1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
|
Return-Path: <fresheneesz@gmail.com>
Received: from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138])
by lists.linuxfoundation.org (Postfix) with ESMTP id D4929C000E
for <bitcoin-dev@lists.linuxfoundation.org>;
Sat, 26 Jun 2021 16:26:34 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
by smtp1.osuosl.org (Postfix) with ESMTP id B5B458309A
for <bitcoin-dev@lists.linuxfoundation.org>;
Sat, 26 Jun 2021 16:26:34 +0000 (UTC)
X-Virus-Scanned: amavisd-new at osuosl.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5
tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: smtp1.osuosl.org (amavisd-new);
dkim=pass (2048-bit key) header.d=gmail.com
Received: from smtp1.osuosl.org ([127.0.0.1])
by localhost (smtp1.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id jHnhhh2YZmbW
for <bitcoin-dev@lists.linuxfoundation.org>;
Sat, 26 Jun 2021 16:26:33 +0000 (UTC)
X-Greylist: whitelisted by SQLgrey-1.8.0
Received: from mail-ej1-x634.google.com (mail-ej1-x634.google.com
[IPv6:2a00:1450:4864:20::634])
by smtp1.osuosl.org (Postfix) with ESMTPS id 8D91F83054
for <bitcoin-dev@lists.linuxfoundation.org>;
Sat, 26 Jun 2021 16:26:32 +0000 (UTC)
Received: by mail-ej1-x634.google.com with SMTP id n2so9296503eju.11
for <bitcoin-dev@lists.linuxfoundation.org>;
Sat, 26 Jun 2021 09:26:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
h=mime-version:references:in-reply-to:from:date:message-id:subject:to
:cc; bh=ViviMLEFLMgqQr4sOyoFPB2J+ROSZ7JA4GTUB3hNGc8=;
b=GHRyX/7nrVIhBn+DmrcmpYCYbfRphPcYzRloejU1T9zRkVGWUfdO9dmgFBpzQF/7cB
MkKuXpjuij9WQ0toRXn1EGqSTXEl8pkfg2iJfK9oOARlmeZf5BdLN28OUKV1iS2tJX/I
YrIpLQ2jlwqv/lgx5c/yqMtSy7dm8ZRa9rTHzKv9PQJ/dVKUTD/ch+C/xhJ4SUiDq06h
v+Rvgo4WE/RFTIl3meuyk72b8FrF+BigSTzLQvfU1i22Ij8O67bb6O2nJTNx8P38IclS
BoBqosmkjmLkT2DfGkaOGxgfqAVio8uOgBverwEl+0iEvHGauDA3YGEg5paiUm6jhdHJ
lJ7g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:references:in-reply-to:from:date
:message-id:subject:to:cc;
bh=ViviMLEFLMgqQr4sOyoFPB2J+ROSZ7JA4GTUB3hNGc8=;
b=ejErnazzkZ7uiWw5uuokCL5L5lemXpKl4NyhyuBl46WcVTfYzwFfmAyO5t8120edCs
hIcdSoxPuxhSGq/Z3AfDz2MsTAjTlUUvSj84V963fc7Cc+ZePIq0BNsdXLBjpxBxpcVn
MFqiXC3xWrVUvtUCW5JU4sOzdjhsR+cpR7y8Gik4HBgUoH8k2BqpjkkCa2z9VAN4480g
BHlU2YcGH46IE5te5lYsAk85sunwZJxJSpiLzVNh5XSjwEN5k26X7nbdNxA44zcQrmHL
s753s0Z/rp0KQUg33Eao8G8/dsNlWiKEEVeOTNOF74hmXMdW9219dKTb/FhEN/QBk22l
dyQA==
X-Gm-Message-State: AOAM532qckZ0clnvye/stKMEOmqeDZqFLZfwe45t65SmMMUQKpZVfhsK
yK0L0OFN68Tr4H4xlFWdWMdyBZA4N4gFuCO0YVA=
X-Google-Smtp-Source: ABdhPJyOlMG0tPyCpWer6jEeHQwQEJsXoVw30cFsVuFs/ZKC4kluoM6xsdeUyC8ZYV9a/M4A0YHwHT4N6a/NDYhGDuM=
X-Received: by 2002:a17:907:3e88:: with SMTP id
hs8mr16447999ejc.96.1624724790673;
Sat, 26 Jun 2021 09:26:30 -0700 (PDT)
MIME-Version: 1.0
References: <CAPv7TjZ5fCc6jErsuScTJE2Vi3PTp=UgM7w_0CHhpEMzYK5TPw@mail.gmail.com>
<MN2PR10MB4030EBD14EF82E29CFEDD00FB1069@MN2PR10MB4030.namprd10.prod.outlook.com>
In-Reply-To: <MN2PR10MB4030EBD14EF82E29CFEDD00FB1069@MN2PR10MB4030.namprd10.prod.outlook.com>
From: Billy Tetrud <billy.tetrud@gmail.com>
Date: Sat, 26 Jun 2021 09:26:12 -0700
Message-ID: <CAGpPWDaPZP_Z4DwW9OPCF4C0LHbEFwk1o6jxtpF557tPij93Kg@mail.gmail.com>
To: greg m <greg_not_so@hotmail.com>
Content-Type: multipart/alternative; boundary="00000000000001851205c5adb8dd"
X-Mailman-Approved-At: Sat, 26 Jun 2021 16:31:18 +0000
Cc: Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
Subject: Re: [bitcoin-dev] Opinion on proof of stake in future
X-BeenThere: bitcoin-dev@lists.linuxfoundation.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Bitcoin Protocol Discussion <bitcoin-dev.lists.linuxfoundation.org>
List-Unsubscribe: <https://lists.linuxfoundation.org/mailman/options/bitcoin-dev>,
<mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=unsubscribe>
List-Archive: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/>
List-Post: <mailto:bitcoin-dev@lists.linuxfoundation.org>
List-Help: <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=help>
List-Subscribe: <https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev>,
<mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=subscribe>
X-List-Received-Date: Sat, 26 Jun 2021 16:26:34 -0000
--00000000000001851205c5adb8dd
Content-Type: text/plain; charset="UTF-8"
I've created a thread on reddit where we can continue the conversation:
https://www.reddit.com/r/BitcoinDiscussion/comments/o8dvlo/bitcoindev_opinion_on_proof_of_stake_in_future/
On Fri, Jun 25, 2021 at 9:59 AM greg m <greg_not_so@hotmail.com> wrote:
> Where do we go from here? reddit?
>
> Happy Friday everyone!
> gm
>
> On Jun 25, 2021 12:08, Ruben Somsen via bitcoin-dev <
> bitcoin-dev@lists.linuxfoundation.org> wrote:
>
> Hi all,
>
> Thanks for the lively discussion. On behalf of the bitcoin-dev moderators
> and with the readers of this mailing list in mind, we'd like to suggest
> finishing up this discussion. Of course there should be some room for
> exploring fringe ideas, but it should not dominate the mailing list either.
> Fun as it may be, perhaps it's time to get back to focusing on the topics
> that are more directly relevant to Bitcoin.
>
> Cheers,
> Ruben
>
> On Fri, Jun 25, 2021 at 9:29 AM yanmaani--- via bitcoin-dev <
> bitcoin-dev@lists.linuxfoundation.org> wrote:
>
> No, that's not how it works.
>
> PoS is constitutionally incapable of producing any further consensus
> from its starting point. If you start out by hardcoding the bitcoin
> ledger state at June 1, 2021, then your PoS system will be unable to
> reach a global consensus as to what the state was on June 2, 2021.
>
> To get global consensus in PoS, you have to know which block came first.
> To reach a consensus on which block was first, you need to solve the
> timestamp problem. And to solve the timestamp problem, you need a
> consensus system. You'll notice that at no point does PoS provide such a
> consensus system.
>
> Implementations of PoS sacrifice global consensus for 'weak
> subjectivity', meaning that each node has its own notion of when a
> certain block arrived. Astute observers will note that 'each node has
> its own notion of what happened' differs somewhat from 'all nodes agree
> on what happened', and that only one of these is a good description of
> what is commonly known as 'consensus'.
>
> Maybe a simpler way of looking at it is from the coder's perspective:
> how do you implement IBD? In PoW, the "longest chain" rule is used -
> "Nodes can leave and rejoin the network at will, accepting the
> proof-of-work chain as proof of what happened while they were gone.".
> Does PoS have this property?
>
> On 2021-06-24 21:50, Erik Aronesty wrote:
> >> PoS is not suitable for use as a consensus system, because
> > it is constitutionally incapable of producing a consensus.
> >
> > true - but only for a system that is starting from nothing.
> >
> > since bitcoin already exists, and we have a consensus, you can use
> > bitcoin's existing consensus to maintain that consensus using
> > references to prior state. and yes, you simply have to limit reorgs
> > to not go back before PoW was abandoned in favor of PoS/PoB (assuming
> > all incentive problems are solved).
> >
> > ie: once you have uses PoW to bootstrap the system, you can "recycle"
> > that work.
> >
> > On Thu, Jun 24, 2021 at 4:41 PM yanmaani--- via bitcoin-dev
> > <bitcoin-dev@lists.linuxfoundation.org> wrote:
> >>
> >> No, 51% of the *coin holders* can't do diddly squat. 51% of miners
> >> can,
> >> but in PoW, that's a different set to the coin holders.
> >>
> >> The basic problem with PoS, anyway, is that it's not actually a
> >> consensus system ("weak subjectivity"). Either you allow long reorgs,
> >> and then you open the door to long-range attacks, or you don't, and
> >> then
> >> you're not guaranteed that all nodes agree on the state of the chain,
> >> which was the purpose of the system to begin with.
> >>
> >> To put it more plainly: for PoS to work, you need a consensus on which
> >> block was seen first. But if you had that, you could presumably apply
> >> that method to determine which *transaction* was seen first, in which
> >> case you could do away with the blockchain entirely. (Real-world
> >> implementations of PoS, such that they are, do away with this
> >> requirement, scrapping the global consensus on ordering in favor of
> >> having each node decide for itself which block came first.)
> >>
> >> In other words, even if you solved all the incentive problems, the
> >> fact
> >> remains that PoS is not suitable for use as a consensus system,
> >> because
> >> it is constitutionally incapable of producing a consensus.
> >>
> >> On 2021-06-24 00:14, Billy Tetrud via bitcoin-dev wrote:
> >> >> This is not true in a Proof of Work system and this difference
> >> > absolutely should not be trivialized.
> >> >
> >> > That is in fact true of Proof of Work as well. If a colluding
> >> > coalition of miners with more than 50% of the hashrate want to censor
> >> > transactions, they absolutely can do that by orphaning blocks that
> >> > contain transactions they want to censor. This is not different in
> >> > proof of stake.
> >> >
> >> > On Wed, Jun 23, 2021 at 11:14 AM Keagan McClelland
> >> > <keagan.mcclelland@gmail.com> wrote:
> >> >
> >> >>> Premise: There is a healthy exchange market for PoS Coin X with
> >> >> tens of thousands of participants bidding to buy and sell the coin
> >> >> for other currencies on the market.
> >> >>
> >> >> The difference here though is that Proof of Stake allows the quorum
> >> >> of coin holders to block the exchange of said coins if they are
> >> >> going to a particular destination. Nothing requires these staking
> >> >> nodes to include particular transactions into a block. With that in
> >> >> mind, it isn't just that you require the permission of the person
> >> >> who sold you the coins, which I can agree is a less dangerous form
> >> >> of permission, but you must also require the permission of at least
> >> >> 51% of the coin holders to even receive those coins in the first
> >> >> place. This is not true in a Proof of Work system and this
> >> >> difference absolutely should not be trivialized.
> >> >>
> >> >> Keagan
> >> >>
> >> >> On Wed, Jun 23, 2021 at 2:30 AM Billy Tetrud via bitcoin-dev
> >> >> <bitcoin-dev@lists.linuxfoundation.org> wrote:
> >> >>
> >> >>> Barrier to entry in PoS is being given permission by the previous
> >> >> owner of a token
> >> >>
> >> >> The idea that proof of stake is not permissionless is completely
> >> >> invalid. It pains me to see such an argument here. Perhaps we can
> >> >> come to an agreement by being more specific. I'd like to propose the
> >> >> following:
> >> >>
> >> >> Premise: There is a healthy exchange market for PoS Coin X with tens
> >> >> of thousands of participants bidding to buy and sell the coin for
> >> >> other currencies on the market.
> >> >>
> >> >> If the premise above is true, then there is no significant
> >> >> permission needed to enter the market for minting blocks for PoS
> >> >> Coin X. If you make a bid on someone's coins and they don't like you
> >> >> and refuse, you can move on to any one of the other tens of
> >> >> thousands of people in that marketplace. Would you agree, Cloud
> >> >> Strife, that this situation couldn't be considered "permissioned"?
> >> >>
> >> >> If not, consider that participation in *any* decentralized system
> >> >> requires the permission of at least one user in that system. If
> >> >> there are thousands of bitcoin public nodes, you require the
> >> >> permission of at least one of them to participate in bitcoin. No one
> >> >> considers bitcoin "permissioned" because of this. Do you agree?
> >> >>
> >> >> On Thu, Jun 17, 2021 at 1:15 PM Cloud Strife via bitcoin-dev
> >> >> <bitcoin-dev@lists.linuxfoundation.org> wrote:
> >> >>
> >> >> Barrier to entry in PoW is matter for hardware and energy is
> >> >> permissionless and exist all over the universe, permissionless cost
> >> >> which exists for everyone no matter who because it's unforgeable.
> >> >>
> >> >> Barrier to entry in PoS is being given permission by the previous
> >> >> owner of a token for you to have it via transfer or sale, both
> >> >> choices they never have to make since there are no continuous costs
> >> >> with producing blocks forcing it. A permission is an infinitely high
> >> >> barrier to entry if the previous owner, like the premining party,
> >> >> refuses to give up the token they control.
> >> >>
> >> >> You're skipping the part where you depend on a permission of a
> >> >> central party in control of the authority token before you can
> >> >> produce blocks on your rasberry Pi.
> >> >>
> >> >> Proof of stake is not in any possible way relevant to permissionless
> >> >> protocols, and thus not possibly relevant to decentralized protocols
> >> >> where control must be distributed to independent (i.e.
> >> >> permissionless) parties.
> >> >>
> >> >> There's nothing of relevance to discuss and this has been figured
> >> >> out long long ago.
> >> >>
> >> >>
> >> >
> https://github.com/libbitcoin/libbitcoin-system/wiki/Proof-of-Stake-Fallacy
> >> >>
> >> >>
> >> >
> https://medium.com/@factchecker9000/nothing-is-worse-than-proof-of-stake-e70b12b988ca
> >> >>
> >> >> On Tue, Jun 15, 2021 at 7:13 AM James MacWhyte via bitcoin-dev
> >> >> <bitcoin-dev@lists.linuxfoundation.org> wrote:
> >> >>
> >> >> @Lloyd wrote:
> >> >>
> >> >> Of course in reality no one wants to keep their coin holding keys
> >> >> online so in Alogorand you can authorize a set of "participation
> >> >> keys"[1] that will be used to create blocks on your coin holding
> >> >> key's behalf.
> >> >> Hopefully you've spotted the problem.
> >> >> You can send your participation keys to any malicious party with a
> >> >> nice website (see random example [2]) offering you a good return.
> >> >> Damn it's still Proof-of-SquareSpace!
> >> >>
> >> >> I believe we are talking about a comparison to PoW, correct? If you
> >> >> want to mine PoW, you need to buy expensive hardware and configure
> >> >> it to work, and wait a long time to get any return by solo mining.
> >> >> Or you can join a mining pool, which might use your hashing power
> >> >> for nefarious purposes. Or you might skip the hardware all together
> >> >> and fall for some "cloud mining" scheme with a pretty website and a
> >> >> high rate of advertised return. So as you can see,
> >> >> Proof-of-SquareSpace exists in PoW as well!
> >> >>
> >> >> The PoS equivalent of buying mining hardware is setting up your own
> >> >> validator and not outsourcing that to anyone else. So both PoW and
> >> >> PoS have the professional/expert way of participating, and the
> >> >> fraud-prone, amateur way of participating. The only difference is,
> >> >> with PoS the professional/expert way is accessible to anyone with a
> >> >> raspberry Pi and a web connection, which is a much lower barrier to
> >> >> entry than PoW. _______________________________________________
> >> >> bitcoin-dev mailing list
> >> >> bitcoin-dev@lists.linuxfoundation.org
> >> >> https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
> >> > _______________________________________________
> >> > bitcoin-dev mailing list
> >> > bitcoin-dev@lists.linuxfoundation.org
> >> > https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
> >> > _______________________________________________
> >> > bitcoin-dev mailing list
> >> > bitcoin-dev@lists.linuxfoundation.org
> >> > https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
> >> > _______________________________________________
> >> > bitcoin-dev mailing list
> >> > bitcoin-dev@lists.linuxfoundation.org
> >> > https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
> >> _______________________________________________
> >> bitcoin-dev mailing list
> >> bitcoin-dev@lists.linuxfoundation.org
> >> https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
> _______________________________________________
> bitcoin-dev mailing list
> bitcoin-dev@lists.linuxfoundation.org
> https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
>
>
>
--00000000000001851205c5adb8dd
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">I've created a thread on reddit where we can continue =
the conversation:=C2=A0<a href=3D"https://www.reddit.com/r/BitcoinDiscussio=
n/comments/o8dvlo/bitcoindev_opinion_on_proof_of_stake_in_future/">https://=
www.reddit.com/r/BitcoinDiscussion/comments/o8dvlo/bitcoindev_opinion_on_pr=
oof_of_stake_in_future/</a></div><br><div class=3D"gmail_quote"><div dir=3D=
"ltr" class=3D"gmail_attr">On Fri, Jun 25, 2021 at 9:59 AM greg m <<a hr=
ef=3D"mailto:greg_not_so@hotmail.com">greg_not_so@hotmail.com</a>> wrote=
:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.=
8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"au=
to">Where do we go from here? reddit?<div dir=3D"auto"><br></div><div dir=
=3D"auto">Happy Friday everyone!</div><div dir=3D"auto">gm</div></div><div =
class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Jun 25, 2021 12:08,=
Ruben Somsen via bitcoin-dev <<a href=3D"mailto:bitcoin-dev@lists.linux=
foundation.org" target=3D"_blank">bitcoin-dev@lists.linuxfoundation.org</a>=
> wrote:<br type=3D"attribution"><blockquote style=3D"margin:0px 0px 0px=
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D=
"ltr">Hi all,<br>=C2=A0<br>Thanks for the lively discussion. On behalf of t=
he bitcoin-dev moderators and with the readers of this mailing list in mind=
, we'd like to suggest finishing up this discussion. Of course there sh=
ould be some room for exploring fringe ideas, but it should not dominate th=
e mailing list either. Fun as it may be, perhaps it's time to get back =
to focusing on the topics that are more directly relevant to Bitcoin.<br>=
=C2=A0<br>Cheers,<br>Ruben</div><br><div><div dir=3D"ltr">On Fri, Jun 25, 2=
021 at 9:29 AM yanmaani--- via bitcoin-dev <<a href=3D"mailto:bitcoin-de=
v@lists.linuxfoundation.org" target=3D"_blank">bitcoin-dev@lists.linuxfound=
ation.org</a>> wrote:<br></div><blockquote style=3D"margin:0px 0px 0px 0=
.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">No, that'=
s not how it works.<br>
<br>
PoS is constitutionally incapable of producing any further consensus <br>
from its starting point. If you start out by hardcoding the bitcoin <br>
ledger state at June 1, 2021, then your PoS system will be unable to <br>
reach a global consensus as to what the state was on June 2, 2021.<br>
<br>
To get global consensus in PoS, you have to know which block came first. <b=
r>
To reach a consensus on which block was first, you need to solve the <br>
timestamp problem. And to solve the timestamp problem, you need a <br>
consensus system. You'll notice that at no point does PoS provide such =
a <br>
consensus system.<br>
<br>
Implementations of PoS sacrifice global consensus for 'weak <br>
subjectivity', meaning that each node has its own notion of when a <br>
certain block arrived. Astute observers will note that 'each node has <=
br>
its own notion of what happened' differs somewhat from 'all nodes a=
gree <br>
on what happened', and that only one of these is a good description of =
<br>
what is commonly known as 'consensus'.<br>
<br>
Maybe a simpler way of looking at it is from the coder's perspective: <=
br>
how do you implement IBD? In PoW, the "longest chain" rule is use=
d - <br>
"Nodes can leave and rejoin the network at will, accepting the <br>
proof-of-work chain as proof of what happened while they were gone.". =
<br>
Does PoS have this property?<br>
<br>
On 2021-06-24 21:50, Erik Aronesty wrote:<br>
>> PoS is not suitable for use as a consensus system, because<br>
> it is constitutionally incapable of producing a consensus.<br>
> <br>
> true - but only for a system that is starting from nothing.<br>
> <br>
> since bitcoin already exists, and we have a consensus, you can use<br>
> bitcoin's existing consensus to maintain that consensus using<br>
> references to prior state.=C2=A0 and yes, you simply have to limit reo=
rgs<br>
> to not go back before PoW was abandoned in favor of PoS/PoB (assuming<=
br>
> all incentive problems are solved).<br>
> <br>
> ie: once you have uses PoW to bootstrap the system, you can "recy=
cle" <br>
> that work.<br>
> <br>
> On Thu, Jun 24, 2021 at 4:41 PM yanmaani--- via bitcoin-dev<br>
> <<a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.org" target=3D=
"_blank">bitcoin-dev@lists.linuxfoundation.org</a>> wrote:<br>
>> <br>
>> No, 51% of the *coin holders* can't do diddly squat. 51% of mi=
ners <br>
>> can,<br>
>> but in PoW, that's a different set to the coin holders.<br>
>> <br>
>> The basic problem with PoS, anyway, is that it's not actually =
a<br>
>> consensus system ("weak subjectivity"). Either you allow=
long reorgs,<br>
>> and then you open the door to long-range attacks, or you don't=
, and <br>
>> then<br>
>> you're not guaranteed that all nodes agree on the state of the=
chain,<br>
>> which was the purpose of the system to begin with.<br>
>> <br>
>> To put it more plainly: for PoS to work, you need a consensus on w=
hich<br>
>> block was seen first. But if you had that, you could presumably ap=
ply<br>
>> that method to determine which *transaction* was seen first, in wh=
ich<br>
>> case you could do away with the blockchain entirely. (Real-world<b=
r>
>> implementations of PoS, such that they are, do away with this<br>
>> requirement, scrapping the global consensus on ordering in favor o=
f<br>
>> having each node decide for itself which block came first.)<br>
>> <br>
>> In other words, even if you solved all the incentive problems, the=
<br>
>> fact<br>
>> remains that PoS is not suitable for use as a consensus system, <b=
r>
>> because<br>
>> it is constitutionally incapable of producing a consensus.<br>
>> <br>
>> On 2021-06-24 00:14, Billy Tetrud via bitcoin-dev wrote:<br>
>> >>=C2=A0 This is not true in a Proof of Work system and this=
difference<br>
>> > absolutely should not be trivialized.<br>
>> ><br>
>> > That is in fact true of Proof of Work as well. If a colluding=
<br>
>> > coalition of miners with more than 50% of the hashrate want t=
o censor<br>
>> > transactions, they absolutely can do that by orphaning blocks=
that<br>
>> > contain transactions they want to censor. This is not differe=
nt in<br>
>> > proof of stake.<br>
>> ><br>
>> > On Wed, Jun 23, 2021 at 11:14 AM Keagan McClelland<br>
>> > <<a href=3D"mailto:keagan.mcclelland@gmail.com" target=3D"=
_blank">keagan.mcclelland@gmail.com</a>> wrote:<br>
>> ><br>
>> >>> Premise: There is a healthy exchange market for PoS C=
oin X with<br>
>> >> tens of thousands of participants bidding to buy and sell=
the coin<br>
>> >> for other currencies on the market.<br>
>> >><br>
>> >> The difference here though is that Proof of Stake allows =
the quorum<br>
>> >> of coin holders to block the exchange of said coins if th=
ey are<br>
>> >> going to a particular destination. Nothing requires these=
staking<br>
>> >> nodes to include particular transactions into a block. Wi=
th that in<br>
>> >> mind, it isn't just that you require the permission o=
f the person<br>
>> >> who sold you the coins, which I can agree is a less dange=
rous form<br>
>> >> of permission, but you must also require the permission o=
f at least<br>
>> >> 51% of the coin holders to even receive those coins in th=
e first<br>
>> >> place. This is not true in a Proof of Work system and thi=
s<br>
>> >> difference absolutely should not be trivialized.<br>
>> >><br>
>> >> Keagan<br>
>> >><br>
>> >> On Wed, Jun 23, 2021 at 2:30 AM Billy Tetrud via bitcoin-=
dev<br>
>> >> <<a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.o=
rg" target=3D"_blank">bitcoin-dev@lists.linuxfoundation.org</a>> wrote:<=
br>
>> >><br>
>> >>> Barrier to entry in PoS is being given permission by =
the previous<br>
>> >> owner of a token<br>
>> >><br>
>> >> The idea that proof of stake is not permissionless is com=
pletely<br>
>> >> invalid. It pains me to see such an argument here. Perhap=
s we can<br>
>> >> come to an agreement by being more specific. I'd like=
to propose the<br>
>> >> following:<br>
>> >><br>
>> >> Premise: There is a healthy exchange market for PoS Coin =
X with tens<br>
>> >> of thousands of participants bidding to buy and sell the =
coin for<br>
>> >> other currencies on the market.<br>
>> >><br>
>> >> If the premise above is true, then there is no significan=
t<br>
>> >> permission needed to enter the market for minting blocks =
for PoS<br>
>> >> Coin X. If you make a bid on someone's coins and they=
don't like you<br>
>> >> and refuse, you can move on to any one of the other tens =
of<br>
>> >> thousands of people in that marketplace. Would you agree,=
Cloud<br>
>> >> Strife, that this situation couldn't be considered &q=
uot;permissioned"?<br>
>> >><br>
>> >> If not, consider that participation in *any* decentralize=
d system<br>
>> >> requires the permission of at least one user in that syst=
em. If<br>
>> >> there are thousands of bitcoin public nodes, you require =
the<br>
>> >> permission of at least one of them to participate in bitc=
oin. No one<br>
>> >> considers bitcoin "permissioned" because of thi=
s. Do you agree?<br>
>> >><br>
>> >> On Thu, Jun 17, 2021 at 1:15 PM Cloud Strife via bitcoin-=
dev<br>
>> >> <<a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.o=
rg" target=3D"_blank">bitcoin-dev@lists.linuxfoundation.org</a>> wrote:<=
br>
>> >><br>
>> >> Barrier to entry in PoW is matter for hardware and energy=
is<br>
>> >> permissionless and exist all over the universe, permissio=
nless cost<br>
>> >> which exists for everyone no matter who because it's =
unforgeable.<br>
>> >><br>
>> >> Barrier to entry in PoS is being given permission by the =
previous<br>
>> >> owner of a token for you to have it via transfer or sale,=
both<br>
>> >> choices they never have to make since there are no contin=
uous costs<br>
>> >> with producing blocks forcing it. A permission is an infi=
nitely high<br>
>> >> barrier to entry if the previous owner, like the preminin=
g party,<br>
>> >> refuses to give up the token they control.<br>
>> >><br>
>> >> You're skipping the part where you depend on a permis=
sion of a<br>
>> >> central party in control of the authority token before yo=
u can<br>
>> >> produce blocks on your rasberry Pi.<br>
>> >><br>
>> >> Proof of stake is not in any possible way relevant to per=
missionless<br>
>> >> protocols, and thus not possibly relevant to decentralize=
d protocols<br>
>> >> where control must be distributed to independent (i.e.<br=
>
>> >> permissionless) parties.<br>
>> >><br>
>> >> There's nothing of relevance to discuss and this has =
been figured<br>
>> >> out long long ago.<br>
>> >><br>
>> >><br>
>> > <a href=3D"https://github.com/libbitcoin/libbitcoin-system/wi=
ki/Proof-of-Stake-Fallacy" target=3D"_blank">https://github.com/libbitcoin/=
libbitcoin-system/wiki/Proof-of-Stake-Fallacy</a><br>
>> >><br>
>> >><br>
>> > <a href=3D"https://medium.com/@factchecker9000/nothing-is-wor=
se-than-proof-of-stake-e70b12b988ca" target=3D"_blank">https://medium.com/@=
factchecker9000/nothing-is-worse-than-proof-of-stake-e70b12b988ca</a><br>
>> >><br>
>> >> On Tue, Jun 15, 2021 at 7:13 AM James MacWhyte via bitcoi=
