Search content
Sort by

Showing 13 of 13 results by kanzure
Post
Topic
Board Announcements (Altcoins)
Re: [ANN] Webcash: A new Proof-of-Work digital currency based on e-cash
by
kanzure
on 07/11/2022, 12:41:35 UTC
The following proposal was posted on discord. I am curious to see what the feedback here will be:

Quote
When webcash got started the mining schedule was largely taken from bitcoin, but accelerated. There are a couple of good reasons for doing this: get the currency out faster so that inflation factors don’t dominate, get excitement around halving events, and get people using the currency as quickly as possible with meaningful amounts of currency dolled out every 10 seconds. On all of these factors I think that the inflation schedule was, and continues to be largely a success. The fast inflation schedule certainly pushed me in the early days to work on webminer and get it out fast so that people had fair access to mining before the first halving events. About 9 months later there are around ~400 people on this discord, and I still feel there is a fair amount of excitement around this project, even though we are nearing the 1-year anniversary. I think the right choice was made.

Of course the downside of the fast subsidy schedule is that it plays out more quickly, and this has the potential to harm the continuing adoption of webcash. Exponentials decay rapidly, and already the subsidy is 6.25% what it was at the beginning of the year. I have noticed that a lot of people coming to the project for the first time are discouraged, and perhaps reasonably so. The subsidy was meant to play out over 3 years, but the exponential decay means that the vast majority of total webcash has already been issued.

This is what I suggest: starting on January 8th, 2023 (the first anniversary of the project launch), a new subsidy schedule will be started, in addition to the existing initial issuance payout, of 16625 webcash every 10 seconds, with a halving every 12 epochs (= 2 years), for 30 years. This will double the total issuance from 210 billion to 420 billion (haha!) webcash, over a long enough period of time to ensure project adoption. The hard cut-off after 30 years, at which point the reward will be about 0.5 webcash, prevents having to continue to support proof-of-work issuance mechanisms on extremely long timescales.

Compared to other possible corrective mechanisms the minting of new webcash is preferred because it has the smallest impact on existing software. The mining software gets the amount of webcash it is allowed to generate from the webcash server, which has technical freedom to adjust how this value is calculated. No other software needs to be updated other than the webcash server.

The downside is that this will essentially dilute everyone’s webcash holdings by 50%, as the money supply is doubled over the next 30 years, an unplanned-for alteration of the expectations set by the project. In my opinion it is an absolutely obvious choice to make: adoption hurdles can create conditions of dying interest which could become an existential risk to webcash, and in that circumstance any existing holder of webcash ought to prefer to have 50% of something than 100% of nothing. Still, this proposal could never get adopted if it did not have the support of a large contingent of existing webcash users.

Ultimately this is kanzure’s project, and as the owner/operator of Webcash LLC it is his decision. But I hope that people who feel strongly about this make their voices known.
Post
Topic
Board Announcements (Altcoins)
Topic OP
[ANN] Webcash: A new Proof-of-Work digital currency based on e-cash
by
kanzure
on 05/08/2022, 21:37:33 UTC
Official website:
https://webcash.org/

Join our discord:
https://discord.gg/qf95KMqkPW

Join our subreddit:
https://reddit.com/r/webcash

Twitter:
https://twitter.com/kanzure/status/1503724974942658566

Community Made:
https://webcashfaucet.org/
https://webcasa.app/
https://github.com/maaku/webminer

python wallet: https://github.com/kanzure/webcash
javascript wallet: https://github.com/kanzure/webcashjs

"I'm not normally a fan of altcoins, but this is not just any copy-paste altcoin - rather a different concept in its very early stage. Nice experiment."

What is webcash?

Webcash is a peer-to-peer (p2p) bearer cryptocurrency with a strong focus on payments, simplicity, and Proof-of-Work mining. Unlike other altcoins, webcash has a radically different architecture: there's no blockchain. Instead, webcash wallets check for double-spending by querying the webcash server. It's based on the "e-cash" concept which was originally conceived in the 1980s.

This allows for extremely fast payments with no fees. Payments are decentralized, p2p, and instant, based on users copy/pasting their webcash directly to their recipient over any communication system they already use like email, chat, etc.

Anyone can send and receive webcash because webcash is sent p2p. There's no user registration or logins. There are no "addresses". The server only talks to a single user at a time and does not "forward"/send value from one user to another. Users send webcash to each other out-of-band without talking to the webcash server. Wallets talk to the server only to protect against double-spending. The value of webcash is not pegged to any currency.

Status

Webcash was launched fully functional in January, 2022 and has been growing ever since. A fledging community has formed around webcash, creating new software to make webcash easier and delightful to use. I can't say enough positive things about the (community made) WebCasa wallet, and there's a pretty cool open-source C++ optimized miner made by another user.

WebCasa wallet is particularly useful for mobile payments. I've used it to give quick demos at conferences. When you type in an amount of webcash to spend, WebCasa shows a QR code that has a link for the new user's camera to launch into a new WebCasa wallet with the payment already in the wallet. It's a neat demo, and it's very fast.

Mining

Webcash is CPU mined. Anyone can be a miner. As webcash does not use mining for consensus, it's easier to change the mining algorithm if anything negative should happen on the network due to excessive growth. So far CPU mining has been relatively stable, but this might change in the future as interest continues to grow.

I think that user mining was a big draw for users in the beginning of cryptocurrency. There's just something about using your existing laptop or desktop computer and being able to mint coins right there without waiting on equipment to be shipped or registration delays or anything else. It feels like magic.

Miners give the server 5% of mined webcash.

History

Here are some highlights from history to give background to webcash.

David Chaum introduced the concept of electronic cash or "e-cash" in the 1980s.

Early attempts at commercialization were focused on banks and dollar pegging. Each bank would purchase the software and run their own e-cash with their own tokens. Users could spend the token at an online shop but only if that merchant was also a customer of the same bank. Naturally this was not good for adoption and the whole thing never took off.

Ultimately, credit card networks won the fight against Chaumian e-cash for online payments.

Early e-cash attempts were based on actual regulated banks and financial institutions that handled dollars to peg the e-cash. Nobody tried anything else. Nobody tried PoW mining for e-cash. In light of this, it's easy to see why Satoshi was disillusioned with the early attempts at trusted systems. In a sense, bitcoin helped disrupt the thinking around e-cash and what digital money could be. Webcash shows that p2p transactions don't have to go through a trusted server.

But it has a central server?

I should make a point here that webcash has a very different design and trust model from other cryptocurrencies.

Webcash does not rely on complex arguments of mathematics, cryptography, or decentralized consensus. Instead, the webcash system relies on some trust in the webcash server. Webcash relies on a distinction between decentralized consensus and decentralized payments, focusing on the latter rather than the former.

This is a new experiment with a very different architecture from other cryptocurrency projects. Much of the early interest in bitcoin was because for its lack of a centralized server. However, many people simply don't want to run a blockchain node (and lightning node) to personally validate consensus and all of the transaction history. Some do, others don't. In spite of bitcoin's (continuing) success, there are still hundreds of millions of users around the world that use centralized or trust-based systems every single day.

I definitely think there's room to for webcash in that kind of world.

As one user puts it, "[Webcash is] the heretofore untried happy medium between fully centralized (eg - Paypal) and fully decentralized (eg - Bitcoin). It gives up some decentralization properties to bring a gigantic gain in efficiency, simplicity, and ease of use."

Many of the risks associated with a server can be mitigated using traditional techniques that were developed for other large-scale services.

Who am I?

My name is Bryan Bishop (kanzure) and I am the creator of Webcash and Webcash LLC which runs the Webcash server. I have been a bitcoin developer on open-source projects since 2014. In a commercial capacity, I have previously worked as a bitcoin developer at highly-regulated financial institutions for LedgerX (now FTX US Derivatives, where I am on the board) and as CTO/co-founder of Avanti Bank (now Custodia Bank). Also previously worked at Blockstream.

I was fortunate to be one of the recipients of Satoshi Nakamoto's emails announcing bitcoin, but I was too young and foolish to grasp the magnitude of opportunity these emails presented. In fact, I publicly commented something rather negative on hplusroadmap IRC. I remain grateful to Eugen Leitl for notifying me of Satoshi's email on January 10th, 2009. Unfortunately I also didn't act on the February 2009 p2pfoundation emails either.

Adoption

Other cryptocurrencies require a lot of effort for integration into business systems. Webcash doesn't. I think that this will be a key component of the webcash adoption story.

Here's some feedback from developers who have integrated webcash into their projects:

* "The protocol is absurdly simple and fast. That's a draw for developers like me."

* "Thanks. Absolute breeze writing apps around Webcash btw. Especially compared to self-hosted Lightning."

* "So nice to have something that works and less intimidating than usual blockchains."

* "Your code is very accessible and clear so it was fun to build on top."

* "Watching a miner crank away on a spare laptop pushes all of my ‘this is cool’ buttons."

I think of webcash as mainly useful for simple and fast online e-commerce payments. It could find a place in online checkout forms as an alternative payment mechanism where the user just directly attaches their payment to their order.

Another interesting observation that I've been playing around with is that webcash allows for what I think is the fastest way of starting an online store today. It's basically an electrified version of the old-fashion mail order catalog. Anyone can post a comment on reddit or some blog and indicate what they have in inventory, their prices, and an email address. Users would send webcash by email to purchase their selected items.

Of course, webcash can also be used in more sophisticated online e-commerce systems as well. But we like to play around with weird ideas in the webcash community! Think different, etc.

Getting started

Got any questions or want to chat about webcash? Join our discord: https://discord.gg/qf95KMqkPW

There are a number of ways to get started:

* Get some webcash from a friend.
* Sell goods or services in exchange for webcash payments.
* Try out a faucet like webcashfaucet.org. Once you click to get webcash, it will give you a link to WebCasa to create a new wallet with the webcash.
* Mining. Follow the instructions on the website to setup webminer, and join discord to see the binaries on the pinned messages.

Terms

It's important to read and agree to the terms of service before using webcash:
https://webcash.org/terms
Post
Topic
Board Development & Technical Discussion
Merits 3 from 2 users
Re: Superspace: Scaling Bitcoin Beyond SegWit
by
kanzure
on 27/08/2018, 17:53:48 UTC
⭐ Merited by DarkStar_ (2) ,ETFbitcoin (1)
Post
Topic
Board Development & Technical Discussion
Topic OP
Bitcoin Core dev meeting notes re: Schnorr signature aggregation, MASTs, etc.
by
kanzure
on 19/06/2016, 16:55:06 UTC
As mentioned on the mailing list last month ( https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2016-May/012743.html ), there are notes and a transcript available from a few conversations between some Bitcoin Core developers.

Transcript/notes: https://bitcoincore.org/logs/2016-05-zurich-meeting-notes.html

Summary: https://bitcoincore.org/en/meetings/2016/05/20/

This transcript covers topics such as:

* segregated witness (segwit)
* error correcting codes for future address types
* encryption for the p2p network protocol
* compact block relay
* Schnorr signatures
* signature aggregation
* networking library
* encrypted transactions / committed transactions
* UTXO commitments
* merkleized abstract syntax trees (MASTs)
* mutation testing
* key derivation scheme proposal for Lightning Network
* child-pays-for-parent (CPFP)
Post
Topic
Board Development & Technical Discussion
Re: Ledger Theory Coq Development
by
kanzure
on 19/06/2016, 16:41:08 UTC
Above hyperlink is 404, an alternative link seems to be https://github.com/bitemyapp/ledgertheory
Post
Topic
Board Development & Technical Discussion
Merits 1 from 1 user
Re: Signature aggregation for improved scalablity.
by
kanzure
on 26/02/2016, 14:10:16 UTC
⭐ Merited by ABCbits (1)
Related comment from jl2012 on bip131 "coalescing transactions" appears at https://github.com/bitcoin/bips/pull/268#issuecomment-170780308

Quote from: jl2012
With Schnorr signature it is only possible to combine signature of the same public key, but also different public keys, as long as they are signing the same hash. I think it is the plan after BIP141 is deployed.

Also some other comments from the aethers...

Quote from: gmaxwell
If you have pubkey P1, I can craft P2 = P3-P1, then multisign P1+P2 using P3 all on my own;

Quote from: sipa
P1*H(P1)+P2*H(P2)

Post
Topic
Board Development & Technical Discussion
Re: Increasing the blocksize as a (generalized) softfork.
by
kanzure
on 30/12/2015, 15:01:52 UTC
generalized soft-forks:
http://lists.linuxfoundation.org/pipermail/bitcoin-dev/2015-December/012073.html

bip102 forced soft-fork:
http://lists.linuxfoundation.org/pipermail/bitcoin-dev/2015-December/012153.html

auxiliary blocks and evil soft-forks or forced soft-forks:
https://bitcointalk.org/index.php?topic=283746.0
https://bitcointalk.org/index.php?topic=874313.0

soft-fork block size increase using extension blocks:
http://lists.linuxfoundation.org/pipermail/bitcoin-dev/2015-May/008356.html

extension blocks were also discussed in this interview:
http://diyhpl.us/wiki/transcripts/bitcoin-sidechains-unchained-epicenter-adam3us-gmaxwell/
.... which includes something very similar to the idea of a soft-hard fork (something I was informed about on 2015-06-13 ..... not sure if I should mention this?)

some discussion from today re: origin of the term evil fork, evil soft-fork, forced soft-fork:
https://www.reddit.com/r/Bitcoin/comments/3yrsxt/bitcoindev_an_implementation_of_bip102_as_a/cyg2g7q

some much older discussion about extension blocks and sidechains:
http://gnusha.org/bitcoin-wizards/2015-01-01.log

some discussion about "generalized soft-forks" and extension blocks and evil soft-forks:
http://gnusha.org/bitcoin-wizards/2015-12-20.log

segwit soft-fork makes use of a similar idea:
http://diyhpl.us/wiki/transcripts/scalingbitcoin/hong-kong/segregated-witness-and-its-impact-on-scalability/

discussion about evil forks and evil soft-forks and extension blocks:
http://gnusha.org/bitcoin-wizards/2015-12-30.log

fork types:
http://lists.linuxfoundation.org/pipermail/bitcoin-dev/2015-December/012172.html

these links are also mentioned here:
https://www.reddit.com/r/Bitcoin/comments/3yrsxt/bitcoindev_an_implementation_of_bip102_as_a/cyg7mdr

and also mentioned here:
http://lists.linuxfoundation.org/pipermail/bitcoin-dev/2015-December/012173.html
Post
Topic
Board Development & Technical Discussion
Re: Segregated Witness
by
kanzure
on 19/11/2015, 20:11:01 UTC
Post
Topic
Board Development & Technical Discussion
Re: Partial validating nodes
by
kanzure
on 12/11/2015, 20:39:26 UTC
- false minting (spending non-existant output)
-- This requires UTXO commitments

- Invalid UTXO commitments

UTXO commitments are not required for proving one of those kinds of fraud, apparently:

https://botbot.me/freenode/bitcoin-core-dev/msg/54014301/

"You do them without a UTXO commitment by instead committing to the input block and offset that the input came from. Then fraud can be proven by simply showing whatever is at that location, if its not the thing its supposed to be."
Post
Topic
Board Economics
Re: Making Bitcoin economically neutral (and a better currency)
by
kanzure
on 05/10/2015, 14:20:31 UTC
You forgot to include a link to the criticism you already received; see https://github.com/bitcoin/bitcoin/issues/6756
Post
Topic
Board Development & Technical Discussion
Topic OP
Some links about zero-knowledge proofs and SNARKs
by
kanzure
on 05/10/2015, 14:07:10 UTC
Originally sent this content as an email about SNARKs to pmetzger's cryptography mailing list, included here for safekeeping and dissemination.

SNARKs in general:
https://github.com/scipr-lab/libsnark
https://github.com/Zerocash/libzerocash
https://github.com/pepper-project/tinyram
http://people.xiph.org/~greg/simple_verifyable_execution.txt
http://www.pepper-project.org/
http://diyhpl.us/~bryan/papers2/bitcoin/snarks/

Typed presentations on the topic:
http://diyhpl.us/wiki/transcripts/simons-institute/a-wishlist-for-verifiable-computation/
.. last one has good video, https://www.youtube.com/watch?v=Z4jzA6ts2j4
http://diyhpl.us/wiki/transcripts/simons-institute/snarks-and-their-practical-applications/
http://diyhpl.us/wiki/transcripts/mit-bitcoin-expo-2015/zerocash-and-zero-knowledge-succint-arguments-of-knowledge-libsnark/
http://diyhpl.us/wiki/transcripts/scalingbitcoin/snarks/

Some history of probabilistically checkable proofs (PCPs):
http://diyhpl.us/~bryan/papers2/bitcoin/snarks/pcp/pcp-history.pdf
http://diyhpl.us/wiki/transcripts/simons-institute/zero-knowledge-probabilistic-proof-systems/

Quadratic arithmetic/span programs (non-interactive zero-knowledge proofs without probabilistically checkable proofs) (GGPR):
https://eprint.iacr.org/2012/215.pdf

Recently I gave a presentation with a very high level and general overview of ways to (ab)use SNARKs for bitcoin scalability reasons:
(start at page 43) http://diyhpl.us/~bryan/irc/bitcoin/scalingbitcoin-review.pdf

Some discussion about which CPU architecture to use for a SNARKs prover, whether to use RISC-V or moxie or some other CPU design:
http://gnusha.org/bitcoin-wizards/2015-09-29.log

Still no word on SNARKs with trustless setup.
Post
Topic
Board Development & Technical Discussion
Topic OP
Multi-chain payment channel nodes
by
kanzure
on 04/09/2015, 00:01:06 UTC
Here is a brief overview of a way to use something like the lightning
network, or another multi-hop payment channel network, to handle more
transactions per second.

These ideas were mentioned yesterday in #bitcoin-wizards and my email
does not significantly elaborate on any of it (search for
"cross-chain"):
http://gnusha.org/bitcoin-wizards/2015-09-01.log
http://gnusha.org/bitcoin-wizards/2015-09-02.log

Mailing list discussion of this can be found at [6] and on the forum at [7].

Summary
=======

Payment channel network nodes could operate on multiple chains or
ledgers, especially if those ledgers are 2-way-peg compatible with
BTC. Payment network users may have a variety of different preferences
about security models or fees or any other number of system
properties, and this method can be more accomodating than only
offering mainnet UTXOs.

Terminology
===========

During the IRC monologue I was using the word "hub" and "cross-chain
hubs" to describe a payment channel network node. Rusty Russell later
brought to my attention a good argument from Joseph Poon to prefer to
call them nodes, namely that "hub" implies centralization which isn't
really necessary to implicate in these designs. So I'll stick with
"node".

Vague requirements and scenario speculation
===========================================

- bip70-like payment-channel-compatible wallet-to-wallet communication
protocol; useful for sender and receiver to negotiate how payment
should be routed over the payment channel network.

- assume existence of other ledgers with working 2-way-peg.

