How are large mining pools not a threat?

[jaked]

You answered your own question ... because destroying the network benefits nobody.

It benefits a lot of people, ask Ben Bernanke and his friends.

Bitcoin is supposed to be based on mathematics and logic, not social factors.
If we wanted to rely on social themes instead of logical proofs, we wouldn't need Bitcoin in the first place.

[minerva]

If a pool does that, do you know what will happen? People will abandon the pool. People will discourage blocks made by the pool.

[dperfect]

OK. I think you guys are not understanding (or choosing to ignore) what I'm saying. I am NOT trying to argue exactly HOW a miner would make the attack profitable (I have no doubt that there are profitable methods for doing so, but that's not what this is about). I'm also not arguing that it wouldn't be obvious as to what happened after the fact.

It would be completely stupid to bring a gun into a bank and try to rob it. Any rational person would realize that the potential gain is not really very significant as most banks don't have a lot of cash on hand anyway. Any rational person would not risk the very real possibility of losing years of life, freedom, and "honest" income for such a low payout. A rational person would know that if you were to get away with it (such a low possibility), everyone would know the bank had been robbed. A rational person wouldn't attempt this, BUT IT HAPPENS ALL THE TIME.

The motivation doesn't have to make perfect sense for something to be a very serious threat. The >50% attack is known, there's little we can do currently to stop it (short of significant changes to the protocol and/or algorithms), and it's very much within reach for some of the pools.

Why in the world is there so much pushback (or willful blindness) about this?? Every day that Bitcoin becomes more mainstream, the stakes are higher, and the possible "exit strategies" for this attack become more plentiful. I sincerely don't want it to happen, but I guarantee it will happen eventually unless we are proactive about stopping it. And when it happens, we all (as supporters of Bitcoin) stand to lose.


Or, just go ahead and keep ignoring it because "it wouldn't be as profitable as you'd think." Because the chances are low (never mind the fact that a small probability multiplied over days, months and years becomes a very high probability).

[Interized]

OP is perfect example of people still not understanding every tiny thing in BTC is recorded.

The resources used to attempt and cheat the system will never be worth it ever.

[dperfect]

OP is perfect example of people still not understanding every tiny thing in BTC is recorded.

The resources used to attempt and cheat the system will never be worth it ever.

Believe me, I understand the idea of a distributed, peer-verified ledger. Perhaps you still do not understand that "being worth it" SHOULD NOT MATTER. The system is built to be mathematically strong, not strong due to someone's predictions regarding human nature and incentives.

[jaked]

You realize how big the hashing power of the  network already is right? And getting bigger by the day
...

The hashing power size is barely relevant for this discussion.
If an attacker has 51% of it, its absolute size doesn't matter.

[minerva]

You realize how big the hashing power of the  network already is right? And getting bigger by the day
...

The hashing power size is barely relevant for this discussion.
If an attacker has 51% of it, its absolute size doesn't matter.

Not correct.
There is one final defense against a 51% attack.
Nodes can refuse to propagate blocks made by a malicious node.

[yakov]

Mine on p2pool.

[jaked]

You realize how big the hashing power of the  network already is right? And getting bigger by the day
...

The hashing power size is barely relevant for this discussion.
If an attacker has 51% of it, its absolute size doesn't matter.

Not correct.
There is one final defense against a 51% attack.
Nodes can refuse to propagate blocks made by a malicious node.

I don't see how your statement invalidates, or even relates to mine.

Regardless of last-defense measures (which don't exist yet in the client anyway), what determines the possibility of an attack is not the total hashing power, but its relative concentration.

A network with trillion times the power of the current network, concentrated in 1 hand, will be horribly weaker than the current.

[Interized]

OP is perfect example of people still not understanding every tiny thing in BTC is recorded.

The resources used to attempt and cheat the system will never be worth it ever.

Believe me, I understand the idea of a distributed, peer-verified ledger. Perhaps you still do not understand that "being worth it" SHOULD NOT MATTER. The system is built to be mathematically strong, not strong due to someone's predictions regarding human nature and incentives.

It isn't worth doing something that will just be erased within the system itself.

This is the first time in history where thieves/bankers can't steal without being publicly seen throughout the whole system.

A fork would terminate any massive attempts, and it would have to be massive for the resources used to be almost worth it, but again it will never be worth it period.

[dperfect]

It isn't worth doing something that will just be erased within the system itself.

This is the first time in history where thieves/bankers can't steal without being publicly seen throughout the whole system.

A fork would terminate any massive attempts, and it would have to be massive for the resources used to be almost worth it, but again it will never be worth it period.

You have got to be kidding me. Did you hit reply and quote me without reading what I said?

BEING "WORTH IT" DOESN'T MATTER.

If the attack is possible, then it CAN and WILL happen. Just give it time. If you are all really too blind to see that, then gosh, this community really isn't what I thought it was. I thought we (most of us) wanted Bitcoin to succeed. I thought we'd support a discussion about possible measures that would help ensure the long-term success of Bitcoin. Instead, all I hear is people saying "you're an idiot for thinking someone would want to do that."

Sheesh.

[dperfect]

Mine on p2pool.

P2Pool seems like a good solution from what I understand. Yet according to blockchain.info, it accounts for only 2% of mining power. Can someone familiar with P2Pool vs other pools explain why it's not more popular? Is there something that could be done to help it grow?

[jaked]

It isn't worth doing something that will just be erased within the system itself.

This is the first time in history where thieves/bankers can't steal without being publicly seen throughout the whole system.

A fork would terminate any massive attempts, and it would have to be massive for the resources used to be almost worth it, but again it will never be worth it period.

You have got to be kidding me. Did you hit reply and quote me without reading what I said?

