Live data from Hacker News

'Minting' electronic cash (1999)

spectrum.ieee.org

81–90 of 90 posts

Re: 'Minting' electronic cash (1999)

#81

Earlier quoted context omitted.

Sorry its no longer that simple. It's wasting as much power as all of Switzerland and all of Austria combined. 52MT of CO2 emitted annually. 10kT of e-waste. And growing like grey goo. [1] Dormant coal facilities are now being re-activated to hash noise as fast as they can. [2] This is literally everyone's problem now and we should all do everything we can, tell everyone we can, to shut this down before it's too late…

Bitcoin isn't a country. It's ridiculous to compare bitcoin's energy usage to countries because it's international. Video gaming uses more energy than bitcoin mining, so stop parroting this BS false narrative that bitcoin is so wasteful.

> Bitcoin isn't a country. It's ridiculous to compare bitcoin's energy usage to countries because it's international. Video gaming uses more energy than bitcoin mining, so stop parroting this BS false narrative that bitcoin is so wasteful.

Your point about video games is pretty asinine because a meaningful portion of the 8 billion people on earth playing video games. We have virtually nobody using Bitcoin because its so incredibly hamstrung. [2]

Based on this data [3] playing video games for 4.4 hours a day for an entire year consumes 823kWh. A single bitcoin transaction requires 1127.77kWh. [1]. So you can either play 6 hours of video games on your 3090 in ultra 1440p144Hz - or move 250 bytes of data.

Bitcoin's 3TPS currently yields as much CO2 as burning 1 ton of coal per second and generates 10kT of non-recyclable e-waste, which also includes a bunch of gold that has to be mined to make the systems in the first place. [1]

All for 3TPS lol.

[1] https://digiconomist.net/bitcoin-energy-consumption

[2] https://www.greentechmedia.com/articles/read/global-gaming-c...

[3] https://www.greentechmedia.com/articles/read/global-gaming-c...

Re: 'Minting' electronic cash (1999)

#82

Earlier quoted context omitted.

Bitcoin solves a problem that has corrupted governments for millennia. Control over the supply of money gives central bankers the ability to steal money from the people and funnel it into paying off politicians and doing other country destroying bs. Once you understand how bitcoin will eliminate a major source of corruption in our world you'll finally understand it's value

It does not. It only appears to on its face. Blockchain can only extend its trustless, decentralized and permissionless guarantees to the data on chain. These guarantees break down at the boundary between the blockchain and the real world. All the blockchain said is 1BTC=1BTC and which coins are associated with which keys. It doesn't say how much value each coin represents. Tether does that. > Control over the supply…

> It doesn't say how much value each coin represents. Tether does that.

No. The market does that. I'm not sure why you think this is different than how the value of, say, a dollar represents.

> Central banks don't print money and funnel it off to politicians lol.

You misunderstand. Its not that direct. Central banks print money used to fund things like government loans (ie bonds), among other things. Member banks buy the government bonds and sells them at a profit to the central bank. The owners of those member banks in turn pocket that money and use some of it to fund the legalized corruption known as lobbying. This is not the only funnel that looks like this that comes out of the financial industry. There's a reason that Goldman Sachs "alums" trawl DC like cockroches.

So.. very much not lol. Not lol at all.

> They control the money supply by deciding how much credit should be extended and at what interest rate

I think you've missed the last 15 years where they started buying whatever they want in "open market operations". Where were you in 2008... or like the last year and a half?

>It has created a whole slew of new kinds of corruption and crime

You're misinformed. Show me one way that bitcoin has lead to new kinds of corruption. I would be very surprised if you could name a single thing and have some credible information about it.

Re: 'Minting' electronic cash (1999)

#83

Earlier quoted context omitted.

Bitcoin isn't a country. It's ridiculous to compare bitcoin's energy usage to countries because it's international. Video gaming uses more energy than bitcoin mining, so stop parroting this BS false narrative that bitcoin is so wasteful.

