News for hackers. Stuff that matters.
Re:Living Only on Bitcoins by lisper on Sunday May 08, 2016 @02:40PM (#11655153)
I spent five years fruitlessly trying to improve the current banking system (actually, the current money transfer system) so I am more intimately aware of its shortcomings than most people. Considering how many things are wrong with it, it's astonishing to me that it works at all. And yet, most of the time, it does.

There are two things that make the current banking system robust: first, because anonymity is limited, most of the actors in the system are honest. Trying to pull a fast one is risky, and that prevents most people from trying. And second, there are humans in the loop that you can appeal to when things go wrong. Most of the time this keeps the system humming along despite the fact that under the hood it's all held together with spit and baling wire.

Bitcoin is the exact opposite. Because it provides greater anonymity than the traditional banking system, it attracts dishonest actors. For example, bitcoin has made ransomware more economically viable than it was before. And second, if something goes wrong with a bitcoin transaction, you are totally hosed. Your bitcoin payment is only as safe as your ability to reliably bind a bitcoin address to an intended recipient. If you get it wrong, there's no recourse. If you accidentally send some bitcoin to the wrong address, you are hosed. If you lose your private key, you are hosed. Period, end of story.

If I have to choose between bitcoin and traditional banking I'll take the latter simply because it's generally more robust and forgiving of everyday human foibles. But I'll continue to wish for (and work towards) a system that gives us the best of both worlds.

Re:Living Only on Bitcoins by olalonde on Sunday May 08, 2016 @05:24PM (#11655920)
Almost all the downsides you listed apply to cash as well which is why people don't keep cash under their mattress anymore and don't do large cash transactions.

Bitcoin should be seen as a currency first and a payment system second. Nothing should prevent the current banking system from adopting it as a currency while keeping all their existing checks in place. Credit cards could support BTC denominated payments and still have all of their chargeback policies in place.

In that world, doing a large Bitcoin transaction would be the analogous of moving trucks of cash around and keeping a large amount of Bitcoin would be like hiding tons of cash in under your mattress (reserved for experts). The majority of payments would be "off chain" while still allowing for people to opt out.

You might ask what's the point of Bitcoin then? Well, I think it would still have a couple of benefits over traditional currencies like USD:

- Supply of currency not controlled by any government or entity

- Easier to "opt out" from system than with physical cash

- Transparency (institutions that wish to do so could use the blockchain to be transparent about their finance)

- Efficiency (though there's been a lot of criticism about the energy consumption of Bitcoin mining, think of all the human capital, real estate and transportation cost that goes into physically moving and securing cash)

Re:Living Only on Bitcoins by hueving on Sunday May 08, 2016 @05:49PM (#11656081)
>Transparency (institutions that wish to do so could use the blockchain to be transparent about their finance)

This doesn't apply if many of the transactions happen "off chain" to offer the reversibility benefits you mentioned before.

Basically, to get all of the trust benefits of the banking system, you are saying we have to essentially not actually use bitcoin, which makes me wonder what the point is. At that stage, why not have gold denominated credit cards? Less technology to depend on and the government still doesn't control supply.

Re:Living Only on Bitcoins by mahyarm on Sunday May 08, 2016 @06:06PM (#11656198)
It's transparency with the bank reserves. With a bank, you actually don't know if there is gold in their vault unless you go and verify if the gold is in the vault. A consortium of banks can also multi-sign an address, so a certain amount of key holders will have to sign off to move the bitcoin, decreasing risk. Then you can use the bank's services to have the equivalent of credit cards, fast off chain transactions and so on.

I guess a similar gold vault problem is possible with private key control, but that is the same as verifying if the bank still has the keys to their gold vault, a much smaller problem.

Re:Living Only on Bitcoins by iofj on Monday May 09, 2016 @02:08AM (#11657900)
It's called fractional reserve banking because they don't have gold in their vaults, except for specific ratios. Very, very few banks have gold, instead they have government bonds. They don't have those in 1:1 either.

In the EU: 2.5% of the value of your deposits the banks own in bonds.

In the US: complex, but let's give a simple, not that wrong answer : up to 10%.

In Australia: 0% required, but in practice the banks have a little bit.

That's all the banks have. In our current Bretton-woods economic systems, banks create (and destroy) money.

Re:Living Only on Bitcoins by olalonde on Sunday May 08, 2016 @06:12PM (#11656221)
> This doesn't apply if many of the transactions happen "off chain" to offer the reversibility benefits you mentioned before.

Large institutions as in banks for example who do make "on chain" transactions but I agree this was not the strongest argument. It is correct that transparency goes out the window as soon as your transactions are "off chain".

> Basically, to get all of the trust benefits of the banking system, you are saying we have to essentially not actually use bitcoin, which makes me wonder what the point is.

