Replying to Avatar Rusty Russell

I listened to the What Bitcoin Did Saylor podcast, and I really want to respond, though that may be unwise. But I want thoughtful, fearless content in my feed, so I should start making some, right?

Firstly, while analogies can provide useful guide rails for understanding, listening to people *arguing* using analogies makes you stupider. Debate the thing itself, not the words about the thing: it hurts my head to even think about doing this, so I won't.

Let's set my priors first: I assume we're talking about technically solid, well-vetted, backward compatible protocol changes: this is the minimum bar.

I don't wholesale agree with Saylor's "don't threaten anyone's investment" hard limit. This has happened multiple times in the past, from the dust limit breaking SatoshiDice, enabling Lightning threatening miner fees (real or not), and segwit breaking stealth ASICBoost. These interests can, and will, stand up for themselves and will compete against other benefits of changes.

To be explicit: I consider any protocol change which makes block space usage more efficient to be a win!

Obviously Saylor is invested in Bitcoin the asset, and can afford to do all his business onchain in any conceivable scenario. His projection of a Bitcoin world in which there are 100,000 companies and governments who use Bitcoin as the base layer is interesting:

1. This does not need "smart contracts", just signatures. By this model, Bitcoin Script was a mistake.

2. It can work if Bitcoin does not scale and is incredibly expensive to spend and hold. By this model, the consumer hardware wallet industry is a dead-end and needs to pivot to something else (nostr keys, ecash?)

3. You could do this with gold, today? Bitcoin here is simply an incremental, not fundamental, improvement. I think this is suggestive, though: that such a network would not be long-term stable, and very much subject to capture.

4. In this view, Saylor is simply a gold bug with first mover advantage, shilling his bags. That's fine, but it's important to understand people's motivations.

5. This vision does not excite me. I wouldn't have left Linux development to work on making B2B commerce more efficient. I wouldn't get up at 5:30am for spec calls, and I sure as hell wouldn't be working this cheap.

I believe we can make people's UTXOs more powerful, and thus feel a moral responsibility to do so. This gives them more control over their own money, and allows more people to share that control. I assume that more people will do good things than stupid things, because assuming the other way implies that someone should be able to stop them, and that's usually worse.

I believe the result will be a more stable, thus useful, Bitcoin network. I am aware that this will certainly benefit people with very different motivations than me (Saylor).

Thanks for reading, and sorry for the length!

Im not technical, strictly an economic user. I don’t need a solution for spending money. That exists everywhere in the western world. I need a solution for saving money without gambling.

Reply to this note

Please Login to reply.

Discussion

You don’t need it now. But you might need it in the future. And others need it now.

If the soundness of the network is compromised then the value prop of Bitcoin is destroyed. It is impossible to fully wargame the attack surface area of any change. Therefore changes should be made only in cases wheee there is a threat to the network. Everything else can be built on layers.

What changed, then? You would not have enabled lightning?

There is a change we want to make lightning simpler and more efficient as well as multi-party. It's not a complex change: in fact there are several ways we could do this. But I assure you that the reduced Script we have today does not allow " everything else... built on layers" :(

Frankly, I am not convinced that I trust anyone fucking around with the thing I use as the denominator in of value in my life. I don’t have the ability to audit proposed changes so my nodes answer is hell no unless and until I see broad consensus, compelling arguments and even then I think changes should only be made in dire situations where the existing network is under threat. Bitcoin is a sound money virus infecting aging and sick Fiat to make way for something better and new. That is SO much more important than “features”. Use Lightning, ECash, Fedimint, or make something new, but don’t fuck with the base layer.

When the dollar was founded, there was no Venmo, no SWIFT, no FedWire or MasterCard. As the value of Bitcoin expands (which happens because it’s is the one predictable thing in a world of bullshit) new users will emerge and demand new features and entrepreneurs will rise to the task.

I guess what I’m saying is I don’t know who you are but I don’t trust that you’re smart enough and benevolent enough to trust with the job that you’re asking for. So no thank you, from my node to yours.

That's the whole point, though? You said "use lightning" and I said "we needed a protocol change to do that".

To get here, we needed changes. To get to our full potential we need to continue. Obviously it depends on the specifics of the proposal, but I would urge you to keep an open mind.

Lightning has never failed me. What is it that you can’t do that you want to do?

I'm delighted to hear that!

There's an old proposal called "eltoo" (or, these days, called "ln-symmetry") where there's no penalty phase if one side accidentally publishes an old state: you just fix it up instead. This does some cool things:

1. No more risky backups, where you can lose all your funds by restoring an old backup.

2. You can now have more than 2 parties sharing a channel, and build on top of that.

3. We can reduce latency for payments in some cases, making it twice as fast.

4. It's generally simpler: you only need to remember the last state, as you can fixup and old ones

As to not knowing who I am, that's totally fair! I would much rather people evaluate a proposal on its merits, not the reputation of the proposer. As a non-expert, it can be impossible to distinguish someone who is good at their job, from someone who is good at self-promotion :(

The problem with penalty-less channels is they destroy the strong disincentive to cheat. There needs to be a penalty for LN to stay secure. It doesn't need to be 100% of the channel capacity, just an amount high enough to deter abuse.

No, because the defense is now *also* much easier. Watchtowers are trivial, since they just spend the latest tx.

I was originally of the same mind as you, but this seems to be our direction anyway, since people want zero reserve for UX reasons...

If I'm going to close the channel anyway why wouldn't I use whichever state is the most favorable for me? Sure with watchtowers the probability of success is low but I don't see any downside trying. If failure meant losing $5 worth of btc it'd be at least some reason not to.

Note that I do think that losing whole channel on backup failure is excessive punishment. No punishment is also a problem.

It's always cheaper to mutual close so it's only when you're going to close unilaterally. And at least this peer is very unlikely to open a channel with you again if you're a pratt. It's hard to quantify reputational damage though, to be fair.

Ostracizing may be harsher punishment than taking sats though.

I don't like the line of reasoning that just because a change was made in the past that allowed for something good (lightning) that that somehow justifies the risk of change today. Bitcoin is growing exponentially, and so is all that is at stake. This could be one of the greatest things for humanity's future.

Here here!