Topic: [ANN][KMD][dPoW] Komodo - An Open, Composable Smart Chain Platform, Secured by B - page 842. (Read 1192336 times)

https://eprint.iacr.org/2005/304.pdf

end of page 4, beginning of page 5.  then continue on to page 8

section on adversarially-generated keys.

Please elaborate on exactly what definition of "feasible" you are using.

Or are you just parroting what ICOscam777 told you, with no understanding cryptanalysis involved?

What makes komodo better than monero is the way privacy is enacted.   Monero's privacy is based on ring signatures, Which is to say that it obfuscates who is actually doing the transaction by presenting the tx  signed by a group of equally valid keys  where only one is the real one and there is no way to tell the difference between them.   As jl777  has mentioned earlier in this post  that with the amount of signatures being  between 3-10  it is a feasible to brute force which keys are whose  thereby breaking the privacy.   Another attack I could see being done is by the principle of exclusion,   for example,  if a ring signature is consisting of 3 signatures  and i control 2 of those, then i can deduce the third is the person under surveillance. 

Komodo's privacy is accomplished with Zero Knowledge Proofs,   A Zero Knowledge Proof goes something like this:   Say I had two balls,  one was red and one was green  but i couldn't tell the difference because i was colorblind.  But you are not colorblind and can tell the difference.  I would challenge you to guess with 100% accuracy which ball was which when i would put them behind my back and mixed them around and presented them back to you.  Being that you can see the difference ( can tell which one is red and which is green) and that no matter what could tell which one was which,   despite my zero-knowledge ( inability to discern the color of the balls )   you have proved there was a difference ( 100% accuracy on choosing which ball was which no matter what way i switched them ).    Komodo uses Zcash's zk-SNARKS to accomplish this,  not to get long winded about it, but it essentially works out to being that you necessarily have to complete certain steps to do a tx,  it proves to the receipant   that the tx is legit   while at the same time being secured through encryption from outside viewers.

As for heavily compensated,  that depends on how you look at it.    On one hand  yes there are nice bonuses for btcd holders  but on the other  the percentage they hold  compared to what it was when btcd was the coin  is now alot lower.   Its a tradeoff   neither way  100% satisfies both parties  but it is an equitable solution to the problem of compensating original investors and incentivizing new investors to participate

Made it into The Merkle

http://themerkle.com/komodo-platform-launches-new-consensus-mechanism/

What's your problem man? Got problem with reading comprehension? - read again. You welcome.

What makes komodo any better than monero, which is clearly the front runner at the moment for darknet payment. Please use laymen terms if possible.

I dont have BTCD and dont plan on getting any. This seems after following this thread for a month now that it's just a way to swap old for new, and those with old are HEAVILY compensated.

Not sure what to think. I want to invest, but doesn't feel right..

What's your problem man? Got problem with not having BTCD? - buy some. You welcome.

There is something here I can't wrap my head around... even tho it seems it has been explained quite a lot, but still is convoluted like shit. (!)

Exactly how much KMD of the 90m are going to be reserved to BTCD holders?

If it is assumed all BTCD will be redeemed, (1,286,569*0.0053=6818 BTC) and 7k BTC are collected,

1.- Isn´t that unfair for BTC investors, who will get the bonus only if they risk investing during the ICO, and on top of that they will be the ones financing the project with real cash (BTC), and not some illiquid coin with no volume nor demand not to talk about future?

2.- What if 30k BTC are collected?

3.- Is then the real limit of BTC collected 36818 BTC or is it 23182 BTC ? (30k - 6818  = 23182 BTC)

If it is the former the dilution will be even more damaging for BTC investors, increasing their risk to lose money (!)

4.- Why is that real limit not especified in the OP?

5.- Isn´t that a sneaky way to dilute BTC investors stake (!) and having more working capital than the 10% stated?

(we know statistically there is going ot be an important chunk of ppl who wont swap their BTCD, either they died, lost control over the coins, simply forgot they have them etc,.)

6.- Why not limit the amount of KMD available to swap for BTCD and the time to do the actual swap as is done with BTC investors? Wouldn´t be that more fair?

Sorry it's already translated! All the languages are now reserved and most already translated.

Is the Chinese on reserved? I want to translate English into Chinese, just reserve it. thanks.

