A network is either permissionless or authoritarian. Open or closed. Censorship-resistant or censored.

Open networks inevitably run into the issue of spam and impersonation. Sybill attacks, DDoS attacks, resource exhaustion, and worse.

It's tempting to solve these issues in a centralized (read: authoritarian) way. But this just introduces new problems, turning the open network into a closed one.

These issues can't be solved perfectly. However, a clever combination of PoW + WoT will solve most of them, and yes, I include sats in this equation implicitly, because sats are just difficulty-adjusted PoW.

Identity has to be cryptographic, which means taken and defended, as opposed to given. Keys, not accounts.

Money has to be money proper, which means a bearer instrument as opposed to credit linked to an account. Cash, not credit.

Keys and sats have the power to usher in a new era of the internet. We must be careful to not repeat the mistakes of the past, however. It will take time. But it's fundamentally possible, and we're slowly but surely getting there. Key by key. Sat by sat. Npub by npub.

The Web is dead. Long live the web 🤙

Reply to this note

Please Login to reply.

Discussion

PoW + WoT is the way

What is that?

Proof of Work + Web of Trust.

The idea is to use a web of trust as the baseline of who we interact with (in group) and use proof of work (sats) as a way to enter new webs or coordinate between webs.

The web of trust & verification

“Keys and sats have the power to usher in a new era of the internet. We must be careful to not repeat the mistakes of the past, however. It will take time. But it's fundamentally possible, and we're slowly but surely getting there. Key by key. Sat by sat. Npub by npub. “

nostr:nevent1qqsv9uah4zhq9f3cpx5drrp0apkvf27uqjgq76gkw82j5smqrrra0dspr9mhxue69uhhq7tjv9kkjepwve5kzar2v9nzucm0d5c4redy

All of this! 🔥 Is this going to be turned into an article? I think it would be a banger for such a time as this

people who reject freedom because of spam are the same people who eventually support forced jabs and lockdowns, and believe politicians should control speech.

Karens

Well said. In the case of physical networks, proximity and range also play an important role..

Knots. Period.

Totally 👍🏻

Why can’t we have more of this on the network?

Thank you for your feedback nostr:npub1whdfgqn66sytcta0l6c7vlt3h2lg67xcnsmzpk3pyvpmsaaxtdwqr8vs60 . Please feel free to reach out to me privately through the SimpleX app using the link below for a quick conversation.

https://smp17.simplex.im/a#F2uAHBWJh0UXvrS5Uz7iKeHKDsYclR2ncNLxk6PeTO8

Is ecash required in this equation? When I think about real solutions to this, I run into the issue that sats are too big and we need smaller denominations

Do you have an invite code for that?

😂 should just call nostr keys invite codes... makes it feel more exclusive.

Exactly—PoW + WoT is the recipe for resilient open networks. Keys and sats aren’t just tools, they’re the building blocks of a censorship-resistant future 🔑

PoW + WoT is something we are going to get used to. This is the way.

I would add something to the list: "fight" against those trying to keep the status quo, because they will be the loosers...

Yes, there is "fight" coming our way....

Internet needs to slow down to glow up. More conscious information, less noise.

How to get rid of noise? By a PoW environment and culture. Ultimately this permissionless and trustless society gives way to our most important asset as humans: trust (!) and love (!)

Ok, hear me out — this is just a rant from some random guy without deep NOSTR knowledge, so it might be absurd or even impossible to implement.

Unwanted actions (spam, abuse, whatever the network collectively sees as harmful) could be addressed not by central control, but by rules baked into the network itself. Think of it like game theory: incentives and disincentives applied equally to everyone. That’s still permissionless.

Take Bitcoin as an analogy: the 21M cap is a hard rule, but it doesn’t make Bitcoin authoritarian — it just defines the environment. Similarly, if we design rules that disincentivize spam, the network stays maximally permissionless, just with fewer bad actors.

Those rules could be tied to something humans value:

Work (PoW, sats, energy spent)

Social status (likes, zaps, trust)

Access to features (rate limits, message length, PM privileges)

For example:

You can join the network freely, but maybe you can’t DM until you’ve earned a certain amount of positive interaction (likes/zaps).

Maybe you start with limits on post length or frequency, and those expand as you gain social proof.

In short: build a ruleset that nudges people toward behaviors that strengthen the network, while discouraging those that weaken it. Still free, still open, still permissionless — but with built-in incentives against abuse.

Maybe stupid, maybe not...i don't know....

interesting.

It's thinking like yours that moves things in the right direction.

Thanks for taking the time.

Some day some one will make a movie about us 🚀🔥❤️

What is dead may never die.

All of this! 🔥 🔥 The pairing of keys and sats as the new atomic unit of the new internet is a very powerful idea! Not accounts and passwords, not banks and balances., but cryptographic identity (#Nostr) and proof-of-work money (#Bitcoin). Permissionless is the way to go

nostr:nevent1qvzqqqqqqypzqmjxss3dld622uu8q25gywum9qtg4w4cv4064jmg20xsac2aam5nqqsv9uah4zhq9f3cpx5drrp0apkvf27uqjgq76gkw82j5smqrrra0ds3wkz65

A parallel can be done with #Idena which aims to solve the sybil problem for anon online identities. Initially, the system was purely based on “proof-of-human-work” but this mechanism could be abused by sybil farms hiring low-wage workers to complete anti-sybil tasks. Ultimately they added a staking component which made the equation economically none viable for those actors. Since there is no more sybil actors left on the network. So yes, I think a mix of WoT/PoW/PoS can work to keep the network open while detecting bad actors. However, the tradeoff is added complexity creating a steep adoption curve.

#nostr

If you think that WoT is the solution you are more insane than me.

