Author

Topic: MasterCoin: New Protocol Layer Starting From “The Exodus Address” - page 119. (Read 448462 times)

legendary
Activity: 1596
Merit: 1100
CHECKMULTISIG works right now (as far as I know), and arguments against it are largely theoretical: it does bloat UTXO space, but currently it isn't a limiting factor.

It is important that CHECKMULTISIG doesn't do permanent damage, unlike your current approach which does permanent damage.

The way I understand it is that the UTXO space can only bloat when an output is not-redeemable. Since the suggest multisig implementation uses a real/existing publickey it can always be redeemed. This holds true as long as my understanding of multisig outputs is correct. Since people are still worried about bloat I can only come to the conclusion that my understanding is wrong.

Making the outputs redeemable is a good and welcome improvement -- but that doesn't eliminate their UTXO storage cost.  It just makes that storage recoverable and transferable.

The extraneous data continues to be stored in the UTXO set, with this multisig method.  One person may redeem a MasterCoin multisig transaction, yes, but the payment target will just create another multisig output that consumes similar amount of UTXO storage space.  The data continues to bloat the UTXO dataset, because there is always some multisig output sitting around, waiting to be spent.


So my advice would be:

1. switch to CHECKMULTISIG ASAP
2. make it possible to use OP_RETURN approach

What I (think) to know about OP_RETURN is that it basically creates an unspendable output but at least we know it's unspendable. This is basically a way to destroy coins. Is this correct? And if so is this preferable to having increased UTXO space (if I indeed misunderstand spending multisigs).

Correct.  OP_RETURN data is provably not spendable.  Anything provably unspendable may be eliminated from the UTXO data set.

Note!  Besides OP_RETURN, there is yet another possibility:  P2SH:  https://en.bitcoin.it/wiki/BIP_0016

With P2SH, the MasterCoin data could be stored in the input scriptSig, as a part of redeeming.  This may be unworkable, because the MasterCoin data would only be revealed when you spend a MasterCoin, and not when you receive a MasterCoin.

legendary
Activity: 1260
Merit: 1031
Rational Exuberance
I am so sad that the contest isn't going to fairly compensate everyone for their work, but I'm really pumped that so many people are excited to contribute!
J.R. - I don't think you have a good read on these people.  They are all going to be fairly compensated.  Their compensation comes in producing fine results on a very interesting project.  Probably very few people are in this for the money.  

Don't spend another second being 'so sad that...' - your efforts to keep the project healthy and going down a good path are all they need as compensation to work hard.  Your organization of the project assures their efforts are not wasted.  It is a perfect synergy.  Forget about $$$, BTC, or MSC.  Building something cool is far more rewarding than having a pocket full of money.
However, hot chicks tend not to agree with that I suspect.


LOL!

I'm deeply gratified that most people seem to be in this for personal satisfaction rather than money (the project will make progress much faster this way). However, ignore the opinion of the hot chick(s) in your life at your peril!
legendary
Activity: 1260
Merit: 1031
Rational Exuberance
CHECKMULTISIG works right now (as far as I know), and arguments against it are largely theoretical: it does bloat UTXO space, but currently it isn't a limiting factor.

It is important that CHECKMULTISIG doesn't do permanent damage, unlike your current approach which does permanent damage.

The way I understand it is that the UTXO space can only bloat when an output is not-redeemable. Since the suggest multisig implementation uses a real/existing publickey it can always be redeemed. This holds true as long as my understanding of multisig outputs is correct. Since people are still worried about bloat I can only come to the conclusion that my understanding is wrong.

Question 1:
Having a valid public key in a 1-3 multisig is not enough to redeem said output and thus prevent UTXO bloat?

So my advice would be:

1. switch to CHECKMULTISIG ASAP
2. make it possible to use OP_RETURN approach

What I (think) to know about OP_RETURN is that it basically creates an unspendable output but at least we know it's unspendable. This is basically a way to destroy coins. Is this correct? And if so is this preferable to having increased UTXO space (if I indeed misunderstand spending multisigs).

I sent Jeff Garzik another PM asking him to comment on this.

I'm pretty close to saying we should just go with Tachikoma's multisig approach, leaving the door open to OP_RETURN in the future if that actually gets released and is clearly an improvement.

