Pages:
Author

Topic: Fundamental bitcoin flaw - revisited - page 4. (Read 9688 times)

legendary
Activity: 1078
Merit: 1002
100 satoshis -> ISO code
March 02, 2013, 10:26:25 PM
#36
So it is possible to trade bitcoin off the blockchain in a similar way that cash is traded outside of banks.   Guess that is gonna KILL the US dollar banking industry because banks can not profit off of every transaction.

.....


Hmm, you do know how banks make most of their money don't you??  

(here's a hint: I've deliberately highlighted a word in that question)
(incase you still don't get it:  it's NOT by transaction fees)

The merchant bank I used to work for made their money in many ways, but primarily though through spreads, commissions, interest and capital gain on prop positions. Retail transaction fees are not essential.
member
Activity: 117
Merit: 10
March 02, 2013, 07:15:47 PM
#35
So it is possible to trade bitcoin off the blockchain in a similar way that cash is traded outside of banks.   Guess that is gonna KILL the US dollar banking industry because banks can not profit off of every transaction.

.....


Hmm, you do know how banks make most of their money don't you?? 

(here's a hint: I've deliberately highlighted a word in that question)
(incase you still don't get it:  it's NOT by transaction fees)
member
Activity: 117
Merit: 10
March 02, 2013, 06:56:22 PM
#34
Just looked up "trusted computing" and quickly skimmed the Wikipedia article -- sounds like a whole lot of vaporware. Just like this thread. Where is this special coin with DRM? Link please!

If he's talking about something similar to "Mint Chip" or devices resembling "Yubikeys" then that has been discussed to death. You're either forced to trust some central authority or you're forced to rely on hardware security. Roll Eyes

So let me get this straight,  you' just admitted that, until now, you've been trashing me without actually understanding what it is that I've been talking about?

---------

Look, just forget the DRM stuff for a minute.  Ask yourself these questions:

In the future when transactions fees are the main source of income (as opposed to block reward) for miners, when someone exchanges bitcoin off-line (however they do it, using casascius coin, bitbills, printcoin bills, or DRM coin) does the miner benefit from it?

The answer is NO.  (except in very rare cases where the transaction is very large in KB size and the fee very small)

So does the miner the lose-out if a transaction that would have been transacted on-chain is moved off-chain?

The answer is YES. Because they lose a potential fee.

Now here's the important one: So if the majority of transactions move off-chain what happens to the miners and consequently what happens to the network hash rate (ie: what happens to the famed bitcoin security)?  

I won't answer this one, instead I'll let you think about this.


Why DRM/TC coin is so dangerous, as opposed to other current off-chain mechanisms, is because potentially it involves no fee, is instant, quite secure and can be done locally or over the internet.  This makes it a very attractive alternative to on-chain transactions for someone who wishes to trade with bitcoin.
member
Activity: 117
Merit: 10
March 02, 2013, 06:38:59 PM
#33
The way to understand how DRM coin exchange works is to picture an electronic version of casascius coin. But instead trusting casascius to load the key-pair in the coin and to not keep a copy of the private key,it relies on the services offered by the TC chips inside the computer.  (ie: you trust the TC chip not a person)
Just like casascius coins, there is NO fee involved when they change hands from person to person.  And they can change hands an arbitrary number of times.  There is no record of who has had the coin.  Indeed, they NEVER need go back on-chain at all to still be useful.  Most importantly, this scheme is perfectly compatible with the bitcoin protocol:  ie, nothing in bitcoin as-is can stop someone from creating this software.

There are people like me who will never trust that method of transferring coins. If it isn't written in the block chain, I don't want it.

So while you may have a way for some people to exchange bitcoins off the chain, they will not be fungible with actual bitcoins.

I'm not saying it's a bad idea. If people want to trust hardware instead of the block chain, fantastic!


You already do trust your hardware!!!  (ie: You trust that your CPU has no backdoors or flaws that people/organizations can exploit to gain access to your machine)

No, actually, I don't. My private keys are all created offline.

