, ie because you dont want to hold coins you cant spend, you may also refuse to accept coins they do not white list.  Having them validate your coins will not be free and the uncertainty arising from not knowing if your coins will suddenly become less spendable will create fungibility problems.

There are costs associated with the fraud tracing validation, blacklisting and payment revocation.  eg its bad for merchants too, they cant rely on receiving money they can spend themselves.  This is why credit cards are expensive for merchants (3-5% + 30c).  This is one thing that makes bitcoin attractive for merchants and users - the fees are close to zero in comparison.  Coin blacklist/whitelistng (just different names for the same trend) damage the underlying  irrevocability which enables low cost transactions, and pulls bitcoins transaction cost up towards credit cards and paypal.

The problem is when fungibility degrades because everyone is mutually scared of accepting blacklisted coins the utility of the coin goes down, the cost of using the currency goes up and so its price falls.  It might literally collapse if the feedback loop picks up momentum as people sell non-white listed coins at steeper discounts in a race to the door.

This makes as much sense as a $100 note in your pocket disabling itself because 10 previous holders ago, someone stole it from a convenience store.

Someone posted on reddit about a 17th centur scottish court case (cant find the link now), where a bank was able to prevent legislation that would've had that implication - if you're left holding a stolen note, you lose it.  The court rejected the case based on the argument that doing so would be unfair and also destroy the fungibility and value of the currency.  Coin Validation want to reopen that 17th century mistaken (but defeated) court case.

Adam

Thanks. Now I understand why it's such a huge deal, it's so huge that it will probably destroy Bitcoin.

It's so big that I wonder how these guys can have such a retarded idea. Are you sure they plan to track all the history of previous adresses and don't plan to only validate the adress that send bitcoins to the merchants?
Pente
Hero Member
*****
Offline Offline

Activity: 528
Merit: 527



View Profile WWW
November 14, 2013, 09:43:22 PM
 #26

Reusing an address allows for a possible security breach in the ECDSA algorithm. Many random number generators are not truly random. If the same number is used twice while sending money from an address, then the private key can be calculated as per this paragraph from the wikipedia article on ECDSA:

Quote
When computing s, the string z resulting from \textrm{HASH}(m) shall be converted to an integer. Note that z can be greater than n but not longer.

As the standard notes, it is crucial to select different k for different signatures, otherwise the equation in step 6 can be solved for d_A, the private key: Given two signatures (r,s) and (r,s'), employing the same unknown k for different known messages m and m', an attacker can calculate z and z', and since s-s' = k^{-1}(z-z') (all operations in this paragraph are done modulo n) the attacker can find k = \frac{z-z'}{s-s'}. Since s = k^{-1}(z + r d_A), the attacker can now calculate the private key d_A = \frac{s k - z}{r}. This implementation failure was used, for example, to extract the signing key used in the PlayStation 3 gaming console.

The odds of using the same random number from a faulty RNG goes up as y=x!/2 (as long as x>1, otherwise y=0), where x is the number of transactions sent from the address. I feel safe reusing an address after swiping it once, even though it is only protected by the strength of irreversibility of the ECDSA algorithm. However, I will not reuse an address after pulling funds out of it a second time.

For people who trust their RNG algorithm, this may seem to be mute issue. But I am sure that people using the SecureRandom() call in Java on their Android phones felt pretty safe. As we all know, they weren't.
Carlton Banks
Legendary
*
Offline Offline

Activity: 3430
Merit: 3074



View Profile
November 14, 2013, 09:49:12 PM
 #27

Even this uncertainty has made one decision for me.

I've been thinking over getting new mining equipment. This confirms to me that it's definitely, definitely too much risk. Until we have a clear way forward, I cannot commit to something that could be a dead loss in 6-12 months.

If a movement amongst miners started to use mining to ban clean addresses from the blockchain, I would step up and even swallow a loss, but only if it had a good chance to break the usability of the clean list.

Don't get depressed by events such as coin validation / redlist censorship proposals. This is all part of the Gandhi ignore/laugh/fight/you-win paradigm.

The solution is a formal community funded bounty for CoinJoin and Zerocoin enhancements to the btc protocol.

Most bitcoiners are against address censorship. Software solutions are the defense and need to be built.

I have plenty of time for optimistic plans and determined action. But I don't think CoinJoin and ZeroCoin come without their problems.


CoinJoin use with clean addresses can get you kicked out of the scheme, your addresses and your CoinJoin anonymous buddies may end up on Mike Hearn's red/black list.

