Bitcoin Forum
March 28, 2024, 09:55:35 AM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 2 [3] 4 5 6 7 »  All
  Print  
Author Topic: POW vs. POS  (Read 3590 times)
ProfessorZ
Copper Member
Jr. Member
*
Offline Offline

Activity: 84
Merit: 1


View Profile
May 21, 2018, 04:15:25 PM
 #41

PoW's disadvantage is all the energy use.

I think that the advantage of PoW over PoS in large scale implementations is indeed the fact that it uses raw processing power (translated in hashpower) and electricity; this way, the coin gets a real value, being backed by the amount of energy and equiment involved in securing the blockchain, while making it more resilient to larger attackers such as nation states.

Also, when the any cryptocurrency is attacked and part of the network/miners/stakes went offline or can't reach other part of the cryptocurrency network. That would make split-chain happen, but PoW won't have any problem when part of the network went online/can reach other part of network again since the "true" chain is the chain/block with biggest hashrate while in PoS there's no way to determine which chain is "true". CMIIW.

I think if a big miner decide than all the newly started POW coin can be easily attacked by the raw mining power.

A newly started PoW coin can have a different hashing algorithm implemented; for example, Bitcoin uses SHA-256d, Litecoin uses Scrypt, Ethereum uses Ethash, Dash uses X11, Zcash uses Equihash, and so on. The attack depends on your hashpower with regard to a specific hashing algorithm.
1711619735
Hero Member
*
Offline Offline

Posts: 1711619735

View Profile Personal Message (Offline)

Ignore
1711619735
Reply with quote  #2

1711619735
Report to moderator
1711619735
Hero Member
*
Offline Offline

Posts: 1711619735

View Profile Personal Message (Offline)

Ignore
1711619735
Reply with quote  #2

1711619735
Report to moderator
There are several different types of Bitcoin clients. The most secure are full nodes like Bitcoin Core, which will follow the rules of the network no matter what miners do. Even if every miner decided to create 1000 bitcoins per block, full nodes would stick to the rules and reject those blocks.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
big_daddy
Hero Member
*****
Offline Offline

Activity: 1652
Merit: 583


xUSD - The PRIVATE stable coin - Haven Protocol


View Profile WWW
May 22, 2018, 08:40:53 AM
 #42

I will suggest to talk about in this way

POW vs. POW asic vs. POS

cause, for me, the real POW, decentralized is not asic, but the rest

If you don't believe it or don't get it, I don't have the time to try to convince you, sorry.
r1s2g3
Sr. Member
****
Offline Offline

Activity: 742
Merit: 395


I am alive but in hibernation.


View Profile
May 23, 2018, 12:55:10 PM
 #43


I already mentioned the type of attack which is Nodes in some areas/country can't connect to Nodes from different area/country/region/continent which could be done with intentional attack from government & natural disaster or failure which prevent ISP connect to different country for some time.

When those nodes connect again, there would be 2 different chain because they were disconnected for some time. In PoW, the nodes simply choose chain with biggest PoW while PoS can't determine which chain to be chosen, at least without human intervention.

I agree, this type of attack is feasible. Even POW takes the longest chain automatically then what will happen to transactions in other chain?

Are they will be automatically reverted because longest chain do not have any information about another chain so for it they never happened.

If chain fork automatically due to these circumstances then it will be blow to that crypto currency  because the transaction are non reversible and it will mean Merchant on other chain sell their goods for free.

I am alive
ranochigo
Legendary
*
Offline Offline

Activity: 2940
Merit: 4127



View Profile
May 23, 2018, 01:04:50 PM
 #44

I agree, this type of attack is feasible. Even POW takes the longest chain automatically then what will happen to transactions in other chain?

Are they will be automatically reverted because longest chain do not have any information about another chain so for it they never happened.
Transactions CANNOT be reverted under any circumstances. If they are broadcasted, they would eventually be confirmed or invalid (if the inputs gets used in another transaction). Obviously, it won't disappear or anything; else no one would be using Bitcoin.

When the client sees another chain with a longer proof of work, they take the transactions in the orphaned chain and put them back into the mempool. For miners, they will include the transactions in their block. They are treated like a normal transaction.

..JAMBLER.io..Create Your Bitcoin Mixing
Business Now for   F R E E 
▄█████████████████████████████
█████████████████████████
████▀████████████████████
███▀█████▄█▀███▀▀▀██████
██▀█████▄█▄██████████████
██▄▄████▀▄▄▄▀▀▀▀▀▄▄██████
█████▄▄▄██████████▀▄████
█████▀▄█▄██████▀█▄█████
███████▀▄█▀█▄██▀█▄███████
█████████▄█▀▄█▀▄█████████
█████████████████████████
█████████████████████████
▀█████████████████████████████
█████████████████████████████████████████████████
.
      OUR      
PARTNERS

.
█████████████████████████████████████████████████
████▄
██
██
██
██
██
██
██
██
██
██
██
████▀
▄█████████████████████████████
████████▀▀█████▀▀████████
█████▀█████████████▀█████
████████████████████████
███████████████▄█████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████▀█████████
████████████████████████
█████▄█████████████▄█████
████████▄▄█████▄▄████████
▀█████████████████████████████
█████████████████████████████████████████████████
.
   INVEST   
BITCOIN

.
█████████████████████████████████████████████████
████▄
██
██
██
██
██
██
██
██
██
██
██
████▀
Virtual miner
Sr. Member
****
Offline Offline

Activity: 728
Merit: 275



View Profile
May 27, 2018, 01:32:56 PM
 #45

I agree, this type of attack is feasible. Even POW takes the longest chain automatically then what will happen to transactions in other chain?

Are they will be automatically reverted because longest chain do not have any information about another chain so for it they never happened.
Transactions CANNOT be reverted under any circumstances. If they are broadcasted, they would eventually be confirmed or invalid (if the inputs gets used in another transaction). Obviously, it won't disappear or anything; else no one would be using Bitcoin.

When the client sees another chain with a longer proof of work, they take the transactions in the orphaned chain and put them back into the mempool. For miners, they will include the transactions in their block. They are treated like a normal transaction.
POW provides complete decentralization of power and control over the distribution and implementation of major technical and economic changes in the network. But investment is more in this system. And energy consumption is also high.
POS If the Proof-of-work is based on mining and computing power, the Proof-of-stake derives from actual holdings of the cryptocurrency. It has high speed, less time consuming and less costly
ranochigo
Legendary
*
Offline Offline

Activity: 2940
Merit: 4127



View Profile
May 27, 2018, 01:44:26 PM
 #46

POW provides complete decentralization of power and control over the distribution and implementation of major technical and economic changes in the network. But investment is more in this system. And energy consumption is also high.
Surprise, surprise. POW does not provide decentralisation of power and control. The power and control of anything can still be centralised with a few entities, if they have sufficient resources. POW is merely a way to distribute coins and to secure the network. POW does not make it such that everyone has to follow what the miner says.
POS If the Proof-of-work is based on mining and computing power, the Proof-of-stake derives from actual holdings of the cryptocurrency. It has high speed, less time consuming and less costly
The speed for POS and POW is the same, if the parameters of the coins are the same. You forgot to list the disadvantages of POS. Did you even read the thread?

..JAMBLER.io..Create Your Bitcoin Mixing
Business Now for   F R E E 
▄█████████████████████████████
█████████████████████████
████▀████████████████████
███▀█████▄█▀███▀▀▀██████
██▀█████▄█▄██████████████
██▄▄████▀▄▄▄▀▀▀▀▀▄▄██████
█████▄▄▄██████████▀▄████
█████▀▄█▄██████▀█▄█████
███████▀▄█▀█▄██▀█▄███████
█████████▄█▀▄█▀▄█████████
█████████████████████████
█████████████████████████
▀█████████████████████████████
█████████████████████████████████████████████████
.
      OUR      
PARTNERS

.
█████████████████████████████████████████████████
████▄
██
██
██
██
██
██
██
██
██
██
██
████▀
▄█████████████████████████████
████████▀▀█████▀▀████████
█████▀█████████████▀█████
████████████████████████
███████████████▄█████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████▀█████████
████████████████████████
█████▄█████████████▄█████
████████▄▄█████▄▄████████
▀█████████████████████████████
█████████████████████████████████████████████████
.
   INVEST   
BITCOIN