I plan to benchmark each candidate's servers and that info would be made part of the election process, along with any candidate statements, their stake, etc.

Thinking through the voting process, which clearly is quite important, I think a lot of voters wont feel comfortable voting on what is a somewhat technical matter. It is one thing to vote based on the location of a node, but how to compare technical differences?

So, what I have come up with is 3 different ways to vote.
1) direct voting
2) random vote
3) voting for a representative who is direct voting

Unlike with normal elections (well maybe for those too), there is value in voting for a random candidate. this prevents concentration of power. Not sure if I will have time to create the two stage representative system, but maybe it wont be that much work to have specific addresses commit to making a direct vote. Given that commitment, then others can just give their voting power to such a representative.

In the event a representative doesnt vote or in turn uses a representative, can probably just fallback to random vote. That avoids infinite loops of dependencies and prevents loss of voting power.

Now is the time to speak up if you have ideas on voting as I am working on it.

Like jl777 already explained there won't be any minimum stake required, but the notary nodes have to meet certain requirements. Earlier jl777 had estimated the following:

- 64 GB RAM
- 300GB SSD
- ddos protection via second node
- good bandwidth

On top of those you must get enough votes from the KMD stakeholders to get elected to run a notary node. So you will have to campaign and assure that you are the best person to run a notary node.

We had translation bounties, those are all now reserved.

We will have a signature campaign that will begin shortly: today or tomorrow at the latest.

Want to hear bounty info. Please specify them.

The notary nodes will earn KMD, no KMD is needed to be elected, though it could be the voters will give more preference to known and large KMD stakeholders.

The notary nodes are elected by stake. A somewhat arbitrary division of the geolocation into 4 areas: North America, Europe, Asia, Southern Hemisphere will be used to ensure no over concentration in any specific region of the world.

Each notary operator could run up to 1 node per region, if they win of course. For anybody to try to get more than one spot, they would need to pass the turing test in realtime as the notary operators will actively cooperate with each other and also there will be a certification tests to verify hardware performance.

With 16 notaries in each of the 4 areas, we end up with 4 elections in parallel for the 16 spots. So each voter can vote 4 times, once per region. Of course a person's stake will allow voting for that many spots and this is one of the reasons for a large scale ICO, to ensure as wide of a stakeholder base as possible, without any large concentration of voting power.

However, with the separation of powers, the notary nodes are able to create blocks and earn the block reward and also determine which valid tx are included in a block. However, they wont have any powers to spend any funds that are not theirs. And unless a majority of nodes are compromised, the notary process is not affected. Of course, any misbehaving notary will be detected and soon be replaced.

As with any crypto, any 51% control leads to a failure mode, but with dPoW any such majority control of notaries would be temporary. If somebody is able to accumulate 51% of all KMD, then we assume that they wont have the motivation to damage.

Thanks for comprehensive answer, your model is very well thought out. Will there be some minimum stake required to run a notary node like dash, or is the vote the single determinant? How notary node operators are selected and governed to keep komodo decentralised will be critical, I look forward to more details on that when you have them.

After ICO it is half the lifetime emission.

After that, stakes get 5% per year, plus there is a blockreward starting at 3KMD, with halvings.

When coin supply reaches 200 mil, it will just be txfees, but that wont be for over 10 years

There is a backup block generation method using equihash PoW, but this will only be used when there are no notary nodes. In order to allow both methods to coexist, similar to how peercoin allows PoW and PoS to coexist, the notary side will be given priority.

I guess if there is an extremely large amount of hashpower, even in the presence of notary nodes, the PoW could generate a block, but I doubt it would make economic sense unless KMD price goes to much higher levels than expected.

For the hardware/miner peoples, the way to earn KMD is by running one of the 64 notary nodes. Payouts will be calibrated to be around $500 per month per notary node, so in the even the KMD block rewards are not sufficient, payments to the notary nodes will be made in BTC to make up the difference.

Right after the ICO is completed, we will have elections to select the 64 notary node operators. I am currently working on the voting system and this will be the first thing we need to do after genesis. Between genesis and the notary nodes coming online is the only pure PoW period that is expected.

What % of KMD supply is PoW, or is 100% ico from genesis? Is there a tail emission like xmr?

Yes plus all the other tech that will be rolled into it.

Ok cool so the best entry to the Zcash tech is right here