Yes, in the same way that you are not using "federal reserve notes" when using any of those services (Paypal, credit cards, wire transfers, etc.). Yet you seem to still see the point in USD, the currency.

> At that stage, why not have gold denominated credit cards? Less technology to depend on and the government still doesn't control supply.

It was the case for a long time that fiat currencies were backed by gold. To be honest, I'd be somewhat happy with that but I believe Bitcoin has several properties that make it superior to gold (e.g. it's digital).

Re:Living Only on Bitcoins by argonaut on Sunday May 08, 2016 @08:51PM (#11656870)
Not quite. Cash transactions are the complete opposite of anonymity. If someone steals your cash, you can go to the police.
Re:Living Only on Bitcoins by timbowhite on Sunday May 08, 2016 @02:56PM (#11655216)
> Trying to pull a fast one is risky, and that prevents most people from trying.

Well not these guys: $81M was stolen from the Bangladesh Bank via the SWIFT network in February https://en.wikipedia.org/wiki/2016_Bangladesh_Bank_heist

> And second, there are humans in the loop

There sure are!

The IRS Seized $107,000 From Store owner for "structuring" http://www.foxnews.com/politics/2015/05/12/nc-store-owner-on...

MasterCard Cuts Off Wikileaks, Assange's Bank Account Frozen http://gawker.com/5707851/mastercard-cuts-off-wikileaks-assa...

DOJ's 'Operation Choke Point' May Be Root of Porn Star Bank Account Closings http://reason.com/blog/2014/04/28/doj-operation-chokepoint-a...

Re:Living Only on Bitcoins by lisper on Sunday May 08, 2016 @03:04PM (#11655264)
> $81M was stolen the Bangladesh Bank via the SWIFT

Nearly all of which was later recovered.

> The IRS Seized $107,000

> DOJ's 'Operation Choke Point'

Those are political problems, not problems with the banking system. If the government decides to fuck with you, then you're fucked no matter what the banking system looks like.

> MasterCard Cuts Off Wikileaks

This is a real problem, and it a result of what is IMHO the main unaddressed flaw in our current system: banking is conflated with money transfer. Bitcoin does address this problem, but IMHO it doesn't do it very well. The risks and costs are too high.

Re:Living Only on Bitcoins by timbowhite on Sunday May 08, 2016 @03:21PM (#11655342)
> Nearly all of which was later recovered.

Citation needed.

> Those are political problems, not problems with the banking system. If the government decides to fuck with you, then you're fucked no matter what the banking system looks like.

I disagree. Has any government shut down a Bitcoin address for "structuring", or publishing pornography?

Re:Living Only on Bitcoins by lisper on Sunday May 08, 2016 @03:55PM (#11655455)
> Citation needed.

Sorry, $951M was stolen. All but $81M was recovered.

http://www.reuters.com/article/us-usa-nyfed-bangladesh-malwa...

But let's put this in perspective. MtGox lost BTC600k. As a fraction of the primary money supply, that loss was comparable to a USD loss of about $35 billion (M0=$1.2 trillion). So even before most of the Bangladesh money was recovered it was only 1/30th the size of the MtGox loss. And MtGox wasn't even a theft, it was simple mismanagement. Imagine the attacks people would start to mount if they could net the equivalent of $35 billion (or more) risk-free.

Re:Living Only on Bitcoins by timbowhite on Sunday May 08, 2016 @05:58PM (#11656139)
I think you're conflating Bitcoin (the system) with Bitcoin opsec skills.

Yes, I agree: Bitcoin is probably easier to steal from people who don't know what they're doing. (And yes there is probably is smaller chance of the thief being caught).

But as of now, properly secured Bitcoin can't be stolen by any criminal, government, or bank. Even if they have physical access to the owner's shit!

The same cannot be said for any modern national/fiat electronic monetary system.

Re:Living Only on Bitcoins by madeofpalk on Sunday May 08, 2016 @06:27PM (#11656292)
Well if the Bangladesh Bank was also following proper security protocol the money couldn't have been stolen as well.

The 'tech' is, more or less, the easy part. The hard part is all the people involved, and getting them to follow the rules. Sure, you make the tech more resilient to human 'error', but things like MtGox (or Bangladesh Bank) still happened.

Re:Living Only on Bitcoins by lisper on Sunday May 08, 2016 @10:05PM (#11657138)
If you want to use bitcoin in the real world then opsec skills become part of the equation whether you like it or not.
Re:Living Only on Bitcoins by timbowhite on Monday May 09, 2016 @04:54PM (#11663101)
Couldn't agree more. Bitcoin is not for everyone.

Just like using a bank account in the real world involves not divulging your account #, bank website passowrd, SSN, birthday, etc.

Re:Living Only on Bitcoins by pjc50 on Sunday May 08, 2016 @03:52PM (#11655445)
Ross Ulbricht got shut down pretty hard.
Re:Living Only on Bitcoins by timbowhite on Sunday May 08, 2016 @05:05PM (#11655826)
Sorry I guess I wasn't specific enough. I was referring to the cryptography that makes bitcoins untouchable to anyone except the person with the private key... not some guy's crappy opsec.
Re:Living Only on Bitcoins by chii on Sunday May 08, 2016 @08:29PM (#11656786)
The weakest link is the one that gets attacked. When the tech is good, the humans become the weakest link.
Re:Living Only on Bitcoins by nostrebored on Sunday May 08, 2016 @03:01PM (#11655243)
The Bangladesh bank heist is perfectly consistent with the GP. You can expect small amounts of large theft (which likely affects users indirectly) or a large amount of small theft targeted directly at users.
Re:Living Only on Bitcoins by tim333 on Sunday May 08, 2016 @07:08PM (#11656448)
>The IRS Seized $107,000

He got it back eventually plus $20k costs http://www.cato.org/blog/lyndon-mclellan-finally-beats-irs

Re:Living Only on Bitcoins by timbowhite on Tuesday May 10, 2016 @09:17AM (#11666909)
The fact that it happened at all (and without McLellan being proven guilty of anything!) is indicative of a severe security flaw in the banking system.
Re:Living Only on Bitcoins by mrb on Sunday May 08, 2016 @03:39PM (#11655398)
"If you get it wrong, there's no recourse. If you accidentally send some bitcoin to the wrong address, you are hosed."

Although this is true, the fact is that in practice this is rarely occurring. No system needs to be absolutely perfect to compete reasonably with the legacy financial banking system. As you point out yourself, the banking system has flaws, and yet it kind of works. Ditto for Bitcoin: it's not perfect, but it works quite well at solving certain real-world problems.

I think theft of Bitcoin private keys is a more serious problem than accidentally sending coins to the wrong address, however this is being solved by hardware wallets, N-of-M transactions, etc.

Re:Living Only on Bitcoins by lisper on Sunday May 08, 2016 @04:04PM (#11655498)
> in practice this is rarely occurring

Mainly because wallet spoofing is not yet lucrative enough for hackers to put a lot of effort into it. If BTC really does start to get major traction, then it is only a matter of time before the web will be flooded with bitcoin wallet spam and phishing attacks.

Re:Living Only on Bitcoins by Ygor on Sunday May 08, 2016 @03:36PM (#11655384)
What do you think about a compromise system? Centralized entities that you give trust to, that are run by people, that "know" you - basically a bank - which is using bitcoin as a currency and infrastructure for dealing with that currency?

If you look at it from high above, it would be like replacing the implementation of the current banking system with a more modern stack, but still leaving a similar human interface with the same level of features.

Would this make sense?

Re:Living Only on Bitcoins by pjc50 on Sunday May 08, 2016 @03:51PM (#11655439)
What advantages would this have?

There are some people arguing in this direction, with the construction of settlement blockchains, but obviously the proof-of-waste system would have to be discarded.

Re:Living Only on Bitcoins by lisper on Sunday May 08, 2016 @03:58PM (#11655470)
I'm all for compromise, but I don't think it's possible to build a compromise system on top of bitcoin.

I think the Right Answer is to have an auditable public ledger maintained by a trusted third party. This could be the government, or it could be a private party, but the key to making it work is to make electronic money storage and transfer a commodity provided by what is essentially a public utility.

Re:Living Only on Bitcoins by pablovidal85 on Sunday May 08, 2016 @06:05PM (#11656185)
Similar to what happened with voice communication, the financial infrastructure will suffer an inversion[1], the banking platforms will run on top of a global value-transfer protocol, instead of the other way around. What you describe at the end of your comment already exists, bitcoin exchanges are using a federated bitcoin sidechain[2] to transfer funds between themselves within their own consensus rules (they could implement reversals or any other feature without having to break the bitcoin consensus).

[1] https://www.youtube.com/watch?v=pKs5JSh3z7A

[2] https://blockstream.com/2015/10/12/introducing-liquid/

Re:Living Only on Bitcoins by hueving on Sunday May 08, 2016 @06:15PM (#11656238)
An inversion only happens when there is an incentive to do such. IP networks became much cheaper to run reliably and in a scalable fashion.

What problem does bitcoin solve for banks?