.
█████████████████████████████████████████████████
████▄
██
██
██
██
██
██
██
██
██
██
██
████▀
goddog
Member
**
Offline Offline

Activity: 168
Merit: 47

8426 2618 9F5F C7BF 22BD E814 763A 57A1 AA19 E681


View Profile
May 27, 2018, 04:50:29 PM
 #47

POS: You have to proof you hodl
POW: You have to proof you worked

POS: is a try to create a cost/opportunity from nothing . You can generate infinite parallel chain for free.

In example, there is a conflict between history A and history B, with POW you CAN'T confirm both histories, you have to choose one. So the longest history win.
with POS you can confirm both histories at the same time at not cost.
so to solve this you need a social meta-consensus making POS not necesary  at all.


POS security is based on some kind of punishment making it more similar to LN than blockchain. With the difference that LN fail only affect a local environment, a POS fail affect all the global environment.

AlisaWhishie
Member
**
Offline Offline

Activity: 322
Merit: 20


View Profile WWW
May 27, 2018, 08:29:15 PM
 #48

The problem is that there is a misconception about PoW impacting the climate on a large scale. For example, mining gold and other ores can be much more energy intensive; more insights you can get from this article (several months old): https://www.zerohedge.com/news/2017-11-04/bitcoin-vs-gold-which-ones-bubble-how-much-energy-do-they-really-consume although there are other reports with more recent information on the internet

Of course, there are things that affect the enviroment more then miners, but it doesn't mean that this is not a problem at all. Why should we turn the whole planet into one huge mining farm, if we talk about mass adoption of crypto? I know PoS also has so many cons, but now we actually see a new proof-of-anything algorythm in every other project, so we shouldn't look a PoW and PoS as at two polar opposites, like black and white.

BTW, the OP may want to check this for more technical details: https://bitfury.com/content/downloads/pos-vs-pow-1.0.2.pdf

Zin-Zang
Member
**
Offline Offline

Activity: 364
Merit: 13

Killing Lightning Network with a 51% Ignore attack


View Profile
July 27, 2018, 02:57:54 AM
Last edit: July 27, 2018, 03:21:57 AM by Zin-Zang
 #49

POS: You have to proof you hodl
POW: You have to proof you worked

POS: is a try to create a cost/opportunity from nothing . You can generate infinite parallel chain for free.
    
In example, there is a conflict between history A and history B, with POW you CAN'T confirm both histories, you have to choose one. So the longest history win.
with POS you can confirm both histories at the same time at not cost.
so to solve this you need a social meta-consensus making POS not necesary  at all.

POS security is based on some kind of punishment making it more similar to LN than blockchain. With the difference that LN fail only affect a local environment, a POS fail affect all the global environment.


Hmm, you seem to be confused and think the nothing at stake mythology is a real problem.
Standard PoS wallets don't Multi-stake, meaning your n@s myth can't currently even be attempted.

If someone did waste their time and make a multi-staking wallet, it would do nothing but waste endless amounts of ram and processing power and energy attempting to stake multiple chains versions simultaneously, essentially becoming closer to a wasteful proof of work than an energy efficient proof of stake.
Example: The more blocks you try and run in parallel the more resources you waste.
Their is zero benefit to even attempting it, which is probably why no one has even bothered to write a multi-staking PoS client, years after the myth was spread

Additional examples:
https://bitcointalk.org/index.php?topic=1709776.msg17135430#msg17135430
https://bitcointalk.org/index.php?topic=1709776.msg17136990#msg17136990
 

https://www.reddit.com/r/NXT/comments/2sewhu/nothing_at_stake_attack_researched_and_deemed_not/
Quote
3. Nothing-at-stake attack - not possible at the moment! Will be possible when a lot of forgers will use multiple-branch forging to increase profits.
Then attacker can contribute to all the chains(some of them e.g. containing a transaction) then start to contribute to one chain only behind the best(containing no transaction) making it winner. Previous statements on N@S attack made with assumption it costs nothing to contribute to an each fork possible and that makes N@S attack a disaster.
In fact, it's not possible at all to contribute to each fork possible, as number of forks growing exponentially with time.
So the only strategy for a multibranch forger is to contribute to N best forks.
In such scenario attack is possible only within short-range e.g. with 25 confirmations needed 10% attacker can't make an attack.
And attack is pretty random in nature, it's impossible to predict whether 2 forks will be within N best forks(from exponentially growing set) for k confirmations.
So from our point of view the importance of the attack is pretty overblown.