> Bitcoin isn't a country. It's ridiculous to compare bitcoin's energy usage to countries because it's international. Video gaming uses more energy than bitcoin mining, so stop parroting this BS false narrative that bitcoin is so wasteful. Your point about video games is pretty asinine because a meaningful portion of the 8 billion people on earth playing video games. We have virtually nobody using Bitcoin because its…

> Your point about video games is pretty asinine

Well, I would have good points I could write. However, if you're just going to insult me, I'm not going to waste my time.

Re: 'Minting' electronic cash (1999)

#84

Earlier quoted context omitted.

> Bitcoin isn't a country. It's ridiculous to compare bitcoin's energy usage to countries because it's international. Video gaming uses more energy than bitcoin mining, so stop parroting this BS false narrative that bitcoin is so wasteful. Your point about video games is pretty asinine because a meaningful portion of the 8 billion people on earth playing video games. We have virtually nobody using Bitcoin because its…

> Your point about video games is pretty asinine Well, I would have good points I could write. However, if you're just going to insult me, I'm not going to waste my time.

Hm did I offend? If so my bad! Cheers and enjoy your evening. I do however suspect you have no good points to share and hence your exit from this debate. Your point may have been asinine (I do not plan to walk that back) but that says nothing of you, it wasn't a value judgement on the speaker.

Re: 'Minting' electronic cash (1999)

#85

Earlier quoted context omitted.

It does not. It only appears to on its face. Blockchain can only extend its trustless, decentralized and permissionless guarantees to the data on chain. These guarantees break down at the boundary between the blockchain and the real world. All the blockchain said is 1BTC=1BTC and which coins are associated with which keys. It doesn't say how much value each coin represents. Tether does that. > Control over the supply…

> It doesn't say how much value each coin represents. Tether does that. No. The market does that. I'm not sure why you think this is different than how the value of, say, a dollar represents. > Central banks don't print money and funnel it off to politicians lol. You misunderstand. Its not that direct. Central banks print money used to fund things like government loans (ie bonds), among other things. Member banks buy…

> No. The market does that. I'm not sure why you think this is different than how the value of, say, a dollar represents.

Well most markets aren’t made up of 95% fictional trades, according to an ETF that attempted to list two years ago.

> You misunderstand. Its not that direct. Central banks print money used to fund things like government loans (ie bonds), among other things.

You misunderstand. Central banks don’t print money, they set reserve rates, interest rates and they occasionally purchase and sell bonds. Nothing more.

> You're misinformed. Show me one way that bitcoin has lead to new kinds of corruption. I would be very surprised if you could name a single thing and have some credible information about it.

Ransomware and tether (unless you count the liberty reserve and even that was nowhere close).

Re: 'Minting' electronic cash (1999)

#86
post #78

Earlier quoted context omitted.

So you only know how hard the honest parties must work to prevent an attack after a successful attack is detected?

If you assume all the current mining capacity is in use, and everyone mining right now is actually dishonest and collaborating with each other as a single party (worst case), then at most you just need to match the current capacity to prevent an attack. All you need is to make sure that more than 50% of miners aren't collaborating to benefit the same party at the same time. If you are assuming that the attackers are…

Assuming that all mining capacity is visible is the sort of assumption that cryptographers typically avoid because you can easily be blindsided. Why shouldn't an attacker hide their equipment? Cryptographers also typically avoid speculating on the attacker's motivation, so talking about the opportunity cost is a pretty weak argument. Maybe the attacker just wants to cause mayhem in the system regardless of the cost, and they are idling their equipment until they are ready to attack.

It is also worth remembering that someone trying to attack Bitcoin is not limited to amassing enough of their own mining equipment; they can also try to reduce the work being done by honest miners by sabotaging honest mining operations, which at some point will likely be cheaper than trying to buy more mining rigs. So the honest miners need to do more than just match their own estimate of the capacity of would-be attackers. Honest miners must exceed attackers by enough of a margin to absorb attempts by an attacker to reduce the honest mining capacity, and that margin is also difficult to estimate.

