Date: Fri, 26 Jul 2019 14:38:38 +0500
From: Dmitry Petukhov <dp@simplexum.com>
To: bitcoin-dev@lists.linuxfoundation.org
Message-ID: <20190726143738.0be561da@simplexum.com>
In-Reply-To: <94534006-D560-4C90-9D5D-A3A64B698518@gmail.com>
References: <985792b1-e7aa-677b-a7a1-6a5f672da884@riseup.net>
	<94534006-D560-4C90-9D5D-A3A64B698518@gmail.com>
Organization: simplexum.com
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
	boundary="Sig_/tNv36iXbK27npzZX+8KtQVZ";
	protocol="application/pgp-signature"
Subject: Re: [bitcoin-dev] Improving JoinMarket's resistance to sybil
 attacks using fidelity bonds
Precedence: list

--Sig_/tNv36iXbK27npzZX+8KtQVZ
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

=D0=92 Fri, 26 Jul 2019 10:10:15 +0200
Tamas Blummer via bitcoin-dev <bitcoin-dev@lists.linuxfoundation.org>
wrote:

> Imposing opportunity costs however requires larger time locked
> amounts than burning and the user might not have sufficient funds to
> do so. This is however not a restriction but an opportunity that can
> give rise to an additional market of locking UTXOs in exchange of a
> payment.
>=20
> This would give rise to a transparent interest rate market for
> Bitcoin an additional huge benefit.

Wouldn't that 'locked utxo rent' market just drive the cost of attack
down to manageable levels for the attacker ?

The owner of the locked utxo can derive potential profit from it by
being a maker, and then the profit will be reduced by operational
expenses of running a maker operation.

The owner of utxo can just 'outsource' that task to someone, and pay
some fee for the convenience.

In effect, the owner would be renting out that utxo for the price of

<maker_profit> - <operational_expenses> - <convenience_fee>

If the attacker is the entity who provides this 'maker outsourcing',
and it captures significant portion of that maker-outsourcing/utxo-rent
market, it can even receive some profit from the convenience fee, while
deanonymizing the joins.

And with pseudonymous entities, you cannot be sure how much of that
market the attacker controls.

--Sig_/tNv36iXbK27npzZX+8KtQVZ
Content-Type: application/pgp-signature
Content-Description: Цифровая подпись OpenPGP

-----BEGIN PGP SIGNATURE-----
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=RcPl
-----END PGP SIGNATURE-----

--Sig_/tNv36iXbK27npzZX+8KtQVZ--