FYI:
The Longest Chain with the Highest Difficulty wins in Proof of Stake as well.
With Proof of Stake , however the number of coins per block and the target speed help determine the true difficulty for a Proof of Stake coin.
hashProofOfStake <= [Coin-age] x [Target]   
[Coin-age] = [amount of coins] x [days in stake]   
   
Target is the difficulty adjusted # to make sure the coin meets it's rated block speed.
More blocks staking means higher Target #s.

PoS coins that removed coin age are
hashProofOfStake <= [amount of coins] x [Target]   


FYI2:
Your Comparison of Proof of Stake to Lightning network is flawed.
Lightning network is nothing more than an offchain payment system, ie: LN Notes/IOUs for redemption of segwit coins or basically Centralized Banking 2.0
(Any Coin that activated segwit could work on LN, such as litecoin or groestlcoin. Like most offchain systems LN is not limited to bitcoin.)

Proof of Stake is a energy efficient Consensus Method for determining the next block chosen.


I was Red Tagged because Lauda Blows Theymos to get back on DT
The rest are just lauda's personal butt monkeys=> Hhampuz , Vod, TMAN , achow101
kjfngkleoi
Newbie
*
Offline Offline

Activity: 30
Merit: 0


View Profile
July 27, 2018, 07:58:17 AM
 #50

it's correct, but:

The core of the POW <proof of work> algorithm is the computer power resource. More energy is needed for the computer system to get the best answer. If you look at the ecological aspects this is not at all beneficial. Mine workers use too much energy and cause bad effects on the environment.

POS <proof of stake> is considered to be a fairer system than proof-of-work when everyone can become a miner. No matter large or small, the scale of exploitation will be linearly proportional to the number of shares held. This encourages the community to engage in transactional verification, increasing decentralization and democracy.
mu_enrico
Copper Member
Legendary
*
Offline Offline

Activity: 2282
Merit: 2126


Slots Enthusiast & Expert


View Profile WWW
July 27, 2018, 10:11:14 PM
 #51

Is this debate still going?

PoW is more secure than PoS;
PoS is faster and cheaper than PoW;
Since PoW is very expensive, there will be an only small amount of PoW coins;
There is no PoW vs PoS, each has a different purpose.

Anyway, PoS "nothing at stake" and "long-range attack" are real problems, not a myth.
https://www.google.com/search?q=%22nothing+at+stake%22&pws=0
https://www.google.com/search?q=%22long+range+attack%22&pws=0

Just like PoW "51% attack"
https://www.google.com/search?q=51%25+attack&pws=0

███████████████████████
████████████████████
██████████████████
████████████████████
███▀▀▀█████████████████
███▄▄▄█████████████████
██████████████████████
██████████████████████
███████████████████████
█████████████████████
███████████████████
███████████████
████████████████████████
███████████████████████████
███████████████████████████
███████████████████████████
█████████▀▀██▀██▀▀█████████
█████████████▄█████████████
███████████████████████
████████████████████████
████████████▄█▄█████████
████████▀▀███████████
██████████████████
▀███████████████████▀
▀███████████████▀
█████████████████████████
O F F I C I A L   P A R T N E R S
▬▬▬▬▬▬▬▬▬▬
ASTON VILLA FC
BURNLEY FC
BK8?.
..PLAY NOW..
Zin-Zang
Member
**
Offline Offline

Activity: 364
Merit: 13

Killing Lightning Network with a 51% Ignore attack


View Profile
July 27, 2018, 11:14:56 PM
Last edit: July 28, 2018, 06:10:26 AM by Zin-Zang
 #52

Anyway, PoS "nothing at stake" and "long-range attack" are real problems, not a myth.
https://www.google.com/search?q=%22nothing+at+stake%22&pws=0
https://www.google.com/search?q=%22long+range+attack%22&pws=0

Exactly why do you think a Nothing at Stake is an issue.
Exactly what damage do you think it can do, so I can tell you why you are mistaken.

