Pages:
Author

Topic: PoS is far inferior to PoW - why are so many people advocating switching to PoS - page 6. (Read 12865 times)

legendary
Activity: 1181
Merit: 1002
One of the advantages of PoW over any PoS variant is that it encourages innovation.

New generations would be welcome to come up with advancements in science, new technologies and even attempt to crack SHA256 or Scrypt in order to gain an advantage with PoW systems and get into the money flow.
PoW encourages hacker mentality (in a positive sense), with PoS however, if you don't own a stake in an entrenched system, you are out of luck.

Would you like old, filthy rich psychopaths to run the society in the future?
Choose PoW, protect the children! Smiley

With PoW you need to invest to "get into the money flow", the same holds true for PoS.
PoW and PoS have a tendency to favor early adopters assuming that a coin is successful.
No real difference, is there?

member
Activity: 70
Merit: 10
Bitcoin trolls back
One of the advantages of PoW over any PoS variant is that it encourages innovation.

New generations would be welcome to come up with advancements in science, new technologies and even attempt to crack SHA256 or Scrypt in order to gain an advantage with PoW systems and get into the money flow.
PoW encourages hacker mentality (in a positive sense), with PoS however, if you don't own a stake in an entrenched system, you are out of luck.

Would you like old, filthy rich psychopaths to run the society in the future?
Choose PoW, protect the children! Smiley
legendary
Activity: 1181
Merit: 1002
As for Economic Clustering.. Just 'Trust' wrapped up in a more complex way..

Agree, EC involves some level of trust (economic laws), not only math.

Not that big a deal though - NXT-philosophy is not a one-to-one copy of Bitcoin-philosophy.
legendary
Activity: 1225
Merit: 1000
any NEW user would download MY CHAIN.

Bob has a client that only downloads valid chains.
He sees 99 nodes with invalid chain and 1 node with valid chain (more stake involved).
Which one does he download?

My node knows which chain is valid, the one with more stake involved.

You need to build a valid longer chain without majority of stake. Which, as we are discussing, requires extreme amounts of computing power (calculations pending).
hero member
Activity: 574
Merit: 500
As for Economic Clustering.. Just 'Trust' wrapped up in a more complex way..

Please expand.
hero member
Activity: 718
Merit: 545
Well - in a POW chain, you see which chain has the most WORK put into it. This is independent of anyone. You just sum it up and choose the one with the most.

Well - in a POS chain, you see which chain has the most STAKE put into it. This is independent of anyone. You just sum it up and choose the one with the most.

simple as that.

I'm sorry - It's not.

My INVALID chain has just as much stake put into it as the VALID one.

I bought accounts that are empty now but were full of coins sometime in the past.. (Or hacked an exchange to get the keys to their now empty wallets etc..)

then my node would ignore your chain because it's invalid.

Of course..

But since I now have bots running half the network, any NEW user would download MY CHAIN.

And here's the kicker, they would have NO (trustless) WAY of knowing which of us is pushing the VALID chain.

As for Economic Clustering.. Just 'Trust' wrapped up in a more complex way..

 

hero member
Activity: 574
Merit: 500
Well - in a POW chain, you see which chain has the most WORK put into it. This is independent of anyone. You just sum it up and choose the one with the most.

Well - in a POS chain, you see which chain has the most STAKE put into it. This is independent of anyone. You just sum it up and choose the one with the most.

simple as that.

I'm sorry - It's not.

My INVALID chain has just as much stake put into it as the VALID one.

I bought accounts that are empty now but were full of coins sometime in the past.. (Or hacked an exchange to get the keys to their now empty wallets etc..)

Nxt will have a concept known as economic clustering, you join the chain with the largest economic cluster when you first join the network. But it won't be included before the Christmas so we can discuss in future just prior to release. Or there is an Economic Clustering sub forum in the Whitepaper section of nxtforum.org.


As discussed above, the history attack (have an old account(s) with a majority of stake and rebuild a better chain) doesn't work (in Nxt). As I said before, Nxt security is layered and interlocking (not all elements active at the moment) and I am sourcing and checking a complete answer for Dumbfruit above. The approach is too simplistic to work.