I which means that your bitcoins are not being actively traded.  Ie, you are just storing them as an investment.  Anyone who actually *uses* bitcoins and trades them on-chain must trust their machine.
member
Activity: 117
Merit: 10
March 02, 2013, 05:44:16 PM
#32

Ok, so I was going to give you actual figures based on the current cost of mining and fees, however, when I read this post of yours above I've realised that you have already cottoned on to what I'm saying and are beginning to take it seriously and think about it.  So I don't need to try to explain it anymore to you.  Smiley

I understood your argument better than you think, and right from the start.  It's one that I thought of myself, three years ago.  I was wrong then and you are wrong now.  At least that I can claim that I actually researched the topic before posting; for over two weeks.  The solution that you are reaching for, but don't know it, is called demurrage; (storage fees for very deep transactions, basicly) and it's a core element to freicoin.  It's also unnecessary.  And even if it wasn't, any successful method of implimenting demurrage that freicoin could come up with would just be taken into Bitcoin proper, should freicoin (or any other alternate cryptocoin) grow legs and offer a real challenge to Bitcoin's superior market position.  The only way that does not happen, is if the new cryptocurrency were to develop an obvious advantage for which Bitcoin could not replicate.  This is not impossible, but is rather unlikley in my view.

I'm perfectly aware of freicoin and know what demurrage is.  Infact, I mention both in my original post.  (by-the-way I belive freicon takes a fixed percentage of the total money supply every year whereas I perfer a system that takes money form inactive wallets- similar but different)
legendary
Activity: 1708
Merit: 1007
March 02, 2013, 05:33:37 PM
#31
The way to understand how DRM coin exchange works is to picture an electronic version of casascius coin. But instead trusting casascius to load the key-pair in the coin and to not keep a copy of the private key,it relies on the services offered by the TC chips inside the computer.  (ie: you trust the TC chip not a person)
Just like casascius coins, there is NO fee involved when they change hands from person to person.  And they can change hands an arbitrary number of times.  There is no record of who has had the coin.  Indeed, they NEVER need go back on-chain at all to still be useful.  Most importantly, this scheme is perfectly compatible with the bitcoin protocol:  ie, nothing in bitcoin as-is can stop someone from creating this software.

There are people like me who will never trust that method of transferring coins. If it isn't written in the block chain, I don't want it.

So while you may have a way for some people to exchange bitcoins off the chain, they will not be fungible with actual bitcoins.

I'm not saying it's a bad idea. If people want to trust hardware instead of the block chain, fantastic!


You already do trust your hardware!!!  (ie: You trust that your CPU has no backdoors or flaws that the people/organizations can exploit to gain access to your machine)

No, I trust my hardware, but only to a point.  I don't trust your hardware at all.  Trusted computing used for the exchange of bitcoins would require that the vendor trust the sender's machine, and probably more than he should rationally trust his own.
legendary
Activity: 1708
Merit: 1007
March 02, 2013, 05:31:57 PM
#30

Ok, so I was going to give you actual figures based on the current cost of mining and fees, however, when I read this post of yours above I've realised that you have already cottoned on to what I'm saying and are beginning to take it seriously and think about it.  So I don't need to try to explain it anymore to you.  Smiley

I understood your argument better than you think, and right from the start.  It's one that I thought of myself, three years ago.  I was wrong then and you are wrong now.  At least that I can claim that I actually researched the topic before posting; for over two weeks.  The solution that you are reaching for, but don't know it, is called demurrage; (storage fees for very deep transactions, basicly) and it's a core element to freicoin.  It's also unnecessary.  And even if it wasn't, any successful method of implimenting demurrage that freicoin could come up with would just be taken into Bitcoin proper, should freicoin (or any other alternate cryptocoin) grow legs and offer a real challenge to Bitcoin's superior market position.  The only way that does not happen, is if the new cryptocurrency were to develop an obvious advantage for which Bitcoin could not replicate.  This is not impossible, but is rather unlikley in my view.
member
Activity: 117
Merit: 10
March 02, 2013, 05:30:38 PM
#29
The way to understand how DRM coin exchange works is to picture an electronic version of casascius coin. But instead trusting casascius to load the key-pair in the coin and to not keep a copy of the private key,it relies on the services offered by the TC chips inside the computer.  (ie: you trust the TC chip not a person)
Just like casascius coins, there is NO fee involved when they change hands from person to person.  And they can change hands an arbitrary number of times.  There is no record of who has had the coin.  Indeed, they NEVER need go back on-chain at all to still be useful.  Most importantly, this scheme is perfectly compatible with the bitcoin protocol:  ie, nothing in bitcoin as-is can stop someone from creating this software.

