<frankenmint>
reading the first concern is setting the tone of skepticism I hold for the remaining 7 problems to read about
<frankenmint>
"This is more important than block size because, while it would be nice to support all of humanity’s transactional volume in Bitcoin, it is meaningless if that information can easily be stolen as we’ve seen with the numerous data breaches over the last few years or if that information can be weaponized against the population." <<comes off like tin-foil hattery imho
moa has joined #bitcoin-wizards
jtimon has quit [Ping timeout: 252 seconds]
zooko has quit [Quit: bbiab (getting kicked out of co-working space, heading for coffeeshop)]
<gmaxwell>
frankenmint: there is another way to also think about this that I'm surprised that no one has caught on.
<gmaxwell>
frankenmint: to the extent that we have extra capacity available (in terms of bandwidth and CPU cycles relative to software/protocol performance)-- it's not clear that we do have an excess, but assuming we do-- that excess can be used in many ways. It can be conserved, which can allow for more decenteralization, it can be spent to increase scale, it can be spent to increase privacy, it can be s
<gmaxwell>
pent to increase flexibility, or it can be spent on a mixture of these things.
<gmaxwell>
I agree that if there is an excess some of it should be spent on just increasing throughput. But how much? Well that depends on the other things that were forgoing by spending more of it on throughput.
<frankenmint>
you mean having excess hardware on standby that only turns on if X-transactions sit in uxto?
<frankenmint>
to relay trx?
<gmaxwell>
No, I mean the ability of the network to support a particular amount of transaction capacity without people shutting off nodes due to their operating costs.
<gmaxwell>
someone on BCT last night sent me this image, ... bitcoin node counts over time, though the general data isn't new to me (and I don't know the specifics of their methology); it paints a pretty bleak picture about our levels of excess capacity: https://i.imgur.com/EL0zHRe.jpg
<frankenmint>
since we're sharing, here's a graph of analysis that luke-jr compiled using existing block data
<frankenmint>
that sharp drop between may and septermber makes no sense
<frankenmint>
whatsup w/ that china data I think that's incorrect info
<gmaxwell>
some of that is incorrect, no doubt.
<frankenmint>
should be topsy turvy w/ heavier china influence in september
<frankenmint>
ill look around for that on bct to read into more context, thx for sharing!
rusty has joined #bitcoin-wizards
<gmaxwell>
frankenmint: but through the end of 2012 into 2013 the blockchain grew tremendously due to a single service flooding the chain with tiny transactions. It went from a couple hours to sync the net for most people to days for many.
<Taek>
were there really 300,000 nodes at one point? That seems so strange to me
<gmaxwell>
no, thats probably overcounting dynamic IPs.
<gmaxwell>
there were on the order of 80k reachable I believe though.
cornus_ammonis has joined #bitcoin-wizards
<moa>
elsevier is worried about "consumer protection" like the NYDFS is worried about consumer protection
<frankenmint>
moa: I read that and thought "LOL TPP"
<frankenmint>
sadly
<gmaxwell>
It's not unique to elsevier, I wrote about this problem of journals, museums, and libraries turning themselves into censors because suppressing information is pretty much the only element of curation that more traditional instutions can clearly do in a fundimentally better way than newer approaches.
prodatalab has quit [Ping timeout: 265 seconds]
<ajweiss>
the relationship between science and funding is starting to really show its age
<frankenmint>
gmaxwell: the unintended consequence is ip theft, but at the same time ip law is based on rules set around the mid 19th century
<frankenmint>
archaic and certainly never considered in the context of digital instantaneously available information
<akstunt600>
IP just doesnt "fit" into the direction things are moving
<moa>
ajweiss: we need a new model ... Scicoin?
<akstunt600>
i dont think anyone can really change that
<frankenmint>
moa: akstunt600 at this point we're talking revolution is the only way to make changes to that clusterfuck
<frankenmint>
because its 'powers at will' enforcing old rules to enforce ip law
<akstunt600>
Well everyday that goes by whil the government remains the same puts us closer
<akstunt600>
Tech will outpace government
<akstunt600>
already is
<frankenmint>
its not govt
<frankenmint>
its private enterprise doing this
<ajweiss>
moa: if anyone can ever write a program that can determine the value of an academic work, i'd be really impressed... especially considering "the value of an academic work" is largely undefined
nemild has joined #bitcoin-wizards
<akstunt600>
frankenmint, by way of the government rules and regs
<akstunt600>
its complicit system
<akstunt600>
a^
<frankenmint>
ahh yes :/
<ajweiss>
although, heh, it would be a pretty fun project to try and train a machine to spot papers with screwed up statistics
<frankenmint>
ajweiss: that's called technological singularity
<moa>
ajweiss: altcoins don't need a verifiable value basis for another chain ...