ZeroCoin isn't implemented, and therefore untested. And has a problem in that the Genesis Block requires trust that the progenitor does not record the value of the accumulator, and use that to steal or track funds.

WE CAN FIGHT THIS, though. With the miners. Miners must be encouraged to reject clean addresses from the blockchain, it's the only way to kill this.

Vires in numeris
EhVedadoOAnonimato
Hero Member
*****
Offline Offline

Activity: 630
Merit: 500



View Profile
November 14, 2013, 09:52:16 PM
 #28

Coin blacklist/whitelistng (just different names for the same trend)

Oh but they're not quite the same. Blacklists are easier to work-around. Mix your coins enough and there will be no meaningful taint anymore.

Whitelists, OTOH, are an entirely different matter. Authoritarian governments may force every business in their jurisdiction to only accept money from the whitelist. Everything not whitelisted should be taxed or even seized. That's the real danger.

Since I'm replying to the bright mind behind Zerocoin, I'll use the opportunity to ask: does it make sense to talk about whitelisting Zerocoin transactions/addresses? I confess I tried to understand how your system works, but I'm just too dumb to actually get it.

WE CAN FIGHT THIS, though. With the miners. Miners must be encouraged to reject clean addresses from the blockchain, it's the only way to kill this.

Whitelists do not need to be public.
gmaxwell
Staff
Legendary
*
Online Online

Activity: 4172
Merit: 8419



View Profile WWW
November 14, 2013, 09:55:32 PM
 #29

Oh but they're not quite the same. Blacklists are easier to work-around. Mix your coins enough and there will be no meaningful taint anymore.
Thats not so, blacklisting increases the probability that you receive back blacklisted coins— even if you didn't have blacklisted ones going in. This increases the "cost" to you of using this approach, so only outlaws will think it worth the cost, and so you'll only receive outlawed coins while using such a system. It's self-fulfilling once it takes off.  I don't think that things that have cost and take effort and which only a tiny fraction of (more likely than usual to be troublesome) users can really move the needle against efforts like this, or at least we shouldn't count on them to.
ColinTulloch
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
November 14, 2013, 10:00:48 PM
Last edit: November 14, 2013, 10:16:29 PM by ColinTulloch
 #30

I think there's a misunderstanding around the use of the term fungible here...

To me fungibility describes the ability of a good to be divided and recombined to the same value... With varying degrees of divisibility and recombine-ability but same term...

This thread somehow confuses governmental violent coercion through white-lists with fungibility... Violent coercion, that is using violent force to get what you want is obviously going to end bad for the person who isn't going to get what they want, or the person who is going to be a victim of violence/jail/etc... In this case the groups utilizing violence to force others into using their products, their coin outputs etc, are obviously going to benefit from that ability...

I should also mention that it doesn't seem like Coin Validation is asking for government force to backup their white-list at this point, but there's an assumption that it won't be long before they likely will.

White-lists might have real market value in specific cases - Market value is determined by a free market though. - A market ceases to be free when a government, or a few individuals who control or manipulate government, use it to force a markets participants to act a certain way.

So this no doubt bad because it looks like Coin Validation is only building towards government backed white-lists - but it shouldn't be called a fungibility issue.

I haven't looked into the details of Coin Validation, but is there some kind of *whole coin* limit, where they want to limit people to use whole coins behind addresses and not any smaller amounts? In this case you can call this a fungibility problem - but I don't think this is the case...

White-listing != fungibility
franky1
Legendary
*
Offline Offline

Activity: 4214
Merit: 4475



View Profile
November 14, 2013, 10:01:56 PM
 #31

after reading the forbes news report and then investigating coinvalidation themselves.. i have come to this conclusion

never take whats written on the news as gospel.. (a lesson i learned way back, but recently got reminded)
secondly, there is alot of hysteria without much investigation by people.

so here it is short ans sweet.
coinvalidation are not government. they cannot freeze, seize funds
coinvalidation are just business advisors with a data base.
coinvalidation cannot make it a requirement to use their service. they are a business. people are free to choose to use it or not.

now lets talk about this database.
this database will not store every public key and eventually link it to users.
it will however list pubkeys of businesses that are fully fincen compliant and also seek out to list blackmarket addresses, again i highlight businesses not personal keys.

think of it like a santas "naughty or nice list" for BUSINESSES not individuals.

coinvalidation is not seeking to get every USERS identification , much like the government does not request everyone to write their name and zipcode on every bank note they spend. all its for is to increase the ability to see the source of funds. much like banks look at serial numbers of bank notes to see if they come up with flags that funds once got blacklisted/marked as part of a drugs cartel blackmarket

