Pages:
Author

Topic: Proof-of-stake is more decentralized, efficient and secure than PoW- white paper - page 9. (Read 9984 times)

sr. member
Activity: 406
Merit: 250
POW and POS both have relative advantanges and disadvantages. The inherent weakness I see in POS is that new capital doesn't flow in as readily because your stake multiplies on its own. The weakness with POW is massive power consumption and ever increasing expense if you mine.

As a late comer to crypto currency bitcoin is much more difficult to accumulate in an appreciable amount. Add the downward pressure of mined coins being sold constantly and the ever present fraud that goes on and it is a risky investment.

Personally I collect and hold bitcoin and clams. If i had to choose I would hold just bitcoin but I think both hve their place in the crypto world.   
newbie
Activity: 25
Merit: 0

But none of these time intervals happen in real time or matter to the attacker
in a PoS.  They can all be spoofed...You can always broadcast a false chain
and that has always been the problem with PoS.

(Only PoW is resistant to time manipulations because it takes real time
to do the work.)

Can someone explain to me what is really new here?


Hi jonald,

I'd love to go into details about the grinding attack.
Could you clarify a few points for me before we dig in so that I don't paraphrase the paper.
1/What do you mean by "creating a false chain"? Creating a competing chain? I'm not sure what "false" means here.
2/What do you mean by "time intervals can all be spoofed". Of course, the attacker doesn't have to "redo the work" if he can reuse some previously create proofs but in this case his fork (at the beginning) will be a subset of the mainchain.

More generally, could you please provide a detailed description of how you would conduct such an attack (even a high level explanation would be great)
thanks !
legendary
Activity: 1078
Merit: 1014
you forgot that in pow, there is the halving, which will lead at the end to an increase in price because of less supply and more demand

in pos no one will buy anymore because he/she can generate coins without any effort, free money for them
i didn't forget halvings i just don't want to wait years for coin generation to be low enough that it doesnt hurt the price anymore and when that happens we get bigger risk of 51% as many miners switch off machines

of course someone will buy, the same who are buying now except they will be buying from our hoarded coins + 1% interest instead of miners who dump at any price
legendary
Activity: 2142
Merit: 1010
Newbie
Yep, and yet my concerns are still unanswered by you, an NXT supporter.  Roll Eyes

I-... I'm sorry, am I using NXT as ad hominen now? Please point out more of my debate fallacies o wise one. Grin

No other fallacies were spotted. You were right, after 200 years of forging a Nxt whale would double his stake.
legendary
Activity: 2142
Merit: 1010
Newbie
It doesn't matter who supposed it. Did you check the video excerpt I mentioned? Highly recommended, Andreas explains it very well.

I tried, but his spoken English was too hard for me.
legendary
Activity: 3248
Merit: 1070
you left out the most important thing

pow = forever downward pressure on price if new fiat doesn't keep up with coin generation
pos = new fiat goes to making my coins more valuable and soon 1 btc = $10000

you forgot that in pow, there is the halving, which will lead at the end to an increase in price because of less supply and more demand

in pos no one will buy anymore because he/she can generate coins without any effort, free money for them
legendary
Activity: 1078
Merit: 1014
you left out the most important thing

pow = forever downward pressure on price if new fiat doesn't keep up with coin generation
pos = new fiat goes to making my coins more valuable and soon 1 btc = $10000
full member
Activity: 209
Merit: 100
Printing money with zero work is no better than the Federal Reserve we strive to avoid.

Created a strawman and successfully defeated it. Well done!
Yep, and yet my concerns are still unanswered by you, an NXT supporter.  Roll Eyes

I-... I'm sorry, am I using NXT as ad hominen now? Please point out more of my debate fallacies o wise one. Grin
legendary
Activity: 1176
Merit: 1011
You don't get it. Bitcoin mining is supposed to be inefficient. There in lies the very core of its trustworthiness.

Who supposed that? Satoshi? No, he was making excuses on that part telling that mining will migrate to cold countries and will be used for heating. So, if the creator didn't suppose mining to be inefficient, then maybe PoW-evangelists are just biased because of holding a lot of BTC?
It doesn't matter who supposed it. Did you check the video excerpt I mentioned? Highly recommended, Andreas explains it very well.

Anyone still saying "altcoin X or hashing algorithm Y is better because it's more efficient" doesn't understand the delicate equilibrium between security and value of the network.
hero member
Activity: 1328
Merit: 563
MintDice.com | TG: t.me/MintDice
imo a hybrid of pos pow is the best way to do this. dashcoin kind of accomplishes this feat. but the market will decide in the end what it wants.
legendary
Activity: 2142
Merit: 1010
Newbie
Printing money with zero work is no better than the Federal Reserve we strive to avoid.

Created a strawman and successfully defeated it. Well done!
full member
Activity: 209
Merit: 100
I have an un-addressed concern regarding PoS, and it's not consensus nor any kind of attack vector, it's a question of economic incentives to distribute the coins.

