toknormal
Legendary
Offline
Activity: 3066
Merit: 1188
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:09:08 PM |
|
I guess the point is that theoretically PoW could be attacked, but it would be vastly less expensive to attack PoS. In fact, the greater the attacker's credibility, the cheaper the attack would be.
Slight issue. With POS (at least in an implementation such as NXT), by the time you bought up enough of the coin supply to "attack" the network catastrophically, the only holder affected significantly by such an attack would be yourself ![Embarrassed](https://bitcointalk.org/Smileys/default/embarrassed.gif) Put another way, it would be like buying somebody's house off them so you could burgle it ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif)
|
|
|
|
AlexGR
Legendary
Offline
Activity: 1708
Merit: 1049
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:11:12 PM |
|
So how did he 'acquire' the coins? Sure, PoS security includes distribution, but to say thats no risk, no cost attack is just false?
In the nothing-at-stake vector You buy / mine (depending the initial distribution) => you sell (at this point you are even) => you keep the "snapshot" of when you had the coins => you now begin an attack on the network with zero coins and nothing to lose.
|
|
|
|
baddw
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:12:52 PM |
|
I guess the point is that theoretically PoW could be attacked, but it would be vastly less expensive to attack PoS. In fact, the greater the attacker's credibility, the cheaper the attack would be.
Slight issue. With POS (at least in an implementation such as NXT), by the time you bought up enough of the coin supply to "attack" the network catastrophically, the only holder affected significantly by such an attack would be yourself ![Embarrassed](https://bitcointalk.org/Smileys/default/embarrassed.gif) Put another way, it would be like buying somebody's house off them so you could burgle it ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif) But again, the interesting thing is that you can buy up 51% of a PoS coin, and then sell off your coins so that you no longer have 51%, but your history of having once owned 51% makes it possible to attack the network at any time, for free. So if there is ever a PoS coin with >51% ownership at any point in its history (even in just the Genesis block) then it is vulnerable.
|
BTC/XCP 11596GYYq5WzVHoHTmYZg4RufxxzAGEGBX DRK XvFhRFQwvBAmFkaii6Kafmu6oXrH4dSkVF Eligius Payouts/CPPSRB Explained I am not associated with Eligius in any way. I just think that it is a good pool with a cool payment system ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif)
|
|
|
toknormal
Legendary
Offline
Activity: 3066
Merit: 1188
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:14:32 PM |
|
But again, the interesting thing is that you can buy up 51% of a PoS coin, and then sell off your coins so that you no longer have 51%, but your history of having once owned 51% makes it possible to attack the network at any time, for free.
I doubt it.
|
|
|
|
AlexGR
Legendary
Offline
Activity: 1708
Merit: 1049
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:16:44 PM |
|
But again, the interesting thing is that you can buy up 51% of a PoS coin, and then sell off your coins so that you no longer have 51%, but your history of having once owned 51% makes it possible to attack the network at any time, for free.
I doubt it. => The other attacks you describe all derive from the fundamental reason I declared all non-proof-of-work systems to be insecure back in April.
My logic was mathematically fundamental. The input entropy set is quite deterministic and well known and thus can be preimaged. For example, accumulating a lot of coin-days-destroyed and then targeting them in clever ways to subvert the security.
The randomness (entropy) of each proof-of-work is fundamental and mathematical and it can not be preimaged. It can only be surely defeated with > 50% of the network hash rate.
|
|
|
|
AlexGR
Legendary
Offline
Activity: 1708
Merit: 1049
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:21:41 PM |
|
Secure PoW needs decentralized hardware, while PoS needs decentralized distribution, both are theoretically insecure and both are practically secure except for low difficulty (or price) coins.
Thing is, all coins started @ low prices... so there is a history of ownership by bagholders when the price was near zero.
|
|
|
|
slapper
Legendary
Offline
Activity: 2030
Merit: 1101
Leading Crypto Sports Betting & Casino Platform
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:23:08 PM |
|
But again, the interesting thing is that you can buy up 51% of a PoS coin, and then sell off your coins so that you no longer have 51%, but your history of having once owned 51% makes it possible to attack the network at any time, for free.
I doubt it. => The other attacks you describe all derive from the fundamental reason I declared all non-proof-of-work systems to be insecure back in April.
