4 ms·
> But storing things off-chain kinda kills the entire concept, doesn't it? If I hack into DigitalOcean I can mess everybody's NFTs by tampering with one databas
by pa7x1 5y ago
> But storing things off-chain kinda kills the entire concept, doesn't it? If I hack into DigitalOcean I can mess everybody's NFTs by tampering with one database.
It's not about storing off-chain, you compute off-chain and post to the network a cryptographic proof of the computation.
Rollups provide something akin to lossless compression proofs of computation. You execute the computation off-chain with high throughput and post a proof to the Ethereum network, this proof contains everything necessary to verify the correct execution of the computation. Sounds mind-blowing but we can thank smart mathematicians for figuring out the cryptography that makes it possible.
This means that we can scale off-chain while enjoying the security guarantees of the blockchain.
These techniques allow scaling the network throughput towards the 1000-4000 transactions per second range. Which together with data-availability sharding will push the throughput towards the 100K transactions per second range.
To be noted that this is not anymore a theoretical construction, these things are live running today on Ethereum. You can check the different solutions as well as detailed explanations of their trade-offs, limitations, etc... Here: https://l2beat.com https://l2beat.com
- soco 5y agoNFT definition is stored off-chain. Which means the security you defined on the chain protects only the URI to a random file or some database - which can be modified any time DigitalOcean or the hacker decides to modify. So you're right, we can create quickly and safely keys to the metal front door, while the back door is propped with a stick.
- proto-n 5y agoWhat you are saying is that an certificate of authenticity is useless because you can burn the artwork with a torch. Those two things are mostly unrelated.
- soco 5y agoI say the certificate of authenticity can be easily forged or destroyed with no way to know what it once contained. And because the entire reason to exist of an NFT is based on this certificate of authenticity (unlike a real world artwork which can be touched and estimated by a specialist), I see a problem right there. Of course this is a problem only if the NFT has an artistic value, which is an entire discussion per se.
- proto-n 5y agoBut you can't really touch the certificate (the blockchain entry), only the "artwork" behind it (png stored on digitalocean). What is and isn't art and artistic value, and whether an indistinguishable copy of the mona lisa should be valued the same is an entire discussion, yes, but it isn't tied to NFT-s. By the way when I say indistinguishable I don't neccessarily mean by world class experts, but for example my guests who happen to spot my (hypothetical) fake mona lisa in my living room.
- soco 5y agoThere is no certificate on the chain. There is only an URI to the certificate, see ERC-721. Edit: yes I have only NFTs as defined in Ethereum in mind. If there are other solutions working better/safer, I am not aware of them...
- proto-n 5y agoWe may have differing concepts of what a certificate of authenticity is. To me, the certificate of authenticity is what guarantees that it can't be copied. That is the NFT with the uri that lives on the blockchain.
- soco 5y agoYou are right, it cannot be copied, and the URI lives on the blockchain. But the resource pointed by that URI does not. So the server doing the redirection via that JSON can redirect to whatever else, because even in the JSON we only have the asset URI, and a blockchain navigator can only check whether the JSON is according to the schema. So yes, nobody can steal your NFT, but your NFT might tomorrow be instead of a Beeple, a picture of my cat. Rickrolling on a whole new level.
- deleted 5y ago[deleted]
- nybble41 5y ago