With PoS, coins are created by owning coins. If I owned 51% of the coins, where is the incentivization for me to distribute the coins in a fair manner, instead of sleeping on top of my loot like Smaug while all the suckers spend their money? Over time, I would actually own more of the PoS coin economy by just passively printing money, while everyone else spends it, by virtue of inflation.

This isn't a hypothetical problem, it's real because exchanges essentially are printing their own money with PoS coins in this case. Just-Dice is a pretty good example of this.

In PoW, the miners' hands are forced to give up the coins by means of competition and resource expenditure, thus a good portion of the coinbase reward are sold on the open market and there lies forced incentivization of distribution.
With PoS, what is the incentivization to distribute the coinbase?

The pre-mine in many PoS systems today (I'm looking at you, NXT), is ludicrous and consists of a bunch of early adopters hustling unwitting newcomers into accepting Bitcoin 2.0. Printing money with zero work is no better than the Federal Reserve we strive to avoid.
legendary
Activity: 1302
Merit: 1008
Core dev leaves me neg feedback #abuse #political
I've skimmed over the paper.

I don't quite understand the
claims of reducing the effectiveness of grinding attacks .

To quote the paper:

Quote
The first step of the grinding attack is for the attacker to generate blocks in order to gain
in sequence over and eventually control the stake modifier. This step takes time and causes the
attacker to accumulate a signi cant lag behind the main chain. The process of gaining control of the
stake modifi er is very technical, dicult to express and dificult to follow.
But the details do not matter. The only important takeaway is that
the process takes a significant amount of time (at least hundreds of minutes).

Why does this process have to take "at least hundreds of minutes" when the block time
of this coin is 1 minute?  The paper says its very technical and it doesn't matter
but I think it does matter since its at the heart of the matter here.

They should be able to explain in plain English and clear terms why
their design would necessitate a long lag in creating a false chain.

They seem to be saying that there is some kind of prohibition:

Quote
During the first 200 minutes (the first modifier interval) of the attack, the attacker
cannot grind through stake modifiers. He must use the stake modifier that was seeded
from blocks from the main chain over the preceding selection interval (1.6 day, or ∼ 2250
minutes).

But none of these time intervals happen in real time or matter to the attacker
in a PoS.  They can all be spoofed...You can always broadcast a false chain
and that has always been the problem with PoS.

(Only PoW is resistant to time manipulations because it takes real time
to do the work.)

Can someone explain to me what is really new here?
legendary
Activity: 868
Merit: 1006
You don't get it. Bitcoin mining is supposed to be inefficient. There in lies the very core of its trustworthiness.

See Andreas Antonopoulos explain this very clearly in a few minutes.

This. For some reason people can't get their heads around the fact the difficulty levels are good and it's what makes the network bulletproof. I would rather trust POW than POS distribution..
legendary
Activity: 3472
Merit: 4801
- snip -
I just don't think Satoshi expected people to build multi million dollar mines.

Interesting.

Let's see what Satoshi himself had to say about that:

(Emphasis in bold added by me)

- snip -
I anticipate there will never be more than 100K nodes, probably less.  It will reach an equilibrium where it's not worth it for more nodes to join in.  The rest will be lightweight clients, which could be millions.

At equilibrium size, many nodes will be server farms with one or two network nodes that feed the rest of the farm over a LAN.

- snip -
If the network becomes very large, like over 100,000 nodes, this is what we'll use to allow common users to do transactions without being full blown nodes.  At that stage, most users should start running client-only software and only the specialist server farms keep running full network nodes, kind of like how the usenet network has consolidated.
- snip -

The current system where every user is a network node is not the intended configuration for large scale.  That would be like every Usenet user runs their own NNTP server.  The design supports letting users just be users.  The more burden it is to run a node, the fewer nodes there will beThose few nodes will be big server farms.  The rest will be client nodes that only do transactions and don't generate.
- snip -
legendary
Activity: 2142
Merit: 1010
Newbie
Debate going on right now on on reddit:
Jeff Garzik arguing against PoS

http://www.reddit.com/r/Bitcoin/comments/30t3k4/proofofstake_is_more_decentralized_efficient_and/

Who will pay attention to words of someone who vouches for centralization by endorsing FinCEN regulation and launching a project that will allow USA govt to control Bitcoin satellite traffic?
legendary
Activity: 2142
Merit: 1010
Newbie
You don't get it. Bitcoin mining is supposed to be inefficient. There in lies the very core of its trustworthiness.

Who supposed that? Satoshi? No, he was making excuses on that part telling that mining will migrate to cold countries and will be used for heating. So, if the creator didn't suppose mining to be inefficient, then maybe PoW-evangelists are just biased because of holding a lot of BTC?
newbie
Activity: 25
Merit: 0
legendary
Activity: 2142
Merit: 1010
Newbie
MtGox would have dominated a PoS-version of Bitcoin quite exclusively back then.

Centralized exchanges is so 2014...
legendary
Activity: 1176
Merit: 1011
You don't get it. Bitcoin mining is supposed to be inefficient. There in lies the very core of its trustworthiness.

See Andreas Antonopoulos explain this very clearly in a few minutes.
Pages:
Jump to: