Return-Path: Received: from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137]) by lists.linuxfoundation.org (Postfix) with ESMTP id 27A94C000E for ; Mon, 28 Jun 2021 17:59:01 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by smtp4.osuosl.org (Postfix) with ESMTP id 072E4402AA for ; Mon, 28 Jun 2021 17:59:01 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: smtp4.osuosl.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from smtp4.osuosl.org ([127.0.0.1]) by localhost (smtp4.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8Fy-kdhimk4l for ; Mon, 28 Jun 2021 17:58:59 +0000 (UTC) X-Greylist: whitelisted by SQLgrey-1.8.0 Received: from mail-ot1-x32d.google.com (mail-ot1-x32d.google.com [IPv6:2607:f8b0:4864:20::32d]) by smtp4.osuosl.org (Postfix) with ESMTPS id 4C4BD4017D for ; Mon, 28 Jun 2021 17:58:59 +0000 (UTC) Received: by mail-ot1-x32d.google.com with SMTP id m6-20020a9d1d060000b029044e2d8e855eso17734012otm.8 for ; Mon, 28 Jun 2021 10:58:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=y1dU7sigqjk1U1kf4RDG05slMMM34pEJh/boQoOzCdo=; b=KuKHqrxj4quTDVceEHL34mD5c4KI45qlnTBN2x9U0SVwvPsHrNgK9MhJLua3IZ98Fr 69xppZMkIACU7q16R50uF/1cGg6+Zp2alBSS5deaS/Ye18/LzkrMORpA6Bkc2thTRHxV bjrW6KLrZ7RbuHfg9NEI6/KSJ6V13rDbYTonSQCaEQ4ZpKx8tisdNyq8uLHOjpSOWK/9 2yP3t2SHbMKA0oo9iDZ/+Nl7NEgO0PSBEdu2hspWGH8KylgJgvDP9eo/Wi8f76dAWCnL vRTe3Q6FVPI9Fn+EUSsj17dWHsYQDai9TfbEeEjZq+rZbIeLl2hdifEP+HrIeGhMtyGI 9oqA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=y1dU7sigqjk1U1kf4RDG05slMMM34pEJh/boQoOzCdo=; b=Ky8bJKe/M+OBO3UnJ55Tgo28RwTM46KrErknX0xp9MChjCb0/iTNRyoilkfn75FDVY hsPgC0YLsw1OK/yeXByp3tPmuoe19L59fg54WlnAA7FiWeeiNqlvjcWYh8nbd5jutI/f Y9dAnY7QvDSoyRiP7WByd+waHePZNkQZXfGInzkicgXCUADGnQMQiLVAM8gs+sAhn+GJ z7uEtUXBbWl5CmN2RX+uW1vhT9ufsjhFIlg1PMXYM7JPTtpihs7rT1goCZWXemhheebl YUgX1f8cRvus8o7geZcFHEgqDxJlh7YhRiEnhpWebvkY8xQvT7gynOaeEVjMkVLPjXES cCJQ== X-Gm-Message-State: AOAM531hu7X+ESePAqKF2/c0ZjZnHMY4dhclLM3Zqqn1YrHX/zraOhur b6gYTSTNU7y8n0PF/Sv4k1NFgDO1dxSPdvZQCcklyQEJp7M= X-Google-Smtp-Source: ABdhPJy8syrCzGXU+dW8zEQmDtSLZRz7HMcdKMTb+vvl7Rmpm8OjDrW8Q/pq57zI3VNzQcDdMo8N/0G0VHmq3AeO8NI= X-Received: by 2002:a9d:6d17:: with SMTP id o23mr698874otp.13.1624903138072; Mon, 28 Jun 2021 10:58:58 -0700 (PDT) MIME-Version: 1.0 References: <6leV9mViysrSOipJqrCM3wbqBOMO2gWI3BuEn0VKmaDf7GpawWyUIWLu-ddypMri7YeVmw94HNSaQYYp8fIkjZ0S3OtFTPQa6h9pkLprKDI=@protonmail.com> <9c2cec326adee1f4d4152e2195da0e7b@riseup.net> <16131549ac084b58fc6cde894e43babe@riseup.net> In-Reply-To: <16131549ac084b58fc6cde894e43babe@riseup.net> From: Alex Schoof Date: Mon, 28 Jun 2021 13:58:47 -0400 Message-ID: To: Bitcoin Protocol Discussion , raymo@riseup.net Content-Type: multipart/alternative; boundary="00000000000056db5f05c5d73e74" X-Mailman-Approved-At: Mon, 28 Jun 2021 19:04:36 +0000 Subject: Re: [bitcoin-dev] Boost Bitcoin circulation, Million Transactions Per Second with stronger privacy X-BeenThere: bitcoin-dev@lists.linuxfoundation.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Bitcoin Protocol Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Jun 2021 17:59:01 -0000 --00000000000056db5f05c5d73e74 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hey Raymo, Here=E2=80=99s a scenario: Alice has one UTXO. Suppose Alice sends Bob an MT and a GT over Sabu, and Bob gives whatever goods and services to Alice. Alice then goes and spends that UTXO to Charlie with a higher fee than the GT she sent to Bob. Charlie has no idea that Bob exists, because he gets a valid UTXO. Bob can try to publish the GT, but if Alice crafts the fees right, the TX to Charlie will be confirmed first. Alice now has goods from both Bob and Charlie, and has only paid one of them. She has is able to double spend because: (1) the gossip network you describe for sabu only protects people if everyone is on sabu and playing by the rules, it does not prevent spending outside of sabu; and (2) there is nothing encumbering the onchain UTXO and preventing it from being spent outside of a sabu payment. The reason people keep brining up Lightning is because Lightning solves this problem by having a channel-open involve locking funds in a 2-of-2 multisig, preventing them from being spent outside of lightning until the channel is torn down. If there is nothing