Come-from-Beyond is happy for everyone to sell their historic passphrases as this is not a threat. N.B there are no anti-clone traps in Nxt anymore, the post is from May.

Never give away your historical passphrases.

Delete you historical passphrases.



No need. I'm afraid I'll be forced to reveal the last anti-clones trap to explain why "nothing-at-stake" is just a buzzword and doesn't actually work. Feel free to sell historical passphrases. I'm just waiting for D&T's reply on the problem about Alice with 75% of the stake. I was always asking for details of such an attack, coz when one is trying to explain the details he sees that such the attack requires enormous computing power.
legendary
Activity: 1225
Merit: 1000
Well - in a POW chain, you see which chain has the most WORK put into it. This is independent of anyone. You just sum it up and choose the one with the most.

Well - in a POS chain, you see which chain has the most STAKE put into it. This is independent of anyone. You just sum it up and choose the one with the most.

simple as that.

I'm sorry - It's not.

My INVALID chain has just as much stake put into it as the VALID one.

I bought accounts that are empty now but were full of coins sometime in the past.. (Or hacked an exchange to get the keys to their now empty wallets etc..)

then my node would ignore your chain because it's invalid.
hero member
Activity: 718
Merit: 545
Well - in a POW chain, you see which chain has the most WORK put into it. This is independent of anyone. You just sum it up and choose the one with the most.

Well - in a POS chain, you see which chain has the most STAKE put into it. This is independent of anyone. You just sum it up and choose the one with the most.

simple as that.

I'm sorry - It's not.

My INVALID chain has just as much stake put into it as the VALID one.

I bought accounts that are empty now but were full of coins sometime in the past.. (Or hacked an exchange to get the keys to their now empty wallets etc..)
legendary
Activity: 1225
Merit: 1000
Well - in a POW chain, you see which chain has the most WORK put into it. This is independent of anyone. You just sum it up and choose the one with the most.

Well - in a POS chain, you see which chain has the most STAKE put into it. This is independent of anyone. You just sum it up and choose the one with the most.

simple as that.
hero member
Activity: 718
Merit: 545
Let's try a different attack..

When you first connect to a POS network you need to download the current valid chain.

If 2 Chains are presented to you what happens ?

Well - in a POW chain, you see which chain has the most WORK put into it. This is independent of anyone. You just sum it up and choose the one with the most.

In a POS chain, there is no way of knowing which chain is MORE valid than the other. You need to TRUST someone.

If I run a bot-net, that behaves absolutely correctly, so that it takes up 'Half' of the valid nodes in a network (EASY - even bitcoin is only 7000 nodes), for months, I can then launch a nice attack.

My assumption is that either I HAD - years/months/days back - an account with a large stake in the POS network but now do not or I buy the key off someone who had a large balance in the past - maybe from one of the 77 initial NXT stake holders.

I push out a chain, that I generate from way back when (Splitting it up etc etc to mask the hack), where everyone has the same balance (So you won't mind) EXCEPT for 2 or 3 large accounts where all the money has been given to me.

My bot net accepts it as valid and pushes it out as the correct chain.

The solution, for normal users, is to check with HEAD OFFICE - say the main NXT nodes - which is the valid chain, sure, but this requires something distributed consensus is supposed to remove. Trust.

Again - I like POS - it's just not ready for primetime yet, and worse, we still have no idea it ever will be.. (trustless)

legendary
Activity: 1008
Merit: 1001
Let the chips fall where they may.
Edit: Ideally, once coin creation ceases, mining fees will settle on an amount sufficient to secure the network. It is not clear that there is any stable feed-back mechanism to ensure this. Limited block-size may have to act as an approximation.
I'm not sure what you're getting at here. I think it depends on the value of the PoW coin on the free market and the amount of transactions that are occurring on its block chain. If the value isn't high enough and there aren't enough transactions then the network will possibly not be very secure as people will shut down their equipment. Someone could probably buy up that equipment for pennies on the dollar and mount a 51% attack on the less secure network. There are a lot of entities that would have incentive to do this.. banks, central banks, competing cryptocoins, governments pissed at dark markets and tax evaders, etc..
If the value and transaction volume is low, not much is lost if somebody attacks it. That is why I am not too concerned that it "only" costs about $300 Million to attack the Bitcoin network. If I want to be perfectly honest; Bitcoin has very small adoption at the moment. Bitcoin is not that important as a payment processing network in the scheme of things.

