Slashdot Mirror


Researchers Locate Flaw In Bitcoin Protocol

An anonymous reader writes "Researchers at Microsoft Research and Cornell identified a potential flaw in Bitcoin's transaction propagation. In a recent paper they show how miner nodes in the Bitcoin network have an incentive not to relay transactions to the rest of the network, and propose to implement a scheme that rewards nodes [PDF] for relaying messages."

25 of 191 comments (clear)

  1. I'm starting to want to work at Microsoft Research by CmdrPony · · Score: 3, Insightful

    They seem to do lot of cool stuff. From that Courier tablet to studying Bitcoin. Even while Microsoft doesn't realize their R&D section has a great amount of potential, it's actually the only major company in the industry that does have such research center. I wish I worked there :-P

  2. Yes but by koan · · Score: 4, Funny

    It still sounds like a better system than our current financial institutions.

    --
    "If any question why we died, Tell them because our fathers lied."
    1. Re:Yes but by somersault · · Score: 4, Insightful

      As someone said before, Bitcoin would be a lot more valuable if your currency held the promise of something. For example selling your computer time makes much more sense than doing calculations designed to waste computing power. I've wondered before if there was anything to Bitcoin, but I really can't think of it as a currency. I think of it more like the stock market, and how I can abuse it to make a profit. In the end I'm better off just making money doing real work.

      --
      which is totally what she said
    2. Re:Yes but by Vaphell · · Score: 3, Informative

      stability comes from the size of userbase. More users = greater inertia.
      Either way central banks have no problem with playing dirty. Imagine having tons of swiss francs and losing 8% in a matter of seconds as it happened early September when they announced pegging to euro.

    3. Re:Yes but by Talderas · · Score: 4, Insightful

      It's currency in the sense that pinto beans are a currency.

      --
      "Lack of speed can be overcome. In the worst case by patience." --Znork
    4. Re:Yes but by seanadams.com · · Score: 4, Insightful

      Bitcoin would be a lot more valuable if your currency held the promise of something. NO, this is exactly why government money fails. Whichever authority is responsible for that "promise" will simple renege after the currency has gained acceptance. They debase the money, becoming extremely powerful in the process, until eventually it becomes worthless. Then after everyone else is broke and they have all the real money, they do it again. When you mine bitcoins you aren't exactly "selling computer time", you are using your computer to produce a product. The person who buys your coins wants the coin as proof of work, not the cpu time itself. This is exactly the same model as gold mining, the point is that nobody can get more gold without incurring the cost to mine it. Gold doesn't have to "promise" anything except its inherent promise of being scarce (and its other monetary properties such as durability, divisibility, etc). Yes bitcoin is volatile but only because it is new. As it gains acceptable, the real promise that you will care about is the market in which people will let you trade it for stuff (even just forex is a great start). That does NOT require any authority to back the money. The whole point of bitcoin is that it is a scarce commodity, as opposed to a token or note.

  3. Re:I'm starting to want to work at Microsoft Resea by Anonymous Coward · · Score: 3, Insightful

    Well, IBM do have a fairly large research division too.

  4. Re:I'm starting to want to work at Microsoft Resea by somersault · · Score: 5, Funny

    You're the guy that said he worked in marketing yesterday. Why is it that all UIDs over 2,000,000 seem to do marketing for MS?

    --
    which is totally what she said
  5. Irresponisble headline by Anonymous Coward · · Score: 5, Informative

    Only a small fraction of bitcoin nodes (e.g. 1%) are mining nodes, and they all relay transactions as relaying transactions is very cheap to do. The problem they're describing clearly does not exist. If it did someday turn out to be an issue you can address it by users handing their transactions directly to various miners, you don't need some crazy complicated reward scheme.

    It's also not news— their contribution isn't insight on incentives but a complicated sibyl resistant reward scheme for trees (which the bitcoin network is not) which requires doubling the cost of forwarding a transaction every two hops it takes. (By making every node perform a great many additional cryptographic signatures and checks in order to track the reward)

  6. summary by petermgreen · · Score: 5, Insightful

    If a LARGE proportion of bitcoin nodes are run by assholes who refuse to distribute transactions then the network may fall apart.