Incidentally, we shouldn't be surprised if people working on the bitcoin core protocol are suspicious or even hostile to the MasterCoin project. Frankly, we are creating work for them while taking most of the benefit for ourselves. I personally think this project will benefit bitcoin in the long run, but we shouldn't be surprised if other people don't see it that way. Rather than argue with them, I intend to prove them wrong Smiley
newbie
Activity: 41
Merit: 0
I am so sad that the contest isn't going to fairly compensate everyone for their work, but I'm really pumped that so many people are excited to contribute!
J.R. - I don't think you have a good read on these people.  They are all going to be fairly compensated.  Their compensation comes in producing fine results on a very interesting project.  Probably very few people are in this for the money. 

Don't spend another second being 'so sad that...' - your efforts to keep the project healthy and going down a good path are all they need as compensation to work hard.  Your organization of the project assures their efforts are not wasted.  It is a perfect synergy.  Forget about $$$, BTC, or MSC.  Building something cool is far more rewarding than having a pocket full of money.
However, hot chicks tend not to agree with that I suspect.
legendary
Activity: 1260
Merit: 1031
Rational Exuberance
Somebody asked me why I keep downplaying the money:

I am so sad that the contest isn't going to fairly compensate everyone for their work, but I'm really pumped that so many people are excited to contribute!

Why do you keep repeating that? I don't understand!
And it's really demotivating :s

Sorry - I'm just trying to manage expectations. If silicon-valley programmers join the effort thinking of it as a job motivated by money alone, they will be disappointed, and I'm trying to avoid that.


For people in other countries, the message is perhaps misplaced Smiley
hero member
Activity: 938
Merit: 1000
CHECKMULTISIG works right now (as far as I know), and arguments against it are largely theoretical: it does bloat UTXO space, but currently it isn't a limiting factor.

It is important that CHECKMULTISIG doesn't do permanent damage, unlike your current approach which does permanent damage.

The way I understand it is that the UTXO space can only bloat when an output is not-redeemable. Since the suggest multisig implementation uses a real/existing publickey it can always be redeemed. This holds true as long as my understanding of multisig outputs is correct. Since people are still worried about bloat I can only come to the conclusion that my understanding is wrong.

Question 1:
Having a valid public key in a 1-3 multisig is not enough to redeem said output and thus prevent UTXO bloat?

So my advice would be:

1. switch to CHECKMULTISIG ASAP
2. make it possible to use OP_RETURN approach

What I (think) to know about OP_RETURN is that it basically creates an unspendable output but at least we know it's unspendable. This is basically a way to destroy coins. Is this correct? And if so is this preferable to having increased UTXO space (if I indeed misunderstand spending multisigs).
member
Activity: 118
Merit: 10
I am mostly trying to do this alone since nobody seems willing/able to give proper technical feedback to my theories.

The people in the know did give technical feedback, but they did it one abstraction level above the one you're working on now.  Didn't you see this thread?  The bitcoin maintainers came out of the woodwork to say "no, stop, this is a terrible idea."  retep even compared mastercoin/dacoinmeister to BTCST/pirateat40.  The message is unified and clear: do not implement Mastercoin, these ideas are all deeply flawed.
legendary
Activity: 1260
Merit: 1031
Rational Exuberance
I thought I should make a post and detail what I'm working on Smiley

I'm currently attempting a build of a web wallet and block explorer - 'Masterchest'.  Some notes:

* Ground-up build (though bitcoind still used to return raw tx info over JSON-RPC)
* Hosted at masterchest.info
* Everything will be open sourced - I think this is in the best interests of a web wallet so the community can peer review for weaknesses etc
* The web wallet has simplicity in mind and will only manage MSC, not MSC & BTC.  This lowers risk and complexity.  You'll instead be able to simply buy 'transactions' (eg 20 for 0.01BTC - whatever it works out to be - I'll fund first 5 transactions myself for all users).  This allows the system to simply hold a count of each users available transactions rather than attempt to handle bitcoin funds too.
* Tools to lookup addresses and transactions (block explorer)
* Initial support will be simple send only
* There will definitely be restrictions on how many MSC you can store (probably <100MSC per account), especially during development

I have a family and a full-time job so time is already a luxury for me! but I bought some Mastercoins and I'd like to contribute to the project - doing my best to find time to work on this!  If by some miracle I complete all the functions I'll happily jump in to try and get my head around the storage issue to contribute, though I think brighter minds than mine are already hard at work on this.