EG have funds come from a compliant exchange, or a blackmarket recently.

how will businesses use coinvalidation services.
(a) alpaca socks shop wont need to check TXID for its origins as they only accept small amounts, meaning low risk and no need for the AMLKYC stuff
(b) real estate agent will check every TXID for its origins due to higher value transactions. and if within 3 hops they notice a legitimate bitstamp address, great no risk. if its silkroad with 3 hops *, then the real estate agency will assess the risks of money laundering and do all the fincen checks required of them and report to fincen if serious crime criteria is met.


parts of finCEN require compliant members to:
do AMLKYC on customers transactig over $10k
monitor for serious crimes.

now a serious crime is NOT selling a dimebag of weed for $20 of bitcoin. a serious crime is a druglord with over $10k of funds for instance. or a murderer for hire, etc etc

so for businesses to monitor serious crimes they need to look out for large amounts of money that come pretty much directly * from drug websites for instance. small amounts like $20-$100 or even $1000 can be weighed up by the business as a low medium or high risk themselves.
*businesses will decide how many hops are deemed high/low risk for validation checks as part of their own policy handbooks

now then
all of this only applies to businesses that have to deal with FIAT exchanging for customers and its purely about sniffing out large transacting serious crimes and tax evaders. so all those businesses that dont do customer FIAT-bitcoin transactions dont need compliance. but businesses that do handle FIAT on behalf of customers do.

so chill out on the hysteria. bitcoin anonymity wont change, infact the FINCEN regulations wot/havnt changed in decades. the only difference is that coinvalidation will make it easier for bitstamp to recognise a 1-2-3-4-or 5 hop TXID as coming from a notorious website to then assess the requirement to report it to fincen.

I DO NOT TRADE OR ACT AS ESCROW ON THIS FORUM EVER.
Please do your own research & respect what is written here as both opinion & information gleaned from experience. many people replying with insults but no on-topic content substance, automatically are 'facepalmed' and yawned at
DeeSome
Sr. Member
****
Offline Offline

Activity: 378
Merit: 250


View Profile
November 14, 2013, 10:08:50 PM
 #32

Even this uncertainty has made one decision for me.

I've been thinking over getting new mining equipment. This confirms to me that it's definitely, definitely too much risk. Until we have a clear way forward, I cannot commit to something that could be a dead loss in 6-12 months.

If a movement amongst miners started to use mining to ban clean addresses from the blockchain, I would step up and even swallow a loss, but only if it had a good chance to break the usability of the clean list.

I like your idea Carlton, get the miners to stop it in it's tracks. I bet Xperian and Equifax are salivating at Mike Hearn's suggestion.
Carlton Banks
Legendary
*
Offline Offline

Activity: 3430
Merit: 3074



View Profile
November 14, 2013, 10:26:51 PM
 #33

Even this uncertainty has made one decision for me.

I've been thinking over getting new mining equipment. This confirms to me that it's definitely, definitely too much risk. Until we have a clear way forward, I cannot commit to something that could be a dead loss in 6-12 months.

If a movement amongst miners started to use mining to ban clean addresses from the blockchain, I would step up and even swallow a loss, but only if it had a good chance to break the usability of the clean list.

I like your idea Carlton, get the miners to stop it in it's tracks. I bet Xperian and Equifax are salivating at Mike Hearn's suggestion.

I'm not sure that this is possible in the way I'm presenting it without a change to the current mining protocol. There are sensible reasons to prevent it, as it creates a market for miners to accept personal vendettas against certain addresses, which is precisely the mechanism I'm arguing for. But in the name of only targeting the clean list.

Perhaps it might be possible to query all public Bitcoin nodes to see which addresses they are blacklisting. Then at least you can identify who is blocking you. The truth is that all solutions to this problem are a compromise, we're working with an information system here, and for it to be in any way useful, it must permit misuse as well. Storing non transaction information in the blockchain being just one example of misusing the innovation, people always worked around any attempt to stop it, so Gavin Andresen moved to standardise it instead.

Vires in numeris
cypherdoc
Legendary
*
Offline Offline

Activity: 1764
Merit: 1002



View Profile
November 14, 2013, 10:32:58 PM
 #34

But isn't the purpose of CoinValidation to label adresses and not coins?

I don't get why the fungibility of coins is destroyed if only adresses are impacted?