I agree the question of miner fees for securing the network is an open one. As somebody in another thread pointed out: we can switch to PoS if it becomes clear that fees are not sufficient to secure the network. That won't happen for decades.
Yes, it may not even happen in our lifetimes if at all, but I see it as being a possibiliy. There are some ALT coins that have quicker emission curves, so we will see how they are able to deal with it. We all know how Dogecoin went.. Monero is another one with a fast emission curve. If the crypto markets crashed really hard it could happen sooner than you'd think. I realize a PoW coin can switch later, but I think it is important that PoS be tweaked and improved upon now rather than later. That way if Bitcoin does have to switch it can switch to the best possible solution that has been "battle tested".

I think Dogecoin was simply a fad (that lasted a surprisingly long time). I will, however, be following Monero.
legendary
Activity: 1484
Merit: 1026
In Cryptocoins I Trust
You are missing the point of PoS. The point of PoS is not to be better at achieving decentralized consensus than Proof Of Waste. The point of PoS is to achieve sufficiently decentralized consensus without wasting a ton of electricity, therefore harming the environment, and/or wasting a ton of processing power that could be used to benefit society in one way or another. If you insist on PoW, then make the PoW beneficial to society like Primecoin or curing cancer... otherwise it is a waste of energy and processing power.

PoW coins can not use computations that are otherwise useful. If the computation is otherwise usedful, it can be pre-computed: weakening the security PoW is supposed to provide.
Quote from: Wiedai, B-money
1. The creation of money. Anyone can create money by broadcasting the
solution to a previously unsolved computational problem. The only
conditions are that it must be easy to determine how much computing effort
it took to solve the problem and the solution must otherwise have no
value, either practical or intellectual. The number of monetary units
created is equal to the cost of the computing effort in terms of a
standard basket of commodities. ...

Edit: Interesting to note that Bitcoin does not follow this algorithm long-term because, as CoinHoarder points out, money creation eventually ceases.
I understand it is not an easy thing to do as it must be hard to figure out but easy to verify. However, I think Primecoin has proven that PoW processing can benefit society in some way by advancing mathematical research by finding long chains of prime numbers. I have faith that a "better" use case will pop up sooner or later.. surely finding chains of prime numbers is not the only use case of useful PoW.

Furthermore, it is unclear whether Proof Of Waste will work once the block reward halvings stop and no more currency will be printed. Currently PoW coins are diluting their shareholders to pay for miners to secure their block chains.
This dilution helps spread coins around to new users.
I agree, however PoS coins can be diluted as well via interest with serves a similar purpose. The only truly deflationary coins I have seen are PoS, as with PoW the miners need to be paid. Personally for a store of value, I would prefer a truly deflationary coin.

It lowers the barriers to entry if some organization manages to take control of the majority of the coins/hash-power for some reason.
I'm not sure I agree with this. It is possibly a deterrent from those thing happening, but it would not affect someone that was determined enough to do so and had deep pockets.

Put another way, scarcity will make the price rise, which will encourage somebody, somewhere to plug in a miner.
Not necessarily. That's why it's called supply and demand, and not simply supply.

In a PoS coin, I am not sure why anyone would sell enough stake to lose control over the "forging". The whole point is that stake costs almost nothing to maintain.
In some versions of PoS I agree with this point.. when stake is generated proportional to the amount of coins you own. However, in DPoS (and possibly others) this is a non issue. All stakeholders benefit equally from securing the block chain as no interest is paid. Fees are destroyed in the PoS process, thus increasing everyone's buying power equally. It is one of the few truly deflationary coins I have seen. Bitshares just implemented dilution.. but it is so the block chain can hire employees and improve upon itself through funding development, marketing, etc.. otherwise DPoS has the potential to be truly deflationary as it has been since its launch.