stopping someone from spending onchain funds outside of the context of your system, then your system does not prevent double spends= . Hope that explanation helps. Alex On Mon, Jun 28, 2021 at 1:36 PM raymo via bitcoin-dev < bitcoin-dev@lists.linuxfoundation.org> wrote: > > > > What prevents the creditor from signing a transaction that is neither a > valid MT nor a GT? > Please stop comparing Sabu and Lightning. Otherwise, it won't let you > true understanding of Sabu. > In Sabu protocol, only the issuer (the UTXO owner) can sign the > transaction and decide how much money goes to whom. The engaged UTXO(s) > belonged to issuer and the creditor never put UTXO in transaction, thus > never can sign the transaction because he has no ownership on the used > UTXOs. > As I already wrote in paper, the issuer creates and signs a transaction > and delivers it to creditor(s). If a creditor intends to send all or > part of his money to another person (AKA spending his money), he will > ask for a new signed transaction from issuer, in which a part of his > credit will transfer to another creditor. > > The Sabu has nothing with Lightning. Sabu has a peer-to-peer network of > doc-watchers which maybe it was the cause you always compare it to > Lightning. > I am not presenting lightning neither condemning it. > I am presenting Sabu protocol. > Please let concentrate on how Sabu works or not works. > > > > On 2021-06-28 15:28, ZmnSCPxj wrote: > > Good morning Raymo, > > > >> Hi ZmnSCPxj, > >> > >> Why you get the signal =E2=80=9Ctrust the Gazin wallet=E2=80=9D? > >> Sabu is a protocol and the Gazin wallet will be an implementation of > >> that protocol. We will implement it in react-native language to suppor= t > >> both Android and iPhone. Of course it will be open source and GPL3. > >> Here is the repository and yet is empty :) > >> https://github.com/raymaot/Gazin > >> > >> I wonder why you do not look carefully into the proposal! IMHO the Sab= u > >> will be far better than Lightning. > >> Can=E2=80=99t you see the fact that in Sabu you do not need open and c= lose > >> channels ever? Can you imagine only this feature how dramatically > >> decrease the transactions cost and how increase the distribution of > >> nodes and improve privacy level? it makes every mobile wallet act like= a > >> lightning network. > >> Did you note the fact that in Sabu protocol there is no routing? And t= he > >> only people knew about a transaction are issuer and creditor? No one > >> else won=E2=80=99t be aware of transactions and million transactions p= er second > >> can be sent and received and repeal dynamically without any footprint = on > >> any DLT? > >> > >> The English is not my mother language and probably my paper is not a > >> smooth and easy to read paper, but these are not good excuse to not ev= en > >> reading a technical paper carefully and before understanding it or at > >> least trying to understanding it start to complaining. > > > > > > What prevents the creditor from signing a transaction that is neither > > a valid MT nor a GT? > > > > Nothing. > > > > In Lightning, sure one side can sign a transaction that is not a valid > > commitment transaction, but good luck getting the other side to *also* > > sign the transaction; it will not. > > Thus, you need n-of-n. > > > > 1-of-1 is simply not secure, full stop, you need to redesign the whole > > thing to use *at least* 2-of-2. > > At which point you will have reinvented Lightning. > > > > Otherwise, you are simply trusting that the wallet is implemented > > correctly, and in particular, that any creditor will not simply insert > > code in your open-source software to sign invalid transactions. > > > > With a 1-of-1, any invalid-in-Sabu transaction can still be valid in > > the Bitcoin blockchain layer, thus the scheme is simply insecure. > > > > Features are meaningless without this kind of basic trust-minimization > security. > > > > Regards, > > ZmnSCPxj > _______________________________________________ > bitcoin-dev mailing list > bitcoin-dev@lists.linuxfoundation.org > https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev > --=20 Alex Schoof --00000000000056db5f05c5d73e74 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hey Raymo,