(You apparently did not bother to read : https://bitcointalk.org/index.php?topic=3789535.msg42945673#msg42945673 )
Only a few posts above your misinformed post.

There are NO Multistaking Proof of Stake clients.


So without that it is literally a MYTH!
Sorry to have to break this to you , Your Imagination is not Reality.

Reading is really not your strong suit, you did not even read the 5th link in your own google post above.   Cheesy
Which States: Nothing Considered: A look at Nothing at Stake Vulnerability for Cryptocurrencies
https://pivx.org/nothing-considered-a-look-at-nothing-at-stake-vulnerability-for-cryptocurrencies/
Quote
presstab, Core Developer, Pivx

Abstract—Nothing at stake is a routine argument launched against any and all Proof of Stake proof systems.
Although the argument has some interesting components to it, it is should be seen as something of very little concern for a Proof of Stake based cryptocurrency.
A wide distribution of staking power as well as a wide distribution of honest nodes will easily prevent any line of attack from the nothing at stake scenario.
Quote
CONCLUSION
For both cases of fork with honest nodes and cases of forks with malicious actors, there is in fact “something at stake”.
For the particular arguments presented against Proof of Stake,
it can be said that Proof of Stake may actu­ally have more robust incentives for its peers and proof holders to stay on the main chain than does the Proof of Work system.
What is worth more, a person’s entire coin holdings for Proof of Stake miners or a few minutes of electricity consumption for Proof of Work miners?




PoW is more secure than PoS;
PoS is faster and cheaper than PoW;
Since PoW is very expensive, there will be an only small amount of PoW coins;
There is no PoW vs PoS, each has a different purpose.

There is no proof PoW is more secure , only more wasteful of electricity.
Chinese Mining Pools had ~70% dominance for over 2 years now in bitcoin,
they could 51% attack bitcoin at any time (still can), they choose not to, but that was not security, just greed that stopped them.

Speed and price of a coin are not determined by whether they are PoS or PoW.
Speed is determined by coded blockspeed, and price is determined by markets.

The code decides how many coins their are , not the consensus method.
example
Diamond PoS coin has less than 5 million coins.
NewYorkCoin PoW coin has over 134 Billion coins.  

* Bitcoin 21 million coin limit is nothing more than a number in the code of when to no longer give more block rewards.*
* Developers could change it at a moments notice and if people updated , it would become reality. *

I was Red Tagged because Lauda Blows Theymos to get back on DT
The rest are just lauda's personal butt monkeys=> Hhampuz , Vod, TMAN , achow101
aliashraf
Legendary
*
Offline Offline

Activity: 1456
Merit: 1174

Always remember the cause!


View Profile WWW
July 28, 2018, 08:13:46 AM
 #53

Anyway, PoS "nothing at stake" and "long-range attack" are real problems, not a myth.
https://www.google.com/search?q=%22nothing+at+stake%22&pws=0
https://www.google.com/search?q=%22long+range+attack%22&pws=0

Exactly why do you think a Nothing at Stake is an issue.
Exactly what damage do you think it can do, so I can tell you why you are mistaken.

(You apparently did not bother to read : https://bitcointalk.org/index.php?topic=3789535.msg42945673#msg42945673 )
Only a few posts above your misinformed post.

There are NO Multistaking Proof of Stake clients.


So without that it is literally a MYTH!
Sorry to have to break this to you , Your Imagination is not Reality.
It is not how we discuss attacks (in this forum at least), we don't say this or that vulnerability is imaginary because it has not been carried out by a hacker or an adversary. A protocol should maintain its consistency against any hypothetical attack.