My logic was mathematically fundamental. The input entropy set is quite deterministic and well known and thus can be preimaged. For example, accumulating a lot of coin-days-destroyed and then targeting them in clever ways to subvert the security.
The randomness (entropy) of each proof-of-work is fundamental and mathematical and it can not be preimaged. It can only be surely defeated with > 50% of the network hash rate.
Anyone seen Anony Nakamoto lately ?
|
..Stake.com.. | | | ▄████████████████████████████████████▄ ██ ▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄ ██ ▄████▄ ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██ ██████ ██ ██████████ ██ ██ ██████████ ██ ▀██▀ ██ ██ ██ ██████ ██ ██ ██ ██ ██ ██ ██████ ██ █████ ███ ██████ ██ ████▄ ██ ██ █████ ███ ████ ████ █████ ███ ████████ ██ ████ ████ ██████████ ████ ████ ████▀ ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██ ██ ▀▀▀▀▀▀▀▀▀▀ ██ ▀█████████▀ ▄████████████▄ ▀█████████▀ ▄▄▄▄▄▄▄▄▄▄▄▄███ ██ ██ ███▄▄▄▄▄▄▄▄▄▄▄▄ ██████████████████████████████████████████ | | | | | | ▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄ █ ▄▀▄ █▀▀█▀▄▄ █ █▀█ █ ▐ ▐▌ █ ▄██▄ █ ▌ █ █ ▄██████▄ █ ▌ ▐▌ █ ██████████ █ ▐ █ █ ▐██████████▌ █ ▐ ▐▌ █ ▀▀██████▀▀ █ ▌ █ █ ▄▄▄██▄▄▄ █ ▌▐▌ █ █▐ █ █ █▐▐▌ █ █▐█ ▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█ | | | | | | ▄▄█████████▄▄ ▄██▀▀▀▀█████▀▀▀▀██▄ ▄█▀ ▐█▌ ▀█▄ ██ ▐█▌ ██ ████▄ ▄█████▄ ▄████ ████████▄███████████▄████████ ███▀ █████████████ ▀███ ██ ███████████ ██ ▀█▄ █████████ ▄█▀ ▀█▄ ▄██▀▀▀▀▀▀▀██▄ ▄▄▄█▀ ▀███████ ███████▀ ▀█████▄ ▄█████▀ ▀▀▀███▄▄▄███▀▀▀ | | | ..PLAY NOW.. |
|
|
|
ddink7
Legendary
Offline
Activity: 1120
Merit: 1000
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:28:54 PM |
|
That's true, but buying that much hashpower would require a non-trivial investment. Not only that, but it would be very difficult, if not impossible, to acquire that much hardware due to manufacturing time and relatively small product pipelines. Such an accumulation of hashpower would have to happen in secret, which is also unlikely, because if it became known, the network could easily embrace a hardfork to change the PoW algo.
I guess the point is that theoretically PoW could be attacked, but it would be vastly less expensive to attack PoS. In fact, the greater the attacker's credibility, the cheaper the attack would be.
Sure, but its the same with PoS, the higher the price, the more non-trivial the investment to ruin the coin. The price of PoS coins is the equivalent of PoW difficulty, so the same is true for low-difficulty PoW coins. Practically that means for high PoW coins and high PoS coins that PoW are harder to destroy because of the middle step of acquiring the hardware while in PoS you just buy the coins. Secure PoW needs decentralized hardware, while PoS needs decentralized distribution, both are theoretically insecure and both are practically secure except for low difficulty (or price) coins. Actually that's not true at all--and that's the entire point. If the attacker is credible enough (i.e. he is likely to spend as much money as necessary to succeed), people will be willing to sell to him for a fraction of the value of the coin because of their assumption that the coin will soon be worth zero once the attack is successful.
|
|
|
|
ddink7
Legendary
Offline
Activity: 1120
Merit: 1000
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:33:59 PM |
|
I guess the point is that theoretically PoW could be attacked, but it would be vastly less expensive to attack PoS. In fact, the greater the attacker's credibility, the cheaper the attack would be.