Re:Living Only on Bitcoins by pablovidal85 on Sunday May 08, 2016 @07:11PM (#11656464)
It solves exactly the same problem, using a distributed network of peers reduces costs while increasing security and availability.
Re:Living Only on Bitcoins by hueving on Sunday May 08, 2016 @10:13PM (#11657187)
Is there anything that shows banks have had difficulty with the security or availability of bank-to-bank transactions?
Re:Living Only on Bitcoins by pablovidal85 on Wednesday May 11, 2016 @10:18AM (#11675475)
I don't think difficulties are involved here at all, lowering costs generally translates into higher profit, that should be enough to invest in new technology.
Re:Living Only on Bitcoins by oscargrouch on Sunday May 08, 2016 @05:10PM (#11655850)
> Your bitcoin payment is only as safe as your ability to reliably bind a bitcoin address to an intended recipient. If you get it wrong, there's no recourse.

Maybe im being totally naive.. but how about a second blockchain called the "rollback" blockchain.. Suppose you put a "timer" in the bitcoin blockchain for a period lets say 48 hrs..

So when the timer expires, the first blockchain(the coin blockchain), would check for a "rollback transaction" in the second one.. if its not there, the transaction on the first blockchain would be confirmed, and the funds would go to te right account, in a completely automated way, with all the trust garantee that the blockchain tech can give.

Is this a stupid idea? (i just gave a quick tought about this)

OBS: of course, say goodbye to instant payment.. but with double check security sugar on top of it.

Re:Living Only on Bitcoins by sowbug on Sunday May 08, 2016 @05:22PM (#11655911)
The concept you're describing is called a "smart contract." There isn't a second blockchain, but the transaction itself specifies conditions that must arise before the funds move.

https://en.wikipedia.org/wiki/Smart_contract

And for a cryptocurrency-specific implementation, see http://nashx.com/HowItWorks

Re:Living Only on Bitcoins by oscargrouch on Sunday May 08, 2016 @05:41PM (#11656021)
Yes, i think a "smart-contract" would do the trick.. with the plus you could define more arbitrary parameters, to model some context that fits your need.

But the coin blockchain would at least to have a little context about the second one, the "smart contract" one.. binding/linking the transactions in the second blockchain to itself.

Re:Living Only on Bitcoins by TylerE on Sunday May 08, 2016 @05:19PM (#11655894)
Yes, frankly a stupid idea. The current 30 minutesish confirmation time already kneecaps bitcoin. You want to make it 48 hours? Might as well mail a bloody check!
Re:Living Only on Bitcoins by oscargrouch on Sunday May 08, 2016 @05:45PM (#11656052)
Ok, the time period was just arbitrary.. the most important part of the idea, being a second blockchain to have programmable parameters specifying certain conditions to the first blockchain..

So i dont know what parameters would be the best giving a certain context..

Re:Living Only on Bitcoins by knivets on Sunday May 08, 2016 @02:50PM (#11655192)
Well, we could try to create infrastructure around bitcoin which would solve the problems related to human error, something like delegating sending/receiving to 3rd party which has nice UI and double checks everything. It could also store your private key. You might say that this 3rd party can be hacked -- true, but the same applies to traditional banking.
Re:Living Only on Bitcoins by lisper on Sunday May 08, 2016 @03:10PM (#11655294)
> we could try to create infrastructure around bitcoin which would solve the problems

Of course you could try, but (I predict) you will fail. The problems I've cited are fundamental problems that are built in to the bitcoin protocol by design. You can't patch your way around them.

For example:

> which has nice UI and double checks everything

How exactly are you going to "check everything"? Remember, you have to get it 100% correct. Failures are completely unacceptable because failures are completely unrecoverable.

Re:Living Only on Bitcoins by knivets on Sunday May 08, 2016 @04:24PM (#11655597)
Banking run by humans has fundamental problems as well, that's why things like bitcoin come to existence. It is just a matter of tradeoffs.

AFAIK, most of the errors happen because users mistype the address or confuse the commission fee/amount fields, etc. UI could possible introduce some validations for fee/amount issue and probably require to retype the address or something else to avoid the other issue. Another issue is fraud, but it is a unavoidable product of such system, otherwise we end up with same problems traditional banking has. Fraud check means someone might deny the transaction even if your transaction is completely legit, for example, just because you are a citizen of a blacklisted country (my experience).

It is easy to dismiss bitcoin when you are a citizen of 1st world country -- because you are insider and have full privileges, but when you are outsider, it gets very complicated and things like bitcoin give some promise.

Re:Living Only on Bitcoins by lisper on Sunday May 08, 2016 @04:44PM (#11655714)
> It is just a matter of tradeoffs.

Indeed.

> It is easy to dismiss bitcoin when you are a citizen of 1st world country -- because you are insider and have full privileges

That is a very good point, and very easy for someone like me to lose sight of. Nonetheless, I think the answer is not to hand over the final arbitration authority to an algorithm, but rather to design a system where there is an open market in trust. Starting a bank should be as easy as starting a blog. The trick is to come up with a system of checks and balances so that someone who runs a crooked bank can be immediately and unambiguously called out.