I agree the question of miner fees for securing the network is an open one. As somebody in another thread pointed out: we can switch to PoS if it becomes clear that fees are not sufficient to secure the network. That won't happen for decades.
Yes, it may not even happen in our lifetimes if at all, but I see it as being a possibiliy. There are some ALT coins that have quicker emission curves, so we will see how they are able to deal with it. We all know how Dogecoin went.. Monero is another one with a fast emission curve. If the crypto markets crashed really hard it could happen sooner than you'd think. I realize a PoW coin can switch later, but I think it is important that PoS be tweaked and improved upon now rather than later. That way if Bitcoin does have to switch it can switch to the best possible solution that has been "battle tested".

Edit: Ideally, once coin creation ceases, mining fees will settle on an amount sufficient to secure the network. It is not clear that there is any stable feed-back mechanism to ensure this. Limited block-size may have to act as an approximation.
I'm not sure what you're getting at here. I think it depends on the value of the PoW coin on the free market and the amount of transactions that are occurring on its block chain. If the value isn't high enough and there aren't enough transactions then the network will possibly not be very secure as people will shut down their equipment. Someone could probably buy up that equipment for pennies on the dollar and mount a 51% attack on the less secure network. There are a lot of entities that would have incentive to do this.. banks, central banks, competing cryptocoins, governments pissed at dark markets and tax evaders, etc..
legendary
Activity: 1008
Merit: 1001
Let the chips fall where they may.
You are missing the point of PoS. The point of PoS is not to be better at achieving decentralized consensus than Proof Of Waste. The point of PoS is to achieve sufficiently decentralized consensus without wasting a ton of electricity, therefore harming the environment, and/or wasting a ton of processing power that could be used to benefit society in one way or another. If you insist on PoW, then make the PoW beneficial to society like Primecoin or curing cancer... otherwise it is a waste of energy and processing power.

PoW coins can not use computations that are otherwise useful. If the computation is otherwise usedful, it can be pre-computed: weakening the security PoW is supposed to provide.
Furthermore, it is unclear whether Proof Of Waste will work once the block reward halvings stop and no more currency will be printed. Currently PoW coins are diluting their shareholders to pay for miners to secure their block chains.
This dilution helps spread coins around to new users. It lowers the barriers to entry if some organization manages to take control of the majority of the coins/hash-power for some reason. Put another way, scarcity will make the price rise, which will encourage somebody, somewhere to plug in a miner. In a PoS coin, I am not sure why anyone would sell enough stake to lose control over the "forging". The whole point is that stake costs almost nothing to maintain.

I agree the question of miner fees for securing the network is an open one. As somebody in another thread pointed out: we can switch to PoS if it becomes clear that fees are not sufficient to secure the network. That won't happen for decades.

Edit: Ideally, once coin creation ceases, mining fees will settle on an amount sufficient to secure the network. It is not clear that there is any stable feed-back mechanism to ensure this. Limited block-size may have to act as an approximation.
sr. member
Activity: 378
Merit: 250
If you reverse PoS and PoW in your post, then your post would be 100% accurate and correct Smiley
Doesn't it cost nothing to attack a PoS coin? While you must use actual resources to attempt to attack a PoW coin?

Nope, just the contrary. In a PoW system, once you own the hardware, it cost nearly nothing to attack any eco-system that uses the same algorithm. As shown by many PoW altcoins attacked to death.

In a PoS system, acquiring enough stake to attack will cost you astronomical amount of money, (you can't really hack the stake, since it's illegitimate stake and can be rolled back by community action). Then once you acquire the stake, you could only attack one particular PoS system (which you own a majority stake in, why would you attack it? it's illogical).

Therefore, ZERO PoS system has been actually attacked so far.