At present I'm in the middle of finishing the parsing engine (decoding the raw transactions where Exodus is an output and warehousing them in a format that facilitates easy data retrieval) - I have a semi-working implementation but I'm not willing to open it up just yet. I'll post updates here as I (hopefully) progress.  

Edit: Pictures help so quick teaser screenshot


Awesome! We have a new entrant!

Well, maybe not so awesome for everybody else competing, but it's awesome for the MasterCoin project anyway Wink

I am so sad that the contest isn't going to fairly compensate everyone for their work, but I'm really pumped that so many people are excited to contribute!
legendary
Activity: 1260
Merit: 1031
Rational Exuberance
Wow, it's becoming harder and harder to stay up to date with Mastercoin.
First off, Tachikoma thank you for all your work. You've contributed far more than anyone else to Mastercoin. I'm sad to hear you are demotivated by the way some community members react.


Back to the new data method proposal: I can't see any error in the details of what you said. That transaction does contain the data, and the bitcoins are redeemable via the actual public key. Nevertheless, the mysterious PM dacoinminister cited got me thinking more broadly about the method. I think there might be a more general  problem in the concept of storing data in the blockchain using multisig txs. For mastercoin to work we need mastercoin transactions to be stored in a decentralized, permanent way (like bitcoin transactions are). Using multisig transactions and then taking the bitcoin away with the other key may cause the transaction to be pruned from the blockchain by future bitcoin clients (why would you need to store transactions which have all its outputs spent?). In fact, the same should happen with ANY method which doesn't bloat the UTXO. If a transaction can be pruned for whatever reason (multisig, op_return), it means bitcoin clients could potentially delete that transaction, thus deleting mastercoin data?

Clearly my technical knowledge of the bitcoin protocol is below most of the people reading/writing here, so I'm sorry if what I'm saying is stupid.

If my understanding is correct, bitcoin-only clients could ignore the transaction itself, but it would still be in the block chain for MasterCoin clients to use. Anybody storing the entire block-chain would have our transactions.

MasterCoin clients will want to do their own style of pruning - they don't need to look at or store any transaction which does not reference the Exodus Address. Currently that lets us ignore almost everything Smiley

For the record, I don't think this question is stupid at all.
sr. member
Activity: 266
Merit: 250
I thought I should make a post and detail what I'm working on Smiley

I'm currently attempting a build of a web wallet and block explorer - 'Masterchest'.  Some notes:

* Ground-up build (though bitcoind still used to return raw tx info over JSON-RPC)
* Hosted at masterchest.info
* Everything will be open sourced - I think this is in the best interests of a web wallet so the community can peer review for weaknesses etc
* The web wallet has simplicity in mind and will only manage MSC, not MSC & BTC.  This lowers risk and complexity.  You'll instead be able to simply buy 'transactions' (eg 20 for 0.01BTC - whatever it works out to be - I'll fund first 5 transactions myself for all users).  This allows the system to simply hold a count of each users available transactions rather than attempt to handle bitcoin funds too.
* Tools to lookup addresses and transactions (block explorer)
* Initial support will be simple send only
* There will definitely be restrictions on how many MSC you can store (probably <100MSC per account), especially during development

I have a family and a full-time job so time is already a luxury for me! but I bought some Mastercoins and I'd like to contribute to the project - doing my best to find time to work on this!  If by some miracle I complete all the functions I'll happily jump in to try and get my head around the storage issue to contribute, though I think brighter minds than mine are already hard at work on this.

At present I'm in the middle of finishing the parsing engine (decoding the raw transactions where Exodus is an output and warehousing them in a format that facilitates easy data retrieval) - I have a semi-working implementation but I'm not willing to open it up just yet. I'll post updates here as I (hopefully) progress.  

Edit: Pictures help so quick teaser screenshot
legendary
Activity: 1260
Merit: 1031
Rational Exuberance
CHECKMULTISIG works right now (as far as I know), and arguments against it are largely theoretical: it does bloat UTXO space, but currently it isn't a limiting factor.

It is important that CHECKMULTISIG doesn't do permanent damage, unlike your current approach which does permanent damage.

So my advice would be:

1. switch to CHECKMULTISIG ASAP
2. make it possible to use OP_RETURN approach

That is, you can write code to parse both CHECKMULTISIG and OP_RETURN, and test in on the testnet.

Code which creates transactions will use only CHECKMULTISIG now.

