Pages:
Author

Topic: POW vs. POS - page 5. (Read 3657 times)

legendary
Activity: 1456
Merit: 1175
Always remember the cause!
July 29, 2018, 02:05:57 AM
#59
Look here aliashraf , to even attempt said attack, requires a Multistaking PoS client.
There are none!
Therefore a N@S attack is pure imagined theory , with no basis for concern in the real world.
The existence or not of a "multistaking client" is irrelevant (there could be multistaking clients, hidden on private hard drives, that are carrying on an attack right now Wink ).
.....
I also don't agree that PoS "was only not attacked because you only could cash out a few millions." A few millions are enough to incentive a hacker - if an attack was easy. If an attack is hard, then PoS is doing what it needs to do - it seems to be harder than to attack a Bitcoin fork with a "market cap" in the same order of magnitude than NEM or Cardano. Wink

I also think the "bank comparison" is a bit apples and oranges Wink

I was just mentioning that these coins worth practically an order of magnitude less than what coinmarketcap reports and for an attacker, stealing a fraction of such a coin is not enough incentive.

Plus, 'bank comparison' is to the point: The whole fiat currency and banking system is based on the same subjective idea of money and interest that PoS is based on. The thing is banks are matured while PoS is not.
For instance banks have implemented sharding (Vitalik's dream) already: operational banks maintain their 'shard' of the ledger because they have deposited enough stakes in the network.
legendary
Activity: 3906
Merit: 6249
Decentralization Maximalist
July 28, 2018, 06:06:40 PM
#58
Look here aliashraf , to even attempt said attack, requires a Multistaking PoS client.
There are none!
Therefore a N@S attack is pure imagined theory , with no basis for concern in the real world.
The existence or not of a "multistaking client" is irrelevant (there could be multistaking clients, hidden on private hard drives, that are carrying on an attack right now Wink ).

What is relevant, however, is that the incentive for "multistaking" is extremely small in most current PoS coins. Most Peercoin-based coins pay out a coin-age-based reward, limited to the percentage of your stake per coin-year. So it doesn't really matter if you find two or ten blocks per year if you're continuously staking, because you always only can get this percentage, e.g. 1% per year in Peercoin.

Coins with transaction fees as rewards, like NXT or NEM, or coins with a difficulty-determined reward (mimicking Bitcoin) are more vulnerable to multistaking (and therefore for N@S-based attacks), because in this case you really get more rewards if you stake on every chain that appears because it increases your chance to find more blocks. The reason there is (probably) no multistaking in these coins is, in my opinion, that the transaction fees are too small and most staking/forging in these coins is done by big whales which have no interest in devaluing their coin stake.

I also don't agree that PoS "was only not attacked because you only could cash out a few millions." A few millions are enough to incentive a hacker - if an attack was easy. If an attack is hard, then PoS is doing what it needs to do - it seems to be harder than to attack a Bitcoin fork with a "market cap" in the same order of magnitude than NEM or Cardano. Wink

I also think the "bank comparison" is a bit apples and oranges Wink

(My stance on the question: PoW is more secure, while PoS may be secure enough for a cryptocurrency, and in this case its smaller energy footprint makes it a more efficient and cheaper system. But I really don't like the amount of ideology and tribalism popping up when this topic is discussed - it's as boring as the bigblock/smallblock discussion.)
legendary
Activity: 1456
Merit: 1175
Always remember the cause!
July 28, 2018, 04:51:00 PM
#57
It is not how we discuss attacks (in this forum at least), we don't say this or that vulnerability is imaginary because it has not been carried out by a hacker or an adversary. A protocol should maintain its consistency against any hypothetical attack.

Look here aliashraf , to even attempt said attack, requires a Multistaking PoS client.
There are none!
Therefore a N@S attack is pure imagined theory , with no basis for concern in the real world.

Tell me what is it you fear so much about a theoretical N@S attack, and I tell you why you have nothing to fear.

Because I explored it as a threat and every time it came up as a non-event.
It either negated itself or had no real effect during every scenario people threw out.