I'm not sure why people ignore the fact that tons of PoW altcoin has been attacked, and ZERO PoS altcoin attacked so far, and still have the audacity to claim PoS is less secure.
kokojie nails it on the head.  A POW 51% attacker WILL attack a coin to steal and double spend  destroying the coins value and move on to another coin to attack, steal from and destroy.  But this will practically never happen to a POS coin because the attacker would be attacking his own money that he already owns and would be destroying the value of his own wealth in the process.

Add in the fact that POW is so obscenely wasteful for zero benefit when compared to POS and one begins to realize the evolutionary advantage of POS mining vs POW mining and why more and more Bitcoin devotees have been seeing the benefits of POS.
legendary
Activity: 1484
Merit: 1026
In Cryptocoins I Trust
What I wrote about Bitshares was obviously not some security analysis. I was demonstrating the clear overwhelming complexity that PoS brings in order to "solve" a problem that is solved very well and very simply with PoW.

Basically, I have no idea what's going on here, it sounds pretty unworkable.

You are missing the point of PoS. The point of PoS is not to be better at achieving decentralized consensus than Proof Of Waste. The point of PoS is to achieve sufficiently decentralized consensus without wasting a ton of electricity, therefore harming the environment, and/or wasting a ton of processing power that could be used to benefit society in one way or another. If you insist on PoW, then make the PoW beneficial to society like Primecoin or curing cancer... otherwise it is a waste of energy and processing power.

Furthermore, it is unclear whether Proof Of Waste will work once the block reward halvings stop and no more currency will be printed. Currently PoW coins are diluting their shareholders to pay for miners to secure their block chains. The only coin that is far enough along in its emission curve (Dogecoin) needed to switch to a merge mine coin because no one was mining it. If it is not profitable to secure the block chain then no one will and it leaves the coin wide open for attacks. If the biggest PoW coin's values don't rise enough so that the transaction fees alone will pay for miners to secure the block chains, then they will need to eventually change their consensus algorithms or be left wide open to attacks. In other words, it may be inevitable that all coins eventually have to switch from Proof Of Waste, so that is another reason why it is important that PoS exists and people are altering and improving upon it.
sr. member
Activity: 433
Merit: 267
What I wrote about Bitshares was obviously not some security analysis. I was demonstrating the clear overwhelming complexity that PoS brings in order to "solve" a problem that is solved very well and very simply with PoW.

Basically, I have no idea what's going on here, it sounds pretty unworkable.
legendary
Activity: 1484
Merit: 1026
In Cryptocoins I Trust
I have been touting Myriadcoin as one of the biggest innovations in the PoW cryptocurrency world. It is definitely a step forward. Unfortunately, it still doesn't change the fact that a lot of electricity and processing power is wasted in the process.

PoW or not, it doesn't use that much electricity now, it's basically useless... You can relax knowing that less than 200 USD worth of electricity is wasted daily to sustain this coin.

Millions of dollars in electricity is wasted every day to support all PoW coins. The main culprits being Bitcoin and Litecoin, obviously smaller chains use less energy and processing power. If all PoW coins were to switch to a Myriadcoin-like approach to PoW, it would not change this fact and the problem still exists.

BTW- although I have touted Myriadcoin as being an improvement to PoW in general, I have never touted it as a good investment. There are a lot more dynamics than simply what consensus algorithm it uses as to the price realization of a cryptocurrency which is traded on a free market. Features, inflation, community, developers, development goals, innovations, marketing, security, adoption, etc... all plays into price discovery. All factors need to be considered when deciding which coins to invest in.
legendary
Activity: 1484
Merit: 1026
In Cryptocoins I Trust
Let's consider Proof Of Waste for a second. 51% of Bitcoin's hash power is on 2 to 3 mining pools. The paid NOTHING to obtain it. You are entrusting them directly (or indirectly when they get "hacked") to not fork your coin. By the way... this statement I can back up with facts and readily available data. Wink
First, it's not "waste". It's a highly specific impossible to forge or reuse effort to ensure security while also fairly converting value (energy) into tokens, bridging the outside and indise economy seamlessly.

The pools and their costs argument is only temporarily valid. The pools paid nothing, but they have nothing long-term. If they fuck up, miners will move quickly, miners paid A LOT of money for their power and have not usually recouped. I am entrusting the miners that need to collaborate and play fairly to profit.

You see the difference now?
It is waste in that it wastes electricity and processing power unnecessarily as has been proven by PoS. This is something Bytemaster (Bitshares main dev) came up with, for the Bitshares community to refer to PoW as Proof Of Waste to point out the fact that it is unnecessary to expend these resources simply to secure a block chain, as is proven by PoS and all of its variants.

I will concede you have a point as to the pools only being able to mount an attack temporarily before everyone switches pools. However, I stick to the fact that you simply made up "as it happens for many coins an exchange owns more than 51% of the supply", and you have no proof of this and it is not true. The point was that there are different attack vectors for PoW that exist other than achieving 51% of the hash power. Both PoW and PoS variants have vulnerabilities and different pros and cons. There is no perfect solution, and I believe that PoW is often touted on these forums as being a perfect solution when in actuality it is not.
I disagree again.

It is not waste, it is a conversion of energy value into coin value. PoS coins (various types as you mentioned) also use a method to get value into the coin itself:
- PoW stage: it's the same as a fully PoW coin, just that coin emission ends very quickly and is unfairly distributed with regards to future investors.
- gib muny: just "devs" ripping off investors and collecting pots of bitcoin (the irony) to give price decaying coins to them

There can be only one instance of proof when an exchange owns 51% of the supply, when all depositors account for all deposits in various known addresses and reach a 51% sum, otherwise it's not ensured that you can detect a 51% ownership.

Again, PoW attack vectors are valid for mere HOURS, while a PoS attack vector can be used FOREVER once it opens up. This is a very HUGE difference in the security model which reduces the effect of the attack.

This is not accurate. All decentralized consensus algos are vulnerable to 51% attacks whether it be PoS or PoW. Someone with enough hash power to 51% a PoW network can do so forever, or until the PoW network forks and changes PoW algos. Someone with 51% stake of a PoS coin can 51% the coin forever, or until the PoS network forks and burns the attacker's stake.

Going back to the PoW "waste" which you pretty headed PoS supporters don't seem to understand not even 6 years after Bitcoin was invented. This is not "waste", it is a cost that is converted into new coins (scheduled or fees) from block rewards. The approximate cost to generate a block is found in the value of new tokens. This cost is real and significant, this gives value to Bitcoin.

The cost of generating PoS blocks is basically zero (5$ a month for electricity on donated hardware or a VPS bill). The value of the block rewards is thus zero, this gives no value to new PoS coins, the market cap remains the same, but new coins are added. Price per existing coin will be lower.

What does this mean? Let me show you:

PoW
Bitcoin: 0.7% price growth every day for 6 years, 5,678,828,589 USD market cap
Litecoin: oscilating but stable parity with Bitcoin for 3 years, 138,439,389 USD market cap
Namecoin: oscilating but stable parity with Bitcoin for 3 years, 10,064,647 USD market cap

Hybrid
Peercoin: oscilating but stable parity with Bitcoin for 2 years, 18,474,609 USD market cap
Novacoin: down the shitter in 2 years, 640,582 USD market cap
YACoin: down the shitter in 2 years, 37,320 USD market cap

PoS
I'll let you pick the best examples older than one year


It is waste though in that it wastes electricity and processing power unnecessarily to achieve decentralized consensus. As to your price examples... purely PoS coins havent even been out a full year so it is too early to make those comparisons, but I speculate that it will be no different than PoW coins. Bitshares for instance has increased in value this year, whereas Bitcoin has gone down in value. You can cherry pick data points that support your argument, but it doesn't necessarily mean what you are saying is true.
legendary
Activity: 1442
Merit: 1005
I have been touting Myriadcoin as one of the biggest innovations in the PoW cryptocurrency world. It is definitely a step forward. Unfortunately, it still doesn't change the fact that a lot of electricity and processing power is wasted in the process.

PoW or not, it doesn't use that much electricity now, it's basically useless... You can relax knowing that less than 200 USD worth of electricity is wasted daily to sustain this coin.
Pages:
Jump to: