Message-ID: <56D8A480.6040604@voskuil.org>
Date: Thu, 03 Mar 2016 12:54:24 -0800
From: Eric Voskuil <eric@voskuil.org>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
	rv:31.0) Gecko/20100101 Thunderbird/31.2.0
MIME-Version: 1.0
To: Peter Todd <pete@petertodd.org>
References: <201603021456.15820.luke@dashjr.org>
	<201603021542.29609.luke@dashjr.org> <56D71488.4080607@gmail.com>
	<CAE-z3OWA0sn+=+qqs8BtiBe7T9Qdb4G8XAS_bX4hScq225iZQQ@mail.gmail.com>
	<00e101d174b5$f2659060$d730b120$@voskuil.org>
	<20160302230213.GA888@muck>
In-Reply-To: <20160302230213.GA888@muck>
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature";
	boundary="9IWvuxiwShosKoqIbk1wqMjT0aLP5xFk0"
Cc: bitcoin-dev@lists.linuxfoundation.org
Subject: Re: [bitcoin-dev] Hardfork to fix difficulty drop algorithm
Precedence: list

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--9IWvuxiwShosKoqIbk1wqMjT0aLP5xFk0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

On 03/02/2016 03:02 PM, Peter Todd wrote:
> On Wed, Mar 02, 2016 at 11:01:36AM -0800, Eric Voskuil via bitcoin-dev =
wrote:
>>> A 6 month investment with 3 months on the high subsidy and 3 months o=
n low subsidy would not be made=E2=80=A6
>>
>> Yes, this is the essential point. All capital investments are made bas=
ed on expectations of future returns. To the extent that futures are perf=
ectly knowable, they can be perfectly factored in. This is why inflation =
in Bitcoin is not a tax, it=E2=80=99s a cost. These step functions are ma=
de continuous by their predictability, removing that predictability will =
make them -- unpredictable.
>=20
> You know, I do agree with you.
>=20
> But see, this is one of the reasons why we keep reminding people that
> strictly speaking a hardfork *is* an altcoin, and the altcoin can chang=
e
> any rule currently in Bitcoin.
>=20
> It'd be perfectly reasonable to create an altcoin with a 22-million-coi=
n
> limit and an inflation schedule that had smooth, rather than abrupt,
> drops. It'd also be reasonable to make that altcoin start with the same=

> UTXO set as Bitcoin as a means of initial coin distribution.
>=20
> If miners choose to start mining that altcoin en-mass on the halving,
> all the more power to them. It's our choice whether or not we buy those=

> coins. We may choose not to, but if 95% of the hashing power decides to=

> go mine something different we have to accept that under our current
> chosen rules confirmations might take a long time.
>=20
> Of course, personally I agree with Gregory Maxwell: this is all fairly
> unlikely to happen, so the discussion is academic. But we'll see.
>=20
I agree, this is a perfectly rational interpretation. I also agree that
this particular instance is academic. But I see more to this than
accepting what is possible.

In the case of Federal Reserve Notes the gold obligation was abrogated.
This was (at least) a contract default, implemented by force of arms.
This contentious hard fork was clearly an attack.

But in a system with no authority and in which nobody has formed a
contractual obligation with anyone else, what would constitute an attack
on the money? There is no difference between state attacks on (or
collusion with) miners and miners acting on self interest.

One answer is that nothing is an attack, it's up to the market to
decide. But to the extent that there can be an attack on the money, the
attempt to move the value of the coin to an altcoin (hard fork) is it.
Though the choice of the term "attack" isn't essential.

The importance of recognizing an attack is that it affords one the
opportunity to defend against it. People holding "dollars" in 1933 were
ill equipped to defend against a system level attack (monetary policy),
in part because many did not recognize it as such, and in part because
there was insufficient preparation by those who did.

I see us building the tools and awareness necessary for defense. As you
say, nobody has to buy into an altcoin forked from their coin. This much
is simple to achieve. The more difficult problem is preserving the
utility of the original coin. Clearly the purpose of a hard fork (as
opposed to a new coin) is to transfer this value.

We've all seen arguments for contentious hard fork deployment that
explicitly depend on the fear of monetary loss to drag people to
acceptance. While this may be the nature of the technology, it's
important that we develop effective defense against it.

Ultimately the only defense is individual validation. The collusion of
banks (web wallets) with miners in attacking consensus is obvious. But
even without active collusion, the surrender of validation leaves people
just as defenseless as *being* unarmed while retaining a right to
*become* armed.

Even if every person mines at the same level, the system amounts to
little more than majority rule if validation is not decentralized. There
are people perfectly willing to exploit this weakness.

e


--9IWvuxiwShosKoqIbk1wqMjT0aLP5xFk0
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJW2KSAAAoJEDzYwH8LXOFOWjcH/3Wq2YHtdoxlyvBVgaXCSmzd
uMQu9wQn4Hv/3845WhgoLpHfFS/UZie/FzyB5IVcGOu/Qt0SrMxrj6aOMoX24WtL
BPjo72Z56C9sOYV4tmS0anzQzw9D4CNgSYbCX8hX2IvCSELRBj2H9A4FIIrCzuoo
YIMvlUmHVDy5qegALlLuBUojZBPz62Sbt/Gf2mmdx+sp8ku76YgxjZr3WCpBral2
wGrPRI0nuXYlU8HCO7DR0zhrd9UjiMbcb3yYH84CnEbtsRfebHXe4tVy0AmI183y
I9E8O/ehBwBg78IHYMIEJcR86tNFoF4zXeuZcoeNdyQDuwEogWuj0E+xAr2AEyo=
=sOUl
-----END PGP SIGNATURE-----

--9IWvuxiwShosKoqIbk1wqMjT0aLP5xFk0--