From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from sog-mx-4.v43.ch3.sourceforge.com ([172.29.43.194] helo=mx.sourceforge.net) by sfs-ml-3.v29.ch3.sourceforge.com with esmtp (Exim 4.76) (envelope-from ) id 1Z5z0P-0008V7-Fy for bitcoin-development@lists.sourceforge.net; Fri, 19 Jun 2015 16:19:01 +0000 Received-SPF: pass (sog-mx-4.v43.ch3.sourceforge.com: domain of coinbase.com designates 209.85.212.180 as permitted sender) client-ip=209.85.212.180; envelope-from=adrian@coinbase.com; helo=mail-wi0-f180.google.com; Received: from mail-wi0-f180.google.com ([209.85.212.180]) by sog-mx-4.v43.ch3.sourceforge.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.76) id 1Z5z0O-0007pn-5c for bitcoin-development@lists.sourceforge.net; Fri, 19 Jun 2015 16:19:01 +0000 Received: by wicgi11 with SMTP id gi11so23287672wic.0 for ; Fri, 19 Jun 2015 09:18:54 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=evtEqBQcX35ExB298q+Ewt6yWO1S53xmSkSe12+pATs=; b=MKY4S72eu/eajIaIz/9J7nKPBev8LPWaatt7SJxabz/4NpvwU2Xgnt9hXdjggZvpbK VQolZ6SHuyY/ShjSAJOZUr9O71FhPHnIlUIEnQYo7ftngjJZXP1Xbmt+sYkzAx+OQniJ IlFFA9+3toS1qTkF4j03QKdM8SM38MS5iegJnUCNBCsADPmiKXzQsJcuFWqP9EMn0qYE 7i62NbmqWNaeHNXvIRX05sM/r+F+lth69vt/LmdYffRfWgoG0VJHv2c/gQnGgStVcQYG SFZxTpX/wlaalMcLpBMS+lsf0Azu3KYkKWgijYJ/mst6R/Ez/Twb0xqo32mCIkNedvBt Hirg== X-Gm-Message-State: ALoCoQnSWNSt3ZrRogaY0fFJqEf6+7jiLsEBv/m83bkfqwL8pG6cnTQlGFo1maTU0ofjqHCaVvDY MIME-Version: 1.0 X-Received: by 10.180.94.35 with SMTP id cz3mr8181562wib.85.1434730734127; Fri, 19 Jun 2015 09:18:54 -0700 (PDT) Received: by 10.27.177.99 with HTTP; Fri, 19 Jun 2015 09:18:54 -0700 (PDT) In-Reply-To: <20150619154054.GA13498@savin.petertodd.org> References: <20150619103959.GA32315@savin.petertodd.org> <20150619135245.GB28875@savin.petertodd.org> <20150619140815.GA32470@savin.petertodd.org> <20150619145940.GB5695@savin.petertodd.org> <20150619154054.GA13498@savin.petertodd.org> Date: Fri, 19 Jun 2015 09:18:54 -0700 Message-ID: From: Adrian Macneil To: Peter Todd Content-Type: multipart/alternative; boundary=f46d0442724ec1a4600518e14791 X-Spam-Score: -0.6 (/) X-Spam-Report: Spam Filtering performed by mx.sourceforge.net. See http://spamassassin.org/tag/ for more details. -1.5 SPF_CHECK_PASS SPF reports sender host as permitted sender for sender-domain -0.0 SPF_PASS SPF: sender matches SPF record 1.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature X-Headers-End: 1Z5z0O-0007pn-5c Cc: Bitcoin Dev Subject: Re: [Bitcoin-development] F2Pool has enabled full replace-by-fee X-BeenThere: bitcoin-development@lists.sourceforge.net X-Mailman-Version: 2.1.9 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jun 2015 16:19:01 -0000 --f46d0442724ec1a4600518e14791 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable > > > So connecting to many nodes just because we can and it's not technicall= y > > prevented is bad for the network and creating systemic risks of failure= , > > Well it is actually; that's why myself, Wladimir van der Laan, and > Gregory Maxwell all specifically=C2=B9 called Chainalysis's actions a syb= il > attack. > > The Bitcoin P2P network is resilliant to failure when the chance of any > one node going down is uncorrelated with others. For instance if you > accidentally introduced a bug in your nodes that failed to relay > transactions/blocks properly, you'd simultaneously be disrupting a large > portion of the network all at once. > This is exactly what your RBF patch is doing. By your own logic, nodes on the network should be allowed to relay (or not relay) whatever they wish. > How many nodes is Coinbase connecting too? What software are they > running? What subnets are they using? In particular, are they all on one > subnet or multiple? > We're running about a dozen nodes running regular Bitcoin Core in various subnets. We aren't doing anything particularly out of the ordinary here. Nothing that would fall under your definition of a sybil attack or harmful to the network. > > You know, you're creating an interesting bit of game theory here: if I'= m > > > a miner who doesn't already have a mining contract, why not implement > > > full-RBF to force Coinbase to offer me one? One reason might be becau= se > > > other miners with such a contract - a majority - are going to be aske= d > > > by Coinbase to reorg you out of the blockchain, but then we have a > > > situation where a single entity has control of the blockchain. > > > > > > > If someone did enter into contracts with miners to mine certain > > transactions, and had a guarantee that the miners would not build on > > previous blocks which included double spends, then they would only need > > contracts with 51% of the network anyway. So it wouldn't really matter = if > > you were a small time miner and wanted to run full-RBF. > > But of course, you'd never 51% the network right? After all it's not > possible to guarantee that your miner won't mine double-spends, as there > is no single consensus definition of which transaction came first, nor > can there be. > > Or do you see things differently? If I'm a small miner should I be > worried my blocks might be rejected by the majority with hashing power > contracts because I'm unable to predict which transactions Coinbase > believes should go in the blockchain? > You seem so concerned that we are actively trying to harm or control the network. We're simply trying to drive bitcoin adoption by making it easy for people to spend their bitcoin with merchants online. The problems we face are no different from other merchant processors, or small independent merchants accepting online or point-of-sale payments. We've historically had relatively little interest in what miners were doing (until RBF came out) - for the most part it didn't affect our business. However, most large merchants would be simply uninterested in accepting bitcoin if we forced their customers to wait 10-60 minutes for their payments to confirm. Many have inventory management systems which can not even place items on hold that long. If full-RBF sees any significant adoption by miners, then it will actively harm bitcoin adoption by reducing or removing the ability for online or POS merchants to accept bitcoin payments at all. I do not see a single benefit to running full-RBF. FWIW, I'm fine with the first-seen-safe RBF, that seems like a sensible addition and a good way to allow fees to be added or increased on existing transactions, without harming existing applications of bitcoin. Adrian --f46d0442724ec1a4600518e14791 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
> So connecting to many node= s just because we can and it's not technically
> prevented is bad for the network and creating systemic risks of failur= e,

Well it is actually; that's why myself, Wladimir van der Laan, a= nd
Gregory Maxwell all specifically=C2=B9 called Chainalysis's actions a s= ybil
attack.

The Bitcoin P2P network is resilliant to failure when the chance of any
one node going down is uncorrelated with others. For instance if you
accidentally introduced a bug in your nodes that failed to relay
transactions/blocks properly, you'd simultaneously be disrupting a larg= e
portion of the network all at once.

Thi= s is exactly what your RBF patch is doing. By your own logic, nodes on the = network should be allowed to relay (or not relay) whatever they wish.
=
=C2=A0
How many nodes is Coinbase = connecting too? What software are they
running? What subnets are they using? In particular, are they all on one subnet or multiple?

We're running a= bout a dozen nodes running regular Bitcoin Core in various subnets. We aren= 't doing anything particularly out of the ordinary here. Nothing that w= ould fall under your definition of a sybil attack or harmful to the network= .

> = > You know, you're creating an interesting bit of game theory here: = if I'm
> > a miner who doesn't already have a mining contract, why not i= mplement
> > full-RBF to force Coinbase to offer me one? One reason might be b= ecause
> > other miners with such a contract - a majority - are going to be = asked
> > by Coinbase to reorg you out of the blockchain, but then we have = a
> > situation where a single entity has control of the blockchain. > >
>
> If someone did enter into contracts with miners to mine certain
> transactions, and had a guarantee that the miners would not build on > previous blocks which included double spends, then they would only nee= d
> contracts with 51% of the network anyway. So it wouldn't really ma= tter if
> you were a small time miner and wanted to run full-RBF.

But of course, you'd never 51% the network right? After all it&#= 39;s not
possible to guarantee that your miner won't mine double-spends, as ther= e
is no single consensus definition of which transaction came first, nor
can there be.

Or do you see things differently? If I'm a small miner should I be
worried my blocks might be rejected by the majority with hashing power
contracts because I'm unable to predict which transactions Coinbase
believes should go in the blockchain?

Y= ou seem so concerned that we are actively trying to harm or control the net= work. We're simply trying to drive bitcoin adoption by making it easy f= or people to spend their bitcoin with merchants online. The problems we fac= e are no different from other merchant processors, or small independent mer= chants accepting online or point-of-sale payments.

We've historically had relatively little interest in what miners were = doing (until RBF came out) - for the most part it didn't affect our bus= iness. However, most large merchants would be simply uninterested in accept= ing bitcoin if we forced their customers to wait 10-60 minutes for their pa= yments to confirm. Many have inventory management systems which can not eve= n place items on hold that long.

If full-RBF sees = any significant adoption by miners, then it will actively harm bitcoin adop= tion by reducing or removing the ability for online or POS merchants to acc= ept bitcoin payments at all. I do not see a single benefit to running full-= RBF.

FWIW, I'm fine with the first-seen-sa= fe RBF, that seems like a sensible addition and a good way to allow fees to= be added or increased on existing transactions, without harming existing a= pplications of bitcoin.

Adrian

--f46d0442724ec1a4600518e14791--