There are people like me who will never trust that method of transferring coins. If it isn't written in the block chain, I don't want it.

So while you may have a way for some people to exchange bitcoins off the chain, they will not be fungible with actual bitcoins.

I'm not saying it's a bad idea. If people want to trust hardware instead of the block chain, fantastic!


You already do trust your hardware!!!  (ie: You trust that your CPU has no backdoors or flaws that people/organizations can exploit to gain access to your machine)
hero member
Activity: 602
Merit: 500
March 02, 2013, 04:50:36 PM
#28
Up to now OP hasn't done his homework.

He claimed that off-chain transactions based on some conventional kind of trust will necessarily drive people to abandon using the Bitcoin network proper.

This is a claim. The proof for this claim is lacking. In fact, any serious argument is lacking
Besides, going just for plausibility: was there ever any trust based secure method of value exchange available free of charge?



What's the lection we can draw from this?
The innovative nature of Bitcoin is hard to understand. There is more about it than just "mining digital gold".
Once Bitcoin is perceived more as a competitor by existing and upcoming payment networks, we'll see a lot of campaigns using bzzzwords like "trusted computing". Since you can't win with arguments against buzzwords, in the end I think the actual economic and practical properties of those competing system will be what counts.
legendary
Activity: 1106
Merit: 1001
March 02, 2013, 03:03:38 PM
#27
Grasping at the flaw-straw is what this thread is.
legendary
Activity: 1386
Merit: 1003
March 02, 2013, 02:18:36 PM
#26
So it is possible to trade bitcoin off the blockchain in a similar way that cash is traded outside of banks.   Guess that is gonna KILL the US dollar banking industry because banks can not profit off of every transaction.

This is not a flaw, it is a feature.  It gives bitcoin a mode of transfer OFFLINE as well as ONLINE making bitcoin that much more flexible. 

Could off blockchain transactions kill bitcoin?  No.  They need to be done in person and MOST bitcoin transactions need to be done online.  If you want to visit SatoshiDice in person and play (if they allowed that) FINE, but that will not cut into the blockchain version of that business.  The blockchain will have plenty of customers.



legendary
Activity: 1526
Merit: 1129
March 02, 2013, 01:18:52 PM
#25
I think you're the one who missed the point actually. I understand how TC hardware works. Heck I have a copy of the book "The Intel Safer Computing Initiative" on my bookshelf. My response remains - regardless of how you implement it or what the chips do, this does not seem to be a flaw in Bitcoin itself. Indeed it'd be a nice extension of it. If people are passing around value outside the chain, all that means is that less money needs to be spent on mining, because less value is being secured that way. How is that a problem?
member
Activity: 60
Merit: 10
March 02, 2013, 11:24:27 AM
#24
I get what you are saying, however I don't get why you keep insisting on bitcoin in that case.
see my other post
member
Activity: 117
Merit: 10
March 02, 2013, 10:03:40 AM
#23
This has been discussed before. I remember talking about use of TC hardware for improving confidence in unconfirmed transactions years ago, and indeed, this is one of the reasons we want to change the default mining algorithm to allow parents to pay for no-fee children.

If people are building long chains of transactions off the chain by relying on secure chips that's absolutely fine and is not a "flaw" in anything, indeed, it's something I'd encourage. When the chains are eventually resolved by broadcasting them online whoever is doing so can attach a fee to the end and that will encourage confirmation of all dependent transactions recursively.

I guess I don't understand how this is meant to cause problems for Bitcoin. The fees that are being placed onto the network are supposed to be high enough to incentivize sufficient mining to keep the double spend rate acceptably low. If people use secure hardware then the double spend rate is made lower via other means and less mining is needed.