If you see no N@S attack, it is because PoS coins don't worth such an attack right now,. One shouldn't be fooled with billion dollars market cap index, no PoS coin can be cashed out more than few million dollars without a significant price drop.

PoS is not a new idea. We have PoS in its ultimate (and failed) form right now:
Traditional banking systems and fiat currencies are PoS based, they resemble what PoS is going to offer: a subjective store of value, centralized in shards  of big stake/money holders (banks) which are coordinated by a central entity in charge of clearing inter-shard transactions and inflation.

Your confusion is sad.

Proof of Stake is a Consensus method.

Banks make money by growing debt and loaning out money they don't have, therefore using debt as money creation.
No, yours is sad, imo. The whole 'thing' you call it stake is nothing other than debt, a continuously growing debt that accumulates primarily in the hands of top 1% who are the ones in charge of everything. When such a system is supposed to act in large economic scales the big ones will have no choice other than loaning fractions of their coins to ordinary people and businesses for these loans they should evaluate credibility of their customers, take mortgages, ...

member
Activity: 364
Merit: 13
Killing Lightning Network with a 51% Ignore attack
July 28, 2018, 04:47:07 PM
#56
Muh,
If you want some reward > work for! PoW
Meh
If you already have too much wealth, let it work for you and get richer.  PoS
Why on earth Vitalik wants the latter, now he is fucking rich?
PoW has just too many unforeseen external risks, nahh, he does not want to get decentralized by these again...
PoS = proof of shit


Sounds like you need to stick with fiat.  Wink
hv_
legendary
Activity: 2534
Merit: 1055
Clean Code and Scale
July 28, 2018, 10:33:22 AM
#55
Muh,

If you want some reward > work for! PoW


Meh

If you already have too much wealth, let it work for you and get richer.  PoS



Why on earth Vitalik wants the latter, now he is fucking rich?


PoW has just too many unforeseen external risks, nahh, he does not want to get decentralized by these again...


PoS = proof of shit
member
Activity: 364
Merit: 13
Killing Lightning Network with a 51% Ignore attack
July 28, 2018, 04:44:56 AM
#54
It is not how we discuss attacks (in this forum at least), we don't say this or that vulnerability is imaginary because it has not been carried out by a hacker or an adversary. A protocol should maintain its consistency against any hypothetical attack.

Look here aliashraf , to even attempt said attack, requires a Multistaking PoS client.
There are none!
Therefore a N@S attack is pure imagined theory , with no basis for concern in the real world.

Tell me what is it you fear so much about a theoretical N@S attack, and I tell you why you have nothing to fear.

Because I explored it as a threat and every time it came up as a non-event.
It either negated itself or had no real effect during every scenario people threw out.

So what is it exactly you think an imagined N@S attack could do?





PoS is not a new idea. We have PoS in its ultimate (and failed) form right now:
Traditional banking systems and fiat currencies are PoS based, they resemble what PoS is going to offer: a subjective store of value, centralized in shards  of big stake/money holders (banks) which are coordinated by a central entity in charge of clearing inter-shard transactions and inflation.

Your confusion is sad.

Proof of Stake is a Consensus method.

Banks make money by growing debt and loaning out money they don't have, therefore using debt as money creation.

Proof of Stake does not use Debt, it is more like an agricultural product, you need some to grow more. There is no debt in the system.

The Banks use fractional reserves to rip off the masses,

In Proof of Stake you either own a coin or you don't , there is no debt and their is no fractional reserve shenanigans.

You might want to study up on the Goldsmiths that became the 1st banks, to end your personal confusion.  Wink

legendary
Activity: 1456
Merit: 1175
Always remember the cause!
July 28, 2018, 03:13:46 AM
#53
Anyway, PoS "nothing at stake" and "long-range attack" are real problems, not a myth.
https://www.google.com/search?q=%22nothing+at+stake%22&pws=0
https://www.google.com/search?q=%22long+range+attack%22&pws=0

Exactly why do you think a Nothing at Stake is an issue.
Exactly what damage do you think it can do, so I can tell you why you are mistaken.

