News for hackers. Stuff that matters.
Re:Mainnet Merge Announcement by spywaregorilla on Wednesday August 24, 2022 @12:00PM (#32581212)
What if they then show bogus evidence
Re:Mainnet Merge Announcement by chizhik-pyzhik on Wednesday August 24, 2022 @12:04PM (#32581300)
There's no such thing as bogus evidence. Block signatures are validated cryptographically
Re:Mainnet Merge Announcement by spywaregorilla on Wednesday August 24, 2022 @12:26PM (#32581739)
But all evidence needs to be voted on. Even it's just a divine truth bool, the network still needs to vote on a consensus of whether or not it says TRUE.

edit: for an example. you get hacked and lose $100M. You say fuck it, submit a slasher report that says it wasn't a valid transaction. you offer enough money to get x% of validators to agree with you.

As far as I can tell, you cannot get slashed for your vote on a slash. So lying is ok.

Re:Mainnet Merge Announcement by DennisP on Wednesday August 24, 2022 @01:39PM (#32582934)
> submit a slasher report that says it wasn't a valid transaction...offer enough money to get x% of validators to agree

That's not how this works at all.

Slashing happens under a very specific circumstance: a staker submits contradictory messages. Those circumstances are testable with built-in code that's part of the protocol. To get someone slashed, you send a transaction including their contradictory signed messages. When your transaction is included in a block, the staker gets slashed by the protocol rules hardcoded in all the consensus clients.

The only other thing that can cause a staker to lose stake is the "inactivity leak," where an active staking node doesn't send the messages they're supposed to send. That's completely automatic.

Re:Mainnet Merge Announcement by exo762 on Wednesday August 24, 2022 @01:10PM (#32582510)
I'm sorry. There seems to be a fundamental misunderstanding of what slashing is. Slashing is just a tx. It is included (or not) just as any other tx. There is no magical dance, there is no voting process.

You are basically stating that slashing is impossible in certain conditions because network is not censorship resistant.

There is one avenue where network can censor. It is a 51% coalition that orphans blocks that contains slashing txes. This coalition is dealt with UASF (user activated soft fork), since this type of behavior goes against core principals of the network and convincing people to do it will be really easy.

Re:Mainnet Merge Announcement by 735409264082 on Wednesday August 24, 2022 @02:05PM (#32583381)
> edit: for an example. you get hacked and lose $100M. You say fuck it, submit a slasher report that says it wasn't a valid transaction. you offer enough money to get x% of validators to agree with you.

That's not what slashing is supposed to be used for, but if that situation happened again, Ethereum would fork again, just as last time when Ethereum classic didn't agree to freeze the Ether from the DAO hack. PoS makes it a little easier to fork (which is good imo), but doesn't change anything fundamental. Everyone still needs to be in complete agreement about the rules and history for Ethereum to work.

Re:Mainnet Merge Announcement by Zamicol on Wednesday August 24, 2022 @12:55PM (#32582264)
If a network "votes down" cryptographic proof, that itself becomes cryptographic proof of dishonesty.
Re:Mainnet Merge Announcement by spywaregorilla on Wednesday August 24, 2022 @01:04PM (#32582408)
And... so what? Is there a mechanism to punish validators for not being honest on slasher votes?
Re:Mainnet Merge Announcement by 735409264082 on Wednesday August 24, 2022 @02:07PM (#32583419)
You don't recognise their actions and let them fork of into a useless chain. This happens automatically, just as when a miner would mine an invalid block.
Re:Mainnet Merge Announcement by spicybright on Wednesday August 24, 2022 @01:13PM (#32582549)
It's a shame you're being downvoted as your post has substance. This is a genuine issue worth discussing.

Validators are run by people who fully control if a transaction is valid or not. You either need a ton of GPUs (currently) or a ton of money to have tangible influence over translations.

This isn't even a hypothetical, there's a few massive wallets that are hoarding a ton of eth that will be given more power from the POS transition.

We're relying on "the goodness of their hearts" validator operators and crossing our fingers validators run the same software with the same rules.

Even if you call out sketchy transactions that are close to 50/50 consensus, nothing will happen unless a ton of people have a ton of money on the line like the DAO split.

We need more discussion on how incentives of each party should be to give the most stable network possible.

Re:Mainnet Merge Announcement by michaelsbradley on Wednesday August 24, 2022 @03:28PM (#32584540)
> there's a few massive wallets that are hoarding a ton of eth that will be given more power from the POS transition

It's not as if they're automatically given more power. Such hoards of ETH would need to be deposited in units of 32 ETH to activate unique validators. You could have a large number of validators that are actually a single computer program participating in the Beacon chain, but that doesn't make too much difference.

At the bottom layer, we're talking about the application of an open p2p protocol on the Internet. People can and will analyze the traffic for that protocol, and it will be possible to identify rough shapes and sizes of players in the network. And such analyses won't be long in coming to public blog posts, etc. following the Merge.

If decentralization in the network seems at risk, there will be efforts to remedy the situation. Whether they can succeed is another question.

Re:Mainnet Merge Announcement by leppr on Wednesday August 24, 2022 @12:06PM (#32581330)
Then the software will automatically discard the evidence.

I would suggest to stop spamming the HN comment section and read the introductory articles people helpfully linked you to.