All previous addresses that received the coin are listed on the public blockchain ledger.  From what was said I believe Coin Validation plans to look at the history of the addresses associated with coins.  If your coin was used 10 transactions ago by a silk road user, (eg seen entering the silk road address) then likely implications are you will not be able to spend your coin on any site using their system.

They hope it will be viral, ie because you dont want to hold coins you cant spend, you may also refuse to accept coins they do not white list.  Having them validate your coins will not be free and the uncertainty arising from not knowing if your coins will suddenly become less spendable will create fungibility problems.

There are costs associated with the fraud tracing validation, blacklisting and payment revocation.  eg its bad for merchants too, they cant rely on receiving money they can spend themselves.  This is why credit cards are expensive for merchants (3-5% + 30c).  This is one thing that makes bitcoin attractive for merchants and users - the fees are close to zero in comparison.  Coin blacklist/whitelistng (just different names for the same trend) damage the underlying  irrevocability which enables low cost transactions, and pulls bitcoins transaction cost up towards credit cards and paypal.

The problem is when fungibility degrades because everyone is mutually scared of accepting blacklisted coins the utility of the coin goes down, the cost of using the currency goes up and so its price falls.  It might literally collapse if the feedback loop picks up momentum as people sell non-white listed coins at steeper discounts in a race to the door.

This makes as much sense as a $100 note in your pocket disabling itself because 10 previous holders ago, someone stole it from a convenience store.

Someone posted on reddit about a 17th centur scottish court case (cant find the link now), where a bank was able to prevent legislation that would've had that implication - if you're left holding a stolen note, you lose it.  The court rejected the case based on the argument that doing so would be unfair and also destroy the fungibility and value of the currency.  Coin Validation want to reopen that 17th century mistaken (but defeated) court case.

Adam


+1
EhVedadoOAnonimato
Hero Member
*****
Offline Offline

Activity: 630
Merit: 500



View Profile
November 14, 2013, 10:39:17 PM
 #35

Thats not so, blacklisting increases the probability that you receive back blacklisted coins— even if you didn't have blacklisted ones going in. This increases the "cost" to you of using this approach, so only outlaws will think it worth the cost, and so you'll only receive outlawed coins while using such a system. It's self-fulfilling once it takes off.  I don't think that things that have cost and take effort and which only a tiny fraction of (more likely than usual to be troublesome) users can really move the needle against efforts like this, or at least we shouldn't count on them to.

A blacklist need to have a threshold, otherwise it's meaningless (you could distribute taint to people you don't like, if you happen to have tainted coins). If the percentage of taint is below a certain level, you can't really consider that input as linked to the originally tainted output.

And concerning the fact that most mixers would contain mostly tainted coins, even if that becomes the case, they would still be able to cover tracks.
Let's say a non-violent, honest individual does something perfectly ethical but which governments tend to punish, like, say, not paying taxes, selling cocaine or whatever. If governments manage to identify a particular address as participant in a particular "made-up crime", they'll taint it for that reason. If the said individual mixes his coins enough, even if in the end he gets lots of tainted coins still, the original reason his coins got tainted for is practically lost. Yes, there may still be lots of tainting in his coins, for many different reasons, what indicates with a decent probability that he did something the government does not approve. But you can't really know what. Legally, they can't hold anything on him, other than the fact that he probably tried to cover his money tracks. Yeah, perhaps they can criminalize that with some scary wording like "money laundering". But, well, if wallets do it automatically on the background once in a while, it would be hard to criminalize it.

Also, there would probably be multiple different blacklists. Victims of one particular blacklist have an interest in working together with victims of other blacklists in order to mix their coins. Assuming the place you want to spend your coins block coins from blacklist A but not blacklist B, exchanging your taint from A to B would make you clean.

Further on, from an tyrannical surveillance POV, blacklists don't easily allow a government to know everything you do with your money. Whitelists allow them to track each little spending of yours. When they control your money, they control you.

Anyways, I'm not trying to say that blacklists offer no danger and that people should not try to fight them, quite on the contrary. I'm just trying to point the fact that it's easier to work around them, when compared to whitelists. Mandatory whitelists could render the Bitcoin payment network almost as awful as credit cards. We'd still have an inflation-proof currency, what's great, but the payment network value would considerably decrease.

Luckybit
Hero Member
*****
Offline Offline

Activity: 714
Merit: 510



View Profile
November 14, 2013, 11:07:07 PM
 #36

http://www.forbes.com/sites/kashmirhill/2013/11/13/sanitizing-bitcoin-coin-validation/

Its based on significant misunderstanding about bitcoins value proposition - destroy its fungibility and the costs float up to meet credit cards and paypal.

