5 ms·

Awesome. Now to see how their integration works with regards to confirmation time. The best solution IMO is to use a risk analyzer to determine the number of ne

by hendzen 13y ago

Awesome. Now to see how their integration works with regards to confirmation time. The best solution IMO is to use a risk analyzer to determine the number of needed confirmations. 0 conf for small payments for a merchant with a low fraud rate, with increasing confirmations needed as the size of the payment grows. I would look at BitPay's checkout flow to see the state of the art here. Also hoping they implement the payment protocol (BIP70), which gives a much better user experience and improved security. Instead of copy pasting an address, a signed payment request is sent to the users Bitcoin wallet with a message stating something like "Bob's shop has requested a payment of 10USD (20mBTC) - accept?". Some particularly insidious coin stealing malware has been developed that modifies the payment address in the clipboard to be changed to an attackers address, and the whole UX around copying long Base58 encoded strings is horrible. Furthermore, the signed payment request serves as a receipt. With BIP70, the UX of bitcoin payments surpasses that of CC payments, IMO.

vijayboyapati 13y ago
+1 to BIP70. Very exciting that a payment company as capable as Stripe is entering the bitcoin space. Much better for everyone if the Stripes of the world are at the center of the bitcoin ecosystem rather than the Gox's.
kalleboo 13y ago
> The best solution IMO is to use a risk analyzer to determine the number of needed confirmations As I understand it, you can still feel pretty safe with 0 confirmations if you're monitoring the bitcoin network for double-spend attempts over the average network propagation time. If you don't see any double-spend attempts anywhere on the net by the time most of the net has seen your transaction, you're probably good. There are a lot of hidden pitfalls in bitcoin security (such as - the above isn't guaranteed, if miners change their mind to be greedy and pick the transaction with the highest fee instead of the first one, that method breaks) so I'm not sure if it's bulletproof though.
- hendzen 13y ago
  As you said, even if the original tx has propagated, a double spending tx with a higher fee will jump the line in a miner's mempool. Never assume miners are altruistic - they seek primarily to maximize their profit. Propogation is a useful heuristic, but its not a panacea.
  - gwillen 13y ago
    For most miners at the present time this is not true. The reference code does not do this, and most mining pools are running something close to the reference code. (And furthermore, most such txes will never transit the network in any case, because most nodes will refuse to relay them.)
- mriou 13y ago
  > you can still feel pretty safe with 0 confirmations if you're monitoring the > bitcoin network for double-spend attempts over the average network propagation time The above is much easier said than done. First, you're assuming you can have a good enough coverage of the network which is hard to assess. You need to do a constant topology analysis to see how well-connected you are. Second, you need to ask a chosen set of peers for all the transactions they have in their pool. And wait until they all reply. Third, you need to be pretty good at normalizing against malleability on all those transactions. After doing all of this, the scheme is still not bulletproof. The blockchain exists for a reason.
- runeks 13y ago
  > There are a lot of hidden pitfalls in bitcoin security (such as - the above isn't guaranteed, if miners change their mind to be greedy and pick the transaction with the highest fee instead of the first one, that method breaks) so I'm not sure if it's bulletproof though. Keep in mind that enabling this also opens up a counter-attack, against double spending: if User A sends 1 BTC to you with a fee of 0.0001 BTC, and you discover that, after sending this transaction to you, he sends the same 1 BTC to another address, this time with a 0.1 BTC fee, you can create a new transaction that spends the 1 BTC originally sent to you (with the 0.0001 BTC fee) which spends everything as a fee in this new transaction. This way you don't actually get the money, the miners do, but you punish double spending. And if miners are greedy - and want to include whichever transaction makes them the most money - they will want include to include yours, as this makes them a whole 1 BTC in fees. So in the end, while it may seem that miners including the highest-fee transaction increases the risk of double spending, it might actually prevent it, since merchants will also gain an effective way of punishing it.
hnrandom 13y ago
You don't need to copy and paste long Base58 encoded strings if you use this wallet: https://chrome.google.com/webstore/detail/bitbrowser-bitcoin-wallet/mjjfjonhlkajifgkcmmgadaimemcihcj https://chrome.google.com/webstore/detail/bitbrowser-bitcoin...
RoboTeddy 13y ago
Merchants that don't deliver their goods/services immediately (e.g., those that ship things) can accept transactions immediately in the UI, but wait for some number of confirmations to actually deliver.

by hendzen 13y ago

vijayboyapati 13y ago

+1 to BIP70. Very exciting that a payment company as capable as Stripe is entering the bitcoin space. Much better for everyone if the Stripes of the world are at the center of the bitcoin ecosystem rather than the Gox's.

kalleboo 13y ago

> The best solution IMO is to use a risk analyzer to determine the number of needed confirmations As I understand it, you can still feel pretty safe with 0 confirmations if you're monitoring the bitcoin network for double-spend attempts over the average network propagation time. If you don't see any double-spend attempts anywhere on the net by the time most of the net has seen your transaction, you're probably good. There are a lot of hidden pitfalls in bitcoin security (such as - the above isn't guaranteed, if miners change their mind to be greedy and pick the transaction with the highest fee instead of the first one, that method breaks) so I'm not sure if it's bulletproof though.

hendzen 13y ago
As you said, even if the original tx has propagated, a double spending tx with a higher fee will jump the line in a miner's mempool. Never assume miners are altruistic - they seek primarily to maximize their profit. Propogation is a useful heuristic, but its not a panacea.
- gwillen 13y ago
  For most miners at the present time this is not true. The reference code does not do this, and most mining pools are running something close to the reference code. (And furthermore, most such txes will never transit the network in any case, because most nodes will refuse to relay them.)
mriou 13y ago
> you can still feel pretty safe with 0 confirmations if you're monitoring the > bitcoin network for double-spend attempts over the average network propagation time The above is much easier said than done. First, you're assuming you can have a good enough coverage of the network which is hard to assess. You need to do a constant topology analysis to see how well-connected you are. Second, you need to ask a chosen set of peers for all the transactions they have in their pool. And wait until they all reply. Third, you need to be pretty good at normalizing against malleability on all those transactions. After doing all of this, the scheme is still not bulletproof. The blockchain exists for a reason.
runeks 13y ago
> There are a lot of hidden pitfalls in bitcoin security (such as - the above isn't guaranteed, if miners change their mind to be greedy and pick the transaction with the highest fee instead of the first one, that method breaks) so I'm not sure if it's bulletproof though. Keep in mind that enabling this also opens up a counter-attack, against double spending: if User A sends 1 BTC to you with a fee of 0.0001 BTC, and you discover that, after sending this transaction to you, he sends the same 1 BTC to another address, this time with a 0.1 BTC fee, you can create a new transaction that spends the 1 BTC originally sent to you (with the 0.0001 BTC fee) which spends everything as a fee in this new transaction. This way you don't actually get the money, the miners do, but you punish double spending. And if miners are greedy - and want to include whichever transaction makes them the most money - they will want include to include yours, as this makes them a whole 1 BTC in fees. So in the end, while it may seem that miners including the highest-fee transaction increases the risk of double spending, it might actually prevent it, since merchants will also gain an effective way of punishing it.

hnrandom 13y ago

You don't need to copy and paste long Base58 encoded strings if you use this wallet: https://chrome.google.com/webstore/detail/bitbrowser-bitcoin-wallet/mjjfjonhlkajifgkcmmgadaimemcihcj https://chrome.google.com/webstore/detail/bitbrowser-bitcoin...

RoboTeddy 13y ago

Merchants that don't deliver their goods/services immediately (e.g., those that ship things) can accept transactions immediately in the UI, but wait for some number of confirmations to actually deliver.