Here=E2=80=99s a scenario:=C2=A0

Alice has one UTXO.=C2=A0

Suppose Alice sends Bob an MT and a GT over Sabu, and Bob g= ives whatever goods and services to Alice.=C2=A0
Alice then goes and spends that UTXO to Charlie wi= th a higher fee than the GT she sent to Bob. Charlie has no idea that Bob e= xists, because he gets a valid UTXO. Bob can try to publish the GT, but if = Alice crafts the fees right, the TX to Charlie will be confirmed first. Ali= ce now has goods from both Bob and Charlie, and has only paid one of them. = She has is able to double spend because: (1) the gossip network you describ= e for sabu only protects people if everyone is on sabu and playing by the r= ules, it does not prevent spending outside of sabu; and (2) there is nothin= g encumbering the onchain UTXO and preventing it from being spent outside o= f a sabu payment.=C2=A0

= The reason people keep brining up Lightning is because Lightning solves thi= s problem by having a channel-open involve locking funds in a 2-of-2 multis= ig, preventing them from being spent outside of lightning until the channel= is torn down.=C2=A0

If = there is nothing stopping someone from spending onchain funds outside of th= e context of your system, then your system does not prevent double spends.<= /div>

Hope that explanation he= lps.=C2=A0

Alex

On M= on, Jun 28, 2021 at 1:36 PM raymo via bitcoin-dev <bitcoin-dev@lists.linuxfoundation.org> wrote:


> What prevents the creditor from signing a transaction that is neither = a valid MT nor a GT?
Please stop comparing Sabu and Lightning. Otherwise, it won't let you true understanding of Sabu.
In Sabu protocol, only the issuer (the UTXO owner) can sign the
transaction and decide how much money goes to whom. The engaged UTXO(s)
belonged to issuer and the creditor never put UTXO in transaction, thus
never can sign the transaction because he has no ownership on the used
UTXOs.
As I already wrote in paper, the issuer creates and signs a transaction
and delivers it to creditor(s). If a creditor intends to send all or
part of his money to another person (AKA spending his money), he will
ask for a new signed transaction from issuer, in which a part of his
credit will transfer to another creditor.

The Sabu has nothing with Lightning. Sabu has a peer-to-peer network of
doc-watchers which maybe it was the cause you always compare it to
Lightning.
I am not presenting lightning neither condemning it.
I am presenting Sabu protocol.
Please let concentrate on how Sabu works or not works.



On 2021-06-28 15:28, ZmnSCPxj wrote:
> Good morning Raymo,
>
>> Hi ZmnSCPxj,
>>
>> Why you get the signal =E2=80=9Ctrust the Gazin wallet=E2=80=9D? >> Sabu is a protocol and the Gazin wallet will be an implementation = of
>> that protocol. We will implement it in react-native language to su= pport
>> both Android and iPhone. Of course it will be open source and GPL3= .
>> Here is the repository and yet is empty :)
>> https://github.com/raymaot/Gazin
>>
>> I wonder why you do not look carefully into the proposal! IMHO the= Sabu
>> will be far better than Lightning.
>> Can=E2=80=99t you see the fact that in Sabu you do not need open a= nd close
>> channels ever? Can you imagine only this feature how dramatically<= br> >> decrease the transactions cost and how increase the distribution o= f
>> nodes and improve privacy level? it makes every mobile wallet act = like a
>> lightning network.
>> Did you note the fact that in Sabu protocol there is no routing? A= nd the
>> only people knew about a transaction are issuer and creditor? No o= ne
>> else won=E2=80=99t be aware of transactions and million transactio= ns per second
>> can be sent and received and repeal dynamically without any footpr= int on
>> any DLT?
>>
>> The English is not my mother language and probably my paper is not= a
>> smooth and easy to read paper, but these are not good excuse to no= t even
>> reading a technical paper carefully and before understanding it or= at
>> least trying to understanding it start to complaining.
>
>
> What prevents the creditor from signing a transaction that is neither<= br> > a valid MT nor a GT?
>
> Nothing.
>
> In Lightning, sure one side can sign a transaction that is not a valid=
> commitment transaction, but good luck getting the other side to *also*=
> sign the transaction; it will not.
> Thus, you need n-of-n.
>
> 1-of-1 is simply not secure, full stop, you need to redesign the whole=
> thing to use *at least* 2-of-2.
> At which point you will have reinvented Lightning.
>
> Otherwise, you are simply trusting that the wallet is implemented
> correctly, and in particular, that any creditor will not simply insert=
> code in your open-source software to sign invalid transactions.
>
> With a 1-of-1, any invalid-in-Sabu transaction can still be valid in > the Bitcoin blockchain layer, thus the scheme is simply insecure.
>
> Features are meaningless without this kind of basic trust-minimization= security.
>
> Regards,
> ZmnSCPxj
_______________________________________________
bitcoin-dev mailing list
= bitcoin-dev@lists.linuxfoundation.org
https://lists.linuxfoundation.org/mail= man/listinfo/bitcoin-dev
--


Alex Schoof
--00000000000056db5f05c5d73e74--