And a tool that serves only to subvert the law (at enormous expense) does not strike me as valuable or worth supporting.
NB: I support the outcome of the 1990's crypto war (in the good old days when "crypto" meant cryptography, not crime-token), namely the right to private uncensored unrestricted communication. But a private uncensored unrestricted way of sending around money is a terrible idea, as we can see empirically.
The State Machine Replication problem in distributed computing has been studied since the 1960s or so, and indeed can be solved using Byzantine Broadcast. That has been solved for various settings:
* Permissioned (+ PKI), synchronous: SMR possible for any f, Dolev Strong (1983)
* Permissioned (no PKI), synchronous: SMR impossible if f≥n/3 (PSL 1980, FLM 1985)
* Permissioned, asynchronous setting: SMR impossible even with f=1 (FLP 1985)
* Permissioned, partially synchronous: deterministic SMR with "eventual liveness" possible if f<n/3 (late 1990s), stochastic if f<n/2, impossible otherwise.
The theory to achieve reliable state machine replication even in the presence of byzantine failures was sorted out in the 1980s, and the practice followed in the late 1990s (PBFT, byzantine Paxos, etc.)
So, just to drive the point home: the Byzantine Generals problem (more precisely: Byzantine Broadcast & SMR) was a solved problem by the late 1990s.
What Bitcoin (ie LCR + PoW) added was to do it in the permissionless setting, just as I've said. (It also increased f from n/3 to n/2, modulo "selfish mining", and while earlier solutions were consistent always, available eventually, LCR + PoW is available always, consistent eventually, which is arguably the wrong tradeoff for finance.)
> The lack of CS knowledge on this board is pretty staggering sometimes.
You don't say.