If at some point OP_RETURN will be viable, a new version of client can start using it: and old versions will be able to recognize such transactions too.

Now as CHECKMULTISIG adds more bloat to UTXO space, developers have an incentive to approve OP_RETURN.

I think everybody can agree that CHECKMULTISIG is definitely better than what you're doing now, so there are no reasons not to upgrade. (I mean, aside from desire to piggyback on existing clients.) Use of OP_RETURN is a separate issue.

Passive-aggressive strategy like you mentioned can work too, but it will create some junk in process, and, sadly, that junk will stay in UTXO set forever, which is kinda sad.

I like that approach, since it also doesn't waste Tachikoma's work on CHECKMULTISIG Smiley

Also, here's what Alan Reiner said:
Hi J.R. -- I'm not sure exactly what it is you're doing?  Embedding data in extra keys of a multi-sig script?  You're right, I'm pretty busy.  I'll take a cursory look but no guarantee I'll see the problem...

Yeah, it's between that and using OP_RETURN (opcode which may soon be supported), though most of the bitcoin core devs seem to favor OP_RETURN.

I completely understand busy - let me know if you have an opinion I can add to the mix Smiley

Thanks!
legendary
Activity: 1022
Merit: 1033
CHECKMULTISIG works right now (as far as I know), and arguments against it are largely theoretical: it does bloat UTXO space, but currently it isn't a limiting factor.

It is important that CHECKMULTISIG doesn't do permanent damage, unlike your current approach which does permanent damage.

So my advice would be:

1. switch to CHECKMULTISIG ASAP
2. make it possible to use OP_RETURN approach

That is, you can write code to parse both CHECKMULTISIG and OP_RETURN, and test in on the testnet.

Code which creates transactions will use only CHECKMULTISIG now.

If at some point OP_RETURN will be viable, a new version of client can start using it: and old versions will be able to recognize such transactions too.

Now as CHECKMULTISIG adds more bloat to UTXO space, developers have an incentive to approve OP_RETURN.

I think everybody can agree that CHECKMULTISIG is definitely better than what you're doing now, so there are no reasons not to upgrade. (I mean, aside from desire to piggyback on existing clients.) Use of OP_RETURN is a separate issue.

Passive-aggressive strategy like you mentioned can work too, but it will create some junk in process, and, sadly, that junk will stay in UTXO set forever, which is kinda sad.
legendary
Activity: 1260
Merit: 1031
Rational Exuberance
I don't really like the idea of using transactions that standard clients won't rebroadcast, and being at the mercy of a small group of non-standard miners to include our data. I'm also not willing to pause the project to wait for this change.

One way to handle this is to just broadcast both kinds of messages - the way currently defined in the spec AND the same data using the OP_RETURN message (which won't be relayed yet). Once the friendlier message starts getting relayed, we can stop broadcasting the unprunable ones. In order to avoid processing the same transaction twice, MasterCoin clients would only look at the unprunable transactions until some specified block number that we would all agree on when we would switch to only looking at the OP_RETURN transactions.

That might light a fire to get the change merged into bitcoin, and it makes it really easy to go back if OP_RETURN ever stops being supported.

It's maybe a bit passive-aggressive, but it seems low risk. Opinions?
legendary
Activity: 1260
Merit: 1031
Rational Exuberance
Mike Hearn also votes for OP_RETURN. His message and my reply:

You should just fix the issues with making provably unspendable OP_RETURN outputs. There's already an open pull request for it. I'm not a fan of any "solution" that involves putting things which are not keys into OP_CHECKMULTISIG scripts. They're intended for keys, not other data.

But I'm really unclear why you need to build things into Bitcoin anyway. If you or the people you're working with aren't able to make a merge mined coin with your current abilities, then maybe it's time to learn how? I explained years ago how alternative chains can interact with the Bitcoin chain (e.g. have the contents of your new database depend on the contents of the bitcoin database).

Thanks for your reply!

Making another alt-coin isn't really interesting to me, merged-mined or not. Frankly, I wouldn't have raised much money at all if I were trying to make another alt coin. I'm very committed to making a new protocol layer on top of bitcoin, but I want to do it in the most friendly way possible Smiley

edit:

Mike followed up with an appeal to stop what I'm doing entirely and reboot the project as an alt-chain! I of course refused, as charitably as I could:

Yes, I'm familiar with your reasons for not wanting to make an alt coin.