It is also a ridiculous approach.  If they want to certify users, they should do that as optional KYC, AML certificates that regulated merchants in respective jurisdictions can request, which could be attached to wallets/identities, not to fully fungible coins.  The certificates should be non-transitive they attest to the identity of the user, not the coins.  They should be optionally sent - if the recipient does not request it, it is privacy destructive and a security risk to send identifying information to unregulated businesses and individuals.

Their technical representatives of Coin Validation should be ashamed.  How can someone who doesnt understand a concept as basic as fungibility and its relation to transaction costs, and the difference between identity and coins hope to exist in this ecosystem.  

What they are proposing so far at least as explained by the Forbes article is stupid, dangerous and just wrong.  

I am also incensed frankly that someone would step into the market with such a muddle-headed thinking, and attempt to sabotage or destroy the core bitcoin feature that gives its value, where the value has been created by Satoshi and a cast of millions of man-hours of contributions of the community and technical wizards developing it mostly on volunteer time.  I am not someone prone to swearing, but this is astonishingly stupid and dangerous.   Please stop now.  In the article it is claimed they sought advice from the Winklevoss twins, if the twins value their estimated $30million bitcoin holding they should advise them to stop: if fungibility is destroyed bitcoins value as a transaction currency is impacted.  

I encourage anyone with technical skills to put their thinking caps on to find ways to increase fungibility in the short term like CoinJoin, coin control in wallets, helping less technical people migrate to better wallets, educating people about privacy practices that defend fungibility.  And longer term privacy technologies like zero coin, homomorphic encrypted value and committed (hidden) transactions.

I encourage all bitcoin businesses to shun Coin Validation unless we see some major U-turn or corrections.  If your business depends on the success bitcoin, it depends on the fungibility of bitcoin, and Coin Validation seem to be set on destroying both.

You can quote me on that.

I welcome Coin Validations corrections of the claims in the Forbes article.  Tell me you were misquoted.

Adam

ps For people who have no idea who http://cypherspace.org/adam/ I am https://bitcointalk.org/index.php?topic=225463.msg237167 , my small part in bitcoin is I invented distributed mining in 1997 https://en.bitcoin.it/wiki/Hashcash (you can find the reference in Satoshi's paper) and worked on opensource ecash & crypto currency research & implementation for about a decade alongside Wei Dai & Hal Finney & others.

I agree with a lot of what you have to say but how can we have transparency with privacy?

For instance if I want to claim my transactions under a pseudo-nym as being transactions I have made then this would be possible with a digital signature and public key. It is also possible that I could have that digital signature verified by Coinbase. My personal identifiable information does not need to be shared with anyone other than Coinbase and then Coinbase could verify me and all of my transactions would be connected to a real world identity. My public key could be uploaded to a decentralized blockchain/database along with a verified digital signature.

I don't really like the idea of tainting coins but no one is offering a better alternative either. So what is an alternative idea which does not involve tainting coins which can preserve privacy, pseudo-anonymity and fungibility while also removing bank secrecy and providing transparency?

I think in order to have democracy we cannot have bank secrecy and must have transparency. In order to combat institutionalized corruption we must have the ability to follow the money trail and this means transparency. So I don't want to remove the ability of the community to use the tactic of sousveillance to investigate itself and I do not want to remove the ability of law enforcement to investigate (with the cooperation of the global Bitcoin community).

I want the ability to be able to claim my transactions under a pseudo-anonymous but verified identity so that I can be cleared if there is an investigation. Is it possible to do this?
Luckybit
Hero Member
*****
Offline Offline

Activity: 714
Merit: 510



View Profile
November 14, 2013, 11:19:28 PM
 #37

Reality,

Boycotting won't stop them.  We need to put our thinking caps on, as Adam said, and figure out a better solution.  It seems the dark wallet and mixes is the best option.  If we figure out now what will fix the problem, we can popularize it while the coin is still young.

All of these sorts of reactions only will make the situation worse. Darkwallet is not a solution, it's a patch.
We have a legitimate requirement for transparency and the ability to investigate the blockchain.

Whether it's journalists trying to uncover corruption, or law enforcement, or members of a community trying to determine whether or not to vote for certain politicians. If we do not focus on solving the problem of institutional corruption then Darkwallet will be used by the corrupt institutions to maintain their corruption.