Re:Mainnet Merge Announcement by ethbr0 on Wednesday August 24, 2022 @12:22PM (#32581657)
It's a simple question. No need for ad hom.
Re:Mainnet Merge Announcement by Karunamon on Wednesday August 24, 2022 @12:36PM (#32581923)
What GP posted is not an ad hom; they did not argue for or against anything, and even if they did it wasn't based on the characteristics of the speaker.
Re:Mainnet Merge Announcement by ethbr0 on Wednesday August 24, 2022 @01:05PM (#32582440)
> I would suggest to stop spamming the HN comment section and read the introductory articles people helpfully linked you to.
Re:Mainnet Merge Announcement by Karunamon on Wednesday August 24, 2022 @01:37PM (#32582909)
Yep, this is what was said. It is not an argument for or against any point under discussion.

Ad hominem is "you are wrong because you (fill in the blank)". It is not "go read the articles given to you".

"You are wrong because you are an idiot" is ad hominem.

"You are wrong" is denial.

"You are an idiot" is insult.

Re:Mainnet Merge Announcement by ethbr0 on Wednesday August 24, 2022 @02:14PM (#32583523)
"You are spamming the HN comments and didn't read links, therefore your question is invalid, because of who asked it" is ad hominem.

It's easy enough not to reply. No need to get an attitude about it.

Re:Mainnet Merge Announcement by leppr on Wednesday August 24, 2022 @02:23PM (#32583658)
Yes, this was ad-hominem because it seems obvious the OP is not asking this in good faith. Their first comment is not in the form of a neutral question, but a prejudiced assumption based on a false idea that nothing in the linked article could lead one to believe.

> Is it incorrect to say that ethereum is now entirely centralized with some extra steps?

> Like, you have this proof of stake thing, but the only reason it works is because there's just a small number of validators, which is just going to be the ethereum foundation and friends.

I know Cunningham's Law is a valid discussion strategy, but the topics of cryptocurrency on HN already tends to attract enough flamewars and misinformation as it is.

Re:Mainnet Merge Announcement by spywaregorilla on Wednesday August 24, 2022 @03:49PM (#32584810)
> Yes, this was ad-hominem because it seems obvious the OP is not asking this in good faith.

There's nothing here that was done in bad faith and I should not need to defend myself for asking a question in a tech forum. Assuming I'm not asking in good faith is bad faith.

The reason I asked was a description pasted a short while ago:

https://news.ycombinator.com/item?id=32535409

https://news.ycombinator.com/item?id=32535912

Which included this line:

> Slashing is not meant to profitable, and the whistleblower reward is quite small. We don't need a million slashers, in fact, we could operate with just one... expect the Eth Foundation to run them, among other large players who can spare the resources.

Which sure sounds like a decentralized process that is ultimately just centralized around the ETH foundation at the end of the day.

Honestly I've learned a lot from the responses here. And I think people who assumed I was doing anything other than just asking questions because the idea I was asking about offended them are asshole. So yeah. Go pound sand.

Re:Mainnet Merge Announcement by zodiac on Wednesday August 24, 2022 @11:00PM (#32588928)
> Which sure sounds like a decentralized process that is ultimately just centralized around the ETH foundation at the end of the day.

The validators need to be decentralized (i.e. prevent "harmful collusion"), but the slashers don't need to be in the same way (as long as the validators are).

Re:Mainnet Merge Announcement by spywaregorilla on Thursday August 25, 2022 @10:07AM (#32593896)
Nope. That's very inaccurate. If only the ETH foundation is allowed to slash, then it's just a centralized system with extra steps. Because only the ETH foundation is allowed to decide what is bad behavior.

It is not the case that only the ETH foundation can slash, which was the crux of my original question.

The fundamental misunderstanding people seem to be having is that slashers show objective proof of bad events. That's accurate. But validators are still free to agree or disagree with that objective proof of bad events. If you can create a means to prevent consensus on slashing for your overtly malicious behavior, your stake is only at risk if the entire community agrees to fork, which is probable for huge malicious behaviors but I'm not convinced is true for smaller things or circumstances where large actors have a vested interest in preferring the original chain.

Re:Mainnet Merge Announcement by zodiac on Thursday August 25, 2022 @11:25AM (#32594975)
I agree with your 3rd, 4th, and 5th sentences, but not with your 1st and 2nd. Assuming a large number of independent validators, the Nash equilibrium is close to "there is no equivocation, hence no slashable evidence, hence no incentive to run a slasher node". (Remember that Nash equilibrium implicitly assumes that agents are not allowed to cooperate with each other). Suppose some fraction of the validators are deviating from this equilibrium by doing lots of equivocation, now there is an incentive to run a slasher node. So what this modelling suggests is that in the real world, we can have a small number of slashers and a large number of validators, and the security comes from the fact that anyone could be a slasher (it's OK that the number of people who actually are is small). But we cannot conclude that "it's OK to have a small number of validators, as long as anyone can be a validator".
Re:Mainnet Merge Announcement by spywaregorilla on Friday August 26, 2022 @09:29AM (#32607259)
I don't really agree but sure, however this counterpoint retracts the original premise, that the slashers are centralized. Something can be done with a small number of people and still be decentralized.
Re:Mainnet Merge Announcement by Zetaphor on Wednesday August 24, 2022 @12:43PM (#32582054)
This would require forging the existence of an invalid block signed with the key of the validator you're claiming should be slashed, which is not possible
Re:Mainnet Merge Announcement by madeofpalk on Wednesday August 24, 2022 @12:21PM (#32581629)
The evidence isn't like a Youtube video.