(You apparently did not bother to read : https://bitcointalksearch.org/topic/m.42945673 )
Only a few posts above your misinformed post.

There are NO Multistaking Proof of Stake clients.


So without that it is literally a MYTH!
Sorry to have to break this to you , Your Imagination is not Reality.
It is not how we discuss attacks (in this forum at least), we don't say this or that vulnerability is imaginary because it has not been carried out by a hacker or an adversary. A protocol should maintain its consistency against any hypothetical attack.

Quote
Reading is really not your strong suit, you did not even read the 5th link in your own google post above.   Cheesy
Which States: Nothing Considered: A look at Nothing at Stake Vulnerability for Cryptocurrencies
https://pivx.org/nothing-considered-a-look-at-nothing-at-stake-vulnerability-for-cryptocurrencies/
Quote
presstab, Core Developer, Pivx

Abstract—Nothing at stake is a routine argument launched against any and all Proof of Stake proof systems.
Although the argument has some interesting components to it, it is should be seen as something of very little concern for a Proof of Stake based cryptocurrency.
A wide distribution of staking power as well as a wide distribution of honest nodes will easily prevent any line of attack from the nothing at stake scenario.
Really? This is what you and your bible got? A 'wide distribution' of staking power? And how is it possible to have such a distribution? There is no guarantee.
Actually socio-economics suggests pyramid like distributions of wealth and power in which top 1% of stake holders own +30% of the total wealth and top 20% control 80%, ...

PoS is not a new idea. We have PoS in its ultimate (and failed) form right now:
Traditional banking systems and fiat currencies are PoS based, they resemble what PoS is going to offer: a subjective store of value, centralized in shards  of big stake/money holders (banks) which are coordinated by a central entity in charge of clearing inter-shard transactions and inflation.



member
Activity: 364
Merit: 13
Killing Lightning Network with a 51% Ignore attack
July 27, 2018, 06:14:56 PM
#52
Anyway, PoS "nothing at stake" and "long-range attack" are real problems, not a myth.
https://www.google.com/search?q=%22nothing+at+stake%22&pws=0
https://www.google.com/search?q=%22long+range+attack%22&pws=0

Exactly why do you think a Nothing at Stake is an issue.
Exactly what damage do you think it can do, so I can tell you why you are mistaken.

(You apparently did not bother to read : https://bitcointalksearch.org/topic/m.42945673 )
Only a few posts above your misinformed post.

There are NO Multistaking Proof of Stake clients.


So without that it is literally a MYTH!
Sorry to have to break this to you , Your Imagination is not Reality.

Reading is really not your strong suit, you did not even read the 5th link in your own google post above.   Cheesy
Which States: Nothing Considered: A look at Nothing at Stake Vulnerability for Cryptocurrencies
https://pivx.org/nothing-considered-a-look-at-nothing-at-stake-vulnerability-for-cryptocurrencies/
PoW is more secure than PoS;
PoS is faster and cheaper than PoW;
Since PoW is very expensive, there will be an only small amount of PoW coins;
There is no PoW vs PoS, each has a different purpose.

There is no proof PoW is more secure , only more wasteful of electricity.
Chinese Mining Pools had ~70% dominance for over 2 years now in bitcoin,
they could 51% attack bitcoin at any time (still can), they choose not to, but that was not security, just greed that stopped them.

Speed and price of a coin are not determined by whether they are PoS or PoW.
Speed is determined by coded blockspeed, and price is determined by markets.

The code decides how many coins their are , not the consensus method.
example
Diamond PoS coin has less than 5 million coins.
NewYorkCoin PoW coin has over 134 Billion coins.  

* Bitcoin 21 million coin limit is nothing more than a number in the code of when to no longer give more block rewards.*
* Developers could change it at a moments notice and if people updated , it would become reality. *
copper member
Activity: 2324
Merit: 2142
Slots Enthusiast & Expert
July 27, 2018, 05:11:14 PM
#51
Is this debate still going?