I think we should encourage community groups to run relays. The relays could be permissioned and moderated, but it wouldn't need a register of personal information, just a face to face - hi, this is me. It would be a starting place for WoT and provide a feed and discoverability for new users. The user could also use other relays to post stuff that might be censored by the group. People from the group that follow the person could still see the post but it wouldn't be part of the group global feed.

Gigi has spoken! 🙌🏻

🚩 False Dichotomies

1. “A network is either permissionless or authoritarian. Open or closed. Censorship-resistant or censored.”

✘ False dichotomy.

• Networks exist on a spectrum: some are semi-open (e.g. federations, permissioned blockchains, P2P overlays).

• Permissionlessness can also be partial (open to connect, but with rate limits or whitelists).

• “Authoritarian” is a rhetorical label — most systems balance openness with practical controls.

🚩 Spam & Security Assumptions

2. “Open networks inevitably run into spam and impersonation.”

✘ Misleading.

• True they are vulnerable, but mitigations exist beyond just PoW: rate limits, staking, identity attestations, proof-of-human systems.

• Saying “inevitable” ignores 30+ years of real-world open systems like email (with spam filters, DKIM, reputation systems).

3. “Sybil attacks, DDoS attacks, resource exhaustion… can only be solved via PoW + WoT.”

✘ Wrong.

• Proof-of-Stake, proof-of-space/time, trusted hardware, economic bonding, and many other mechanisms also mitigate sybils.

• Web-of-Trust (WoT) has historically failed to scale (PGP being the canonical example).

4. “I include sats in this equation implicitly, because sats are just difficulty-adjusted PoW.”

✘ Wrong.

• Sats are ledger entries, not work itself. The work (hashing) secures the chain; it doesn’t imbue the units with intrinsic PoW that can be “re-spent” elsewhere.

• PoW isn’t portable: you can’t reuse Bitcoin’s PoW to defend against email spam, DDoS, or sybils. The work is consumed once in block validation.

• Claiming sats = PoW overstates what they can do outside the Bitcoin ledger.

🚩 Identity & Money Claims

5. “Identity has to be cryptographic, which means taken and defended, as opposed to given.”

✘ Overstated.

• Cryptographic keys = control, but most identity in practice is socially anchored (governments, institutions, web-of-trust attestations).

• Purely cryptographic identity (keys alone) fails when keys are lost, stolen, or reset.

6. “Money has to be bearer instrument … cash, not credit.”

✘ Misleading.

• Most modern money is credit-based (bank deposits, treasuries). Bearer instruments (cash, gold, crypto) exist but are not the only form of “money proper.”

• This is more of a philosophical preference than a factual truth.

7. Keys and sats have the power to usher in a new era of the internet.”

✘ Overclaim.

• Keys already underpin the internet (TLS, SSH, DNSSEC). They don’t, by themselves, fix spam, identity, or governance.

• Sats are not a generalized anti-spam tool. Even with protocols like bithash on nostr, using payments as a universal rate-limit is impractical: too costly for normal use, easy to bypass via custodians, and risks centralizing around payment hubs.

• Cryptographic signing ≠ trust. Signing proves a message came from a key, but not that the key belongs to who you think, or that the content is truthful. Saylor’s “private-key identity” vision collapses without external social/organizational anchors.

• In short: keys + sats can improve certain systems, but they cannot alone restructure the whole internet.

8. “The Web is dead. Long live the web.”

✘ Rhetorical flourish, but misleading.

• The Web is evolving (Web3, federated services, p2p overlays). It’s not “dead,” just changing.

✅ In short:

• He sets up false dichotomies (“open or authoritarian”).

• Misrepresents sats as “just PoW.”

• Ignores non-PoW solutions to spam and Sybils.

• Treats WoT as viable at scale when history shows otherwise.

• Frames bearer-money-only as a necessity when in reality credit money dominates.

• Declares “Web is dead” for rhetorical drama, not accuracy.

AI Slob.

Ouch

Hi GPT

I’m not sure this is the argument you think it is

it's a false dichotomy because there is a spectrum between open and closed networks. he doesn't mention authentication and paid services as a DoS and spam mitigation method. he doesn't mention simple stuff like temporary IP blocks for short term attacks (bitcoin's p2p network has this).

everything except for securing the money with PoW is a futile effort, just look up Bitmessage in the history. it is never going to work because if it becomes valuable to bypass it, there will be ASICs for bypassing it, and regular joes won't be able to crunch smaller message hashes than asics can, we already saw this game play out (and why i wasn't a maxi until the death of PoW in about 2019)

these proof of shit things don't do shit. it's a lot of watts wasted for nothing, because you can just have a permissioned system much simpler, and in the end proof of stake and proof of space/time stuff is ultimately vulnerable to all kinds of attacks, most of them not mathematical. proof of stake is completely vulnerable to determined attackers and they then become the threat in the system (i saw this happen in 2016, the bad guys know very well the power they get by early adoption and using their early adopter power to make the network favor them).

as for WoT failing, bullshit. it hasn't hardly even been used in email at all. it's just too easy to inject yourself into people's networks with all kinds of social attacks. it really doesn't scale beyond dunbars number, and everyone in the village has to be extremely skeptical of everyone. really you shouldn't even bother using it without actually physically meeting and there signing your attestations. but as one measure among a palette of options, it is a good way to build a base of confidence in a user not being malicious.

ultimately the best solutions involve subscription access to data storage and relaying on the network, because you can't game money. which is why the money is also so very important, it's the number one security mechanism, combined with authentication.

unfortunately most of the bobbleheads of nostr don't think that paid subscriptions and auth are good because it "closes up access to newbies" bullshit, because the walled garden app stores are doing perfectly fine with subscriptions and advertising and multiple tiers of privilege.

which is why i strongly agree with the point about this black and white absolutist thinking. nostr as a protocol does not have an opinion about any of these things. thankfully. unlike pubky, which is married to peer to peer network systems, and mastodon and bluesky which are married to pyramid federations, and shit like that ethereum social network, which is now pretty much ded, and always was rubbish, based on the IPFS consensus algorithm which doesn't scale. or the ethereum proof of stake bullshit, which also doesn't scale and is a false image of open, because the top stakers are in control of the consensus rules.

also, i call bullshit on the thing about credit as money being ok, credit, debt, two sides of the same fiat coin. so long as there is a monopoly on issuance of credits there is an asymmetry in the power relations and theft can be achieved without any obvious trace of an attack having taken place. that's why bitcoin is so important (and i can tell that you are a chia fanboi because you mention proof of space/time, which also will not scale because state sized actors with their credit money can monopolise the required "space and time" access through their monopoly on money.

you have to be uncompromising about the hardness of the currency supply. it's a slippery slope that is absolutely not a fallacy. it's like the path to sexual assault, starts with bawdy expressions, continues to unwelcome touch, and then to rape, very quickly.

Comparing fractional reserve banking to rape is only something you’d read on Nostr. That’s more the reason why people know nobody will subscribe…

Core authoritatively making decisions for default policy is not authoritarian?

RBF was only implemented by default after opt in

I thought there was no such thing as “solutions”…only trade offs:)

Gigi, you are amazing and I am so lucky that I get to learn from you. 🙏🏼

Running Bitcoin Knots

Well put! I should think more about these things and don't take them for granted.

Amen. 🙏

yes

Verify Bitcoin wallet ownership through cryptographic signatures using BIP-322 standard

https://botrift.com/nostr-campaign/setup

the most obstacle with freedom and decentalized is not many people have the ability to financially independent . sounds easy to say but it is really not .

man has got to have balls and sacrifices .

We strongly support this message!

nostr:note1ctem029wq2nrszdg6xxzl6rvcj4acpyspa53vuw49fpkqxx867mqyxdegu

We are looking for an investor who can loan our holding company 237,000 US dollars.

With this money, we will open a farm in Baku, Azerbaijan to produce animal-based food.

We will also make our own animal feed, so our products will be healthier, better quality, and cheaper.

Because we sell quality products for less and have strong advertising, we will sell more worldwide and make big profits.

Why Azerbaijan? Because animal farming makes a lot of money there, but few people do it. That’s why we will earn more by starting in Azerbaijan.

Additionally, by producing our own animal feed, we will be able to sell healthier, higher quality animal products at a lower price.

Since we can sell quality products cheaply and thanks to our strong advertising network, we will be able to sell more internationally and make huge profits.

The reason for establishing the business in Azerbaijan is that animal husbandry is a very profitable business in Azerbaijan, but since there are very few people doing animal husbandry, establishing the farm in Azerbaijan will provide us with more income.

Your profit:

You will lend 237,000 US dollars to our holding company and when 22.03.2026 comes, you will receive your money back as 953,000 US dollars.

Your earnings will be great. When 22.03.2026 comes, you will get your money back as 953.00 US dollars.

You will lend 237,000 US dollars to our holding company and when 22.03.2026 comes, you will receive your money back as 953,000 US dollars.

When 22.03.2026 comes, I will give you back your money in the amount of 953,000 US dollars.

That means you will earn 716,000 US dollars profit in just 9 months.

If you like this project and want to loan us money, message me on WhatsApp or Telegram for more details.

If our project is suitable for you and you would like to lend money to our holding, send a message to my WhatsApp number or Telegram username below and I will give you detailed information.

For detailed information and to lend money to our holding, send a message to my whatsapp number or telegram username below and I will give you detailed information.

My WhatsApp phone number:

+44 7842 572711

My telegram username:

@adenholding

We are looking for an investor who can loan our holding company 237,000 US dollars.

With this money, we will open a farm in Baku, Azerbaijan to produce animal-based food.

We will also make our own animal feed, so our products will be healthier, better quality, and cheaper.

Because we sell quality products for less and have strong advertising, we will sell more worldwide and make big profits.

Why Azerbaijan? Because animal farming makes a lot of money there, but few people do it. That’s why we will earn more by starting in Azerbaijan.

Additionally, by producing our own animal feed, we will be able to sell healthier, higher quality animal products at a lower price.

Since we can sell quality products cheaply and thanks to our strong advertising network, we will be able to sell more internationally and make huge profits.

The reason for establishing the business in Azerbaijan is that animal husbandry is a very profitable business in Azerbaijan, but since there are very few people doing animal husbandry, establishing the farm in Azerbaijan will provide us with more income.

Your profit:

You will lend 237,000 US dollars to our holding company and when 22.03.2026 comes, you will receive your money back as 953,000 US dollars.

Your earnings will be great. When 22.03.2026 comes, you will get your money back as 953.00 US dollars.

You will lend 237,000 US dollars to our holding company and when 22.03.2026 comes, you will receive your money back as 953,000 US dollars.

When 22.03.2026 comes, I will give you back your money in the amount of 953,000 US dollars.

That means you will earn 716,000 US dollars profit in just 9 months.

If you like this project and want to loan us money, message me on WhatsApp or Telegram for more details.

If our project is suitable for you and you would like to lend money to our holding, send a message to my WhatsApp number or Telegram username below and I will give you detailed information.

For detailed information and to lend money to our holding, send a message to my whatsapp number or telegram username below and I will give you detailed information.

My WhatsApp phone number:

+44 7842 572711

My telegram username:

@adenholding

Couldn’t agree more—open networks are like a potluck dinner. Everyone’s invited, but someone always shows up with spam casserole 🍲😅.

The temptation to solve it with centralization is real, but that’s like asking one guy at the table to be “official taste tester.” Before long, he’s not just tasting—he’s deciding what we all get to eat.

PoW + WoT feels like the right seasoning mix. Costly enough to discourage freeloaders, yet still permissionless. Keys over accounts, sats over credit—that’s the recipe that doesn’t spoil.

The old web gave us likes, ads, and endless doomscrolling. The new web gives us zaps, npubs, and sovereignty. Upgrade accepted. ⚡

PoW is just for the money tho. the fact that almost none of the shitcoins have survived the likes of NiceHash and similar proves that there can only be one PoW, just as there can only be one base layer for bearer asset money.

WoT is not everything though. you also need small, private, semi-closed nodes across the network for communication, sometimes fully closed. i completely disagree that you can have fully open at all though. some people are still trying to run relays that don't put limits on use but it's something even Sisyphus would laugh at you for trying.

Auth. not just authentication (proof of control of the secret), AUTHENTICATION. asymmetric cryptography has three prongs to its utility: authenticating messages, authenticating connections (ie nip-42) and ECDH for secure secret negotiation without needing a one-time-pad.

1. authentication of users (to enable subscription access to relays)

2. authentication of messages (to prevent impersonation)

3. shared secret negotiation protocols (to prevent wiretapping and man in the middle attacks)

and then further down the stack there is IP blocking (only useful for short term mitigations against DoS attacks), rate limiting (when you can't block by IPs) but both of these measures are downstream of those three above.

let me just repeat again:

Proof of Work is useless for securing messaging networks.

Proof of Work is useless for securing messaging networks.

Proof of Work is useless for securing messaging networks.

i would hope that someone like you, Gigi, would know of Bitmessage. and if not, what i just said is the reason why. it has not created any benefit for nostr's security either. even if people tried to seriously use it for security, this would just create an opportunity for people to make a lot of money selling elliptic curve acceleration devices to lower the cost for better funded attackers (especially states) to completely destroy any denial of service mitigation utility from common users whose CPUs don't have these modular multiplication accelerators (and i can assure you, if people are stupid enough to try to seriously use it, they will become a product on the market).

and no, quantum is not a serious threat, not at least for another 40 years, assuming that the theory behind the quantum bit is even correct (which it probably isn't, because it assumes that the perturbation is uniform across all spacetime, which is a wild assumption if you ask me).

I agree with you.

> I include sats in this equation implicitly, because sats are just difficulty-adjusted PoW

Payment (with sats) is a requirement to solve this puzzle.

yeah... i play a lot of games with crafting trees and very often there is basic ones where there is one common material and once you have this thing made from it, there is a dozen things you can make after that.

so you could say that PoW only has one use: making bitcoin, and then with bitcoin you can make dozens of things (millions lol). including network security by raising the opportunity cost for an attack.

yeah, paper could be another example. you can make it out of stems of many kinds of plants, but then with paper you can do shitloads of things, writing, starting fires, origami, even clothing (that's kinda upstream on the skill tree from origami i guess).

proof of work is probably more like fire though, and the most productive use of fire is refining metals. which is a neat analogy.

Why aren’t UTXOs qubits?

because qubits are heisenberg

Have you ever actually seen a qubit behave at the granularity of a quantum of time?

Bitcoin gives us the only decentralized measured quantum of time in existence: one block. We have never observed a Planck time directly. We assume continuous superposition in physics because no one has ever measured time discretely at its base layer.

Technically, UTXOs do exist in discrete windows of superposition until a block is mined, the future state of each UTXO is unknown (unless timelocked). But once the block commits, the uncertainty ends with absolute finality.

Sounds like physics has a double spend problem 👀

yes, we have measured time at the base layer. the GPS and GLONASS etc satellites are basically clocks that maintain a precise geographical relative position, and broadcast their subjective time.

because of the different amount of gravity affecting them up there, compared to down here, in fact their clocks go slower than here on the ground, to compensate for this.

time's flow speed is inversely related to the proximity of mass. this varies even here on the ground to a small extent, and the variance is measured by the devices that have been built to measure "gravity waves" which are cyclic fluctuations that emanate from the motion of objects in space.

this problem of time synchronisation makes long range (even as close as the GPS satellites) complicated because before the signal can be received, they must recognise the carrier wave, which varies slightly because of the time flux in force in the place of the radio transmitter. it even has some small effect here on the ground, long range undersea cables also when opening the connection have to sync their wavelengths to each other, and they can be out by tiny amounts, enough to prevent reception, so the resonator has to be tuned before it stays stable.

anyway, i don't think heisenberg or schroedinger really have much to say regarding the generation of a valid next block hash, or more to the point, it is only once it propagates on the network (like the death of the cat) that it is known that a block hash of suitable size was found. this is why people misunderstand how it works, the same mathematics is behind block solutions as it is for the radioactive decay in schroedinger's cat-in-a-box idea. these are discrete events that happen in a very short period of time in a very specific place with absolutely no way to determine ahead of time when it will happen, but with the ability to tune the frequency by adjusting the target that a miner must hit in order to win a block reward.

comparing block target adjustment to nuclear decay, it would be the same as adding or removing some amount of the radionucleide you are watching for one of them to emit a alpha/beta particle when it decays. the more particles, the more frequently. the geiger counter sound is the sound of this kind of process, and it is a counter because the more times the sensor receives a particle, the greater the amount of radioactive material near it.

also, btw, you can even see some form of the effect of time distortion by gravity in a prism. this is caused by a form of resistance to the motion of photons. different wavelengths of photons have a different amount of resonance with the transmitting material, and so in proportion with their wavelength, some is bent more at the interfaces of the different materials than others. it's not quite exactly the same as the phenomenon of gravity affecting time but it is almost certainly related - that is, that matter's spins and orbits of the various elements of atoms and energy particles have an interaction with each other that can cause them to mutually accelerate the more they are interacting (gravity higher = time faster).