The fact that you raised money isn't relevant to anything. A block chain is merely a technical method to synchronise a database. It has no importance beyond that. To say a new block chain "competes" with Bitcoin is meaningless because there's no requirement that the block chain be used to create another currency. It could do anything that requires a key/value store. It could, for instance, track annotations to regular Bitcoin transactions but which are nonetheless not stored in the Bitcoin chain.

In short, your ideas for MasterCoin will succeed or fail independently of whether you use the Bitcoin block chain or create a new one. I suspect the real reason you want to use normal Bitcoin transactions is you don't have the technical skill required to implement your ideas in a separate system. This will not gain much sympathy from other people.

You're also going to cause big problems for other people who are building apps using the protocol as it was meant to be designed (like me) - now features we're using to make things will be seen as a vector for abuse (your abuse) and people will argue to remove those features rather than risk the viability of the core system. I've had to spend a lot of time arguing against people disabling useful features because of abuse by technically inadequate programmers, and I'm tired of it.

In short - stop now, step back, and evaluate alternative technical approaches. If necessary temporarily return money that was given to you and promise to come back with a MasterCoin v2 that resolves the valid technical concerns people have. If you don't then people with far more experience than you will start looking for ways to shut MasterCoin out of the network, and that would be a huge timesink and potentially quite damaging to both Bitcoin and MasterCoin itself. Nobody wants to go there.

Thanks Mike. I definitely understand your concerns, and I partially agree with your reasoning (partially, because I don't expect I would have any trouble making an alt chain, if my interests were in that direction). I can understand your frustration with wanting to have more features in bitcoin, balanced against the fear that people will abuse them.

I appreciate that it would be better for you (and perhaps lots of other people) if I stopped what I am doing and approached the matter from a different angle. However, I think it's much more constructive to recognize that people are going to try to do things like this, and try to minimize the impact on the block chain. Even if I did exactly as you suggest, someone else would try it, possibly even someone more foolish than myself, if you can imagine that Smiley

I understand that my approach may result in changes to bitcoin which might not be favorable to my project, but I spent quite a bit of time contemplating how to make sure my transactions didn't get banned from bitcoin, and I don't plan on relying on any mechanism that would allow that. Frankly, I simply can't conceive of anything that would shut MasterCoin out of the block chain permanently. Perhaps I just lack imagination.

You can predict my future actions with perfect accuracy if you simply assume that "J.R. will do what he thinks is best for the owners of MasterCoins", which of course includes myself. If I thought that a complete reboot of my project was in the best interests of my investors, I would do it in a heartbeat. Any argument attempting to get me to change direction must appeal to that motivation, not my compassion for whatever projects of yours that my project may be hindering, or my concern for the bitcoin economy in general, or . . . anything else at all. If it's not in the best interest of my investors, I won't do it. Period.

I really do appreciate your feedback though, and I highly respect your views on this matter. One thing that is in the interest of my investors is to make our project as bitcoin-friendly as possible, since if we don't, someone else will gain a competitive advantage over us by being better block-chain citizens.

Perhaps the end result will be that someone will create an alt-coin using merged mining which is more in line with what you would like to see, and that coin will win out by its inherent superiority. Perhaps you yourself might create it? If so, I sincerely wish you luck - I might even buy some!

-J.R.

Another reply. Looks like he'll be mostly satisfied if we just use OP_RETURN.

Well, you're assigning new semantics to existing transactions. So nothing stops you from hard-forking your own system onto a separate chain. You just say "at block height X on the bitcoin chain, the mastercoin genesis block will be initialized to the contents of the system at that height and all new mastercoin transactions take place on the new chain". It's not impossible or anything to split it off, as you already define the rules and indeed the system doesn't have much code yet.

At the moment it seems that MasterCoin transactions all pay money to the exodus address (i.e. you), so that seems like a fairly major giveaway. For your system to work, there has to be a way to identify the special transactions, and if your software can do it so can any other program. Perhaps I missed something but that seems fairly fundamental.

People are much more relaxed about provably unspendable outputs. Using the OP_RETURN form is a quick fix that doesn't require much effort on your part, but it does mean finishing off the work Jeff did on the bitcoind patch and getting it merged in, then starting to use it once people upgrade. Your software can recognise both forms so the transition is smooth.

Your current approach strikes me as similar to a company executive whose factory is dumping waste into a river. People in the community ask you to stop, and even suggest ideas for how to avoid doing it, but you simply answer that you only care about your shareholders and anyway, anyone can dump toxic waste in the river so it shouldn't matter that you're doing it. That may be so, but that attitude will alienate the people around you. Eventually it will cause problems.

The tiny outputs which reference the exodus address are not intended as a way to raise money, but merely as a convenience for finding our data in the block chain. We could switch to a different reference address at any time if for some reason bitcoin clients started looking for that address.

I think that's exactly the direction we are heading (using OP_RETURN once it becomes possible to do so). I DO want to minimize the toxic waste being dumped in the river, and thankfully I believe it is in the best interests of my investors to do so Smiley

I personally think that the river-polluting example is a pretty strong argument against an-cap world-views, but that is a different conversation  . . .
legendary
Activity: 1260
Merit: 1031
Rational Exuberance
Jeff Garzik's reply, from the other thread:

OP_RETURN is the current proposal that people have been using, for adding prune-able data to the blockchain.  Here is an example implementation for relaying such transactions https://github.com/bitcoin/bitcoin/pull/2738 and https://github.com/bitcoin/bitcoin/pull/2791 is the pruning piece.

alt-coins and similar schemes should at a minimum produce pruneable outputs or use inputs + P2SH.  The data remains available via blockchain, just not bloating the precise UTXO space.

CHECKMULTISIG schemes still bloat the UTXO space (unless they are P2SH).

This is another vote for using OP_RETURN. Tachikoma, I'm very interested in what you think about this approach!

edit:

It appears that this change to bitcoin hasn't actually been merged yet. I sent Jeff a follow-up question:

It appears that these changes haven't been merged yet?

The prune-unspendable is very likely to go in, and the general consensus is that OP_RETURN is the lesser of the various other more-bloat-producing solutions for timestamping data into the chain.  We did not want to put in OP_RETURN without having the prune-unspendable change in first.

Quote
I'm a little worried about relying on features which haven't been officially approved. What will current bitcoin implementations do with transactions using OP_RETURN - hopefully not reject them?

Most implementations today will not relay OP_RETURN transactions, meaning they will probably not be confirmed without a little extra legwork and patience.

All implementations will accept OP_RETURN in mined blocks, as it is a normal and supported opcode.

In practice, today, that means sending the transaction with appropriate fee attached to https://en.bitcoin.it/wiki/Free_transaction_relay_policy

After OP_RETURN is upstream, implementations will relay OP_RETURN transactions just like any other "standard" transaction.


legendary
Activity: 1260
Merit: 1031
Rational Exuberance
Chill!  This is VERY explainable.  Some of these guys really know a ton about bitcoin and how it works.  They are all very seriously pissed that Mastercoin - albeit not perfectly elegant - is a damn cool idea that they didn't think about.  Further, and this is the very hard part - now Mastercoin is very well funded.  These guys think they are far above Mastercoin technically and they are furious that they didn't find a way to raise $500,000 to advance their concepts.  Rather than help Mastercoin, they are going to beat it down from every angle - and try to take money away while Mastercoin grows.  Open source projects get F'd everytime by ego. 
Press on.  You don't need them.  You'll find your way clear of these minor obstacles and very soon will be far passed all their pussy fussing.  You don't need their inputs.  Their inputs are corrupt. 

Smiley
Jealousy often means you've got something good going on.

So far we only have one or two people acting this way. I'm hopeful that we'll get some good feedback from friendlier smart people soon Smiley
newbie
Activity: 41
Merit: 0
I'm sorry but this pisses me off beyond believe.
Believe me, I know how you feel. This project has forced me to thicken up my skin
Chill!  This is VERY explainable.  Some of these guys really know a ton about bitcoin and how it works.  They are all very seriously pissed that Mastercoin - albeit not perfectly elegant - is a damn cool idea that they didn't think about.  Further, and this is the very hard part - now Mastercoin is very well funded.  These guys think they are far above Mastercoin technically and they are furious that they didn't find a way to raise $500,000 to advance their concepts.  Rather than help Mastercoin, they are going to beat it down from every angle - and try to take money away while Mastercoin grows.  Open source projects get F'd everytime by ego. 
Press on.  You don't need them.  You'll find your way clear of these minor obstacles and very soon will be far passed all their pussy fussing.  You don't need their inputs.  Their inputs are corrupt. 