I do not know what counts as "strange" but I certainly say that Bitcoin's security model is inefficient and backward by the standard used in cryptography. Honest parties have no advantage over the attacker and thus are left devoting ever growing amounts of energy to mining, continuously raising the bar for the attacker (and also raising transaction costs to pay for all that energy, not to mention creating an environmental disaster in the process). No competent military commander would pursue a strategy that depends purely on numerical superiority; armies set up bases in locations that are tactically advantageous (e.g. on a hilltop) and focus their planning (offensive or defensive) on strategically valuable targets (bridges, supply lines, etc.).

Re: 'Minting' electronic cash (1999)

#87
post #78

Earlier quoted context omitted.

If you assume all the current mining capacity is in use, and everyone mining right now is actually dishonest and collaborating with each other as a single party (worst case), then at most you just need to match the current capacity to prevent an attack. All you need is to make sure that more than 50% of miners aren't collaborating to benefit the same party at the same time. If you are assuming that the attackers are…

Assuming that all mining capacity is visible is the sort of assumption that cryptographers typically avoid because you can easily be blindsided. Why shouldn't an attacker hide their equipment? Cryptographers also typically avoid speculating on the attacker's motivation, so talking about the opportunity cost is a pretty weak argument. Maybe the attacker just wants to cause mayhem in the system regardless of the cost,…

I don't think this comparison with "the standard used in cryptography" is really accurate or useful.

Cryptography tries to avoid speculating on the attacker's motivation, but establishing trust from nothing is a different problem than sending private messages on a public channel. It's not clear the former can be done any other way than by creating incentive structures to make the cost of cheating greater than some known amount.

> Honest parties have no advantage over the attacker

Honest parties have the advantage that it's easier for them to agree (and they are rewarded for agreeing). An honest party who wants to play honestly is implicitly supported by every other honest party whether they are explicitly allied or not. Whereas a dishonest party doesn't just need to be dishonest to benefit, they need to get >50% of all miners to agree to benefit them specifically, or otherwise amass all that capacity just for themselves while outcompeting every other honest party put together (not just their specific enemy, but every honest party).

> and thus are left devoting ever growing amounts of energy to mining, continuously raising the bar for the attacker

Why would the energy usage be "ever growing"? Bitcoin might become more popular and therefore might have bigger security demands expected of it in the future, but that should eventually reach a cap. From that point only cheapening electricity generation would increase the expected usage.

> No competent military commander would pursue a strategy that depends purely on numerical superiority;

That is certainly what they'd do if there was literally no other way to achieve an advantage (which is the case in this kind of landscape). Everything else is just a way to make their forces work more efficiently.

Re: 'Minting' electronic cash (1999)

#88

Earlier quoted context omitted.

> Your point about video games is pretty asinine Well, I would have good points I could write. However, if you're just going to insult me, I'm not going to waste my time.

Hm did I offend? If so my bad! Cheers and enjoy your evening. I do however suspect you have no good points to share and hence your exit from this debate. Your point may have been asinine (I do not plan to walk that back) but that says nothing of you, it wasn't a value judgement on the speaker.

thanks for switching discourse like this. I think the defining problem of politics (and by extension change) nowadays is that people don't call out antisocial behavior anymore. Nearly every society in the past did this one way or another in the non-autocratic parts (farmers villages, soviet,...). Nowadays we have a system run by psycho- and sociopaths (aka the McKinseyan PMC) and we can't get at them because wokeness-brigade tells us: poor things, don't hurt them...

Re: 'Minting' electronic cash (1999)

#89
post #87

Earlier quoted context omitted.

Assuming that all mining capacity is visible is the sort of assumption that cryptographers typically avoid because you can easily be blindsided. Why shouldn't an attacker hide their equipment? Cryptographers also typically avoid speculating on the attacker's motivation, so talking about the opportunity cost is a pretty weak argument. Maybe the attacker just wants to cause mayhem in the system regardless of the cost,…

I don't think this comparison with "the standard used in cryptography" is really accurate or useful. Cryptography tries to avoid speculating on the attacker's motivation, but establishing trust from nothing is a different problem than sending private messages on a public channel. It's not clear the former can be done any other way than by creating incentive structures to make the cost of cheating greater than some kn…

Modern cryptography is about a lot more than sending private messages over public channels. The entire field of secure multiparty computation is about mutually distrustful parties participating in a distributed computation of some kind. Bootstrapping trust from "nothing" is part of that, and the theoretical work in that field establishes the limits and feasibility of accomplishing that goal. There are settings where "trust from nothing" (more precisely, when only one party is honest) is possible to achieve with cryptographic security -- for example, if aborting the protocol (stopping the computation) is an acceptable outcome (this is unavoidable if there are only two parties).

