Live data from Hacker News

Intel releases open source blockchain

ibtimes.com

21–30 of 30 posts

Re: Intel releases open source blockchain

#21
post #14

Here's the interesting part over existing blockchains / the reason why Intel is involved, from http://intelledger.github.io/introduction.html : "This project includes a consensus algorithm, PoET (Proof of Elapsed Time), which is intended to run in a Trusted Execution Environment (TEE), such as Intel® Software Guard Extensions (SGX)."

Byzantine fault tolerance becomes simple if you have trusted hardware.

I've been trying to understand the base of trust in this: I think it's Intel EPID: it boils down to a secret key burned into the hardware and managed by the ME. What happens if Intel's signing machine is exposed?

Re: Intel releases open source blockchain

#22

Anyone who has been following blockchain technology for more than 6 months can see that this is the same recycled already-done altcoin as the last guy. The promoters get larger, and the consortiums get larger. People need to talk about the WHY and HOW their blockchain works better. How it solves problems better than an existing blockchain. This isn't detailed because you already know the answer: "It doesn't, but I co…

The introduction in the actual code actually explains it. It's not yet another rebadged Bitcoin Core codebase. http://intelledger.github.io/introduction.html The security model is totally different than Bitcoin - it's based on trusted nodes, leading to much different tradeoffs.

So they reinvented Ripple?

Re: Intel releases open source blockchain

#23

Earlier quoted context omitted.

The introduction in the actual code actually explains it. It's not yet another rebadged Bitcoin Core codebase. http://intelledger.github.io/introduction.html The security model is totally different than Bitcoin - it's based on trusted nodes, leading to much different tradeoffs.

> The security model is totally different than Bitcoin - it's based on trusted nodes, leading to much different tradeoffs. Tradeoffs such as? I read that and it is hard to conceptualize the pros and cons. Sometimes I think about why blockchains weren't considered as a solution to the byzantine generals problem before 2008. Was it fucking stupid? Was the consensus idea improperly dismissed? Never considered? I would s…

One obvious one: rather than consuming tons of power hashing, miners buy Intel chips. Hashrate in Bitcoin is equivalent to number of Intel CPUs owned in this scheme. The Intel CPUs are mostly idle, so use very little power.

There are a lot of other interesting things that they could do with SGX, though just from reading the introduction it seems that they didn't attempt any other innovations.

Re: Intel releases open source blockchain

#24
post #14

Here's the interesting part over existing blockchains / the reason why Intel is involved, from http://intelledger.github.io/introduction.html : "This project includes a consensus algorithm, PoET (Proof of Elapsed Time), which is intended to run in a Trusted Execution Environment (TEE), such as Intel® Software Guard Extensions (SGX)."

Byzantine fault tolerance becomes simple if you have trusted hardware. I've been trying to understand the base of trust in this: I think it's Intel EPID: it boils down to a secret key burned into the hardware and managed by the ME. What happens if Intel's signing machine is exposed?

That's an interesting point. If the threat model assumes that Intel's secure computing infrastructure will not be compromised, can't you just use remote attestation to prove you're running an unmodified Foocoin client on physical Intel hardware, and have a traditional consensus protocol? Then you don't need proof-of-time or proof-of-anything-else, just proof-of-physical-Intel-hardware.

Either way, whoever controls 50% of the genuine (where "genuine" = "signed by Intel's master key") Intel hardware gets to control consensus, right?

Re: Intel releases open source blockchain

#25
post #22

Earlier quoted context omitted.

The introduction in the actual code actually explains it. It's not yet another rebadged Bitcoin Core codebase. http://intelledger.github.io/introduction.html The security model is totally different than Bitcoin - it's based on trusted nodes, leading to much different tradeoffs.

So they reinvented Ripple?

Yes. They modified consensus algorithms from both Ripple and Stellar, they say it.

Re: Intel releases open source blockchain

#26

Earlier quoted context omitted.

> The security model is totally different than Bitcoin - it's based on trusted nodes, leading to much different tradeoffs. Tradeoffs such as? I read that and it is hard to conceptualize the pros and cons. Sometimes I think about why blockchains weren't considered as a solution to the byzantine generals problem before 2008. Was it fucking stupid? Was the consensus idea improperly dismissed? Never considered? I would s…

One obvious one: rather than consuming tons of power hashing, miners buy Intel chips. Hashrate in Bitcoin is equivalent to number of Intel CPUs owned in this scheme. The Intel CPUs are mostly idle, so use very little power. There are a lot of other interesting things that they could do with SGX, though just from reading the introduction it seems that they didn't attempt any other innovations.

You're trusting Intel, essentially.

It would be interesting to see Intel open their SGX platform so as for it to be configurable, and use it to attest Tendermint nodes. Accountable BFT consensus benefit from hardware attestation.

Re: Intel releases open source blockchain

#27

I'm somewhat surprised: this is written in Python . I wonder what the motivation is here. I've long believed that a lot of security issues could be avoided simply by using higher-level languages, but I haven't seen many major security undertaking done in higher-level languages.

something like bitcoin is an excellent match for a high level language (altho not necessarily python). the performance demands are all in the hashing algorithms (which are done by dedicated hardware, not software). it's way more important the control layer be correct than it be fast

Re: Intel releases open source blockchain

#28

I personally love the idea of using a blockchain to send anonymous, encrypted messages. I tried out BitMessage I think it was, a while back; I think a stripped-down lightweight version of it would be very useful. Maybe with a Web browser doing encryption, decryption in-browser (already Tutanota etc. do this). Not sure as to the the other pieces that would need to be deployed.

Using a blockchain for messaging means all your messages are stored until quantum encryption can come along to crack them open. Sure the usual distributed setup which blockchains like bitcoin have has advantages (namely in the hiding of metadata), but I'm not sure an actual blockchain is necessary or optimal for this.

Re: Intel releases open source blockchain

#29

I'm somewhat surprised: this is written in Python . I wonder what the motivation is here. I've long believed that a lot of security issues could be avoided simply by using higher-level languages, but I haven't seen many major security undertaking done in higher-level languages.

something like bitcoin is an excellent match for a high level language (altho not necessarily python). the performance demands are all in the hashing algorithms (which are done by dedicated hardware, not software). it's way more important the control layer be correct than it be fast

I totally agree, in fact, I'd say "it's way more important to be correct than to be fast" is almost always true in cryptography. Incorrect crypto is useless no matter how fast it is.

Re: Intel releases open source blockchain

#30
post #6
post #4

Earlier quoted context omitted.

Don't stir the pot, please. Getting people riled up is just pointless. Here's the proof of time disclaimer, which might be considered to be "proof of Intel inside": http://intelledger.github.io/introduction.html?highlight=pro...

Talk about burying the lead. My first question was "why on Earth"? Thanks for answering it. And I'd hardly call pointing this out "stirring the pot" or "pointless". This has serious security, openness, and privacy implications that definitely deserve to be mentioned in the discussion for what amounts to a press release .

When people use comments like "people are going to have a fit", they are speaking for others. THAT is stirring the pot, whether it's serious or not.
Post reply on HN