I believe you missed that disallowing “Quantum Recovery” is required in order to allow a majority of coins to be recovered by their rightful owners! We can allow people to spend funds if they can prove that they were built using a seedphrase and they know the seedphrase, but this only works if vulnerable spend paths are prevented!

Reply to this note

Please Login to reply.

Discussion

Ah yes, good point. In other words, there's the issue of "sacrificing" JBOK wallets in order to preserve HD wallets.

Yea, though minor nit: HD doesn’t necessarily mean seedphrase, though I think basically the only modern wallet this applies to is Bitcoin Core.

There's also non-BIP39 phrases, such as Electrum.

Please link source… interested in impact on pre-Segwit

There is no "source" other than this conversation - it's all theoretical.

Okay so what happens to pre-segwit coins… assuming they can be signed for?

They would remain frozen until a transaction with a signature that is accompanied with an appropriate ZK proof is broadcast.

lol

Jameson I just don’t get it… I don’t understand how you can both claim Libertarian values and advocate for this…

If pre-Segwit coins are coerced into following a chain with zkp that is not backward compatibility

Now I could be potentially misinterpreting what you’re advocating here and I will willingly concede if so… but since this is a theoretical conversation there’s way for me to verify

However, my intuitive understanding of pre-segwit signing schemes is pretty hardwired and so when I run through this scenario in my mind I don’t understand you

No one can be coerced into anything. It's all voluntary. If an economic supermajority decides they no longer wish to accept transactions that could be a quantum adversary, they are free to do so.

There has never been a single instance of quantum compute without classical intervention - massively parallel classical compute is not equivalent to quantum compute

You made up a theoretical adversary to exploit people’s ignorance to push zkps to mimic other chains that scale differently… just be honest

Yes, a quantum adversary is theoretical, but it's catastrophic if it becomes practical.

ZKPs are an afterthought, I haven't even explored it deeply. If you have an alternative proposal for how to construct a proof of HD wallet ownership that doesn't require broadcasting the xpub globally and exposing it to quantum adversaries, I'm all ears.

FYI, accusing someone of having underhanded motives is not a great tactic for progressing constructive rational discourse.

There are no quantum adversaries lol what if a black hole opens up and swallows us all whole and we’re spit out into another multiverse? That’s as relevant to this conversation as what you are suggesting

I’m not assuming underhanded motives… this is public information

Are you not funded by the same people who have aligned interests as Palantir? Did those folks not initially invest in opencoin? Did those same wallets not fund the development of XRP and other coins that are considered quantum secure?

You brought up ZKPs I didn’t

There are no quantum adversaries YET, but I literally talked to some of the most likely future ones at the quantum summit this year.

You'll need to be more specific regarding your conspiratorial questions. I'm not personally funded by anyone, rather I am a funder of dozens of companies and organizations. Casa has been funded by several VC firms over the years, but they don't tell us what to do nor do my Casa duties have much relation to my Bitcoin ecosystem projects.

Yes, I’m the conspiracy theorist here 😂 alrighty go get paid off by IBM and verus coins of the past a little harder

👋

there is nothing wrong with mimicking a good enhancement that occurred on another chain. this idea that it's impossible for another chain to come up with something good before bitcoin does is a totally recent maxi derangement.

mimicking good enhancements was the original basis of bitcoin maximalism. not invented here syndrome is prideful obstructionism.

you’re not even a well trained bot … 😭

Well I don't want to accept transactions like this.

Most other people also don't.

I'd agree with your conclusion, but it's moot. A cyptographically relevant quantum computer is physically impossible.

You should present your proof of this claim to the world so that we can save countless time and resources.

Your asking me to prove a negative and you quantum believers are the ones who lack proof. You want to invest in my perpetual motion machine? Prove I can't build one. Don't trust, verify. We can talk about quantum resistance when the first shor pops. We will have plenty of time before they can make it economically scalable, if that ever happens, which it won't, because that's not how the universe works.

I'm not a quantum "believer" - it sounds to me like you admit that it can neither be proven nor disproven.

Thus claiming it's impossible is just as much bullshit as claiming it's inevitable.

The difference is that I am not advocating a drastic, risky, insecure modification to the Bitcoin network based on my opinion. I think the burden of proving it IS possible is on you. Since you agree that your position is unfalsifiable bullshit, let's do nothing for now