n-dev<br>
>> >> <<a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.o=
rg" target=3D"_blank">bitcoin-dev@lists.linuxfoundation.org</a>> wrote:<=
br>
>> >><br>
>> >> @Lloyd wrote:<br>
>> >><br>
>> >> Of course in reality no one wants to keep their coin hold=
ing keys<br>
>> >> online so in Alogorand you can authorize a set of "p=
articipation<br>
>> >> keys"[1] that will be used to create blocks on your =
coin holding<br>
>> >> key's behalf.<br>
>> >> Hopefully you've spotted the problem.<br>
>> >> You can send your participation keys to any malicious par=
ty with a<br>
>> >> nice website (see random example [2]) offering you a good=
return.<br>
>> >> Damn it's still Proof-of-SquareSpace!<br>
>> >><br>
>> >> I believe we are talking about a comparison to PoW, corre=
ct? If you<br>
>> >> want to mine PoW, you need to buy expensive hardware and =
configure<br>
>> >> it to work, and wait a long time to get any return by sol=
o mining.<br>
>> >> Or you can join a mining pool, which might use your hashi=
ng power<br>
>> >> for nefarious purposes. Or you might skip the hardware al=
l together<br>
>> >> and fall for some "cloud mining" scheme with a =
pretty website and a<br>
>> >> high rate of advertised return. So as you can see,<br>
>> >> Proof-of-SquareSpace exists in PoW as well!<br>
>> >><br>
>> >> The PoS equivalent of buying mining hardware is setting u=
p your own<br>
>> >> validator and not outsourcing that to anyone else. So bot=
h PoW and<br>
>> >> PoS have the professional/expert way of participating, an=
d the<br>
>> >> fraud-prone, amateur way of participating. The only diffe=
rence is,<br>
>> >> with PoS the professional/expert way is accessible to any=
one with a<br>
>> >> raspberry Pi and a web connection, which is a much lower =
barrier to<br>
>> >> entry than PoW. _________________________________________=
______<br>
>> >> bitcoin-dev mailing list<br>
>> >> <a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.org" =
target=3D"_blank">bitcoin-dev@lists.linuxfoundation.org</a><br>
>> >> <a href=3D"https://lists.linuxfoundation.org/mailman/list=
info/bitcoin-dev" target=3D"_blank">https://lists.linuxfoundation.org/mailm=
an/listinfo/bitcoin-dev</a><br>
>> >=C2=A0 _______________________________________________<br>
>> > bitcoin-dev mailing list<br>
>> > <a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.org" targ=
et=3D"_blank">bitcoin-dev@lists.linuxfoundation.org</a><br>
>> > <a href=3D"https://lists.linuxfoundation.org/mailman/listinfo=
/bitcoin-dev" target=3D"_blank">https://lists.linuxfoundation.org/mailman/l=
istinfo/bitcoin-dev</a><br>
>> >=C2=A0 _______________________________________________<br>
>> > bitcoin-dev mailing list<br>
>> > <a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.org" targ=
et=3D"_blank">bitcoin-dev@lists.linuxfoundation.org</a><br>
>> > <a href=3D"https://lists.linuxfoundation.org/mailman/listinfo=
/bitcoin-dev" target=3D"_blank">https://lists.linuxfoundation.org/mailman/l=
istinfo/bitcoin-dev</a><br>
>> > _______________________________________________<br>
>> > bitcoin-dev mailing list<br>
>> > <a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.org" targ=
et=3D"_blank">bitcoin-dev@lists.linuxfoundation.org</a><br>
>> > <a href=3D"https://lists.linuxfoundation.org/mailman/listinfo=
/bitcoin-dev" target=3D"_blank">https://lists.linuxfoundation.org/mailman/l=
istinfo/bitcoin-dev</a><br>
>> _______________________________________________<br>
>> bitcoin-dev mailing list<br>
>> <a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.org" target=3D=
"_blank">bitcoin-dev@lists.linuxfoundation.org</a><br>
>> <a href=3D"https://lists.linuxfoundation.org/mailman/listinfo/bitc=
oin-dev" target=3D"_blank">https://lists.linuxfoundation.org/mailman/listin=
fo/bitcoin-dev</a><br>
_______________________________________________<br>
bitcoin-dev mailing list<br>
<a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.org" target=3D"_blank">=
bitcoin-dev@lists.linuxfoundation.org</a><br>
<a href=3D"https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev" =
target=3D"_blank">https://lists.linuxfoundation.org/mailman/listinfo/bitcoi=
n-dev</a><br>
</blockquote></div>
</blockquote></div><br></div></blockquote></div>
--00000000000001851205c5adb8dd--
|