PoW is more secure than PoS;
PoS is faster and cheaper than PoW;
Since PoW is very expensive, there will be an only small amount of PoW coins;
There is no PoW vs PoS, each has a different purpose.

Anyway, PoS "nothing at stake" and "long-range attack" are real problems, not a myth.
https://www.google.com/search?q=%22nothing+at+stake%22&pws=0
https://www.google.com/search?q=%22long+range+attack%22&pws=0

Just like PoW "51% attack"
https://www.google.com/search?q=51%25+attack&pws=0
newbie
Activity: 30
Merit: 0
July 27, 2018, 02:58:17 AM
#50
it's correct, but:

The core of the POW algorithm is the computer power resource. More energy is needed for the computer system to get the best answer. If you look at the ecological aspects this is not at all beneficial. Mine workers use too much energy and cause bad effects on the environment.

POS is considered to be a fairer system than proof-of-work when everyone can become a miner. No matter large or small, the scale of exploitation will be linearly proportional to the number of shares held. This encourages the community to engage in transactional verification, increasing decentralization and democracy.
member
Activity: 364
Merit: 13
Killing Lightning Network with a 51% Ignore attack
July 26, 2018, 09:57:54 PM
#49
POS: You have to proof you hodl
POW: You have to proof you worked

POS: is a try to create a cost/opportunity from nothing . You can generate infinite parallel chain for free.
    
In example, there is a conflict between history A and history B, with POW you CAN'T confirm both histories, you have to choose one. So the longest history win.
with POS you can confirm both histories at the same time at not cost.
so to solve this you need a social meta-consensus making POS not necesary  at all.

POS security is based on some kind of punishment making it more similar to LN than blockchain. With the difference that LN fail only affect a local environment, a POS fail affect all the global environment.


Hmm, you seem to be confused and think the nothing at stake mythology is a real problem.
Standard PoS wallets don't Multi-stake, meaning your n@s myth can't currently even be attempted.

If someone did waste their time and make a multi-staking wallet, it would do nothing but waste endless amounts of ram and processing power and energy attempting to stake multiple chains versions simultaneously, essentially becoming closer to a wasteful proof of work than an energy efficient proof of stake.
Example: The more blocks you try and run in parallel the more resources you waste.
Their is zero benefit to even attempting it, which is probably why no one has even bothered to write a multi-staking PoS client, years after the myth was spread

Additional examples:
https://bitcointalksearch.org/topic/m.17135430
https://bitcointalksearch.org/topic/m.17136990
 

https://www.reddit.com/r/NXT/comments/2sewhu/nothing_at_stake_attack_researched_and_deemed_not/
Quote
3. Nothing-at-stake attack - not possible at the moment! Will be possible when a lot of forgers will use multiple-branch forging to increase profits.
Then attacker can contribute to all the chains(some of them e.g. containing a transaction) then start to contribute to one chain only behind the best(containing no transaction) making it winner. Previous statements on N@S attack made with assumption it costs nothing to contribute to an each fork possible and that makes N@S attack a disaster.
In fact, it's not possible at all to contribute to each fork possible, as number of forks growing exponentially with time.
So the only strategy for a multibranch forger is to contribute to N best forks.
In such scenario attack is possible only within short-range e.g. with 25 confirmations needed 10% attacker can't make an attack.
And attack is pretty random in nature, it's impossible to predict whether 2 forks will be within N best forks(from exponentially growing set) for k confirmations.
So from our point of view the importance of the attack is pretty overblown.

FYI:
The Longest Chain with the Highest Difficulty wins in Proof of Stake as well.
With Proof of Stake , however the number of coins per block and the target speed help determine the true difficulty for a Proof of Stake coin.
hashProofOfStake <= [Coin-age] x [Target]   
[Coin-age] = [amount of coins] x [days in stake]   
   
Target is the difficulty adjusted # to make sure the coin meets it's rated block speed.
More blocks staking means higher Target #s.