Quote
Reading is really not your strong suit, you did not even read the 5th link in your own google post above.   Cheesy
Which States: Nothing Considered: A look at Nothing at Stake Vulnerability for Cryptocurrencies
https://pivx.org/nothing-considered-a-look-at-nothing-at-stake-vulnerability-for-cryptocurrencies/
Quote
presstab, Core Developer, Pivx

Abstract—Nothing at stake is a routine argument launched against any and all Proof of Stake proof systems.
Although the argument has some interesting components to it, it is should be seen as something of very little concern for a Proof of Stake based cryptocurrency.
A wide distribution of staking power as well as a wide distribution of honest nodes will easily prevent any line of attack from the nothing at stake scenario.
Really? This is what you and your bible got? A 'wide distribution' of staking power? And how is it possible to have such a distribution? There is no guarantee.
Actually socio-economics suggests pyramid like distributions of wealth and power in which top 1% of stake holders own +30% of the total wealth and top 20% control 80%, ...

PoS is not a new idea. We have PoS in its ultimate (and failed) form right now:
Traditional banking systems and fiat currencies are PoS based, they resemble what PoS is going to offer: a subjective store of value, centralized in shards  of big stake/money holders (banks) which are coordinated by a central entity in charge of clearing inter-shard transactions and inflation.



Zin-Zang
Member
**
Offline Offline

Activity: 364
Merit: 13

Killing Lightning Network with a 51% Ignore attack


View Profile
July 28, 2018, 09:44:56 AM
Last edit: July 28, 2018, 10:12:52 AM by Zin-Zang
 #54

It is not how we discuss attacks (in this forum at least), we don't say this or that vulnerability is imaginary because it has not been carried out by a hacker or an adversary. A protocol should maintain its consistency against any hypothetical attack.

Look here aliashraf , to even attempt said attack, requires a Multistaking PoS client.
There are none!
Therefore a N@S attack is pure imagined theory , with no basis for concern in the real world.

Tell me what is it you fear so much about a theoretical N@S attack, and I tell you why you have nothing to fear.

Because I explored it as a threat and every time it came up as a non-event.
It either negated itself or had no real effect during every scenario people threw out.

So what is it exactly you think an imagined N@S attack could do?





PoS is not a new idea. We have PoS in its ultimate (and failed) form right now:
Traditional banking systems and fiat currencies are PoS based, they resemble what PoS is going to offer: a subjective store of value, centralized in shards  of big stake/money holders (banks) which are coordinated by a central entity in charge of clearing inter-shard transactions and inflation.

Your confusion is sad.

Proof of Stake is a Consensus method.

Banks make money by growing debt and loaning out money they don't have, therefore using debt as money creation.

Proof of Stake does not use Debt, it is more like an agricultural product, you need some to grow more. There is no debt in the system.

The Banks use fractional reserves to rip off the masses,

In Proof of Stake you either own a coin or you don't , there is no debt and their is no fractional reserve shenanigans.

You might want to study up on the Goldsmiths that became the 1st banks, to end your personal confusion.  Wink


I was Red Tagged because Lauda Blows Theymos to get back on DT
The rest are just lauda's personal butt monkeys=> Hhampuz , Vod, TMAN , achow101
hv_
Legendary
*
Offline Offline

Activity: 2506
Merit: 1055

Clean Code and Scale


View Profile WWW
July 28, 2018, 03:33:22 PM
 #55

Muh,

If you want some reward > work for! PoW


Meh

If you already have too much wealth, let it work for you and get richer.  PoS



Why on earth Vitalik wants the latter, now he is fucking rich?


PoW has just too many unforeseen external risks, nahh, he does not want to get decentralized by these again...


PoS = proof of shit

Carpe diem  -  understand the White Paper and mine honest.
Fix real world issues: Check out b-vote.com
The simple way is the genius way - Satoshi's Rules: humana veris _
Zin-Zang
Member
**
Offline Offline

Activity: 364
Merit: 13

Killing Lightning Network with a 51% Ignore attack


View Profile
July 28, 2018, 09:47:07 PM
 #56

Muh,
If you want some reward > work for! PoW
Meh
If you already have too much wealth, let it work for you and get richer.  PoS
Why on earth Vitalik wants the latter, now he is fucking rich?
PoW has just too many unforeseen external risks, nahh, he does not want to get decentralized by these again...
PoS = proof of shit


Sounds like you need to stick with fiat.  Wink

I was Red Tagged because Lauda Blows Theymos to get back on DT
The rest are just lauda's personal butt monkeys=> Hhampuz , Vod, TMAN , achow101
aliashraf
Legendary
*
Offline Offline

Activity: 1456
Merit: 1174

Always remember the cause!


