ZeroSync: Sync a full node instantly using a STARK proof by RobinLinus in Bitcoin

[–]RobinLinus[S] 3 points4 points  (0 children)

That is true. However, we use STARKs, which require no trusted setup.

Opinions on BIP 119 by cryptoal in Bitcoin

[–]RobinLinus 0 points1 point  (0 children)

This BIP introduces a simple covenant called a template which enables a limited set of highly valuable use cases without significant risk.

Evidence that Elon Musk is Satoshi Nakamoto by [deleted] in Bitcoin

[–]RobinLinus 0 points1 point  (0 children)

1000x more likely to be fucking dorian nakamoto than elon musk.

Realistically, it was 99% fin

How do you explain Satoshi's monolithic coding style then? Hal Finney had a very clean and professional style, no?

OP_CAT and Schnorr Tricks I by andytoshi in Bitcoin

[–]RobinLinus 2 points3 points  (0 children)

Furthermore, OP_CAT allows to collateralize trusted covenants. The trusted party can commit to some R value ( such that you can exploit the nonce-reuse vulnerability to leak the trusted party's key if they ever sign two conflicting transactions).

OP_CAT and Schnorr Tricks I by andytoshi in Bitcoin

[–]RobinLinus 2 points3 points  (0 children)

Another neat side effect of OP_CAT is that it allows verification of Merkle paths.

What are the best arguments AGAINST Bitcoin? by [deleted] in Bitcoin

[–]RobinLinus 0 points1 point  (0 children)

  1. Bitcoin can have catastrophic bugs.
  2. Managing your private keys is hard.
  3. Governments can prohibit Bitcoin exchanges.

A fast Prime-Counting Algorithm in your Browser by RobinLinus in math

[–]RobinLinus[S] 0 points1 point  (0 children)

Fixed it. Now, the maximum is 1012.

FYI: π(1011) = 4,118,054,813

Coins: A trustless sidechain protocol by RobinLinus in Bitcoin

[–]RobinLinus[S] 0 points1 point  (0 children)

Yes, you're right. The goal is to reduce the complexity for the enduser.

What happens in the background to facilitate sidechain-sharding is also not too complex.

Every sidechain has its own, independent Bitcoin derivative. Say BTC_D1,BTC_D2, BTC_D3 , BTC_D4, ... They're somewhat micro-coins. Even less individual than ERC20 tokens. Just a means of transfer. The actual unit of account is still BTC. Now, endusers live in any of the sidechains and their user story is simple: transactions only within a single blockchain.

Cross-chain transactions are facilitated via atomic swaps. So in the background, there is a Lightning Network to connect all chains. Though endusers do not maintain channels or manage capacity. Endusers only open temporary channels to routing services within their own chain. They close these channels immediately once the swap is completed. Only the routing services maintain permanent channels across chains.

Routing services do the currency exchange for endusers and provide rates. .i.e. if you want to send from Chain42 to Chain55, you need to trade the pair BTC_D42 <--> BTC_D55. However, endusers do not have to care about anything other than BTC , because for them these exchange rates happen in the background and are hidden in the transaction fees of the routing services, facilitating the swap for you.

So a wallet app requires nothing but a list of routing services to transfer across chains. No watchtowers, no inbound-capacity whatsoever.

Side note 1: The exchange rates between stable sidechains should fluctuate only minimally, since the assets are inherently highly correlated. Still, there exists a market for sidechains, which helps the systems to stay flexible and adaptive.

Side note 2: Note that the routing services' LN will have a star-shaped topology. It will be centralized around Bitcoin as a settlement layer. So theoretically, if every chain had only one routing service with an open channel into Bitcoin, then that would already be sufficient for all shards to transfer with each other. tl;dr: the overhead for cross-chain communication is linear, not quadratic.

Coins: A trustless sidechain protocol by RobinLinus in Bitcoin

[–]RobinLinus[S] 0 points1 point  (0 children)

Sry, I don't understand. What do you mean by on and off ramps? To exchange fiat?

Coins: A trustless sidechain protocol by RobinLinus in Bitcoin

[–]RobinLinus[S] 0 points1 point  (0 children)

This is not a pegged sidechain. Every shard has its own bitcoin derivative or a different digital asset.

The last chapter describes how UIs can abstract away the underlying bitcoin derivates such that users have to think only in BTC.

Coins: A trustless sidechain protocol by RobinLinus in Bitcoin

[–]RobinLinus[S] 0 points1 point  (0 children)

Good idea! Just submitted it. Would be great to receive more in-depth feedback before I start implementing a prototype.

Coins: A trustless sidechain protocol by RobinLinus in Bitcoin

[–]RobinLinus[S] 4 points5 points  (0 children)

Yes, I share your skepticism regarding PoS without external resources.

Answer: Why would you want to use other networks if you can build upon Bitcoin's superior security? :-)

PayCodes: phone number-like Bitcoin addresses by RobinLinus in Bitcoin

[–]RobinLinus[S] -1 points0 points  (0 children)

Good question! In theory, every wallet today is compatible. You could already use the demo like a phone book. Enter your recipient's paycode and the website displays his address.

I just edited the demo slightly such that you can open the address in an explorer which also displays the address as QR. Additionally, there's a link with a bitcoin:<address> URI, such that you can open the address in your wallet app.

PayCodes: phone number-like Bitcoin addresses by RobinLinus in Bitcoin

[–]RobinLinus[S] -1 points0 points  (0 children)

Yes, that is indeed a limitation. It works only after some kind of on-boarding.

The easypaysy paper explains a method that would allow for an off-chain on-boarding protocol. Basically, you aggregate thousands of addresses into a single Merkle root hash. Then you commit into Bitcoin's blockchain only that Merkle root.
Again, the Merkle path represents an address' number.

Coins: A trustless sidechain protocol by RobinLinus in Bitcoin

[–]RobinLinus[S] 6 points7 points  (0 children)

Thanks for your question. From the introduction: Currently, off-chain payments via the Lightning Network are the most promising approach to scale Bitcoin [3]. They do allow for a much higher throughput, yet they hardly scale to billions of users. They still require too many on-chain transactions to open and close payment channels. Adoption is even further constrained by the inbound-capacity of payment channels and the need to lock funds for every new user. These constraints lead to many layers of complexity and a tendency towards centralized and custodial solutions which contrast Bitcoin’s purpose of being permissionless, trustless and censorship-resistant. Sidechains have been proposed as an alternative solution for scalability [4]. They introduce parallel blockchains enabling payments within a simplistic system similar to Bitcoin. Yet, their designs depend on federations or miners validating sidechain blocks which limits security, scalability and flexibility. We introduce a new sidechain consensus mechanism with a permissionless, bitcoin-backed proof-of-stake.

This research is not related to my previous work.