<moa>
just a vague idea and a cute name seems to work fine
<frankenmint>
i mean in my opinion that is what happens
<akstunt600>
The recent fraud in Pharma with regards too academics works is an example of the brokeness
<akstunt600>
its completely not working the way it is already
<moa>
oh wait, we could monetise citation ratings in an altcoin ... make it more corrupt than it already is
<ajweiss>
with all it's weird incentives. even just the system for determining merit and awarding grant funds in basic biology is a mess...
<ajweiss>
the gatekeepers are basically employees of elsevier and nature
<frankenmint>
lets have a thought experiment: can a volunteerism FOSS exclusive society succeed over existing systems?
<frankenmint>
ajweiss: lexusnexus also comes to mind
<akstunt600>
heh
<moa>
proof of work is abit like publish or perish
<ajweiss>
for example: a paper in nature or science is estimated to be worth just over a million in grant funds
<akstunt600>
with the proper incentives a gofundme or kickstarter might work well
<akstunt600>
its an already proven thing
<akstunt600>
Facebook should have been on this way back in the day
<akstunt600>
lol
<ajweiss>
problem with crowdfunding is that it rewards charlatans... but how can you ever really know who the charlatans really are?
<TD-Linux>
gmaxwell, oh no it's sciencedirect
<frankenmint>
I ignore crowdfunding for that reason ajweiss
<frankenmint>
til of star citizen, never even heard of it
jinglebellz has joined #bitcoin-wizards
PRab has quit [Quit: ChatZilla 0.9.91.1 [Firefox 38.0.5/20150525141253]]
PRab has joined #bitcoin-wizards
<bramc>
gmaxwell, 'bleak' is right
<bramc>
Did the great firewall start blocking bitcoin? Did china make it illegal? Is there a barely-connected bitcoin network sitting within China?
<bramc>
Does anybody know if ZK-based proof of time scheme (which would hence have good witness size) would be demonstrably canonical, assuming the security assumptions held up?
Dr-G2 has joined #bitcoin-wizards
Dr-G has quit [Disconnected by services]
joecool has joined #bitcoin-wizards
c-cex-yuriy has quit [Quit: Connection closed for inactivity]
punsieve has quit [Ping timeout: 265 seconds]
punsieve has joined #bitcoin-wizards
poggy has quit [Ping timeout: 264 seconds]
poggy has joined #bitcoin-wizards
hashtag has quit [Ping timeout: 258 seconds]
Adlai` has joined #bitcoin-wizards
adlai has quit [Ping timeout: 258 seconds]
jae_ has joined #bitcoin-wizards
wallet42 has quit [Quit: Leaving.]