View Profile WWW
July 28, 2018, 09:51:00 PM
 #57

It is not how we discuss attacks (in this forum at least), we don't say this or that vulnerability is imaginary because it has not been carried out by a hacker or an adversary. A protocol should maintain its consistency against any hypothetical attack.

Look here aliashraf , to even attempt said attack, requires a Multistaking PoS client.
There are none!
Therefore a N@S attack is pure imagined theory , with no basis for concern in the real world.

Tell me what is it you fear so much about a theoretical N@S attack, and I tell you why you have nothing to fear.

Because I explored it as a threat and every time it came up as a non-event.
It either negated itself or had no real effect during every scenario people threw out.

If you see no N@S attack, it is because PoS coins don't worth such an attack right now,. One shouldn't be fooled with billion dollars market cap index, no PoS coin can be cashed out more than few million dollars without a significant price drop.

Quote

PoS is not a new idea. We have PoS in its ultimate (and failed) form right now:
Traditional banking systems and fiat currencies are PoS based, they resemble what PoS is going to offer: a subjective store of value, centralized in shards  of big stake/money holders (banks) which are coordinated by a central entity in charge of clearing inter-shard transactions and inflation.

Your confusion is sad.

Proof of Stake is a Consensus method.

Banks make money by growing debt and loaning out money they don't have, therefore using debt as money creation.
No, yours is sad, imo. The whole 'thing' you call it stake is nothing other than debt, a continuously growing debt that accumulates primarily in the hands of top 1% who are the ones in charge of everything. When such a system is supposed to act in large economic scales the big ones will have no choice other than loaning fractions of their coins to ordinary people and businesses for these loans they should evaluate credibility of their customers, take mortgages, ...

d5000
Legendary
*
Offline Offline

Activity: 3864
Merit: 5807


Decentralization Maximalist


View Profile
July 28, 2018, 11:06:40 PM
 #58

Look here aliashraf , to even attempt said attack, requires a Multistaking PoS client.
There are none!
Therefore a N@S attack is pure imagined theory , with no basis for concern in the real world.
The existence or not of a "multistaking client" is irrelevant (there could be multistaking clients, hidden on private hard drives, that are carrying on an attack right now Wink ).

What is relevant, however, is that the incentive for "multistaking" is extremely small in most current PoS coins. Most Peercoin-based coins pay out a coin-age-based reward, limited to the percentage of your stake per coin-year. So it doesn't really matter if you find two or ten blocks per year if you're continuously staking, because you always only can get this percentage, e.g. 1% per year in Peercoin.

Coins with transaction fees as rewards, like NXT or NEM, or coins with a difficulty-determined reward (mimicking Bitcoin) are more vulnerable to multistaking (and therefore for N@S-based attacks), because in this case you really get more rewards if you stake on every chain that appears because it increases your chance to find more blocks. The reason there is (probably) no multistaking in these coins is, in my opinion, that the transaction fees are too small and most staking/forging in these coins is done by big whales which have no interest in devaluing their coin stake.

I also don't agree that PoS "was only not attacked because you only could cash out a few millions." A few millions are enough to incentive a hacker - if an attack was easy. If an attack is hard, then PoS is doing what it needs to do - it seems to be harder than to attack a Bitcoin fork with a "market cap" in the same order of magnitude than NEM or Cardano. Wink

I also think the "bank comparison" is a bit apples and oranges Wink

(My stance on the question: PoW is more secure, while PoS may be secure enough for a cryptocurrency, and in this case its smaller energy footprint makes it a more efficient and cheaper system. But I really don't like the amount of ideology and tribalism popping up when this topic is discussed - it's as boring as the bigblock/smallblock discussion.)