BEING "WORTH IT" DOESN'T MATTER.

If the attack is possible, then it CAN and WILL happen. Just give it time. If you are all really too blind to see that, then gosh, this community really isn't what I thought it was. I thought we (most of us) wanted Bitcoin to succeed. I thought we'd support a discussion about possible measures that would help ensure the long-term success of Bitcoin. Instead, all I hear is people saying "you're an idiot for thinking someone would want to do that."

Sheesh.

I'm all with you on this.
It's depressing to see how people advocate Bitcoin as being trust free, yet chose to ignore any threat that makes it trust based.
If the developers won't address such threats, Bitcoin will be destroyed sooner or later.
It's value is derived from its main promise; of being trust free. Without this promise, Bitcoin is nothing.

[cdog]

To me the issue is this, lets say 95% of the network hashing power is spread across 5 pools. All a malevolent group needs to do is disable these 5 pools for a matter of hours to successfully attack the network. As Im sure all miners know, even the best pools dont have 100% uptime. Now imagine the 5 biggest pools all went down within minutes of each other. Im quite sure a group with big resources and talent, let alone the nearly omnipotent NSA, could achieve something like this with relative ease.

[minerva]

It isn't worth doing something that will just be erased within the system itself.

This is the first time in history where thieves/bankers can't steal without being publicly seen throughout the whole system.

A fork would terminate any massive attempts, and it would have to be massive for the resources used to be almost worth it, but again it will never be worth it period.

You have got to be kidding me. Did you hit reply and quote me without reading what I said?

BEING "WORTH IT" DOESN'T MATTER.

If the attack is possible, then it CAN and WILL happen. Just give it time. If you are all really too blind to see that, then gosh, this community really isn't what I thought it was. I thought we (most of us) wanted Bitcoin to succeed. I thought we'd support a discussion about possible measures that would help ensure the long-term success of Bitcoin. Instead, all I hear is people saying "you're an idiot for thinking someone would want to do that."

Sheesh.

How do you counteract such an attack? Fork the blockchain, and orphan the cheating block.

[bbulker]

they aren't a threat because they are not nefarious.  

So why don't we just cut to the chase and pool all the mining power into a single pool owned by a single, non-nefarious, person?

The pool may not be a threat, but the possibility of downtime weakening the network is.

[yakov]

Mine on p2pool.

P2Pool seems like a good solution from what I understand. Yet according to blockchain.info, it accounts for only 2% of mining power. Can someone familiar with P2Pool vs other pools explain why it's not more popular? Is there something that could be done to help it grow?

The variance in payouts is pretty big since each share has a larger difficulty than shares of other pools.
Also p2pool has a 1% fee or something, I think other large pools can afford to take no fee at all.
It shouldn't matter in the long run. I guess miners don't know or don't care as long as the btc keeps coming in.

People can donate to p2pool which adds to the rewards miners get. If enough people do it publicly it might convince miners to switch.

[dperfect]

How do you counteract such an attack? Fork the blockchain, and orphan the cheating block.

By the time you detect the block as being a "cheating block", the attacker will have already spent their coins and converted them into something that can't be taken back. All your fork does is restore the attacker's original balance, allowing them to repeat the attack again and again.

[dperfect]

Mine on p2pool.

P2Pool seems like a good solution from what I understand. Yet according to blockchain.info, it accounts for only 2% of mining power. Can someone familiar with P2Pool vs other pools explain why it's not more popular? Is there something that could be done to help it grow?

The variance in payouts is pretty big since each share has a larger difficulty than shares of other pools.
Also p2pool has a 1% fee or something, I think other large pools can afford to take no fee at all.
It shouldn't matter in the long run. I guess miners don't know or don't care as long as the btc keeps coming in.

People can donate to p2pool which adds to the rewards miners get. If enough people do it publicly it might convince miners to switch.

Instead of relying on people doing something "smart" and supporting a solution like P2Pool, is there some way the concept behind P2Pool could be built in to the Bitcoin protocol itself, disallowing any mining that doesn't happen in a decentralized way? In my opinion, the solution needs to be built in to Bitcoin at a fundamental level.

[QuestionAuthority]

I think one thing you're missing is the fact that the nefarious miner can only succeed with a certain probability.  Consider a nefarious miner with 25% of the global hash power:


The probability that he mines the next block = 25%
The probability that he mines the next two blocks is 0.25 x 0.25 = 6.25%
...
The probability that he mines the next six blocks is 0.25^6 = 0.024%
The probability that he mines the next seven block is 0.25^7 = 0.0061%


Consider your example of double-spending to crash the market: the nefarious miner transfers 10,000 BTC to MtGox to dump, and then starts trying to mine a new chain fast enough that he can "undo" this 10,000 BTC transaction.  While feverishly mining, he waits till his MtGox deposit has confirmed, and then market sells his 10,000 BTC.  Due to slippage he gets significantly below market price.  Then it dawns on him that since he only has 25% of the global hash power, the chances that he will actually succeed in this double-spend attempt is remarkably small.  He literally must perform this fraud attempt hundreds of times before he is likely to succeed.  Each time he fails, he looses a significant amount of his capital (because he just did something stupid like market selling 10,000 coins).  In the extremely unlikely event that he succeeds before he runs out of bitcoins, what he did will be pretty obvious since he would orphan a long valid chain, that, hmm, just happens to correspond with the big dump at MtGox.  
  

Don't forget that no exchange will actually send your funds instantly, they all wait days/hours, and large transactions are manually processed.  Additionally, a double spend is not only publicly viewable but OBVIOUS once it has successfully happened.  You'd never get any money from the exchange........

......because Bitcoin is really just a centralized form of privatized currency that is under the control of non elected officials called exchange and mining pool owners.