"Honest parties have the advantage that it's easier for them to agree (and they are rewarded for agreeing)."

I should clarify that when I used the term "advantage" I was referring to something analogous to mechanical advantage. A basic tenet of cryptographic security definitions is that the honest parties should have an advantage over the attackers in the sense that a small increase the work done by the honest parties results in a large increase in the work that must be done to attack the system. Note also that cryptographic security definitions assume the opposite of what you said: that the honest parties are not coordinated and are operated independently, but that the attackers do coordinate with each other (in fact we just refer to "the adversary" which has full control over all the attacking parties, with full access to their internal state, inputs, outputs, randomness, and whatever else).

You mention incentive structures, but incentive structures are not very reliable. You need to make a lot of assumptions about motivation before an incentive structure makes sense, and those assumptions can easily fail because of something external to the system. What if a group of miners who collectively control 51% of the mining capacity of Bitcoin realized that they could open short positions in Bitcoin futures and make a fortune if they triggered a panic by e.g. executing very obvious double-spending attacks? Historically incentive structures have failed to prevent wars, crime, and other unwanted behaviors.

"Bitcoin might become more popular and therefore might have bigger security demands"

One does not follow from the other. Security requirements have nothing to do with popularity and everything to do with the ability of some attacker to succeed in attacking a system. Even if nothing about Bitcoin changes, a change elsewhere in the world may create an opportunity to profit from attacking Bitcoin (and there is no reason to think anyone other than the attacker would be aware of that opportunity). The attacker may not be rational at all; maybe the attacker just wants to create chaos, even at great expense. Like I said, incentive structures are unreliable and make for a poor approach to security on the Internet.

Re: 'Minting' electronic cash (1999)

#90
post #87

Earlier quoted context omitted.

I don't think this comparison with "the standard used in cryptography" is really accurate or useful. Cryptography tries to avoid speculating on the attacker's motivation, but establishing trust from nothing is a different problem than sending private messages on a public channel. It's not clear the former can be done any other way than by creating incentive structures to make the cost of cheating greater than some kn…

Modern cryptography is about a lot more than sending private messages over public channels. The entire field of secure multiparty computation is about mutually distrustful parties participating in a distributed computation of some kind. Bootstrapping trust from "nothing" is part of that, and the theoretical work in that field establishes the limits and feasibility of accomplishing that goal. There are settings where…

> A basic tenet of cryptographic security definitions is that the honest parties should have an advantage over the attackers in the sense that a small increase the work done by the honest parties results in a large increase in the work that must be done to attack the system.

I think a more accurate claim would be that cryptography aims to achieve the best security guarantees that can be assured mathematically. In the case of establishing consensus the best guarantees you can achieve are just different from what you can achieve in those other situations. That doesn't mean that Bitcoin is somehow going against some kind of cryptographic standard like you are implying here. It is using cryptographic technologies to achieve the most secure possible solution (as far as we have discovered) to the problem which it aims to solve. It just happens to be a different problem than those other problems and therefore the nature of the solution is different.

> Note also that cryptographic security definitions assume ... that the attackers do coordinate with each other

That's just one possible scenario which you might consider. Again I think it is misleading to imply this is some kind of "cryptographic litmus test" or something.

> You mention incentive structures, but incentive structures are not very reliable.

Right, but there's just no stronger guarantees which you can make when it comes to this problem.

> One does not follow from the other. Security requirements have nothing to do with popularity and everything to do with the ability of some attacker to succeed in attacking a system.

I think you are interpreting what I said backwards. Popularity defines what level of security is required. The level of security defines what attacks can be resisted. The more popular the coin, the bigger need it will have to resist attacks. And this is accommodated in the design: the higher the market price of the coin, the bigger the reward will be for miners (thus funding more mining, increasing the cost of an attack).

Post reply on HN