Cryptocurrencies are not secured by the hashrate, but by the cost of exceeding the hashrate of the network.
Think of bitcoin mining as a raffle. You can buy as many raffle tickets as you want, and so can everybody else. Each raffle ticket costs $1, and so people buy tickets until the prizes start getting spread out too much. The next day, though, the raffle tickets are only 10 cents apiece. However, the prizes are still the same, so the break-even point is still the same when expressed in dollar value. As a result, the same amount of money is spent, just buying 10x as many raffle tickets.
In this analogy, each hash performed by the miners is buying a raffle ticket. The block reward is the prize at the end of the raffle. Going from CPU mining to GPU mining to ASIC mining each increase the efficiency of performing a hash, analogous to lowering the price of a raffle ticket. Just as lowering the price of each raffle ticket results in an increase in the number of ticket sales without changing the total value of ticket sales, so decreasing the cost of each hash results in an increased number of hashes performed, without changing the total amount of electricity spent to perform those hashes.
I agree it doesn't sound like the most efficient system and these incentives are somewhat perverse, but there weren't any systems like this before bitcoin. If cryptocurrencies do have valuable attributes that cannot be attained by conventional currencies and bitcoin introduced these concepts to the world in the first viable way and the popularity of these networks has lead to people researching more efficient analogues such as proof of stake and the techniques mentioned in the original article then can't we still say that the existence of bitcoin had a utilitarian benefit for the world? If the popularity of bitcoin goes down and these more efficient networks supplant it then the total energy-expenditure should be minuscule compared to the total energy usage of all humans over all time. Given the the rate at which these technologies seem to be maturing it will likely still be a lower expenditure than bootstrapping many other equally useless human endeavors.
Furthermore, the decentralized nature of bitcoin cannot last indefinitely, and arguably has already ended. All mining nodes need to have a record of all balances, in order to verify that incoming transactions are valid. This places a limit on the ability to contribute to trust by mining, and will result in further centralization of miners. If a cryptocurrency were to replace fiat currency, it would not be a change from centralized currency to decentralized. Rather, it would be a from a centralized currency controlled by an elected government to a centralized currency controlled by conglomerations of miners.
I have done my best to understand their use, their applications, and their limits. With that in mind, I believe cryptocurrencies to be a obfuscated form of pyramid scheme, with additional externalities of heavy power use.
Trustworthiness always depends on your use case.
If you are transacting small amounts of money (less than is spent on mining a block) then waiting for 3 confirmations is probably sufficient to consider the transaction settled. But what if you send a transaction with a 100 times higher value than goes into mining a block then you will need to wait for over 100 confirmations till you can be sure it doesn't make economical sense for anyone to try to double spend your transaction by orphaning the first block your transaction was in (with a very simplified incentive model not taking into account other transactions in these blocks).
Thus the money spent on mining blocks determines how much value can be transferred in one block. Allowing for higher value transactions is good thing imo, is necessary for its success as digital gold and therefore justifies the higher energy consumption (especially since there don't seem to be any alternatives with similarly good or better robustness against attacks yet, proof of stake can't work under the same assumptions bitcoin does [1]).
> Allowing for higher value transactions is good thing imo
PoW systems are the only ones where "higher value transactions" need security proportional to their size.
> PoW systems are the only ones where "higher value transactions" need security proportional to their size.
Every other currency is either backed by men with guns and transactions are reversible (fiat) or you have to spend a roughly proportional amount of resources securing it (e.g. gold). I didn't look at the data, but judging by US military spending I'd guess that the strongest economies also have to spend the most to keep their system safe.
You can still argue that the assumption of pseudonymous actors in bitcoin makes the proportion factor larger (=system less efficient) than for systems that can use identities and attribution and I'd agree with that. But that's only because it can operate with less assumptions (no identities), which I see as a feature.
So what? Men with guns are also the foundation of property rights, law and order, and national sovereignty; they are not an extra cost of fiat currency, they underpin the government's ability to maintain order and structure within society. I shouldn't have to explicitly point this out.
> transactions are reversible (fiat)
Cash payments are not reversible. Reversible payments are also a feature that nearly everyone wants.
> spend a roughly proportional amount of resources securing it (e.g. gold).
Gold is not a currency.
> that's only because it can operate with less assumptions (no identities), which I see as a feature
Untrue. A centralized anonymous payment system is technically possible, the limitations are strictly legal.
It was for millennia.
I can't imagine the processing being done by my computer right now is all strictly necessary to read and post these comments, and I'd wager this site is more efficient than most these days. Still I accept reality and pay these costs in order to talk with you on the internet because this is the world we live in. It looks like these nice people at MIT are working on some of the inefficiencies of cryptocurrencies, so let's rejoice.
Yes, that's exactly the point. Bitcoin is insanely inefficient because PoW is insanely inefficient. Unlike other "inefficiencies" where there is a logical relationship between "energy spent" and "useful work accomplished", with PoW there is no such relationship since the energy isn't spent doing useful work (i.e. processing transactions). Yes, more power into the network makes it "more secure" by making it "more expensive" to perform a 51% attack. The increased expense is distributed across the network in the form of increased difficulty. If a 51% attack was already implausible (which most bitcoin enthusiasts would say is true), then making it even more expensive doesn't actually do anything useful.
Trust-less consensus may be the same. Nature doesn't care either way.
Well it depends what you are considering. Arguably, yes, your computer finished the HTTPS connection long before you got around to reading the words on the page itself. But the scale of an idle CPU compared to a 100% CPU is not even close. Mine is sitting at 2% use while I type this.
You could put that money into mining actual gold, and literally make 4x as much as mining bitcoin [0].
[0] https://www.theguardian.com/technology/2018/nov/05/energy-co...