3 ms·
I wonder how these proof-of-retrievabililty blockchains deal with the potential problem of miners injecting a ton of fake files (e.g. whose i'th block is H(secr
by tromp 10y ago
I wonder how these proof-of-retrievabililty blockchains deal with the potential problem of miners injecting a ton of fake files (e.g. whose i'th block is H(secret||i)) into the system in order to boost their chances of being able to do a retrievabililty proof without actually needing storage.
Is it simply a matter of mining rewards not being able to compensate for the cost of injection?
- Taek 10y agoIs there more than just Filecoin? Sia and Storj both only do file contracts, consensus is driven by other means (Proof of Work for Sia, Counterparty for Storj). As for Filecoin, I believe that it has several significant issues, both with the game theory (super linear returns when investing in hashrate and storage simultaneously - a massive centralization pressure), and with data withholding attacks (to mine on Filecoin, you need to have the Filecoin data. What if the existing miners decide not to give it to you?).
- tromp 10y agoI see this is answered in Section 2.7: "Altering the reward scheme must include careful analysis of the resulting market equilibria. For instance, if the currency is too inflationary, then attackers may benefit from adding large amounts of “dummy data” that they can easily reproduce without incurring the cost of storage (e.g., the outputs of a pseudorandom function for which they know the secret key), and thereby gain a net advantage in the challenge reward system over the long term."