Smiley
Jealousy often means you've got something good going on.
legendary
Activity: 1260
Merit: 1031
Rational Exuberance

I'm sorry but this pisses me off beyond believe.

I've been spending a lot of my own free time, which I don't have much off, trying to help out this project. I am mostly trying to do this alone since nobody seems willing/able to give proper technical feedback to my theories. Now finally somebody steps forward who sees that something is wrong with my proposal but he wants to be paid in order to tell us what is wrong with it? Why not just specify what's wrong so we can work around it?

I won't be giving this any more energy if this is the way the community is going to respond to a group effort.

Believe me, I know how you feel. This project has forced me to thicken up my skin - people can be very cruel, especially when they are not face-to-face with somebody they are criticizing. I tried not to show it publicly, but I was very discouraged by some of the feedback I got early on.

Let's just ignore it for now. I don't personally see anything wrong with your method, but I figured I'd post the PM in case anybody else knew what he was talking about.

And no, I don't plan on paying to find out whatever this problem is. Hopefully if there is a problem, somebody will recognize it and post it.

You are right that most of us are not able to offer technical feedback, myself included for the time being, and some of those who are able seem to be less than charitable towards us, and/or are opportunistically aiming to extract a bunch of cash from our project funds.

However, there are a bunch of smart people in the bitcoin community, and they aren't all like that. I'll PM some other smart people and see if I can get us some proper feedback.

edit: PMs asking for comments have been sent to Gavin Andresen, Jeff Garzik, Mike Hearn, Gregory Maxwell, Peter Wiulle, Luke Dashjr, Alan Reiner, and maaku.

Can you guys think of anybody else?

Luke-Jr said:
Quote
Ok, I'll take a look when I get a chance. Not sure it'll be this week, but I'll try to squeeze it in if I can Smiley

hero member
Activity: 938
Merit: 1000
There are two types of multisig outputs available at the moment that are useful for us.

  • 1-out-of-3
  • 1-out-of-2

While technically I can think of no reason to not support any 1-out-of-n transactions, the reference client won't relay or mine these for now. It also seems then if you use uncompressed public keys they are not valid ECDSA points which means that we are stuck with compress public keys for now until somebody finds a way to use uncompressed ones.  

What this means is that we can use a maximum of 128 bytes per multisig-output (two compressed public keys of 64 bytes each). Since the first public key will always be one of our own public keys so we can redeem the output.

Grazcoin suggested we could use the public key to encode the Bitcoin address of the receiver. However I think this might be more trouble then it's worth. If you convert a Bitcoin address to a hex string you would end up with a 68 byte string. Which is just over the length of one public key. It would make parsing the much harder since you are guaranteed to need two ouputs for every transaction.

I would like to suggest that we keep the original spec and use one output for the receiving address.

We also need to rethink the sequence number. Since we always know what the target address is we no longer have to use a sequence number based on the receiving address and since public keys are kept in order in a multisig output (although I would appreciate if somebody could confirm this) we don't need sequences on a per public key basis, we need them per output.

We can just use a integer that counts up from zero, per multisig output, making sequencing much easier in the new situation.

A simple encoded simple send would look like (and forgive my horrible photoshop skills):



A complete tx could look something like this:

Code:
{"hash":"c4551b2e0b8470cc3e03212f823cb9a66580c512aa66ac71a4bfc0a6500dd1eb","ver":1,"vin_sz":1,"vout_sz":2,"lock_time":0,"size":305,
"in":[{"prev_out":{"hash":"c9fc3f6f8dc828d11eab3196393f13e8c147f835d2d0568df26009aba9617a6e","n":0},"scriptSig":"3046022100cb314569b0b194c2e510a101c5a6d9ec5a95a9a8cfc4009bd8f11affbec1b835022100b6e8b08be3b42e037a18f497a595996c40c49e83b114dc360601fdb3526e4d8001 04ea5fbd95738d81e3857067e8156b0887aad60ba2018c21807705c0e5cd4ee9f5187d56e6a827b5c7f54721c46c9c372bdc929a16f3331c3290fdbebc55a7572e"}],
"out":[
{"value":"0.00006000","scriptPubKey":"OP_DUP OP_HASH160 e8c6391242865cb288487d938f87d40706381c12 OP_EQUALVERIFY OP_CHECKSIG"},
{"value":"0.00006000","scriptPubKey":"OP_DUP OP_HASH160 exodusaddressshouldbeinsertedhere OP_EQUALVERIFY OP_CHECKSIG"},
{"value":"0.00006000","scriptPubKey":"1 02c5ac10feed00d99b6571bb42567d43e255b8ace9adf078908e3c4827f954d918 020000000001000000020000000000000001000000000000000000000000000000 2 OP_CHECKMULTISIG"}]}