trstovall has joined #bitcoin-wizards
Adlai` is now known as adlai
p15_ has quit [Max SendQ exceeded]
p15 has joined #bitcoin-wizards
jinglebellz has quit [Remote host closed the connection]
jinglebellz has joined #bitcoin-wizards
jae_ has quit [Remote host closed the connection]
nemild has quit [Quit: nemild]
nemild has joined #bitcoin-wizards
shesek has joined #bitcoin-wizards
p15 has quit [Max SendQ exceeded]
p15 has joined #bitcoin-wizards
jae_ has joined #bitcoin-wizards
wallet42 has joined #bitcoin-wizards
wallet42 has quit [Client Quit]
[7] has quit [Disconnected by services]
TheSeven has joined #bitcoin-wizards
jae_ has quit [Remote host closed the connection]
wallet42 has joined #bitcoin-wizards
jae_ has joined #bitcoin-wizards
jae_ has quit [Remote host closed the connection]
wallet42 has quit [Client Quit]
p15 has quit [Excess Flood]
GGuyZ has quit [Read error: Connection reset by peer]
GGuyZ_ has joined #bitcoin-wizards
p15 has joined #bitcoin-wizards
punsieve has quit [Ping timeout: 265 seconds]
rusty has quit [Ping timeout: 276 seconds]
SubCreative has quit [Read error: Connection timed out]
SubCreative has joined #bitcoin-wizards
cornus_ammonis has quit [Read error: Connection reset by peer]
cornus_ammonis has joined #bitcoin-wizards
fanquake has joined #bitcoin-wizards
jinglebellz has quit [Remote host closed the connection]
antanst has left #bitcoin-wizards [#bitcoin-wizards]
SubCreative has quit [Read error: Connection timed out]
<sipa>
shen_noe: interpret the argument as serialized X coordinate, compute the corresponding even Y coordinate to make it lie on the curve, and return the resulting point
grandmaster has quit [Remote host closed the connection]
SubCreative has joined #bitcoin-wizards
<shen_noe>
ahh, ok that makes more sense than to_point = take an integer and multiply it by the basepoint
<shen_noe>
lol
<gmaxwell>
I updated the text file to clarify this.
<shen_noe>
thanks, it was probably clear enough I was just thinking different ways to get H from a hash
<gmaxwell>
shen_noe: you're the second person who'd raised the concern, in fact. and the xG approach is the one thing that you cannot do or it totally breaks the security of the scheme. :)
ttttemp has quit [Remote host closed the connection]
ttttemp has joined #bitcoin-wizards
sparetire_ has joined #bitcoin-wizards
<wallet42>
sipa: does every X has a Y in the curve order?
<sipa>
no, 1 in 2
<sipa>
because every point has a negation which has the same X but opposite Y
<sipa>
and there are around 2^256 coordinates and around 2^256 points
orperelman has quit [Ping timeout: 265 seconds]
belcher has joined #bitcoin-wizards
belcher has joined #bitcoin-wizards
AaronvanW has joined #bitcoin-wizards
AaronvanW has joined #bitcoin-wizards
hashtag_ has quit [Ping timeout: 258 seconds]
<shen_noe>
if I combine ct and coinjoin / coinswap in one transaction, does each input need its own ring sig to obscure the amount?
<sipa>
ring signatures are not used to obscure the amounts; pedersen commitments are used for that
<sipa>
the ring signatures are used internally in the range proof of each output, to prove that the value is not negative
<sipa>
this is independent of coinjoin or anything; every confidential output needs a range proof
<shen_noe>
so one output = one ring sig?
<sipa>
there is one ring singature per *bit* in the range proof
<sipa>
so there are typically 32 per confidential output
<sipa>
though all ring signatures are combined as a single borromean ring signature
<shen_noe>
sipa thanks for the explanation
SDCDev has quit [Ping timeout: 252 seconds]
<shen_noe>
ahh... what I meant about each input in the coinjoin, actually was thinking of something like a darkcoin setup where coinjoin is accomplished roughly by sending your coins to a masternode, and then getting them back, so transaction sent to the masternode would have one ring sig
<sipa>
shen_noe: the *outputs* have ring sigs, not the transactions
<sipa>
coinjoin just combines multiple outputs and inputs from different participants
<sipa>
everyone just create their inputs and outputs (with blinded values and range proofs), and then they get combined, and then everyone signs off on the resulting combined transactions
Quanttek has quit [Ping timeout: 276 seconds]
fuc has quit []
<shen_noe>
output is part of the transaction no? I was thinking of a scenario where coins are periodically mixed
<sipa>
yes
<sipa>
the scenario doesn't matter
<sipa>
you have a bunch of people who create non-signed transactions, each with inputs and outputs
<sipa>
coinjoin creates a joint non-signed transactions with all inputs from everyone and all outputs from everyone
<shen_noe>
well, it kind of does, how many coinjoins transactions do I have to do to be anonymous
<sipa>
then everyone signs off on the results
<sipa>
i think you're confused
<shen_noe>
say I have to do 1 coinjoin every 24 hours
<sipa>
in the outputs of the to-be-coinjoined-transactions you create, you already have range proogs
<sipa>
coinjoin does not touch them
<sipa>
the whole question is orthogonal to coinjoin
<sipa>
does every participant need its own ring rig? yes, and even one per bit of the range proof in each of the outputs created by each of the participants
<shen_noe>
right, I get that it's orthogonal to coinjoin.. I'm just wondering for example, if I implement ct in dash/dark and my coins are periodically sent to a masternode.. now ct adds a bit of space, and all these mixing transactions now each have a ring sig
<sipa>
the size is 2.5 kilobytes per output
<sipa>
doesn't matter whether those outputs are touched by coinjoin or not
<shen_noe>
so e.g. 2 to 8 rounds of mixing times 2.5 kb per each mix
<shen_noe>
accumulated blockchain size is 2 to 8 x 2.5 kb?
