News for hackers. Stuff that matters.
Re:Ouroboros: A Provably Secure Proof-of-Stake Blockchain Pr... by dane-pgp on Sunday January 31, 2021 @04:42PM (#25982841)
> only be made secure against a maximum of ⅓ byzantine actors

What is the threat model here, and in particular what is the outcome of a successful attack?

For example, if the only "power in the system" the attacker has is the ability to prevent transactions from occurring, then the attacker is damaging the value of their own coins. The honest majority could, as a last resort, also decide to manually fork the currency to invalidate the attacker's coins.

Assuming the ⅓ number is weighted by stake, the attacker is potentially risking billions of dollars in order to carry out this short-term attack. With that amount of money it would be cheaper to locate and destroy the major bitcoin mining farms.

Re:Ouroboros: A Provably Secure Proof-of-Stake Blockchain Pr... by wmf on Sunday January 31, 2021 @05:12PM (#25983094)
There are concerns (or concern trolls) about an attacker buying old keys for almost nothing, trashing the chain, then profiting by shorting. And there are concerns that the honest majority can't figure out how to switch to the honest fork.
Re:Ouroboros: A Provably Secure Proof-of-Stake Blockchain Pr... by gruez on Sunday January 31, 2021 @09:54PM (#25985021)
>And there are concerns that the honest majority can't figure out how to switch to the honest fork.

If that's always an option why bother with proof of stake in the first place? Just let it do whatever and switch to the "correct" fork once in a while!

Re:Ouroboros: A Provably Secure Proof-of-Stake Blockchain Pr... by wmf on Sunday January 31, 2021 @10:10PM (#25985100)
Why not have the Supreme Court resolve every dispute? Because it's too expensive. Ultimately you can't exempt yourself from the judgement of society and the market. If you commit to a "most-work chain wins no matter what" policy it doesn't mean that chain will win economically.
Re:Ouroboros: A Provably Secure Proof-of-Stake Blockchain Pr... by regisg on Sunday January 31, 2021 @05:18PM (#25983139)
That's why there are KES keys.
Re:Ouroboros: A Provably Secure Proof-of-Stake Blockchain Pr... by wmf on Sunday January 31, 2021 @08:00PM (#25984389)
For people like me who haven't heard of this feature: https://docs.cardano.org/projects/cardano-node/en/latest/sta... It's true that this prevents an attacker from using current keys to perform a long-range attack but old keys can still be used for attacks.
Re:Ouroboros: A Provably Secure Proof-of-Stake Blockchain Pr... by ilap on Monday February 01, 2021 @12:25AM (#25985819)
Afaik, long range attack is eliminated by bootstrapping from genesis, where the densest chain is selected.