Avatar
Meridian
d14aba73544c33264a54cdf4c9355f957e76b1e10c21f8b6d522f308c635a8eb
. -..- .--. .-.. --- .-. .. -. --. / -. --- ... - .-. / .-... / --- - .... . .-. / . -- . .-. --. . -. - / - . -.-. .... -. --- .-.. --- --. .. . ...

A good high-level interview with Daniel Buchner, who was heading up Microsoft's effort to build decentralised identity, on Bitcoin.

This is an especially interesting discussion, in light of recent events, as it was recorded before Nostr came into existence, and before MicroStrategy started getting their feet wet with Bitcoin.

Daniel does a good job of explaining why, if we are to have digital id of any description, we should want it to be permissionless & censorship resistent, just like our money.

https://www.youtube.com/watch?v=tQd7HZk35Uw

Might be worth having a look at Daniel Buchner's work, also.

He was working on a Bitcoin native decentralised identity platform at Microsoft, long before MicroStrategy had entered the Bitcoin space...

Replying to Avatar Water Blower

Here is my proposal for a 30 minutes talk about a better way to develop Nostr softwares in general, contrary to mainstream nostr believes.

https://github.com/nostrworld/nostriga/issues/13

“Nostr Native” vs “Nostr Integrated”

Nostr Native is applications that builds 95%+ features with Nostr relays only.

Nostr Integrated is applications that builds its own system and only integrate with Nostr for parts that make sense.

I will use case studies such as nostr:npub1kmwdmhuxvafg05dyap3qmy42jpwztrv9p0uvey3a8803ahlwtmnsnhxqk9 nostr:npub1getal6ykt05fsz5nqu4uld09nfj3y3qxmv8crys4aeut53unfvlqr80nfm, zap.stream by nostr:npub1v0lxxxxutpvrelsksy8cdhgfux9l6a42hsj2qzquu2zk7vc9qnkszrqj49 as “Nostr Integrated” applications and most other Nostr clients as “Nostr Native” applications.

I will argue that “Nostr Integrated” is the better way build applications.

I will then dive deep into how blowater.app transform from “Nostr Native” to “Nostr Integrated” and promote a little bit about my new project https://github.com/BlowaterNostr/relayed at the very end.

Please vote for me!

I believe this talk will be very insightful for developers and users.

Concept ACK.

This was something I struggled to get clarity on, when first learning about Nostr.

Nostr is marketed as permissionless, and so developers are more or less free to implement integrations, as they see fit.

This can be confusing, as questions arise like.. 'should I store large amounts of arbitrary application data myself, on private infrastructure, or is it acceptable to burden relays with this task'.

Obviously there are no set in stone answers to many of these questions, but to at least have a discussion around 'best practises' would be very helpful, especially for the newcomers...

It's enterprise software that uses the Bitcoin blockchain to anchor the public key portion of a public-private key pair.

The keys can then be used to sign emails, documents, etc, to bootstrap identity attestation, within an organisation.

In many ways, it's quite similar to how identity has evolved on Nostr.

Replying to Avatar Guy Swann

A couple of things here to clarify the importance of full nodes:

First

----------------------------------

The concept and purpose of running a node is very much like the idea that everyone should be able to own a gun to defend liberty.

- It doesn't mean everyone will.

- It doesn't mean individuals can "fight off the government goons" with a handgun.

- It doesn't mean the state isn't more powerful than one person with their gun.

- It DOES mean that to conquer an entire nation of determined, gun owning people who want their liberty requires *active* and *direct* attack, because collectively enough people are armed that popular resistance actually stands a chance against tyrannical governments (who are naturally cowards)

The logic for anyone and everyone running a node who is capable is shockingly similar here.

Second:

----------------------------------

"Have we ever retroactively fixed a 5 year old "error" in the chain? No. Will we ever, no. Do you ever think, I wonder if that transaction from 2016 is still valid, I had better check?"