The same technology you build for anonymity to be used by you could also be used by the people in power to control you through corrupting your community with bribes and other tactics. So no I don't think Darkwallet will fix anything. It does produce greater privacy but it also removes the ability to follow the money trail which enables and helps the corrupt individuals already in power.

If a law enforcement officer is corrupt and taking bribes behind the scenes I'm sure Darkwallet will be what they'd use. We need the ability to apply sousveillance to follow the money trail to the corrupt police officer so I'm on the side of transparency.

But I'm also on the side of privacy. I don't think every coin should be subject to scrutiny. I don't think every transaction should be carefully analyzed by law enforcement to determine whether or not a crime took place. The reason is that if you allow that then whoever has enough power to hire private investigators can simply watch their political enemies until they commit a crime and then the private investigator can pass the evidence to law enforcement.

So we must care about privacy to protect the community from fishing expeditions but we also have to care about transparency to protect the community from institutionalized corruption, hackers, scams, etc. We need a balanced approach which attempts to solve the problem while upholding both of these critical ideals.

Darkwallet is good for hackers, for corrupt politicians, cops, and perhaps some paranoid individuals, but it can also be abused if taken too far. Balance is necessary.
Carlton Banks
Legendary
*
Offline Offline

Activity: 3430
Merit: 3074



View Profile
November 14, 2013, 11:29:19 PM
 #38

how can we have transparency with privacy?

They're the logical opposite of one another. The likely answer is, not with this design.

Vires in numeris
TraderTimm
Legendary
*
Offline Offline

Activity: 2408
Merit: 1121



View Profile
November 14, 2013, 11:41:33 PM
 #39

adam3us - I know you'll be flooded with replies, but I just wanted to say THANK YOU. You have perfectly encapsulated why Coin Verification is a bad idea, and I'll do my best to protest this and boycott the individuals and their associated businesses.

Mike Hearn, Yifu, etc.. you should be ashamed of yourselves for trying to undermine the core tenet of Bitcoin - FREEDOM.

fortitudinem multis - catenum regit omnia
jedunnigan
Sr. Member
****
Offline Offline

Activity: 279
Merit: 250


View Profile
November 14, 2013, 11:44:31 PM
 #40


All previous addresses that received the coin are listed on the public blockchain ledger.  From what was said I believe Coin Validation plans to look at the history of the addresses associated with coins.  If your coin was used 10 transactions ago by a silk road user, (eg seen entering the silk road address) then likely implications are you will not be able to spend your coin on any site using their system.

They hope it will be viral, ie because you dont want to hold coins you cant spend, you may also refuse to accept coins they do not white list.  Having them validate your coins will not be free and the uncertainty arising from not knowing if your coins will suddenly become less spendable will create fungibility problems.


This is what I thought too, but now I am looking closer and it appears that Forbes may have misrepresented the tech. Read Alex's reddit posts from the previous day: http://www.reddit.com/user/alex_waters :

Quote
we're not planning on tracking coins... so go ahead and send coins to those coins Wink

Quote
As mentioned above, if there were "clean coins" and "unclean coins" - we would quickly run out of clean coins. That is a ridiculous model that we have worried about for some time, and its advent is likely impossible.

It is very easy to taint "clean coins" with the current protocol - so that would be a fruitless endeavor to pursue.

Please stop confusing "clean coins" with KYC'd Bitcoin addresses.

Quote
I agree, KYC Bitcoin addresses != blacklist.

Quote
I think the quote you are referring to, and the one that has people upset is somewhat out of context. We are not looking to create a distinction for clean / unclean coins or even clean / unclean addresses for that matter. It is simple as you stated, creating a list of known addresses. This is something that has been thought about and worked on for years.

BIP 15 https://en.bitcoin.it/wiki/BIP_0015 is an example of how much this has been thought about. In fact, Satoshi himself originally thought about using IP addresses as an alternative to Bitcoin addresses, and it existed in the client for some time.

There was even some work done by some prominent core devs to explore using DNS or email addresses in conjunction with or as an alternative. Ultimately the new payment protocol was developed: https://bitcointalk.org/index.php?topic=300809.msg3225143#msg3225143

"Is this just about creating known addresses?" Yes

"Let's say I buy some coins on an exchange, and a couple hops ago they passed through some illicit site's wallet. Does your system track that?" No

"Am I going to be able to spend my coins with a company using your system?" Yes, I hope so

"Do I just have to send them to my personal known registered address first?" Probably, depending on how strict the company receiving them is about receiving coins from KYC'd addresses.

It is beginning to sound a bit more like what you proposed Adam.
Pages: « 1 [2] 3 4 5 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!