<sipa>
i think you're confused
<shen_noe>
possibly
* shen_noe
goes to read more
<sipa>
coinjoin does not create transactions
<sipa>
maybe you have some higher level mixing on top
<sipa>
coinjoin just joins multiple transactions together to obscure which inputs and outputs are related
adam3us has joined #bitcoin-wizards
<shen_noe>
yes, that's what I'm thinking of ofc coinjoin does not creeate transactions
<shen_noe>
mixing on top is what I mean here
<sipa>
then do your homework :)
<shen_noe>
(since that's where I've seen coinjoin in the wild)
<sipa>
confidential transactions have 2.5 kilobyte per output, regardless of where that output came from
<shen_noe>
yep.
<shen_noe>
so know, let's suppose I implement a privacy coin
<shen_noe>
ofc I could let people manually coinjoin
eudoxia has joined #bitcoin-wizards
<shen_noe>
but that might be inconvenient for them
<shen_noe>
so now I do masternodes or whatever, mixing on top (accomplished via some coinjoin's / coinswaps whatever)
<shen_noe>
now each mix the masternodes do has 2.5 kb per output
<sipa>
no time for this now, sorry
sipa has left #bitcoin-wizards [#bitcoin-wizards]
<shen_noe>
thx for discussion
blackwraith has joined #bitcoin-wizards
priidu has quit [Ping timeout: 246 seconds]
p15x has joined #bitcoin-wizards
p15_ has joined #bitcoin-wizards
p15x_ has quit [Ping timeout: 246 seconds]
<gmaxwell>
14:12 < sipa> there is one ring singature per *bit* in the range proof
<gmaxwell>
well technically one ring per pair of bits. :)
p15 has quit [Ping timeout: 246 seconds]
bramc has joined #bitcoin-wizards
adam3us has quit [Ping timeout: 276 seconds]
punsieve has joined #bitcoin-wizards
nemild has quit [Quit: nemild]
Guyver2 has quit [Remote host closed the connection]
punsieve has left #bitcoin-wizards ["Leaving"]
bramc has quit [Quit: This computer has gone to sleep]
airbreather has joined #bitcoin-wizards
www1 has joined #bitcoin-wizards
www has quit [Ping timeout: 265 seconds]
joecool has quit [Ping timeout: 265 seconds]
airbreather has quit [Remote host closed the connection]
nemild has joined #bitcoin-wizards
AaronvanW has quit [Ping timeout: 246 seconds]
<andytoshi>
shen_noe: i can take over from sipa if you have more questions, tho i don't have a lot of time..
zooko has quit [Ping timeout: 264 seconds]
<andytoshi>
oh, never mind, i hadn't read to the bottom :) no darkcoin stuff please, check out https://bitcoin.stackexchange.com/a/29473 for discussion of anonymity tech
chmod755 has quit [Quit: Leaving]
c0rw|away is now known as c0rw|timetravl
jae_ has quit [Remote host closed the connection]
mkarrer has quit [Remote host closed the connection]
nemild has quit [Quit: nemild]
Mably has quit [Read error: Connection reset by peer]
c0rw|timetravl is now known as c0rw1n
nemild has joined #bitcoin-wizards
bramc has joined #bitcoin-wizards
bramc has quit [Client Quit]
adam3us has joined #bitcoin-wizards
Relos has quit [Ping timeout: 256 seconds]
Oizopower has joined #bitcoin-wizards
adam3us has quit [Quit: Leaving.]
peterlie has quit [Remote host closed the connection]
dEBRUYNE has quit [Read error: Connection reset by peer]