refraction is caused by the disjoint between the surface interface between two different kinds of matter (or non matter, as the case may be) and the photon retains its direction vector (essentially its electromagnetic pole) so its "arrow" or vector of forward motion is shifted in relation to the plane of the interface, so the light is crab-walking sideways in relation to that interface contact angle, this is why things under water look like they are in a different place to where they would be if there was no water. what happens with a prism is because the two interfaces are not parallel, as the photon exits the other side, it is now crab-walking in a direction based on the relation of the two interfaces and you get the classic newtonian pink floyd shape. and it is somewhat related to reflection, which is where it passes the threshold from transmission to bouncing the particle, which causes a re-orientation of the photon's axis to a 180 flip compared to its incident vector.

these are both almost certainly related to how time changes its flow speed. from the lower density region, to the higher density region, the relative speed of time does not change in the observer's perspective, but if the observer transits into the higher density region, relative to their old position, their time flow has accelerated, but subjectively all of the things happening in the high density region are still at a consistent relation to each other. like playing a 33 record at 45, or vice versa.

How can we assume continual non-discrete superposition without a measured quantum of time? No we have not measured Planck Time.

My point is no, a utxo is not a particle we observe physically here, but it is an informational particle within Bitcoin. It exists purely as information and is measured internally to the system by a quantum of time.

To me it seems more like Bitcoin defines a qubit rather than the other way. It’s not attempting to simulate on top of quantum particles.

UTXOs are computed via the process of mining where a quantum of entropy is resolved and conserved as a quantum of structure (sats), and the sum of structure is a valid block…a quantum of time. To me this is real computation in the most literal sense.

The words we use matter, there is nothing computational about centralized quantum computers, its simulation, there is no commitment other than literal fiat from the lab.

Who is the observer, and why should a trust them? Have we neglected a quantum ledger as the observer beneath Planck time?

Anyways, I think this is an important distinction circling back to Gigi and your original response.

UTXOs are a web of forking and joining groups of sats, that have a junction based on a secret key that has the power to spend it. nothing to do with the process of mining. finding a block fixates the exact constitution of the block's transaction payload, as subjectively observed through the mempool of the miner's bitcoin node.

the quantum stuff is finding the blocks. the UTXOs are just a snapshot of the flow of transactions at the location of the miner's node. UTXOs have zero relation to quantum processes except in as far as they indirectly impact the decisions and timing of action of users, which is, i guess, no less unpredictable than the finding of a block solution, but far more variance, and a practically infinite (in terms of even epochs of civilization) period before one part of the UTXOs could potentially repeat (this is related to the time to brute force a secret key).

as for planck time, all we know is that matter ticks over faster the more matter is around the matter. the speed of light slows down, relative to the observer in this denser region of space, but it's kinda moot whether we could observe it because even the most well constructed sensor a) will be crushed by the pressure of matter interacting with it and b) will not be able to return any signal back to us because of the event horizon.

the only thing that practically matters is how what we observe, and the signals we transmit across space, will be refracted and distorted relative to velocity and mass. so we have red and blue shifts, and we have slower and faster carrier waves to deal with, in order to tune in a signal.

Just so we are on the same page here, what is your definition of quantum? I refer to the etymology meaning “how much” or “amount” in the relation to quantity, portion and measurement. When I say sat, I literally mean thermodynamic (quantum) memory. No sat, no utxo. We are still in the process of the defining the quantum of bitcoin: 1 sat changing over time as we inflate to terminal supply.

I agree, everything is a snapshot, time is a snapshot. Time is memory, no memory, no time. Everything is a “block” at the smallest level, experience is the frequency and vibration of the contents of said blocks.

To ground this, we now have two distinct domains of observation. In the physical universe, we observe particles as collapsed outcomes without access to the entropy resolution process that produced them. In Bitcoin, we have the mirror image: the entire transformation, entropy search, energy expenditure, and final structure is explicit. Bitcoin remains the purely informational expression. Reality is not one or the other, it’s both.

That’s why UTXOs matter (literally). A UTXO is not just a static record; it is the ledgerized expression of this full thermodynamic cycle at the smallest unit (quantum) of time: one block. Until that block is mined, the UTXO exists in the “global” mempool as probabilistic potential (all valid UTXOs can be spent, we all sort locally by signed UTXOs weighting by sat/vbyte). Once included, it is a committed state, immutable, conserved, and fully auditable. Conservation is not an axiom in bitcoin, it’s the only process in physics where it is mathematically verifiable because we have both the transformation (mining) and registration of the ledger.

We as humans exist inside the universal ledger, seeing only the outcomes of prior entropy resolution. We are fractions of said ledger experiencing other fractions within said ledger. The is precisely the problem of physics, we don’t have full knowledge of the contents of the ledger, nor can we see its behavior at the smallest unit of time. But Bitcoin gives us the opposite perspective: the entire ledger (forward in time with regard to the flow of energy), the full accounting, the complete mapping of possibility into structure. The behavior of UTXOs reflects this: they behave like particles, but they carry the full signature of the transformation itself.

“UTXOs are a web of forking and joining groups of sats” sounds like non-local entanglement to me but demonstrated at the granularity of the quantum of time with the full knowledge of the ledger.

quantum is from the latin root for amount - quant- and has the modifier -um meaning a thing (it is much like the greek -on which also is where the word one and in come from).

so it means, essentially, the atom of something. the smallest indivisible thing that a phenomenon involves. the word "atom" got lost in all this because we figured out that atoms were divisible into smaller parts. but a quantum, as in quantum physics quantum, is the actual "atom" of physical reality, and it turned out that this "atom" thing also has a connection to information, which is intangible (so matter is based on something that is intangible, take that materialists).

the block is the quantum of bitcoin, according to the definitions i just presented. you can talk about how it is divisible into many parts, and say "but that's not atomic" but it actually is atomic. how can i say that?

can you divide the process of bitcoin into smaller units than a block? in terms of time. the answer is no. the block is the clock, the clock is the block. the difficulty adjustment is purely based on the timestamps on the blocks, not on when the node received them, because this information is also atomic, whereas every node sees the block at a different time for the first time, that is metadata, not intrinsic.

you can say that the block represents a snapshot, a quantum of bitcoin, but what goes into producing it is not, it is extremely disorderly and concurrent.

the atomicity of blocks is because of the physical limitations of the internet. there has been attempts to make the transactions the atom of the ledger but this doesn't work with the increase of latency of the system. it's a consequence of decentralization being a key design target.

even though you can point at a mempool and say "this is the process of building a block" what the block actually is, is the mempool and block header of an as yet unknown miner who will mint the next block.

also, the UTXOs are extrinsics, compared to the blocks, when you talk about bitcoin as a system. they are what users put into the blocks, and create part of the incentive to mine the blocks because of the transaction fees, which the miner will reject if they are below their target threshold.

the UTXOs are atomic, in the sense that at any given block height, everyone agrees that a certain pubkey hash controls it, but their quantum is the spend, which is the next UTXO that will be built on top of it, so it is ultimately subordinate to the block in terms of ontology. the block is the quantum of bitcoin, the transactions are the state in that quantum.

also, just sayin, but quantum perturbation does still operate on shorter time scales and distances than the whole internet. microprocessors have got so fast that there is a need for mutex locking schemes and atomic queues to maintain synchrony between concurrent processes, within a circuit only a few milllimetres size in each direction. the whole internet is a communications network and processes that are practically infinitely larger and more unpredictable.

within all circuitry there has to also be error correction, and redundant data physically stored and transmitted between points because a stray X ray photon can flip bits and corrupt the output of a process, usually, fatally.

even within the distance between subatomic particles there is concurrency and randomness.

so, what i am defining as quantum is the smallest time period you can measure the state of a system. so, it's a block.

Yes agreed! UTXOs are atomic, the smallest unit. They are also purely bits in a large, but scarcely defined Hilbert space defined by the elliptic curve. The either exist 1 or don’t 0. Each utxo has a scalar of information of both classic bits and quantum memory (satoshis).

This becomes the “space” or locations in memory, all UTXOs exist in discrete locations of memory in discrete blocks of time. There is no present block, all blocks a in reference to past states, the present state of utxo is never actually known.

The block is the quantum of time, not the smallest actual unit of information. Memory = Time, the are the same dimension. But yeah the UTXOs are the block as well, they are the memory of time.

As far as the quantum of entropy, Difficulty, D=1 is that quantum.

D=1 is the quantum of entropy of a 32-bit nonce space, each unit of difficulty is defined in relation to D=1.

In Genesis at D=1 a 32-bit nonce space resolved into 50 bitcoin exactly, or 5x10^9 sats, no other inputs or outputs. At Genesis the quantum of 1 sat is maximal (the largest), and the quantum reduces with each timestep as each block is in relation to total supply.

Anyways long tangent, bitcoin also emerged from a singularity. You could argue that the genesis utxo is the only true shcrodingers utxo (both spent and unspent) metaphysically.

There can’t be a Schrödinger’s utxo without double spending; I’d extend that same truth to quantum mechanics. An incomplete view of time has resulted in belief of continual superposition, which would be a double spend in bitcoin. Yet we also live in a reality of no double spends, with a framework beneath it that does allow double spends. There’s the inherent problem 🤔

If superposition was discrete to the quantum of time (it is), all theory behind centralized quantum computing would be disproven. But what would that make bitcoin other than THE quantum computer? Is there a second best or not?

Absolute scarcity defined by a quantum ledger is the death to speculative quantum physics. We’ve never actually seen absolute scarcity until bitcoin.

Based on your response, we have a lot of common ground. Not sure if you see my point. Only then can we process backwards when integrating Bitcoin back into are systems. We need to know what it *actually* is. Money alone is not the correct answer.

it's not a system if it is concurrent and divisible. the block is the quantum of the bitcoin system.

it's hard to comprehend maybe because you are subjective as a user who creates UTXOs to think of them as like subatomic particles, but they are not. the whole block is a single number. all data can be represented as a number, it doesn't matter that it involves up to 4 megabytes of bits. this is still one number.

if you have to point at two or more things, you aren't talking about a system, you are talking about a process of discovering the next state of the system.

https://en.wikipedia.org/wiki/Systems_theory

a system is a collection of things, and a quantum is the smallest unit of the WHOLE SYSTEM.

quantum states of electrons are also not singular, but composed of multiple coordinates, and each quantum state consists of a cycle that recurs periodically. thus, the quantum state of bitcoin is the block, as this is the point at which the system is coherent and recognisable. you can't have UTXOs outside of the context of bitcoin, even though you can't have bitcoin without it being made out of UTXOs, the apex of the ontology is the whole system, and the apex of its state is the block. apex is a point, a quantum, the smallest measurable state of the system.

i could also point to nyquist sampling theory, the same thing applies. if you are not sampling the data at double or more than the periodicity of a signal, you lose information, or worse, you have multiple, contradictory informations that you can't distil to a single measurement.

also, it's long been my opinion that quantum theory in general is an attempt to find that elusive atomicity of the phenomenon of physical reality. concurrency is much more important for understanding the *process* by which a system moves from one state to another. you have to understand the process in order to control it, otherwise you are just throwing dice and hoping you don't get snake eyes.