I think you've completely missed the point.  There are no chains of coin transaction history that get resolved and there are no fees that get accumulated.  The bitcoin protocol as-is doesn't demand any such thing.

The way to understand how DRM coin exchange works is to picture an electronic version of casascius coin. But instead trusting casascius to load the key-pair in the coin and to not keep a copy of the private key,it relies on the services offered by the TC chips inside the computer.  (ie: you trust the TC chip not a person)
Just like casascius coins, there is NO fee involved when they change hands from person to person.  And they can change hands an arbitrary number of times.  There is no record of who has had the coin.  Indeed, they NEVER need go back on-chain at all to still be useful.  Most importantly, this scheme is perfectly compatible with the bitcoin protocol:  ie, nothing in bitcoin as-is can stop someone from creating this software.
member
Activity: 117
Merit: 10
March 02, 2013, 09:50:56 AM
#22
no, the OP is talking about a trusted computer model (where you can both prove that data wasn't tampered with, there is only one copy and nobody looked at a certain part(the private key in this case) oh and also be somehow pseudonymous )
I'm not saying this model is feasible or not, or how much it would cost or even if it even would be reliable. That's not the point to discuss. The OP thinks that it's a flaw of bitcoins that they can be traded in such a manner

Wow, someone who gets what I'm saying (and a junior member like me too Smiley   )

Just as slight clarification, I not against being able to trade coins in this manner.  Infact, I think it is the way-to-go since it is extremely efficient and instant.  However, the fact that they can be traded like this means that the protocol as-it-is will need to be forked/modified to survive.  To address this issue, what I personally would like to see is that the miners can collect dead-coin (ie: coins that haven't been moved for a long time)-- let's say something like the coins can sit untouched in a wallet for 2 years but after that at the end of the every six months the miners can take 5% of the original amount until either the owner transacts the coins on chain or they are completely reclaimed by the miners.
member
Activity: 117
Merit: 10
March 02, 2013, 09:37:52 AM
#21
legendary
Activity: 1526
Merit: 1129
March 02, 2013, 09:02:31 AM
#20
This has been discussed before. I remember talking about use of TC hardware for improving confidence in unconfirmed transactions years ago, and indeed, this is one of the reasons we want to change the default mining algorithm to allow parents to pay for no-fee children.

If people are building long chains of transactions off the chain by relying on secure chips that's absolutely fine and is not a "flaw" in anything, indeed, it's something I'd encourage. When the chains are eventually resolved by broadcasting them online whoever is doing so can attach a fee to the end and that will encourage confirmation of all dependent transactions recursively.

I guess I don't understand how this is meant to cause problems for Bitcoin. The fees that are being placed onto the network are supposed to be high enough to incentivize sufficient mining to keep the double spend rate acceptably low. If people use secure hardware then the double spend rate is made lower via other means and less mining is needed.
member
Activity: 60
Merit: 10
March 02, 2013, 07:55:53 AM
#19
no, the OP is talking about a trusted computer model (where you can both prove that data wasn't tampered with, there is only one copy and nobody looked at a certain part(the private key in this case) oh and also be somehow pseudonymous )
I'm not saying this model is feasible or not, or how much it would cost or even if it even would be reliable. That's not the point to discuss. The OP thinks that it's a flaw of bitcoins that they can be traded in such a manner
sr. member
Activity: 350
Merit: 251
Dolphie Selfie
March 02, 2013, 06:57:34 AM
#18
In case some people aren't realizing the simple practice of handing off keys is not a safe way to preform bitcoin transactions. The 'sender' can reuse that money any time, a primary way would be to send it to themselves at a new address by making an actual bitcoin transaction.
Exactly what I wanted to point out, too: How can you be sure, that the previous owner of the coin didn't have a look at the private key?
legendary
Activity: 1246
Merit: 1015
Strength in numbers
March 02, 2013, 05:31:27 AM
#17
In case some people aren't realizing the simple practice of handing off keys is not a safe way to preform bitcoin transactions. The 'sender' can reuse that money any time, a primary way would be to send it to themselves at a new address by making an actual bitcoin transaction.
Pages:
Jump to: