Bitcoin Forum
October 24, 2018, 06:11:44 AM *
News: Make sure you are not using versions of Bitcoin Core other than 0.17.0 [Torrent], 0.16.3, 0.15.2, or 0.14.3. More info.
   Home   Help Search Donate Login Register  
Pages: [1]
Author Topic: Terence Tao about anonymity and Satoshi  (Read 1726 times)
Offline Offline

Activity: 1722
Merit: 1024

P2P Cryptocurrency

View Profile
June 18, 2012, 04:25:23 AM

Terence Tao

Works at UCLA
Attended Princeton University
Lives in Los Angeles

Quote from: Terence Tao (Apr 13, 2012)
Anonymity on the internet is a very fragile thing; every anonymous online identity on this planet is only about 31 bits of information away from being completely exposed. This is because the total number of internet users on this planet is about 2 billion, or approximately 2^{31}. Initially, all one knows about an anonymous internet user is that he or she is a member of this large population, which has a Shannon entropy of about 31 bits. But each piece of new information about this identity will reduce this entropy. For instance, knowing the gender of the user will cut down the size of the population of possible candidates for the user's identity by a factor of approximately two, thus stripping away one bit of entropy. (Actually, one loses a little less than a whole bit here, because the gender distribution of internet users is not perfectly balanced.) Similarly, any tidbit of information about the nationality, profession, marital status, location (e.g. timezone or IP address), hobbies, age, ethnicity, education level, socio-economic status, languages known, birthplace, appearance, political leaning, etc. of the user will reduce the entropy further. (Note though that entropy loss is not always additive; if knowing X removes 2 bits of entropy and knowing Y removes 3 bits, then knowing both X and Y does not necessarily remove 5 bits of entropy, because X and Y may be correlated instead of independent, and so much of the information gained from Y may already have been present in X).

One can reveal quite a few bits of information about oneself without any serious loss to one's anonymity; for instance, if one has revealed a net of 20 independent bits of information over the lifetime of one's online identity, this still leaves one in a crowd of about 2^11 ~ 2000 other people, enough to still enjoy some reasonable level of anonymity. But as one approaches the threshold of 31 bits, the level of anonymity drops exponentially fast. Once one has revealed more than 31 bits, it becomes theoretically possible to deduce one's identity, given a sufficiently comprehensive set of databases about the population of internet users and their characteristics. Of course, such an ideal set of databases does not actually exist; but one can imagine that government intelligence agencies may have enough of these databases to deduce one's identity from, say, 50 or 60 bits of information, and even publicly available databases (such as what one can access from popular search engines) are probably enough to do the job given, say, 100 bits of information, assuming sufficient patience and determination. Thus, in today's online world, a crowd of billions of other people is considerably less protection for one's anonymity than one may initially think, and just because the first 20 or 30 bits of information you reveal about yourself leads to no apparent loss of anonymity, this does not mean that the next 20 or 30 bits revealed will do so also.

Restricting access to online databases may recover a handful of bits of anonymity, but one will not return to anything close to pre-internet levels of anonymity without extremely draconian information controls. Completely discarding a previous online identity and starting afresh can reset one's level of anonymity to near-maximum levels, but one has to be careful never to link the new identity to the old one, or else the protection gained by switching will be lost, and the information revealed by the two online identities, when combined together, may cumulatively be enough to destroy the anonymity of both.

But one additional way to gain more anonymity is through deliberate disinformation. For instance, suppose that one reveals 100 independent bits of information about oneself. Ordinarily, this would cost 100 bits of anonymity (assuming that each bit was a priori equally likely to be true or false), by cutting the number of possibilities down by a factor of 2^100; but if 5 of these 100 bits (chosen randomly and not revealed in advance) are deliberately falsified, then the number of possibilities increases again by a factor of (100 choose 5) ~ 2^26, recovering about 26 bits of anonymity. In practice one gains even more anonymity than this, because to dispel the disinformation one needs to solve a satisfiability problem, which can be notoriously intractible computationally, although this additional protection may dissipate with time as algorithms improve (e.g. by incorporating ideas from compressed sensing).

EDIT: It is perhaps worth pointing out that disinformation is only a partial defence at best, and to protect anonymity it is better not to emit any information in the first place. For instance, in the above example, even with disinformation, one has still given away about 74 bits of information, which already is more than enough (in principle, at least) to identify the identity.

Quote from: Alex Saver (Jun 17, 2012)
Satoshi? O_o''

Quote from: Terence Tao (Jun 17, 2012)
If you are referring to the Bitcoin founder, this is an excellent example of someone who has very carefully controlled the information about his (or her) online identity (and in cutting off all activity from that identity after a limited amount of time), and in particular keeping it well below the 31 bit threshold.   (This is not to say that there was no information emitted whatsoever; for instance, it is clear that Satoshi is quite skilled in computer science and cryptography, which is already worth a half-dozen or so bits of information.  His supposed Japanese origin may well be disinformation, though.)

It's public information. You can look for more details here:

Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
Hero Member
Offline Offline

Posts: 1540361504

View Profile Personal Message (Offline)

Reply with quote  #2

Report to moderator
Full Member
Offline Offline

Activity: 196
Merit: 100

Web Dev, Db Admin, Computer Technician

View Profile
June 18, 2012, 04:57:52 AM

Is he building an app that calculates and keeps track of the anonymity bits? I'm interested. O.o

For Bitcoin to be a true global currency the value of BTC needs always to rise.
If BTC became the global currency & money supply = 100 Trillion then ⊅1.00 BTC = $4,761,904.76.
P2Pool Server List | How To's and Guides Mega List |  1EndfedSryGUZK9sPrdvxHntYzv2EBexGA
Full Member
Offline Offline

Activity: 448
Merit: 126

The Premier Digital Asset Management Ecosystem

View Profile
May 05, 2018, 03:43:54 PM

It is amazing what you come across.

I have been amazed by the work of Terence for quite some time and have been following him since I was preparing for the Maths Olympiad. Today I was searching for his views on cryptos.[1]

The fact that Satoshi has actually remained anonymous for so long should also be attributed to the fact has he has remained offline for quite some time; more so since BTC gained popularity (or notoriety) if he would have remained here to answer questions and to interact; I think he would have more or less crossed the 31 bits indicated above.

[1] Couldn't find anything as such; if someone does please post here.

Pages: [1]
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!