I appreciate some feedback on this spec before I start writing code Smiley

First of all, I have to admit that I don't understand the inner working of bitcoin well enough yet to tell you if there is a problem with this method. (I'm working on it!) What you propose sounds reasonable to me, although I did receive this PM from a concerned party which seems to indicate there may be some hidden gotchas:

Quote
https://bitcointalksearch.org/topic/m.3164831

I was reading the above post describing efforts to come up with a new Mastercoin tx scheme; there are a lot of issues with the above, in particular misconceptions about how Bitcoin works, as well as missed opportunities to add censorship resistance. In addition there are potential upcoming changes to Bitcoin that could seriously harm your protocol - changes that may end up getting more support than otherwise because they do exactly that.

I'd can create a complete specification taking all these issues into account, including explaining those issues are exactly and what trade-offs (and alternatives) were involved in coming up with the spec. In short I plan to answer the question "How do you implement a blockchain on top of Bitcoin in a robust, low-resource, and censor-proof way?"

If you are interested let me know and we can work out a set of concrete deliverables: specification document, design rational, and (optionally) example code written in Python with python-bitcoinlib implementing the proposed specification. Any contract would be fixed price, no-cure-no-pay, with a third party approved by both parties acting as escrow in a 2-of-3 multisig transaction deciding if I had in fact completed it successfully. Jeff Garzik has done work along these lines in the past (pybond) and may be able to take on that role.

I'm not revealing the source, since it was a PM, but it was someone who I believe to have a pretty good grasp of the inner workings - better than my own understanding at any rate. It's also someone who is not particularly enthusiastic about this project, so I imagine their price for the work described would be more than we would be willing to pay. I of course invited them to participate in the contest, but I doubt they will.

I suggest we give Tachikoma's method a shot and see what happens. It may be that we have to change our encoding method again if our skeptical friend is right and future bitcoin changes make this method unworkable. Of course, if anybody has a better idea, I'd love to hear it.

I'm sorry but this pisses me off beyond believe.

I've been spending a lot of my own free time, which I don't have much off, trying to help out this project. I am mostly trying to do this alone since nobody seems willing/able to give proper technical feedback to my theories. Now finally somebody steps forward who sees that something is wrong with my proposal but he wants to be paid in order to tell us what is wrong with it? Why not just specify what's wrong so we can work around it?

I won't be giving this any more energy if this is the way the community is going to respond to a group effort.
legendary
Activity: 1260
Merit: 1031
Rational Exuberance
Aw crap. I meant to update the spec to change how the sequence numbers worked. Thanks for catching that.
When I was writing the code for MasterCoin Adviser, it occurred to me that it might be easier to parse MasterCoin transactions if the first data packet had the first sequence number, then additional data packets following, and then the reference packet last, with the last sequence number. But I never went back and updated the spec to reflect that change. I made that change because I thought it might help if we ever had transactions with data but no reference address.
Won't that be a problem when the data chunk is bigger than what fits in one address (20 bytes)? I mean, we'll need more than 1 sequence number, besides the reference sequence number. The only solution I see is to number the data addresses decreasingly from n-1 (n is reference sequence, n-1 for the first data address, n-2 for the second data address, etc), which seems untidy.

Anyway, I hope the alternate methods for data storage will make sequence numbers obsolete Smiley


I had intended Test MasterCoins to be used so I didn't have to create a TestNet version at all, but I have no opposition to TestNet implementations if that is helpful, especially if that helps reduce block-chain bloat Smiley
So... let's agree on a testnet address and epoch so that developers can test on the same grounds. Are you all OK with using miKnddGDQfU6rRYpLp2dhRyttnxH1WUo21 as the testnet exodus address (proposed by Tachikoma) and 15-Sept-2014 as the testnet epoch?

Yeah, I was going to do something similar to that untidy method (although I was going to have the lowest sequence number be the first data address), but as you say, it's not clear how the new method of storing our data affects sequence numbers. If we continue to use them, I'll be sure to update the spec so it is correct.
Jump to: