Why Proof of Stake?

Author: alokrai

Score: 41

Comments: 35

Date: 2020-11-06 11:16:11

Web Link

________________________________________________________________________________

TYPE_FASTER wrote at 2020-11-06 14:40:20:

I really enjoyed reading the original Bitcoin whitepaper. It described complicated concepts in clear, simple terms. It just made sense to me.

Are there other whitepapers in the distributed ledger space that are similar, from a readability perspective? Any insight would be appreciated.

Thanks in advance!

intotheabyss wrote at 2020-11-06 14:52:21:

The Ethereum whitepaper is fairly similar in terms of readability.

dnpp123 wrote at 2020-11-06 15:02:42:

and then have fun reading eth's yellow paper

https://ethereum.github.io/yellowpaper/paper.pdf

and its subtle rules

capableweb wrote at 2020-11-06 15:04:11:

Maybe, but nowhere close in conciseness. The Bitcoin paper is something like 10 pages while Ethereum is something like 40 pages, and not counting the pages from the "yellow" paper.

tromp wrote at 2020-11-06 15:36:58:

Proof of stake is more like a "closed system", leading to higher wealth concentration over the long term

Unlike Proof of Work, Proof of Stake is not a coin distribution method.

PoS-only block chains just create all initial coins out of thin air, like a 100% ICO, which is the worst possible concentration of wealth.

miloignis wrote at 2020-11-06 17:36:59:

You're absolutely right that it's not a coin distribution method, but it doesn't lock you into a distribution method. You could come up with one, theoretically. Heck, you could distribute the OG coins via proof-of-work if you wanted to, which is more or less what I believe Ethereum would do, as it started out as a proof-of-work chain and would swap at some point.

That actually might be the best way, as you're proving that you believe the coin is worth something in the beginning by burning work, giving your initial stake consequences.

tromp wrote at 2020-11-06 18:20:03:

Yes, Ethereum did start with PoW, but also with a 70% premine that undermines it with a large concentration of wealth.

nikivi wrote at 2020-11-06 11:34:04:

Why is bitcoin price surging so high when Ethereum exists and seems like a superior technology? Is it because Ethereum is slower and more expensive?

kordlessagain wrote at 2020-11-06 14:49:44:

While complicated, Bitcoin's implementation isn't nearly as complicated as Ethereum's. The main reason might be attributed to the fact Bitcoin scripts don't have for loops and Ethereum does allow looping and other more complicated operations.

That Ethereum _seems_ superior is just an effect of marketing and language around their scene. It helps they have people who can quickly say seemingly smart things (think GPT-3) that no sane person can parse in a short amount of time to arrive at knowledge. The system is overly complicated for a single individual to understand and trust easily. It may well be very difficult or impossible to tell if a given contract is secure or not.

In reality, there are very few mainstream "killer" use cases being served by Ethereum, although they do entertain themselves by trying to "break" each other's contracts. The most famous case was when the authors of Ethereum rolled back the chain to get their own coins back from a clever "hacker".

The fact is, that individual followed the rules and still lost the coin they were due them by contract! That's not happened with Bitcoin, at least on mainchain.

drchopchop wrote at 2020-11-06 14:55:06:

Additionally, Ethereum has positioned itself as a "platform" for all kinds of terrible altcoins, which cleverly makes itself seem more foundational.

qertoip wrote at 2020-11-06 14:25:20:

Bitcoin aspires to survive global crackdown, hence laser focus on decentralization, reliability, security, monetary soundness etc.

Ethereum aspires to have fun.

bhaak wrote at 2020-11-06 14:41:24:

Try transferring your magical internet money when there's no infrastructure left.

There is a narrow gap where Bitcoin or Gold could potentially be useful if some kind of breakdown happens. But if it's global, you can forget that anybody will be interested in them.

Bitcoin as well as Gold are pretty useless in the zombie apocalypse.

zepto wrote at 2020-11-06 15:43:53:

Gold is actually great in the zombie apocalypse.

It’s portable and you can trade it without infrastructure. Unlike Bitcoin.

It’s value during a collapse is based on the idea that there will be a future recovery of some kind, but we don’t have to recover very far before gold is good, whereas we need to get back to the level of silicon fabs before Bitcoin can be useful again.

If it’s really an ‘apocalypse’ that we can’t recover from, then you only need one bullet.

chrispeel wrote at 2020-11-06 14:45:38:

Bitcoin has much better name recognition, and its supporters clearly see it for what it is (digital gold). It's an easy meme.

Even if Ethereum is at present better technology (I think it is), it's also trying to become even more (scaling and PoS and more). That progress has been slow, and has many competitors with great technology. Labeling Ether as "digital oil" gives one useful mental image, but that's certainly not as sexy as "digital gold".

I attribute the continued market cap dominance of Bitcoin over Ether almost entirely to Bitcoin being (at least for now) a better meme.

capableweb wrote at 2020-11-06 13:54:17:

We can argue back and forward which one is the most superior technology but it doesn't matter. Same as with stocks, currencies and more, the price is not set based on technical abilities or superiority, it's set based on what the people who are buying/selling feel the price should be at.

jgalt212 wrote at 2020-11-06 14:38:37:

> t's set based on what the people who are buying/selling feel the price should be at.

OK, so what's driving the buyers of bitcoin to be more comfortable with ever higher prices and is that feeling not permeating over to ethereum?

capableweb wrote at 2020-11-06 15:01:44:

I put why in my original comment, it's in the part that you quoted. Because of feelings.

sktrdie wrote at 2020-11-06 17:00:54:

I also think Bitcoin is limited in quantity much more than Ethereum? Making it more scarce. But not 100% sure about this.

iamacyborg wrote at 2020-11-06 14:30:08:

Tether's printing more fake currency.

garmaine wrote at 2020-11-06 11:46:33:

Ethereum is most definitely not a superior technology stack.

nikivi wrote at 2020-11-06 13:54:04:

Do you have a link going over the ways in which Bitcoin is superior to Ethereum?

xiphias2 wrote at 2020-11-06 14:01:33:

It’s not even trying to solve the same problem.

Bitcoin is a store of value, Ethereum is an universal computer with a Turing-complete language.

I personally use Bitcoin because it has a smaller attack surface, and it’s excellent for my needs. The bug in the multisig contract in one of the Ethereum implementations a few years ago was where I decided never to trust Ethereum as a store of value, as multisig is very important for me. Another important difference is that with Bitcoin I can verify the whole blockchain on my computer, with Ethereum it’s much harder. Also the hard forks in Ethereum means that it’s not yet ready to be a store of value.

davidmurdoch wrote at 2020-11-06 14:13:36:

To be clear to others, the EVM (Ethereum Virtual Machine) wasn't the problem, it was a smart contract (software that runs on Ethereum) that had a bug.

xiphias2 wrote at 2020-11-06 15:35:04:

It was not just that bug that decreased my confidence, but the lack of testing for the smart contract. Even the bug fix

commit didn't have any unit tests. We're talking about a type of smart contract that holds billions of dollars for store of value, not some rare edge case.

Also for Bitcoin I myself was able to read and verify and understand the whole smart contract code base (a few hundreds of lines altogether in 1 file), which increased my confidence.

chriswarbo wrote at 2020-11-06 14:30:35:

From my outside perspective, it sounds like Ethereum makes it hard to avoid subtle bugs when writing contracts. Some of its competitors specifically try to avoid this, e.g.

https://docs.cardano.org/en/latest/

xiphias2 wrote at 2020-11-06 19:36:07:

The most probable language that’s safe enough to be adopted by Bitcoin is Simplicity. It’s based on algebraic data types, tries to be a superset of the Bitcoin scripting language, but still guarantee a verification time that’s linear to the program length (not Turing complete)

garmaine wrote at 2020-11-07 00:21:53:

But it's also important to be clear that a complex script large enough to have (critical!) security holes was required to do something as simple and as foundational as _multi-sig_: the basic building block of all distributed or decentralized protocols. How can possibly expect something more complex to be secure?

Bitcoin, on the other hand, builds these core crypto competencies into the base layer, so that scripting can exist purely in the application domain.

627467 wrote at 2020-11-06 14:06:54:

Bitcoin ecosystem (so far) is focused in maintaining a secure system with a predictable monetary policy VS ethereum which is trying to do the same and everything else that a global computer is supposed to allow you to do.

garmaine wrote at 2020-11-07 00:13:09:

I don't know if there is an excellent writeup out there I can point to; this field is full of a bunch of BS advertisement articles, and a quick google search found nothing worthwhile on either side of the debate.

My opinion in the parent post to yours is based on my decade of experience with bitcoin, and having been there every step of the way in its evolution and the birth and erratic journey of Ethereum.

In short summary, Bitcoin seeks to provide a secure, stable, no-BS minimal base layer upon which financial contracts of all sorts can be written. The Lightning Network is an example of a smart contract on Bitcoin, one that has been quite stable and secure compared with frothy DAO, ICO, DeFi, or whatever the latest marketing term for smart contracts is in the Ethereum space.

Bitcoin adds small, targeted features to the base protocol after a truly intense amount of work goes in to proving their correctness and the way in which they interact with other parts of the base layer. Ethereum chases after whatever the fad of the moment is and crams everything into a gigantic toolbox of everything and the kitchen sink, and makes you use all that complexity for even things as simple as multi-sig and replay protection.

To stretch an analogy, Bitcoin is a minimal RISC architecture while Ethereum is x86, with all the history of legacy features and obsolete stuff included. Now your task as a cryptocurrency application engineer is to build a secure protocol that must survive without mercy from attackers. Would you rather do this on x86 or a minimal, proven-correct RISC platform?

The choice to me is obvious. Going into the details of why is way more than could possibly fit in a HN comment, however.

nullc wrote at 2020-11-06 14:41:09:

Proof of Stake offers precisely zero security in the context of decentralized systems unless you already have a consensus system:

https://download.wpsoftware.net/bitcoin/pos.pdf

Advocates of it have responded to fact of PoS's tautological security by applying seemingly unending amounts of complexity, essentially obfuscating their design until people give up reviewing it. Cryptographic security against review is not cryptographic security, it is the opposite of it.

At best these schemes have security that reduces to the underlying consensus mechanism that they're running on top of (which usually ends up being some not-at-all-decenteralized system like the Ripple UNL, where all participants must accept a consistent set of authorities or it will eventually fail to converge), but they can do worse than that-- and often do, as a result of vulnerabilities that come out of the obfuscation.

Vitalik Buterin isn't a stranger to making deceptive claims: Before he created this technobabble laden massively pre-mined altcoin, and dumped it on an unsophisticated public while misleading them about its properties, he was primarily known to me as some kid that got banned from the Bitcoin chat channels by driving people nuts trying to solicit people to invest in his sham "Quantum Miner" project.

If by chance these systems act in a secure manner in practice -- e.g. they successfully operate as a centralized consensus and the central authorities remain benign -- their economics lock in massive ongoing revenue streams for their prior participants. Especially in the context of a system which pre-mined some 72 million coins most of which are illiquid held by a small number of parties-- as selling them would completely collapse the market-- the result is a tremendous rent-seeking windfall.

In fact, when Vitalik made the decision to edit the ethereum ledger to claw-back funds taken from himself and others as the result of the technically-correct (but surprising) execution of "DAO" smart contract, part of the justification given was that if the funds were not taken back the system couldn't make its impending transition to POS (now delayed for years) because POS would benefit the "hacker". So it isn't surprising to see continued efforts towards that model from the persons who most stand to gain from it, even after years of delays and failure. Nor is it surprising that this article extols greater ease at editing the ledger ("recover from attacks") through processes external to the rules of the system as a purported _benefit_ of the proposed insecure mechanism. It's not that unusual to see a security weaknesses spun as advantages, but it is unusually audacious and self-serving in this case.

There are plenty of systems in the world which are perfectly happy with a distributed-but-centralized security model as they can have robust and clear security properties within the scope of their limitations. People should be happy to use them where they fit their needs. I don't think the world benefits from having more systems with security models obfuscated by pretending to be strongly decentralized when they are not, no matter how many benefits can be derived from not being decentralized.

miloignis wrote at 2020-11-06 16:55:10:

I read the criticism in the paper you linked, the article itself, and the FAQ (

https://eth.wiki/concepts/proof-of-stake-faqs

) linked in the article.

In my opinion, it seems like the criticism in the paper is valid, but the conclusion is too dire. Proof of Stake is a different and weaker model of consensus than Proof of Work, but one that seems practical enough for the real world. To address the two main criticisms in the paper, the FAQ seems to state that there are decent schemes to inject enough randomness to prevent stake grinding, and that Proof of Stake does have a "weak subjectivity" as a con, but that in the real world coordination on which block is real to get started on out of band isn't too onerous. Asking a trusted friend or just looking at major forums or whatever would work to get started, and then after that you don't need to keep trusting a third party. Trust on first use, kinda, which a lot of us use every day, SSHing into things, but this case is even better because your first trust can be to a friend or trusted party.

This seems like a very reasonable concession in order to not burn wild amounts of electricity and make the system much more sustainable.

chytrik wrote at 2020-11-06 22:39:55:

> Asking a trusted friend or just looking at major forums or whatever would work to get started, and then after that you don't need to keep trusting a third party. Trust on first use...

The 'weak subjectivity' issue doesn't just arise at the first use, it becomes a very important consideration in the event of a network fork (ie, a bad actor attacks the chain, and users attempt to defeat the attack by following a different chain that ignores the attacker). This is a much larger issue, it is easy to find consensus on a 'genesis block', but finding consensus in the moment of an uncertain/contentious chain-split is very different. At best it falls back to trusting some centralized party to make the correct choice, and then having a large enough portion of the users follow them.

qertoip wrote at 2020-11-06 14:17:19:

Why Proof of Work and not Proof of Stake?

https://hugonguyen.medium.com/work-is-timeless-stake-is-not-...

treelovinhippie wrote at 2020-11-06 14:01:16:

To further speculate gains for early adopters.

Signed, the new wannabe financial oligarchy.

wrnr wrote at 2020-11-06 16:23:13:

Exactly, the "financial technology of tomorrow" that has a built in preference of people born yesterday. Nothing but a transparent ploy to build a monopoly on cloud computation, under the auspices of decentralisation. Well guess what Microsoft is distributed too, it has many subsidiaries incorporated in different countries.

At least when I rent a server on the cloud I can pick my own markup for a solution I build, with Dapps the market will compete away all profits in the same way most profit goes to landlords. They know this, but think that I don't know this, as if I am some idiot lacking self interest.