3 ms·

I think it's an unambiguous ethical failure that Bitcoin's traffic isn't opportunistically encrypted. As protocol developers we have an obligation to provide fo

by nullc 7y ago

I think it's an unambiguous ethical failure that Bitcoin's traffic isn't opportunistically encrypted. As protocol developers we have an obligation to provide for users at least a basic level of protection and because of known threats on the modern internet that protection almost always needs to include encryption. In particular, due to material published by Edward Snowden we know for a fact that nation state attackers have exploited this weakness to compromise the privacy of Bitcoin users, but even if before we knew that-- it's a reasonable assumption for any protocol which handles private information. Unfortunately, Erik Voskuil (maintainer of "libbitcoin", a bitcoin node implementation used by virtually no one) has aggressively argued against any implementation of encryption with arguments that it would create a false sense of security and ultimately convert Bitcoin to a permissioned network. (e.g. https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2016-June/012848.html https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2016... and the surrounding thread; note that this was in _2016_. The same fruitless discussion repeated in subsequent years.) I don't think any of Bitcoin's regular contributors have found his arguments persuasive in the slightest. Personally, I believe the arguments are outright incoherent. Never the less, these arguments are repeated every time its discussed. After years of vicious abuse many Bitcoin contributors simply no longer have sufficient will remaining to proceed in the face of even more drama. It would be perfectly possible for Bitcoin Core to deploy encryption and for software like libbitcoin to not do so-- it doesn't have to be universally supported... but even so, the drama remains and no one wants to deal with it. As a result little progress has been made in bringing the encryption functionality to completion and users are left needlessly exposed as a result.

qertoip 7y ago
How is it possible that a single person, however vocal, can affect the morale and peer review process so much? I would say, ignore and happily move on with the implementation.
- nullc 7y ago
  How is it possible that a single straw could break the back of a mighty camel? :) If you're up for it-- jump on in! Other people, ... apparently aren't.
- sneak 7y ago
  I emailed the primary bitcoin maintainer Wladimir J. van der Laan when the Snowden slides came out, asking specifically for this. The hand-wavey rationale then for not doing it was basically along the lines of “well, anyone can MITM it and people who care about privacy should already be using it over Tor, so it isn’t important”. I disagreed then and I disagree now, but my C isn’t up to the task (I can read it well enough, but I doubt I could securely implement a network crypto server the first try). Perhaps I will look into adding this to the golang bitcoin implementation, although I doubt it will go much of anywhere without bitcoind/bitcoin-core (the main canonical implementation) supporting it.
  - nullc 7y ago
    FWIW, Wladimir was fine in support of the work, see e.g. this discussion from a year ago: http://www.erisian.com.au/meetbot/bitcoin-core-dev/2019/bitcoin-core-dev.2019-03-07-19.01.log.txt http://www.erisian.com.au/meetbot/bitcoin-core-dev/2019/bitc... I didn't become aware of those snowden docs until a year and a half after the article about them... :( but the need was obvious enough before they came out (as you can see from the 2016 discussion on the subject). Sitting down and coding is probably not the limiting reagent in getting the work completed. Review, herding cats, building positive momentum, etc. would all add a lot if you're willing and able to provide it. Collaborating on a second implementation would probably also be useful (though not so much in isolation, but it would be useful for testing and validation). (Heck, even just cheering work along to distract from drama and haters would probably accomplish a lot).
    - sneak 7y ago
      The Snowden drop was in 2013. A functioning implementation goes a long way toward herding cats and building positive momentum. Amongst hackers, working code trumps a lot of objections; moreso if it is simply opportunistic and doesn't break anything for old clients, and can be disabled by the fearful pedants. It's also a great starting point for other practical objections: with a working prototype, you can always counter "but what about edge case $x, huh smart guy?!" with a "well, here's a small patch to address $x, it's in the PR now", which is a great way to achieve forward progress.

by nullc 7y ago

qertoip 7y ago

How is it possible that a single person, however vocal, can affect the morale and peer review process so much? I would say, ignore and happily move on with the implementation.

nullc 7y ago
How is it possible that a single straw could break the back of a mighty camel? :) If you're up for it-- jump on in! Other people, ... apparently aren't.
sneak 7y ago
I emailed the primary bitcoin maintainer Wladimir J. van der Laan when the Snowden slides came out, asking specifically for this. The hand-wavey rationale then for not doing it was basically along the lines of “well, anyone can MITM it and people who care about privacy should already be using it over Tor, so it isn’t important”. I disagreed then and I disagree now, but my C isn’t up to the task (I can read it well enough, but I doubt I could securely implement a network crypto server the first try). Perhaps I will look into adding this to the golang bitcoin implementation, although I doubt it will go much of anywhere without bitcoind/bitcoin-core (the main canonical implementation) supporting it.
- nullc 7y ago
  FWIW, Wladimir was fine in support of the work, see e.g. this discussion from a year ago: http://www.erisian.com.au/meetbot/bitcoin-core-dev/2019/bitcoin-core-dev.2019-03-07-19.01.log.txt http://www.erisian.com.au/meetbot/bitcoin-core-dev/2019/bitc... I didn't become aware of those snowden docs until a year and a half after the article about them... :( but the need was obvious enough before they came out (as you can see from the 2016 discussion on the subject). Sitting down and coding is probably not the limiting reagent in getting the work completed. Review, herding cats, building positive momentum, etc. would all add a lot if you're willing and able to provide it. Collaborating on a second implementation would probably also be useful (though not so much in isolation, but it would be useful for testing and validation). (Heck, even just cheering work along to distract from drama and haters would probably accomplish a lot).
  - sneak 7y ago
    The Snowden drop was in 2013. A functioning implementation goes a long way toward herding cats and building positive momentum. Amongst hackers, working code trumps a lot of objections; moreso if it is simply opportunistic and doesn't break anything for old clients, and can be disabled by the fearful pedants. It's also a great starting point for other practical objections: with a working prototype, you can always counter "but what about edge case $x, huh smart guy?!" with a "well, here's a small patch to address $x, it's in the PR now", which is a great way to achieve forward progress.