Slight issue. With POS (at least in an implementation such as NXT), by the time you bought up enough of the coin supply to "attack" the network catastrophically, the only holder affected significantly by such an attack would be yourself ![Embarrassed](https://bitcointalk.org/Smileys/default/embarrassed.gif) Put another way, it would be like buying somebody's house off them so you could burgle it ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif) Not entirely true on two accounts: a credible attacker would be able to buy the coins cheaply from stakeholders based on his announcement that he intended to destroy the coin. Seeing that the attacker was credible and had a high chance of success, stakeholders would sell him their coins at a fraction of their "true" value. Thus the stakeholders would be harmed. Such a bad actor would certainly have non-economic motives (at least with respect to crypto--perhaps he owns a bank or something which will benefit from destroying the "competition"), and in that case would not mind destroying the value of a currency which he holds 51% of (and which he acquired at dirt cheap prices from panicky sellers). Your analogy is close, but slightly off. It would be like buying somebody's house and then bulldozing it. In fact, that happens all the time--for roads, malls, high rise buildings, parking lots, and the like.
|
|
|
|
toknormal
Legendary
Offline
Activity: 3066
Merit: 1188
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:34:23 PM |
|
The other attacks you describe all derive from the fundamental reason I declared all non-proof-of-work systems to be insecure back in April.
My logic was mathematically fundamental. The input entropy set is quite deterministic and well known and thus can be preimaged. For example, accumulating a lot of coin-days-destroyed and then targeting them in clever ways to subvert the security.
The randomness (entropy) of each proof-of-work is fundamental and mathematical and it can not be preimaged. It can only be surely defeated with > 50% of the network hash rate.
Hypothetical waffle. You're not going to kill a coin because you "once owned a lot of it".
|
|
|
|
eduffield (OP)
Legendary
Offline
Activity: 1176
Merit: 1036
Dash Developer
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:41:08 PM |
|
|
Dash - Digital Cash | dash.org | dashfoundation.io | dashgo.io
|
|
|
crackfoo
Legendary
Offline
Activity: 3514
Merit: 1126
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:44:05 PM |
|
ADDED MY MINING POWER +18MHs TO THE DRK-MULTIPOOL (payouts in drkcoin) Wondering how it will go on after some days of mining.... Spread some hash - xpool is updated too ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif) thanks! Wait, what ?! What did I miss? Which multipool is this? www.xpool.caPlease, if you have some spare hash, send it over. The pool will buy up more DRK and be better for everyone! Cheers! Make use of your old sha256 and scrypt ASIC's and earn DarkCoins!
|
ZPOOL - the miners multipool! Support We pay 10 FLUX Parallel Assets (PA) directly to block rewards! Get paid more and faster. No PA fee's or waiting around for them, paid instantly on every block found!
|
|
|
Ignition75
Sr. Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif) ![*](https://bitcointalk.org/Themes/custom1/images/star.gif) ![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 462
Merit: 250
www.dashpay.io
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:47:32 PM |
|
Good news... ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif)
|
The new generation have arrived and they brought their own currency...
|
|
|
ddink7
Legendary
Offline
Activity: 1120
Merit: 1000
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:48:49 PM |
|
Actually that's not true at all--and that's the entire point. If the attacker is credible enough (i.e. he is likely to spend as much money as necessary to succeed), people will be willing to sell to him for a fraction of the value of the coin because of their assumption that the coin will soon be worth zero once the attack is successful.
Thats also true for PoW. Lets say china or russia can buy up the farms of bitcoins. They announce that they are going to kill bitcoin, and watch how people sell them cheap coins. I think that if there was such a credible attacker (I think he might be just theoretical), the prices would start falling as people hear the news and the prices would go as down as the attacker's news are credible, as it actually happened with all the china fud for bitcoin.... I think that basically this just means that nothing is safe as long as actors with large amount of centralized capital exist, but we all already knew that, hehe.. Once again, I agree that it's theoretically possible to destroy a POW coin. It's just more expensive since you have to buy hardware (expensive with long production lead-times and rapid technological development) as opposed to coins (potentially cheap if you can panic the market).
|
|
|
|
tifozi
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:50:40 PM |
|
With this launch, we introduced a new soft-fork method, which some users have affectionately dubbed the “spork” Haha, whoever "coined" this term, bravo ![Grin](https://bitcointalk.org/Smileys/default/grin.gif)
|
|
|
|
baddw
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 05:54:45 PM |
|
But again, the interesting thing is that you can buy up 51% of a PoS coin, and then sell off your coins so that you no longer have 51%, but your history of having once owned 51% makes it possible to attack the network at any time, for free.
I doubt it. Doubt all you want, the math doesn't lie. Of course I was somewhat wrong by stating "for free" -- there would be *some* computing resources involved (and thus electricity costs, etc.), but nothing close to what 51% attacking a PoW coin would require. Several orders of magnitude difference. If you once had a 51% stake, you can build a better blockchain than the other 49% can, starting from the point where you owned 51%. You develop this blockchain in secret, after selling off your coins (and profiting from it); and then release your secret blockchain to the world, and nodes will pick it up because it carries more stake than the 49% blockchain. Now not only do you have your profit from the original sales of the coin, you have your 51% back (to the extent that it's worth anything). All coins would not have to be consolidated under one address; in fact, I believe that doing so would prevent the attack in most PoS implementations. This is a fundamental problem with PoS, and is why Peercoin incorporates both PoW and centralized checkpointing. Sunny King is not a stupid guy, he knows that PoS has a big flaw or else he would have implemented pure PoS for Peercoin.
|
BTC/XCP 11596GYYq5WzVHoHTmYZg4RufxxzAGEGBX DRK XvFhRFQwvBAmFkaii6Kafmu6oXrH4dSkVF Eligius Payouts/CPPSRB Explained I am not associated with Eligius in any way. I just think that it is a good pool with a cool payment system ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif)
|
|
|
ddink7
Legendary
Offline
Activity: 1120
Merit: 1000
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 06:00:23 PM |
|
But again, the interesting thing is that you can buy up 51% of a PoS coin, and then sell off your coins so that you no longer have 51%, but your history of having once owned 51% makes it possible to attack the network at any time, for free.
I doubt it. Doubt all you want, the math doesn't lie. Of course I was somewhat wrong by stating "for free" -- there would be *some* computing resources involved (and thus electricity costs, etc.), but nothing close to what 51% attacking a PoW coin would require. Several orders of magnitude difference. If you once had a 51% stake, you can build a better blockchain than the other 49% can, starting from the point where you owned 51%. You develop this blockchain in secret, after selling off your coins (and profiting from it); and then release your secret blockchain to the world, and nodes will pick it up because it carries more stake than the 49% blockchain. Now not only do you have your profit from the original sales of the coin, you have your 51% back (to the extent that it's worth anything). All coins would not have to be consolidated under one address; in fact, I believe that doing so would prevent the attack in most PoS implementations. This is a fundamental problem with PoS, and is why Peercoin incorporates both PoW and centralized checkpointing. Sunny King is not a stupid guy, he knows that PoS has a big flaw or else he would have implemented pure PoS for Peercoin. You're absolutely correct. The client will look for and accept the longest blockchain. Period. It doesn't matter how it became longest or who controls it. All that matters is that the attacking chain is longer than the proper chain.
|
|
|
|
TR8888
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 06:02:30 PM |
|
|
|
|
|
GhostPlayer
Legendary
Offline
Activity: 1092
Merit: 1000
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 06:10:16 PM |
|
Pool that HAVE NOT UPDATED !! ![Shocked](https://bitcointalk.org/Smileys/default/shocked.gif) LTCRabbit Coinotron Coinmine.pl XHash.net Multipool.us Coinmine.pw Boooooooo!!!! ![Tongue](https://bitcointalk.org/Smileys/default/tongue.gif) .. I dont mind about LTCRabbit and Multipool.us, as they pay in LTC and BTC respectively. EDIT: This list may not be correct. My source is not 100% correct.
|
|
|
|
crackfoo
Legendary
Offline
Activity: 3514
Merit: 1126
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
June 26, 2014, 06:12:28 PM |
|
Pool that HAVE NOT UPDATED !! ![Shocked](https://bitcointalk.org/Smileys/default/shocked.gif) LTCRabbit Coinotron Coinmine.pl XHash.net Multipool.us Coinmine.pw Boooooooo!!!! ![Tongue](https://bitcointalk.org/Smileys/default/tongue.gif) .. I dont mind about LTCRabbit and Multipool.us, as they pay in LTC and BTC respectively. perhaps the OP can be updated with a proper list of pools? Adding my DRK paying multipool too of course www.xpool.caCheers
|
ZPOOL - the miners multipool! Support We pay 10 FLUX Parallel Assets (PA) directly to block rewards! Get paid more and faster. No PA fee's or waiting around for them, paid instantly on every block found!
|
|
|
|