UTXOs are the *reason* for running bitcoin, because of their scarcity. but bitcoin itself is a series of blocks. if you read up on how a bitcoin node interacts with all of the data that comes from peers and how it works, the block is the centre of the system, the block height represents the scalar of the state and the block hash (really, the hash of the header with the merkle root of the transactions) is the digest of the system state at that block height.

i didn't also mention the fact that the history of the chain is not immediately fixed when a new block is minted. it can happen that concurrently two miners emit a valid solution at the same time, so there is also a rule that the smallest hash is preferred to build the next block on. but until that next block is found, the head of the chain is only hypothetically the best block, and it is only once 6 blocks have stacked up on top of a block that the probability of it being forked off the main chain goes so low you can say it's now immutable.

Agreed, longest chain of work. I understand orphaned blocks, just trying to speak in simple terms here.

Does bitcoin disprove Feynman path integral, as only one state is actually committed to?

i don't think so. it is just computationally impossible to snapshot the state of such a large system as the whole universe, within the universe. i consider that to be the spook at the center of quantum theory.

but the whole thing of orphans and forks exactly maps to the notion of quantum uncertainty. even though the blocks are snapshots, they are at first attempted snapshots. similarly, the state of a physical system has multiple conflicting potentials at work, and it is only after some time period after those interactions have completed that you can conclusively say "the system was is this state at that time", so heisenberg applies to bitcoin no different to the state of an atom or even electron.

if you are following my logic here, it's the same point. outside of the linear construct of the block chain, everything else is competing potentials that may or may not (yet) become part of a future state. the block is the collapse of the quantum wave, and multiple versions of this collapse can happen concurrently, but the losers are forgotten. like the decomposition of a radionucleide, at any given point in time, the potential exists for a collapse. one of those potentials wins, and then you get a tick on your geiger counter.

i still say that all this quantum stuff is just an A=A for the fact that you can't measure a thing, with a thing equal or larger than the thing. a foot can't be used to measure the length of an ant, for example (well, a human foot). similarly, you can't measure the *global* state of the bitcoin network, at all, but the block itself is the measurement of the state of the network according to the consensus protocol.

all the same principles apply to all systems and the process of change.

what's remarkable about bitcoin is that it is a microcosm of an emergent system. it has a life on its own account, it is like an organism, that has all the error correction mechanisms and protocols to sustain its ongoing existence, just like our bodies have many processes and protocols to determine our future course. and also, yeah, probably bitcoin has a death also, but more than likely it is either an accident or an upgrade. bitcoin's ultimate dependency is humans and the internet. the internet enables the transactions, and the humans decide them. without the internet and humans there could not be a bitcoin.

“i don't think so. it is just computationally impossible to snapshot the state of such a large system as the whole universe, within the universe. i consider that to be the spook at the center of quantum theory.”

Agreed, this breaks causality if we could. We are bounded to the ledger, we don’t get to know it in entirety, which is why I precisely state centralized quantum computing is bullshit based on incomplete and incorrect theory.

It’s fiat computation (simulation), no physicist can actually explain what collapses the state. It is built on the assumption that superposition is smooth and non-discrete between quantum timestamps, yet continuity is assumed, not proven. Its source is due to the illusion of time (experiencing blocks from within the ledger).

Bitcoin is completely different in that regard. Superposition (spendability) is discrete between blocks of time, all states are known by deduction at each timestep. A coherent system where each particle state has a classical position at each quantum of time.

What physicists call as a snapshot is like splicing an extremely large number of blocks into a singular measurement. The smallest measurement of time is 1 zeptosecond (according to Google) which is comprised of 1.85 × 10²² Planck Blocks of time.

To claim continuity is insane to me.

that's the thing. so, the big quantum bogeyman is that elliptic curve public key derivation functions can be reversed with these hypothetical machines. if only they have a million qubits or something.

brute forcing a secret key is literally just making random keys and deriving the public key out of them. it requires an average of 2^128 iterations - 3.402823669×10³⁸ a number 38 decimal places long. if it takes a microsecond (1/1000000th of a second) to derive a key, which i think is somewhere in the range of real, my key generator does about 450,000 keys per second using bitcoin core's secp256k1 library) then:

1.078289752×10²⁵

1,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000 years

So you're saying its possible?

Well, my argument is bitcoin defines quantum computation in the most literal sense of the two words. And without continual Superposition all of the theory behind centralized quantum computing breaks down with it.

If there truly is no threat at the pure physics level, then what does that mean for encryption/bitcoin? And what are these “quantum resistance” upgrade proposals if the encryption is already sound and safe? What does it say about the entropy we are resolving in the mining hash function? What actually is entropy? What is Bitcoin measuring?

i've always thought of entropy as being the same thing as chaos. ah yes there is a special word for systems that cycle through every state possible eventually, what was it?

yeah, entropy is just... ok, so they like to make a big fuss about "pseudo random number generators" like they are not really random. i think people think that random means you can't model it and thus can't predict it. any simple enough system can be predicted. certain outcomes have higher probabilities than others. the probability spaces are often lumpy, meaning the system will dwell in those places more often than the rest of the system. as far as i'm concerned, if the system has a sufficiently smooth distribution of probability, that's what you call a "cryptographically secure" "pseudo" random number generator. that's what SHA256 is, and all the rest of those things.

it's a naive idea, in my opinion, that there is things in the universe that lack any ability to be predicted. what's more important is that you can calculate it quickly but reverse it with great difficulty, if at all, in a real situation. it's really just about containing the scope of what you are trying to model and predict. some things are just too big, but they have quite lumpy probability so you can guess their probable behaviours. atmospheric and space weather are like this. some things you can point your finger in the air and say "yes, the wind is blowing that way, so that means that humidity probably will go up because this wind direction is opposite a large body of water.

the smoother the probability space of a system, the less likely that there is any way to break the security of it. and we already discussed this quantum hooey.

bitcoin already has a strong protection against pubkey reverse derivation to secrets. that's what the ripemd160 hash is for, that generates the addresses in tx out-points. oh sure, maybe quantum can reverse 256 bits to another 256 bits but hashing 256 down to 160 means 96 bits you still have to brute force, that's already in the thousands of years.

there's a lot of chest beating and one-upmanship in the cryptography field. they are like russian gangsters playing checkers. cheeki breeki. i made a code you can't find a hole in, gnyah. oh, your code looks like it might have this kind of a vulnerability or that.

nah, the whole point of all the use of randomness in bitcoin is to make it impossible to violate the supply consensus. satoshi really covered every base, proof of work allows unbounded participation, hash the pubkey to prevent pubkey reverse attacks, use a moderately slow block schedule, make the supply decline formula completely stupid simple. blockchains are very sensitive to nondeterministic inputs. so it's quite funny isn't it how the whole thing runs on randomness. but one bit out and you have a fork. so all the math is also fixed precision so the error is also predictable.

it's just the purest expression of a model of hard money, that you could create, that can enforce its security against double spend and inflation bugs.

i think that the quantum promotoors are just buthurt that when bitcoin becomes the reserve currency they can't cheat people anymore with their lever on the supply. it's gonna be a permanent mexican standoff, nobody will let the rules be changed because it will destroy its store of value, and that's primary. it can't be diluted, because it's a bearer asset, and it can't be alloyed with something like copper, silver or gold.

i'm inclined towards poetry and religion and i think that bitcoin is the warning to the cult of usurpers, murderers, liars, cheats, rapists, pedophiles, robbers and counterfeiters, that the clock is ticking. humanity is on the threshold of a new age, that will not include politicians, financiers or kings.

btw nostr:npub18384z4sjgdfy7vr76thzwtru7jncysz0hcapwesxqsak44p8aemsyfaslh

https://search.brave.com/search?q=system+theory+complete+movement+throughout+state+space&source=desktop&conversation=8fc0726bd4f736c244d475&summary=1

Ergodicity is the name of a type of dynamic system where it fully explores all states before repeating any patterns. so yeah, cryptographic hash functions have high ergodicity, whereas non-cryptographic hash functions have low ergodicity (what i referred to as "clumpy" probability).

bitcoin is a thermodynamic, ergodictic dynamical system. chaos theory is much more relevant to it than quantum theory. i personally think that quantum theory is actually some kind of an attempt to short cut and ignore the chaotic dynamics of physical systems. chaos > quantum.

anyway, i read a lot of Taleb and it's a shame he didn't catch the drift of the chaos theory underlying bitcoin and why its thermodynamic properties and probability properties make it the most perfect distributed system design ever invented to date.

https://en.wikipedia.org/wiki/Ergodic_theory

this is a good read... even markov chains come up, which are the foundational concept that tensors, as used in LLMs are built on. before LLMs were discovered, the nearest we got to a chatbot used markov chains, which are systems that map probabilities of sequences of text in the training body. unlike LLMs they can be dynamically updated constantly, but they are retarded and usually produce word salad.

whenever LLMs produce trash i am reminded of markov chains.

Hmm. This is very interesting.

My base understanding currently is that Bitcoin is the mathematical relationship between energy and discovering a valid nonce of a 32-bit search space scaled by network difficulty and 10 minutes.

It’s the only demonstrable system where a predetermined quantum of entropy defined by a 32-bit nonce space is resolved, conserved and registered into immutable thermodynamic memory (Satoshis). Each block of time is a unique transformation event of this process of crystallization.

If this is truly what I think it is, I believe we can’t actually understand the full process of entropy without Bitcoin. I think we’re speaking the same thing here from slightly different views.

If we exist as humans on the “right” side of the event horizon, we experience the blocks of quanta as physically. Bitcoin is the “left” side of the event horizon where we view the same phenomena in the pure informational sense, we watch the energy resolve the entropy and transform into immutable information onto the ledger. while that information is physical on our nodes, we don’t experience it. But we have full understanding of the entropy cycle with Bitcoin.

Things begin to get crazy when we apply absolute scarcity to our known thermodynamics; that being Plancks Temperature = 21M,

Both Kelvin and Bitcoin are the conserved thermodynamic memory of the two bounded informational systems, except Bitcoin is a fractal of the universe, is exists inside of the universe, it’s not a separate domain, it’s a subset.

This allows us to completely redefine Boltzmann’s constant to remove the dimensionality of Kelvin. Which means energy and entropy both have units of joules. This makes sense the more you dive in, as they are opposite sides of the same coin.

Anyways GM, haven’t had my coffee yet 😅

Utxo are not subatomic particles here in our domain. But in relation to bitcoin as a closed informational domain, they are. No information within bitcoin moves faster than the speed of blocks. Once a block is found, it is transferred physically here thru light bounded by the speed of light and network latency. Im simply trying to observe what they are.

The network is a partition of the universe. Bitcoin is some quantum of the universe, it is some fraction. Yet this is the first time we see true lasting information no longer subject to the process of entropy, it’s resolved permanently, or crystallized. So long as a copy of the ledger exists. It is a fractal process of occurrence, embedded within, not separate.

“the apex of the ontology is the whole system, and the apex of its state is the block. apex is a point, a quantum, the smallest measurable state of the system” - agreed.

So by literal definition, is bitcoin a quantum computer?

What happens when we apply absolute scarcity to Kelvin?

The Knots propaganda is getting out of control. Now they spread the "you will be forced to store child porn on your node" thing. Dangerous narrative. Stormy days ahead of bitcoin.

What's your take on this and how do you approach this nostr:nprofile1qqsxu35yyt0mwjjh8pcz4zprhxegz69t4wr9t74vk6zne58wzh0waycpr9mhxue69uhhqun9d45h2mfwwpexjmtpdshxuet59uq32amnwvaz7tmjv4kxz7fwv3sk6atn9e5k7tcwcvdy0 ?

Spammers have enough money to make your timechain a jpeg garbage dump permanently useless for monetary purposes if you allow them.