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
aliashraf
Legendary
*
Offline Offline

Activity: 1456
Merit: 1174

Always remember the cause!


View Profile WWW
July 29, 2018, 07:05:57 AM
 #59

Look here aliashraf , to even attempt said attack, requires a Multistaking PoS client.
There are none!
Therefore a N@S attack is pure imagined theory , with no basis for concern in the real world.
The existence or not of a "multistaking client" is irrelevant (there could be multistaking clients, hidden on private hard drives, that are carrying on an attack right now Wink ).
.....
I also don't agree that PoS "was only not attacked because you only could cash out a few millions." A few millions are enough to incentive a hacker - if an attack was easy. If an attack is hard, then PoS is doing what it needs to do - it seems to be harder than to attack a Bitcoin fork with a "market cap" in the same order of magnitude than NEM or Cardano. Wink

I also think the "bank comparison" is a bit apples and oranges Wink

I was just mentioning that these coins worth practically an order of magnitude less than what coinmarketcap reports and for an attacker, stealing a fraction of such a coin is not enough incentive.

Plus, 'bank comparison' is to the point: The whole fiat currency and banking system is based on the same subjective idea of money and interest that PoS is based on. The thing is banks are matured while PoS is not.
For instance banks have implemented sharding (Vitalik's dream) already: operational banks maintain their 'shard' of the ledger because they have deposited enough stakes in the network.
d5000
Legendary
*
Offline Offline

Activity: 3864
Merit: 5807


Decentralization Maximalist


View Profile
August 01, 2018, 01:41:15 AM
 #60

I was just mentioning that these coins worth practically an order of magnitude less than what coinmarketcap reports and for an attacker, stealing a fraction of such a coin is not enough incentive.
Yes, I understand that. But even if  all the capital you could extract from e.g. NEM was an order of magnitude lower (e.g. 100 millions USD) a fraction of that amount (even a couple of hundreds of thousand dollars/euros) would be enough to provide incentives for hackers if attacking it was easy. BTG, which has a similar market cap and thus its "real worth" may be in the same order of magnitude, was 51%-attacked with mining hardware, so the attack wasn't cheap or trivial. So what's the difference? Why is BTG (PoW) attacked and NEM not, when both are "worth" about the same amount of money?

I'm not saying that NEM is more secure than BTG (I'm not particularly a fan of NEM because its algorithm can lead to blockchain bloat if it gets used massively some day).

My point is that it's not trivial to attack PoS currencies. There is a good amount of social engineering required - to trick the majority of PoS users into an attack chain is probably very similar in difficulty to trick the majority of Bitcoin websites (including bitcoin.org) into distributing wallet stealers named bitcoin-qt.exe.

Quote
Plus, 'bank comparison' is to the point: The whole fiat currency and banking system is based on the same subjective idea of money and interest that PoS is based on.
PoS "stakers" do not receive amounts for doing nothing. They do some work validating blocks. The reason why PoS rewards are usually not fixed but percentages of your stake, like an interest, is related to what I explained to Zin-Zang above: to dis-incentive the "multistaking" behavior. And it achieves that "the rich" do not get richer in a disproportional way.

Quote
The thing is banks are matured while PoS is not. For instance banks have implemented sharding (Vitalik's dream) already: operational banks maintain their 'shard' of the ledger because they have deposited enough stakes in the network.
OK, this comparison is actually interesting, but I still fail to see that the goal (reason to exist) of PoS coins is similar to the goal of current banks which - like every for-profit company - are existing to enrich the shareholders of one of the "shards". PoS is structured like it is because stake, as a "scarce resource" on the blockchain, is a relatively "low hanging fruit". But the goal is to achieve a "currency" for transactions, without the energy use of PoW.

Other scarce on-blockchain "scarce" resources have different flaws (e.g. NEM's transaction activity/stake combination) or directly cannot be used for consensus finding (e.g. address or even node count, because of sybil attacks). The only exception I know is proof-of-burn, but it is to insecure as a "standalone" model, it needs proof of stake or proof of work to increase its security.

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
Pages: « 1 2 [3] 4 5 6 7 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!