5 ms·

What is the advantage of a private blockchain over a hash tree like used in git? A git commit is also irrevocable, except if you do a git rebase. How do you pre

by haukem 5y ago

What is the advantage of a private blockchain over a hash tree like used in git? A git commit is also irrevocable, except if you do a git rebase. How do you prevent something similar like a git rebase in a private blockchain? A public blockchain with multiple agents that do not trust each other like in BitCoin make sense to me.

anonymousDan 5y ago
Think of an industry e.g. like banking, where the different participants know who each other are but don't fully trust each other. Presuming each participant controls one replica in the system, then using BFT algorithms you can ensure that so long as less than a third of the participants are malicious it is not possible to perform such an attack.
- haukem 5y ago
  You can also set up a git repository and prevent history rewrites on the central server. Some third party could also offer this as a service. Each entity can check this by doing a pull every minute in a cron job, which fails when history rewrite happened. If they detect this, their legal department can take some actions.
  - ignoramous 5y ago
    Just because Encarta existed, didn't mean Wikipedia shouldn't; or because NFS exists, Dropbox shouldn't. They can be solutions to the same problem. In git's case though, it sounds more like a abuse of its underlying properties (not to mention, you'd have to block all git commands that can rewrite history).
    - yjftsjthsd-h 5y ago
      > not to mention, you'd have to block all git commands that can rewrite history Okay, so use mercurial or fossil.
- acdha 5y ago
  Don’t signatures get you the same benefit? I don’t need to trust you simply to sign something saying “user X showed me hash Y at time Z”.
  - unnouinceput 5y ago
    Signatures still requires a centralized entity to manage the trust. A public distributed ledger, be it a blockchain or something else do not.
    - SahAssar 5y ago
      Don't a private blockchain need that anyway to manage access to add to the chain? Or how does a private blockchain manage who has write access to it (since it's supposed to be private)?
    - acdha 5y ago
      We don't even have a centralized authority for x509 in browsers, and that's the closest you come to being correct — there are still many CAs and multiple groups coordinating which of those are trusted, and private CAs are common even up to millions of users. GPG has been around since the 1990s with the web of trust being entirely decentralized and while I'd be the first to say there is room for improvement there's no way that's anything other than decentralized.

by haukem 5y ago

anonymousDan 5y ago

Think of an industry e.g. like banking, where the different participants know who each other are but don't fully trust each other. Presuming each participant controls one replica in the system, then using BFT algorithms you can ensure that so long as less than a third of the participants are malicious it is not possible to perform such an attack.

haukem 5y ago
You can also set up a git repository and prevent history rewrites on the central server. Some third party could also offer this as a service. Each entity can check this by doing a pull every minute in a cron job, which fails when history rewrite happened. If they detect this, their legal department can take some actions.
- ignoramous 5y ago
  Just because Encarta existed, didn't mean Wikipedia shouldn't; or because NFS exists, Dropbox shouldn't. They can be solutions to the same problem. In git's case though, it sounds more like a abuse of its underlying properties (not to mention, you'd have to block all git commands that can rewrite history).
  - yjftsjthsd-h 5y ago
    > not to mention, you'd have to block all git commands that can rewrite history Okay, so use mercurial or fossil.
acdha 5y ago
Don’t signatures get you the same benefit? I don’t need to trust you simply to sign something saying “user X showed me hash Y at time Z”.
- unnouinceput 5y ago
  Signatures still requires a centralized entity to manage the trust. A public distributed ledger, be it a blockchain or something else do not.
  - SahAssar 5y ago
    Don't a private blockchain need that anyway to manage access to add to the chain? Or how does a private blockchain manage who has write access to it (since it's supposed to be private)?
  - acdha 5y ago
    We don't even have a centralized authority for x509 in browsers, and that's the closest you come to being correct — there are still many CAs and multiple groups coordinating which of those are trusted, and private CAs are common even up to millions of users. GPG has been around since the 1990s with the web of trust being entirely decentralized and while I'd be the first to say there is room for improvement there's no way that's anything other than decentralized.