DARPA study challenges assumptions about distributed ledger (Bitcoin) security
i used to work on this stuff (and thought about it quite a bit) so i thought i&#x27;d address some of these points purely for the fun of it.<p>&gt; The challenge with using a blockchain is that one has to either (a) accept its
immutability and trust that its programmers did not introduce a bug, or (b) permit
upgradeable contracts or off-chain code that share the same trust issues as a
centralized approach<p>yeah, this is a problem. but there are also safeguards. bitcoin, for example, is a many-eyes project, with many developers with many different funding sources watching it. the release process is a work of art (gitian) which was one of the most interesting secure software supply chain attempts i&#x27;ve ever seen going back near a decade.<p>blockchains are living systems, (as is most software!), where cryptography and software security stops, security based on self interested humans starts.<p>&gt; Every widely used blockchain has a privileged set of entities that can modify the
semantics of the blockchain to potentially change past transactions.<p>yes, every project has a set of core developers. but let&#x27;s assume all those libertarian wingnut core developers agree on deciding to go rogue in a collective socialist fashion to edit the ledger. they still have to push their software through the many-eyes development process, and then get it into the hands of both miners and end users and then actually somehow get away with things getting rewritten in front of everyone, all while not destroying all their time, efforts and holdings on the chain they&#x27;re attacking.<p>&gt; The number of entities sufficient to disrupt a blockchain is relatively low: four for
Bitcoin, two for Ethereum, and less than a dozen for most PoS networks.<p>i&#x27;m not sure i follow this. what is an entity? how are they disrupting the network?<p>&gt; The vast majority of Bitcoin nodes appear to not participate in mining and node
operators face no explicit penalty for dishonesty.<p>every node in bitcoin maintains an abuse&#x2F;dishonesty score for every peer. if a node misbehaves in a known&#x2F;detectable way, it is disconnected and banned as a peer.<p>the gossip protocol is designed to work around malicious&#x2F;censurious peers.<p>&gt; The standard protocol for coordination within blockchain mining pools, Stratum, is
unencrypted and, effectively, unauthenticated.<p>nothing that passes over this protocol is a secret. maybe making this tamperproof could have some value, but ultimately any attack either only affects the pool&#x27;s revenue (they&#x27;ll detect this) or attempts censor (another pool or miner will mine the tx eventually)<p>&gt; When nodes have an out-of-date or incorrect view of the network, this lowers the
percentage of the hashrate necessary to execute a standard 51% attack. Moreover,
only the nodes operated by mining pools need to be degraded to carry out such an attack. For example, during the first half of 2021 the actual cost of a 51% attack on
Bitcoin was closer to 49% of the hashrate.<p>i imagine that no single pool or entity was near the ~50% required to carry out the attack.<p>&gt; For a blockchain to be optimally distributed, there must be a so-called Sybil cost.
There is currently no known way to implement Sybil costs in a permissionless
blockchain like Bitcoin or Ethereum without employing a centralized trusted third
party (TTP). Until a mechanism for enforcing Sybil costs without a TTP is discovered,
it will be almost impossible for permissionless blockchains to achieve satisfactory
decentralization.<p>this is theoretical, as long as no one is anywhere near 50%, it&#x27;s fine.<p>&gt; A dense, possibly non-scale-free, subnetwork of Bitcoin nodes appears to be largely
responsible for reaching consensus and communicating with miners—the vast
majority of nodes do not meaningfully contribute to the health of the network.<p>they&#x27;re canaries for a giant distributed network of annoying obsessive compulsive libertarians who will start squawking to high holy hell if they see issues on their nodes. those squawks then coalesce like voltron into a sort of gigantic metaphorical grizzly bear that lovingly watches over all actors in the network and the chain itself.<p>&gt; Bitcoin traffic is unencrypted—any third party on the network route between nodes
(e.g., ISPs, Wi-Fi access point operators, or governments) can observe and choose to
drop any messages they wish.<p>randomness in transaction gossiping is designed to work around this as well as use of tor (as mentioned elsewhere).<p>&gt; Of all Bitcoin traffic, 60% traverses just three ISPs<p>sounds like the modern internet.<p>&gt; Tor is now the largest network provider in Bitcoin, routing traffic for about half of
Bitcoin’s nodes. Half of these nodes are routed through the Tor network, and the
other half are reachable through .onion addresses. The next largest autonomous
system (AS)—or network provider—is AS24940 from Germany, constituting only 10%
of nodes. A malicious Tor exit node can modify or drop traffic similarly to an ISP.<p>the gossip protocol attempts to work around this as mentioned above.<p>&gt; Of Bitcoin’s nodes, 21% were running an old version of the Bitcoin Core client that is
known to be vulnerable in June of 2021.<p>lol.<p>&gt; The Ethereum ecosystem has a significant amount of code reuse: 90% of recently
deployed Ethereum smart contracts are at least 56% similar to each other.<p>cool.<p>don&#x27;t get me wrong, i still have massive issues with the environmental footprint involved with proof of work consensus. moreover, libertarian politics never really made sense to me, except perhaps until yesterday. and yeah, once you start to take the ideal of decentralization and implement it in the real world, there are implementation details that run counter to the ideal... but...<p>it&#x27;s probably the closest thing we have to a decentralized and autonomous system of people, computers and software on the internet. it may actually be able to stand up to nation state level attacks. and perhaps most interesting to me personally, it may be an incubation bed for some of the ideas that could lay the foundations for globally neutral naming, identity and reputation services for a next generation internet.