- lightning network[1], amiko pay[2], or some other payment channel
network with multi-hop payment routing

- (at least some) payment channel nodes which access more than one
blockchain or ledger system

- can be more than two chains or ledgers that the node opens channels
on or operate on (octoledger nodes?)

- node can eventually setup 2-way-pegs through moxiebox code embedded
in some opcode for a specification of an alternative federated ledger
(just kidding, there be dragons here)

Implication: Chain or ledger UTXO ambivalence
=============================================

The sender (receiver) doesn't need to be concerned with which chain
the receiver (sender) wishes to transact with, as long as both parties
have wallets that can communicate with each other for fee negotiation
while payment channel routing happens.

Implication: UTXO preferences informed by fee pressures
=======================================================

An earlier identified implication by others has been that transaction
fee trends may influence when payment channel users choose to settle
on the main chain, because fees may be too high to make the tradeoffs
worthwhile for the user.

Transaction fee pressure on the bitcoin mainnet chain may influence
receivers, otherwise busy negotiating their payment channel payments,
to negotiate receipt of their UTXOs on alternative chains which might
be charging lower fees. Users that wish to settle to a ledger for a
lower fee can do so without paying for main chain transaction
prioritization.

(Concerns about market exchange rate of BTC even with the presence of
2-way-pegs could be alleviated by multi-chain nodes that practice
arbitrage. However, perhaps the financial markets will not bother
assigning different values to BTC-compatible UTXOs on different
sidechains? High mainnet fees may be reflected in market price
differences, maybe....)

Minor lightning network protocol change
=======================================

Add chain parameter to onion routing protocol message. Receipt of this
message was acknowledged by Rusty Russell yesterday. However, this
change alone may be insufficient to enable this described usage. Also
while I hope that onion routing continues to be the direction there's
no guarantee of course.

Other: Centralized ledgers
==========================

Centralized ledger operators, such as companies running spot
exchanges, could run payment channel nodes, allowing their users to
deposit and withdraw funds "immediately" subject to whether the
service provider is operating anything resembling a hot wallet. A
centralized ledger operator could be considered a valid multi-chain
destination in the above-mentioned imaginary lightning-compatible
payment protocol. Payment channel network programmers should not be
burdened with a thousand different standards for this ability, and
instead there should be an attempt at general compatibility, although
trustless implementations should be preferred if available.

Luke-Jr mentions that the same (currently imaginary) payment protocol
could also provide for user-to-user transfers on the same centralized
services, skipping the payment channels entirely.

Other
=====

Here are some things that I have been meaning to look at, but haven't looked at:

- can we do probabilistic payments[3][4] over payment channels? does
it require all payments to be probabilistic payments?

- is lightning network + multi-chain compatible with terminating on a
chain like zerocash? or inside coinjoin/coinshuffle schemes? mixing
implications?

- are payment channel networks compatible with confidential
transactions[5], and what about in the multi-chain regime?

- should work if 2-way-peg between multiple assets on same chain, like
in elements alpha?

References
==========

[1] http://lightning.network/lightning-network-paper.pdf

[2] https://github.com/cornwarecjp/amiko-pay

[3] http://lists.linuxfoundation.org/pipermail/bitcoin-dev/2013-May/002564.html

[4] https://bitcointalk.org/index.php?topic=62558.0

[5] https://bitcointalk.org/index.php?topic=1085273.0

[6] http://lists.linuxfoundation.org/pipermail/bitcoin-dev/2015-September/010909.html

[7] https://bitcointalk.org/index.php?topic=1170303.0
Post
Topic
Board Beginners & Help
Topic OP
Lurker checking in
by
kanzure
on 22/12/2013, 05:35:54 UTC
Long-time lurker here. Btw, when I click "preview", it claims that I have already posted in the last ~300 seconds. But that's impossible because I have never posted.

I saw some users in the utc thread that could use my assistance. I figured I would answer some of their questions real quick, but it looks like I have to wait four hours instead (oops).

Here's some software I've written: https://github.com/kanzure

Can I delete this thread after being approved?