<oembed><type>rich</type><version>1.0</version><author_name>npub1wu8nl4rek0s38jw0p5tx4h8a0vu75f33v5ucc0ndj2fza5yav05q36fwsk</author_name><author_url>https://nostr.ae/npub1wu8nl4rek0s38jw0p5tx4h8a0vu75f33v5ucc0ndj2fza5yav05q36fwsk</author_url><provider_name>njump</provider_name><provider_url>https://nostr.ae</provider_url><html>📅 Original date posted:2015-12-28&#xA;📝 Original message:On Mon, Dec 28, 2015 at 11:12 AM, Peter Todd &lt;pete at petertodd.org&gt; wrote:&#xA;&#xA;&gt; On Sat, Dec 26, 2015 at 12:12:13AM -0800, Multipool Admin wrote:&#xA;&gt; &gt; Any attempt to &#39;fix&#39; this problem, would most likely require changes to&#xA;&gt; all&#xA;&gt; &gt; mining software, why not just make mining more decentralized in general?&#xA;&gt; &gt;&#xA;&gt; &gt; For example, allow anyone to submit proofs of work to Bitcoind that are&#xA;&gt; &gt; some fraction of the network difficulty and receive payment for them if&#xA;&gt; &gt; they&#39;re valid.  This would also encourage the proliferation of full nodes&#xA;&gt; &gt; since anyone could solo mine again.  Then, the next coinbase transaction&#xA;&gt; &gt; could be split among, say, the top 100 proofs of work.&#xA;&gt;&#xA;&gt; That&#39;s certainly be a good place to be, but the design of Bitcoin&#xA;&gt; currently makes achieving that goal fundementally difficult.&#xA;&gt;&#xA;&#xA;Agreed, however I don&#39;t think it would be impossible or even really that&#xA;difficult, and would be a great way to increase decentralization while&#xA;simultaneously fixing other issues with mining.&#xA;&#xA;Proofs of work would be valid if they&#39;re built on top of the current block&#xA;hash, and we could require (difficulty/N) proofs of work that are &gt;=&#xA;(difficulty/N) to assemble a valid block.  Same as mining shares work.&#xA;&#xA;The block assembler who finds the final diff/N &#39;share&#39; could get a small&#xA;bonus as an incentive to complete the block as quickly as possible.  Or&#xA;alternatively, a checksum could be computed of all the current diff/N&#xA;shares in the mempool and that way only the final share would need to be&#xA;broadcasted to the entire network, and clients with the correct checksum&#xA;could assemble the block themselves without having to download the entire&#xA;block.  This would drastically decrease data usage on the network.&#xA;&#xA;&gt; Eligius already does their miner payouts like this.&#xA;&gt; &gt;&#xA;&gt; &gt; If you want to fix an issue with mining, fix the selfish mining issue&#xA;&gt; first&#xA;&gt; &gt; as it&#39;s a much larger and more dangerous potential issue.&#xA;&gt;&#xA;&gt; Do you specifically mean selfish mining as defined in Emin Gün&#xA;&gt; Sirer/Ittay Eyal&#39;s paper? Keep in mind that attack is only a significant&#xA;&gt; issue in a scenario - one malicious miner with &gt;30% hashing power -&#xA;&gt; where you&#39;re already very close to the margins anyway; the difference&#xA;&gt; between a 50% attack threshold and a 30% attack threshold isn&#39;t very&#xA;&gt; significant.&#xA;&gt;&#xA;&#xA;Yes, that&#39;s what I&#39;m talking about.&#xA;&#xA;&#xA;&gt; Far more concerning is network propagation effects between large and&#xA;&gt; small miners. For that class of issues, if you are in an environemnt&#xA;&gt; where selfish mining is possible - a fairly flat, easily DoS/sybil&#xA;&gt; attacked network topology - the profitability difference between small&#xA;&gt; and large miners even *without* attacks going on is a hugely worrying&#xA;&gt; problem. OTOH, if you&#39;re blocksize is small enough that propagation time&#xA;&gt; is negligable to profitability, then selfish mining attacks with &lt;30%&#xA;&gt; hashing power aren&#39;t much of a concern - they&#39;ll be naturally defeated&#xA;&gt; by anti-DoS/anti-sybil measures.&#xA;&gt;&#xA;&#xA;The possibility that a previously &#39;good&#39; actor with 30% of the hashpower&#xA;going &#39;rogue&#39; becomes more and more of a concern as the block subsidy&#xA;decreases.&#xA;&#xA;&#xA;&gt; &gt; I don&#39;t believe it was ever clearly established whether Eligius suffered&#xA;&gt; a&#xA;&gt; &gt; block withholding attack or was just the victim of a miner with (what&#xA;&gt; was,&#xA;&gt; &gt; at the time) a large amount of faulty hardware, however, from the&#xA;&gt; &gt; Bitcointalk threads at the time I believe it was assumed to be the&#xA;&gt; latter.&#xA;&gt;&#xA;&gt; I think the latter was assumed as well, although ruling out of the&#xA;&gt; former is impossible.&#xA;&gt;&#xA;&gt; Note though that Eligius is *not* the only pool to have had problems&#xA;&gt; with block withholding, though AFAIK Eligius is the only one who has&#xA;&gt; gone on record so far. (as I said in my original post, I&#39;m relaying&#xA;&gt; information given to me under condition of confidentiality)&#xA;&gt;&#xA;&#xA;What is the incentive not to go on record about this?&#xA;&#xA;--Adam&#xA;-------------- next part --------------&#xA;An HTML attachment was scrubbed...&#xA;URL: &lt;http://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20151228/46d76db5/attachment.html&gt;</html></oembed>