    This system seems to add a lot of complexity to solve something that has not proven a problem.

    --
    note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
  7. Doesn't really make sense by Anonymous Coward · · Score: 3, Interesting

    This doesn't really make sense. Clients forward transactions as well as miners (and typical clients are connected to 8 other clients, making it a very well connected network).

    Granted, there is no incentive to forward transactions, but if nobody forwards transactions then the network won't work so ultimately it's in the self interest of all users to do so. Some miners may decide not to do so, in the hope that they will be the one who solves the block and get the transaction fee. But they are not actually gaining anything by doing so. They are making other miners potentially miss out on transaction fees but it doesn't improve their chances of winning the block and therefore getting the fee and there is no way they can know what transactions other miners have picked up through other routes via the network.

    I think the conclusion is wrong; while there is no incentive to forward the transaction (beyond stability of the network), there is also no obvious disincentive to do so as the cost is tiny (the cost of the bandwidth to forward it)

    1. Re:Doesn't really make sense by drinkypoo · · Score: 3, Informative

      They are making other miners potentially miss out on transaction fees but it doesn't improve their chances of winning the block and therefore getting the fee and there is no way they can know what transactions other miners have picked up through other routes via the network.

      If it hurts the other guy and it doesn't hurt you then there is an incentive not to forward any more transactions than you have to. If it hurts you and other guy at the same time then you can do it selectively, any time it will hurt him more. If everyone were altruistic, you'd be right. They aren't, so you aren't.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  8. All of my mod points will be undone now, but.. by intellitech · · Score: 3, Interesting

    A bug can exist without it immediately causing problems. It's generally best to fix things before they become a problem, not afterwards.

    --
    vos nescitis quicquam, nec cogitatis quia expedit nobis ut unus moriatur homo pro populo et non tota gens pereat.
    1. Re:All of my mod points will be undone now, but.. by Ginger+Unicorn · · Score: 3, Funny

      which is ironic considering this is coming from microsoft

      --
      (1.21 gigawatts) / (88 miles per hour) = 30 757 874 newtons
  9. Re:And what's the Bitcoin Forums response? by Anonymous Coward · · Score: 5, Insightful

    when you wrote "denial" did you mean "in a discussion involving several dozen people, one participant denied the existence of the problem while everyone else discussed whether the flaw is a practical problem or how it could be solved"?

    Understandable typo, the keys are right next to each other.

  10. Re:And what's the Bitcoin Forums response? by Halo1 · · Score: 3, Informative

    Not to mention "engaging in a constructive discussion with one of the original authors of the paper, who hopped in and thanked people for their interesting comments".

    Mod parent up.

    --
    Donate free food here
  11. Re:I'm starting to want to work at Microsoft Resea by drinkypoo · · Score: 3, Interesting

    But seriously, their R&D department do some pretty cool stuff. Even though MS manage to churn out nine-nines of crap products, occasionally they still come out with something awesome that they manage to get to market (think Kinect).

    The problem with that idea is that Kinect was a 90%+ finished product when they bought it. They polished it for use with the 360, it always takes them some time to fuck up a new technology sufficiently for their branding, and kicked it out the door. And it's taking them how long to kick out a PC version even though hobbyists have been doing it all along? Microsoft is pathetic at everything but illegally exploiting their opportunities and believing otherwise is ignorant at best.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  12. Re:Another flaw found in Bitcoin protocol by Bert64 · · Score: 4, Interesting

    The value of a good is actually whatever a third party is willing to give you in exchange for that good... This value is completely arbitrary, and allows products with no physical value (eg software) to be sold for huge amounts of money or other goods...

    Similarly, money itself has no real value, only the value that others are willing to give in exchange for it.

    The advantage of bitcoin, is that while its effectively a worthless token system, just like regular cash, it is a finite supply and thus not subject to the whims of a central authority.

    Personally i use bitcoin a lot, primarily as an intermediary currency because i can buy bitcoins with money i hold in one currency, and then draw it out again in my local currency without incurring fees levied by existing currency exchange establishments.