PoS coins that removed coin age are
hashProofOfStake <= [amount of coins] x [Target]   


FYI2:
Your Comparison of Proof of Stake to Lightning network is flawed.
Lightning network is nothing more than an offchain payment system, ie: LN Notes/IOUs for redemption of segwit coins or basically Centralized Banking 2.0
(Any Coin that activated segwit could work on LN, such as litecoin or groestlcoin. Like most offchain systems LN is not limited to bitcoin.)

Proof of Stake is a energy efficient Consensus Method for determining the next block chosen.

member
Activity: 322
Merit: 20
May 27, 2018, 03:29:15 PM
#48
The problem is that there is a misconception about PoW impacting the climate on a large scale. For example, mining gold and other ores can be much more energy intensive; more insights you can get from this article (several months old): https://www.zerohedge.com/news/2017-11-04/bitcoin-vs-gold-which-ones-bubble-how-much-energy-do-they-really-consume although there are other reports with more recent information on the internet

Of course, there are things that affect the enviroment more then miners, but it doesn't mean that this is not a problem at all. Why should we turn the whole planet into one huge mining farm, if we talk about mass adoption of crypto? I know PoS also has so many cons, but now we actually see a new proof-of-anything algorythm in every other project, so we shouldn't look a PoW and PoS as at two polar opposites, like black and white.

BTW, the OP may want to check this for more technical details: https://bitfury.com/content/downloads/pos-vs-pow-1.0.2.pdf
member
Activity: 168
Merit: 47
8426 2618 9F5F C7BF 22BD E814 763A 57A1 AA19 E681
May 27, 2018, 11:50:29 AM
#47
POS: You have to proof you hodl
POW: You have to proof you worked

POS: is a try to create a cost/opportunity from nothing . You can generate infinite parallel chain for free.

In example, there is a conflict between history A and history B, with POW you CAN'T confirm both histories, you have to choose one. So the longest history win.
with POS you can confirm both histories at the same time at not cost.
so to solve this you need a social meta-consensus making POS not necesary  at all.


POS security is based on some kind of punishment making it more similar to LN than blockchain. With the difference that LN fail only affect a local environment, a POS fail affect all the global environment.

legendary
Activity: 3038
Merit: 4418
Crypto Swap Exchange
May 27, 2018, 08:44:26 AM
#46
POW provides complete decentralization of power and control over the distribution and implementation of major technical and economic changes in the network. But investment is more in this system. And energy consumption is also high.
Surprise, surprise. POW does not provide decentralisation of power and control. The power and control of anything can still be centralised with a few entities, if they have sufficient resources. POW is merely a way to distribute coins and to secure the network. POW does not make it such that everyone has to follow what the miner says.
POS If the Proof-of-work is based on mining and computing power, the Proof-of-stake derives from actual holdings of the cryptocurrency. It has high speed, less time consuming and less costly
The speed for POS and POW is the same, if the parameters of the coins are the same. You forgot to list the disadvantages of POS. Did you even read the thread?
sr. member
Activity: 728
Merit: 275
May 27, 2018, 08:32:56 AM
#45
I agree, this type of attack is feasible. Even POW takes the longest chain automatically then what will happen to transactions in other chain?

Are they will be automatically reverted because longest chain do not have any information about another chain so for it they never happened.
Transactions CANNOT be reverted under any circumstances. If they are broadcasted, they would eventually be confirmed or invalid (if the inputs gets used in another transaction). Obviously, it won't disappear or anything; else no one would be using Bitcoin.

When the client sees another chain with a longer proof of work, they take the transactions in the orphaned chain and put them back into the mempool. For miners, they will include the transactions in their block. They are treated like a normal transaction.
POW provides complete decentralization of power and control over the distribution and implementation of major technical and economic changes in the network. But investment is more in this system. And energy consumption is also high.
POS If the Proof-of-work is based on mining and computing power, the Proof-of-stake derives from actual holdings of the cryptocurrency. It has high speed, less time consuming and less costly
legendary
Activity: 3038
Merit: 4418
Crypto Swap Exchange
May 23, 2018, 08:04:50 AM
#44
I agree, this type of attack is feasible. Even POW takes the longest chain automatically then what will happen to transactions in other chain?