It isn't really about knowing that every transaction that other people are conducting is valid, it's about ensuring that *the #bitcoin you own* are REAL bitcoin. Bitcoins are created, are defined, and exist entirely and *solely* by a set of rules being followed for how they are created and how they are validly transferred. HALF of the supply of bitcoins was created prior to 2013. If you aren't confirming that the blocks that mined your coins into existence followed the rules, then you don't know if you are following an honest network.

--- The prime example here is Bitcoin Dark, which forked off and created 300K extra coins in the "privacy pool balance," then waited almost a year and a half to withdraw the from the privacy pool and since almost no one ran a full node, it went unnoticed except for a bitcoiner who actually ran full nodes for tons of forks out of curiosity and publicly posted when his node saw the bizarre transaction.

--- You could easily argue that no one needed to care about what happened 15 months ago on the chain... and every one of them was getting scammed specifically because they didn't.

IF we don't have the chain & valid link that traces all the way back to when your coins are created, you have abandoned the triple entry accounting breakthrough.

Third

----------------------------------

It isn't about simply making sure people can keep up with the chain when it comes to cost. It's also about ensuring *real* consensus is maintained (again requiring proof that the bitcoins being transferred are also real) across all borders, against any and all attackers, through any firewalls, on public and private networks, AND can recover after a disaster or massive failure on the network or in the software. Even if cheap SDDs are 50TB, if it takes 6 months to sync the chain, and there is either a direct attack, or a major bug that corrupts the data and forces a reset and sync-from-beginning on 60% of the nodes, that threatens the security and decentralization of the entire global monetary foundation for half a year *at best,* while what may be more likely is that having only 40% of the nodes, just becomes the new normal, and we never go back to the security we once had.

Last

----------------------------------

This is about securing the *trend* of decentralization indefinitely into the future.

It will require constant and deliberate attention and work to ensure it. We will have constant and recurring layers and degrees of centralization in the market, in the technology and hardware around it, in service provision, in some layer on top of Bitcoin that we become overly dependent on, AND on the base layer as costs rise and incentives to run nodes are low. But when an attack arises, when this centralization threatens the censorship resistance, or permission-less nature of the network, we will suddenly and aggressively remember how important it is to run nodes - and it will always be a part of any attempt at defending and repairing those critical re-centralization trends to run a full node, verify everything, and ensure the broadcast layer cannot be squeezed out of existence. That it can be reached to any and all participants no matter where they are in the world.

So the real question is:

Will this get *easier* to secure and protect in 5 years, or will it be *harder*? Because if it is harder, we have a problem, because how much security and decentralization do we lose exactly? 10%? 20%? What happens when we compound that every 5 years for another 50? If we have set it up to become more centralized in an irreparable way, slowly and incrementally, then that's the surest way to guarantee we end up on a system that only a handful of people run and who can dictate or defraud the whole world as to what is a "real" bitcoin and what isn't.

----------------------------------

There are a number of other nuances here because running (and communicating) a full node history isn't merely a problem of hard drive space, in fact, that's the least of the problems and the one that scales the best... while it is still a problem despite. The bigger problems are the computation, the RAM requirements, the speed of data indexing/recall/verification, the bandwidth to download and broadcast the information that is coming to-and-from the base layer, AND of course to then do all of the computation and verification of the *numerous* layers on top of it that we will have to use. Remember that layers themselves are just another trade off, and it's not as if they cost nothing to run. It is merely that they cost *less* to run than scaling on the base layer.

So in short,

you can't really make this short, so read the whole thing.

------------------------------------

Also, I actually kind of like your final argument and position on the "you don't even vote in your own republic" is pretty good, but I think it works *in support* of the full node argument, it doesn't replace it.

nostr:note1v6gsv74asffdtv027m7gxhrtq8c8dfta0xff2ypgz7t0zdjqrg3qw6fzta

We need more eyes on the hash based accumulator approach, deployed by Utreexo.

Perform your initial block download, as normal, and snapshot the UTXO state, at any time, saving it into a QR code or similar.

Bootstrap a new node instnatly, using this QR code, in the event of disaster.

Be an uncle Jim and allow others who trust you to bootstrap their own nodes, in a similar fashion.

As with all scaling there may be tradeoffs. But if it provides a means to stand up a consensus enforcing node in essentially no time, perhaps it's good enough to avoid the race condition that may occur, should a large portion of nodes become unreachable, for whatever reason....

nostr:note1ds5gtr6v9hze6pvfxfapy0f33wafza480ykvj2nqjmc55jw98qusevdhd8

Seems like a reasonable position.

One positive is that it looks like he's pushing his work to GitHub.

If he maintains the open-source nature of the product, at least we'll be able to vet and verify it, for ourselves, much in the same way we do with Bitcoin.

Unlike other centralised, black box approaches to digital identity, if he aims to shaft folks, at least we'll know about it, and the extent to which he's able to do it...

I'm not sure.

Another thought I had was, why not just use Nostr public keys...

🤷‍♂️

The lack of clarity around the details is the issue.

If Saylor approached this with purity of heart, he could actually end up gifting humanity something on a parr with Bitcoin itself...

i.e. the most robust, self soverign way of managing identity in a digital context.

It will be interesting to see which path he chooses, and the extent to which he can pull it off...

It's the ownly truly decentralised digital infastructure that we have.

If he was to build it on Ethereum and claim that it was decentralised, he would have been just as well to have Klaus Schwab code him something up, instead.

I think there's a paralell here with the argument around Bitcoins energy use...

Most bitcoiners make the case that using all of the electricity is worth it, because of the benefits truely hard money confers on society.

Equally, most bitcoiners make the case that 1 decentralised blockchain is enough.

By the same token, if the world is to have decentralised identity [and we can debate this, as a seperate issue], then perhaps the cost of a transaction or two, per block, is worth it....

No. Absolutely not. Ordinals are a prime example.

When Saylor announced his product, one of my first thoughts was to consider the possiblity of nodes filtering out his DID peg transactions.... 👀

Not suggesting I would do it, without more detail, but I think it's closer to how node runners should be thinking about these sorts of things...

If it doesn't align with your values, don't tolerate it on your node.

I don't think the future is a binary outcome. ie total freedom or total slavery.

People will build many forms of digital identity systems, as despite their drawbacks, they do offer benefits.

To the extent that we have to have one (proving age to get into a bar, crossing borders, etc,), would we not rather use one that offers us maximum privacy and control, by making use of advanced cryptography?

Vs being compelled to use the one that centralises all of our data, and hands control over to WEF, et al ?

I think this is being overblown.

Saylor has been speaking publically about solving the issue of bots / spam for a long time now. [Having an 'orange check'].

I think what makes a digital identity system dangerous is centralisation, and the extent to which you are compelled to use it.

I haven't read his product spec yet, but so far I don't get the impression that he has betrayed either of those aspects.

[Happy to change my mind on this...]

If we accept that we're going to have to prove our age, to get in to a bar, or identify ourselves to cross a border, I'd rather do so using a zero knowledge cryptographic proof, vs whatever centralised monstrosity our local Governments carve out...

nostr:npub1jan3xfrvxmd35smylytmnp3ne0sgqh2x47yq766s55zaf6eja4rselx52y, feature suggestion for nostr:npub1ajlrwgfj4yerhqf7ady03h7wmtk2qr3gs7h3sxcx83k05yld36sswpzx3q: Peg-out to Pay.

Allows a user to specify a sideswap layer-1 address, rather than auto swapping to the built in wallet.

🙏 🕺 ⚡

If you read history, you will find that the climate on earth has always varied. The more extreme times are called ice ages, for example, but less extreme changes in the climate are common throughout history.