    --
    http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  13. Re:And what's the Bitcoin Forums response? by serviscope_minor · · Score: 5, Funny

    If people stop mining bitcoins now, the people at the top will stop winning, so of course they are going to deny. You know, kind of like global warming

    A bad analogy is like a leaky screwdriver and that analogy has covered the floor in so much water that it is like a really tricky crossword puzzle.

    --
    SJW n. One who posts facts.
  14. Re:I'm starting to want to work at Microsoft Resea by EdZ · · Score: 3, Interesting

    I got bored of the Wii gimmick and PS Move pretty quick. So I didn't even bother buying Kinect for my 360. How is it any better?

    It's not. All three non-haptic (don't give me that "vibration is feedback" claptrap!) motion gaming controllers are absolutely horrible to use.

    However, the Kinect is an amazing machine vision system. SLAM, 3d scanning, etc, all for something the size of a Toblerone you can buy off-the-shelf for cheap.

  15. Re:I'm starting to want to work at Microsoft Resea by DrXym · · Score: 3, Interesting

    And Sony haven't done that? Oh wait they did.

  16. Re:I'm starting to want to work at Microsoft Resea by rtfa-troll · · Score: 3, Funny

    This;

    The stability of the current desktop computer market is so important to Microsoft that they will practically never actually innovate. They have an R&D department for two reasons. 1) To keep the ideas away from other companies by patenting them and then not licensing them onward 2) To keep the good people away from other companies by using them to create patents.

    The reason not to work for Microsoft R&D is that, whilst you will be comfortable, well fed and well off, you will lead an empty life and they will suck your soul out of you.

    --
    =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
  17. Re:I'm starting to want to work at Microsoft Resea by GameboyRMH · · Score: 3, Interesting

    Google as well. Saw an interesting article on Google X labs, their "skunkworks"-style division yesterday.

    http://www.slashgear.com/google-x-labs-plans-robot-researchers-to-map-the-future-14194990/

    There's a link to the poorly-paywalled nytimes article in there. Funny thing is they like to keep the fact that they're doing research a secret and constantly emphasize that they put very little money into research, because research makes shareholders nervous. Shows you how far ahead shareholders (or their HFT servers) are thinking.

    --
    "When information is power, privacy is freedom" - Jah-Wren Ryel
  18. Re:I'm starting to want to work at Microsoft Resea by tlhIngan · · Score: 3, Insightful

    The problem with that idea is that Kinect was a 90%+ finished product when they bought it. They polished it for use with the 360, it always takes them some time to fuck up a new technology sufficiently for their branding, and kicked it out the door.

    Problem is, the final 10% polishing is actually pretty damn hard. If you've done software development, getting to the point where the basic features work is really quick. But getting to the point where it's releasable and usable takes a lot of effort.

    It's one thing that Apple is known for (most innovations that are "cool" are at the 90% stage, but it still takes a ton of effort to get it to the stage where people other than geeks and engineers can USE it).

    For Kinect, the final 10% would involve packaging (how does Kinect look, and will it fit with the rest of the equipment?), fitting the stuff inside the package (does it fit? Does the enclosure need redesign?), and more importantly, manufacturability.

    Sticking a reference design in a box is not easy. A lot of work is required in order to be able to build in huge volumes - are the parts available in quantity (and cheaply)? Can it be assembled easily or are there fiddly calibration bits that'll take time to work? Are there simple pass/fail criterion?

    It takes a lot of work. For open-source, you can abandon it after the 90% point (and most stuff is - the final work is the boring dull stuff no one wants to do), but it's not going to fly for commercial products that you want people to buy. And they know when a product was skimped on.

    Heck, even the UI of a product is important, and Kinect took some beating there.

    (It's why you get reviews on "solidness" - a minor detail but relates to build quality, ditto with use of "cheap plastic" or worse yet, "cheap feeling plastic".) It's that final 10% that Apple is well reknown for, and if it was easy, well, Apple would be dead and there would be tons of products with well designed UIs and very nice casings and such.

  19. Re:I'm starting to want to work at Microsoft Resea by cavreader · · Score: 3, Informative

    Bell Labs also used to set the standard in R&D,