Are they will be automatically reverted because longest chain do not have any information about another chain so for it they never happened.
Transactions CANNOT be reverted under any circumstances. If they are broadcasted, they would eventually be confirmed or invalid (if the inputs gets used in another transaction). Obviously, it won't disappear or anything; else no one would be using Bitcoin.

When the client sees another chain with a longer proof of work, they take the transactions in the orphaned chain and put them back into the mempool. For miners, they will include the transactions in their block. They are treated like a normal transaction.
sr. member
Activity: 742
Merit: 395
I am alive but in hibernation.
May 23, 2018, 07:55:10 AM
#43

I already mentioned the type of attack which is Nodes in some areas/country can't connect to Nodes from different area/country/region/continent which could be done with intentional attack from government & natural disaster or failure which prevent ISP connect to different country for some time.

When those nodes connect again, there would be 2 different chain because they were disconnected for some time. In PoW, the nodes simply choose chain with biggest PoW while PoS can't determine which chain to be chosen, at least without human intervention.

I agree, this type of attack is feasible. Even POW takes the longest chain automatically then what will happen to transactions in other chain?

Are they will be automatically reverted because longest chain do not have any information about another chain so for it they never happened.

If chain fork automatically due to these circumstances then it will be blow to that crypto currency  because the transaction are non reversible and it will mean Merchant on other chain sell their goods for free.
hero member
Activity: 1680
Merit: 583
xUSD - The PRIVATE stable coin - Haven Protocol
May 22, 2018, 03:40:53 AM
#42
I will suggest to talk about in this way

POW vs. POW asic vs. POS

cause, for me, the real POW, decentralized is not asic, but the rest
copper member
Activity: 84
Merit: 1
May 21, 2018, 11:15:25 AM
#41
PoW's disadvantage is all the energy use.

I think that the advantage of PoW over PoS in large scale implementations is indeed the fact that it uses raw processing power (translated in hashpower) and electricity; this way, the coin gets a real value, being backed by the amount of energy and equiment involved in securing the blockchain, while making it more resilient to larger attackers such as nation states.

Also, when the any cryptocurrency is attacked and part of the network/miners/stakes went offline or can't reach other part of the cryptocurrency network. That would make split-chain happen, but PoW won't have any problem when part of the network went online/can reach other part of network again since the "true" chain is the chain/block with biggest hashrate while in PoS there's no way to determine which chain is "true". CMIIW.

I think if a big miner decide than all the newly started POW coin can be easily attacked by the raw mining power.

A newly started PoW coin can have a different hashing algorithm implemented; for example, Bitcoin uses SHA-256d, Litecoin uses Scrypt, Ethereum uses Ethash, Dash uses X11, Zcash uses Equihash, and so on. The attack depends on your hashpower with regard to a specific hashing algorithm.
sr. member
Activity: 742
Merit: 395
I am alive but in hibernation.
May 21, 2018, 10:21:01 AM
#40
PoW's disadvantage is all the energy use.

I think that the advantage of PoW over PoS in large scale implementations is indeed the fact that it uses raw processing power (translated in hashpower) and electricity; this way, the coin gets a real value, being backed by the amount of energy and equiment involved in securing the blockchain, while making it more resilient to larger attackers such as nation states.

Also, when the any cryptocurrency is attacked and part of the network/miners/stakes went offline or can't reach other part of the cryptocurrency network. That would make split-chain happen, but PoW won't have any problem when part of the network went online/can reach other part of network again since the "true" chain is the chain/block with biggest hashrate while in PoS there's no way to determine which chain is "true". CMIIW.

I have some confusion, What types of attacks are getting discussed here for which it is easier to attack POS then POW (leave bitcoin network when giving example of POW).
 I think if a big miner decide than all the newly started POW coin can be easily attacked by the raw mining power.
Pages:
Jump to: