this post was submitted on 03 Aug 2023
75 points (85.0% liked)

Programming

17405 readers
98 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities [email protected]



founded 1 year ago
MODERATORS
 

Hello!

When I was creating a CTF for a conference, I've finally got to learn about how blockchain and smart contracts actually works in practice, and the whole concept is simply brilliant. A quick introduction for those unfamiliar with it would be in this summary, but just to summarize how I basically understand it, blockchain is simply a VM that runs code (smart contracts) a both the code, and result of every execution of it is calculated by a bunch of users (so, mining is basically running a VM) and appended into the blockchain based on some kind of consensus and proof of work. This means that you get a single source of truth and history of every execution of a smart contract that is decentralized and you can rely on it.

But, almost every use of blockchain or smart contracts I have seen has pretty large issues either in sustainability in the long term, or in cases where you simply need some form of an authority to prevent and punish misuse. While I'm not really that much familiar with every use of blockchain so far, I will first list what I've already thought about or seen, and the main issues that I think are a deal-breaker for choosing blockchain for that kind of tasks. It's possible that some of the issues are wrong or have already been solved, so please correct me if I'm wrong - my knowledge of blockchain isn't really that in-depth.

First and the most common use is the one you are probably most aware of - cryptocurrencies. If I ignore the biggest and most unfortunate issue of cryptocurrencies turning into an investment-only product, with hugely volatile and inflated price that is not backed by any kind of real value (sure, you can pay with BTC, but it's slow, expensive and super volatile to be useful, so the only real use is to literally sell it to others for a profit - which also basically means you are scamming someone out of their money down the line), I see the following problems with using blockchain for currencies:

  • Longevity - The ledger size is already getting massive, only after a few year. It's not sustainable, and it will eventually be really hard to keep the whole ledger at a large enough number of places to not run into problems of integrity. It's growing exponentionally, and is at around 500Gb after around 10 years.
  • Gas cost - It's getting harder and harder to mine and confirm new transactions, which increases the cost while also making less people able to mine new transactions without being at a loss. This will only get worse, and eventually lead to the 50% problem (if someone controls 50%+ of mining nodes, he can confirm fake transactions or do whatever he wants with the blockchain) being a real issue.
  • Lack of moderation - This may be one of the more controversial issues, because it goes directly against the whole idea of cryptocurrencies, but is one of the biggest problems I see that are in the way of crypto being able to be considered for wider use. We live in a world where some people are dicks that are not afraid to steal and cheat, and something like a currency simply has to be moderatable. You need to be able to punish criminals, and take back what they have stolen. If someone doesn't pay their debts and owns me money, the government should be able to just take the money if they have them. If someone uses an account for scamming and stealing, it should be possible to freeze it.

The last issue will eventually show in most of the other uses of blockchain as well, and while I have included it, I'm still not sure how I feel bout it. In an ideal world, you would not have to deal with something like this. I would also really like to have an option to do my transactions privately, without anyone being able to profile my behavior and data, but such a system would have to allow for some safeguards against missuse to be widely adoptable. (Which is an interresting off-topic question - would it be possible to create a system that is private, but also has the possibility for trusted authorities to freeze accounts and force transactions?) And the more that I think about it, the more I'm certain that I'd rather have a centralized system where you can punish criminals and scammers, than a system where lives of people are regularly ruined by someone stealing all of their savings unpunished. But it is a thin line - I only say that because I live in a country that is all-right and I can trust my government - for now. But I definitely agree that such a private unmoderated option should exist - but can't be considered for widespread use, which I've heard some people say that "crypto will replace cash in a few years". And this is why it never will, IMO. But this discussion shouldn't be about whether this is a good opinion or not - but more about "what blockchain is a good tool for".

Next one are NFTs. I will just quickly gloss over them, because they are even bigger scam than crypto is. Ever heard someone say "Someone has copied and minted my NFT?". Well, it's a shame that there isn't some kind of centralized authority that could, you know, not allow them to do that.

Another use I've heard someone praise as "the future" was lending money. I'm not sure what were they talking about, but the whole point was that you can... Escrow an amount you are borrowing, and then borrow the same amount? It didn't make any sense, so I guess I'm missing something, but then again - we have the same issues as above, while also it being just a bizare idea - why simply not use the amount you already have? The person tried to explain it to me, but it just feels gimmicky. And if you escrow a lesser amount, you then have the same problem with moderation as above - nothing can force you to return the money (unless it is already escrowed, but then, why??)

So far, every use of blockchain I have heard about would be better done in a centralized fashion, especially as far as longevity is concerned. The growing ledger size and increasing gas cost, along with the 50% problem simply makes most of these kind of uses too impractical to work on a larger scale.

But I really like the concept and idea of smart contracts, and I'm sure there has to be some kind of use that is not as "revolutionary" or large scale. I'm just having hard time coming up with any.

I have only one - voting, and maybe transparent randomization (i.e lottery). Smart contracts are an amazing way to collect votes transparently but privately, since you can be sure that no-one can cheat, if you set it up properly. It's also something that doesn't suffer from the longevity problem, because it's more of a one-shot use of blockchain, rather than something ongoing - which also justifies the price.

(tl;dr feel free to start here:) Which is what I'm interested in - does any of you have similar ideas for use of smart contracts and blockchain, that would be practical in a daily live? Be it one-shot smart contracts for a small task, such as voting or random winner selection, maybe some kind of escrow. It doesn't have to be a "society changing system", or something revolutionary. A common small code snippets or apps that would solve the trust issue inherent to a centralized task is what I'm after - but have hard time coming up with.

And just a disclaimer - I don't plan on building anything and am not fishing for the next blockchain thing, I barely even understand it. I would just like to incorporate blockchain into my programming repertoire as a tool, because the concept feels so clever, but is also misused or misunderstood due to hype, but it has to have it's uses that are overshadowed by people jumping on the blockchain bandwagon without considering whether it's really the best tool for the job.

But is has to be a good tool for some kind of problems, right? And I would like to start a discussion about what would that be, without it being affected by the hype and reputation surrounding blockchain. I feel like that would be an interesting though exercise, and I'm sure we can come up with some interesting little uses here and there, without it being gimmicky but actually the best tool for the job.

Thank you!

EDIT: And I'd like to add that I never got into the blockchain hype, and my opinion on how it's used so far is mostly negative. If a product mentions blockchain, I usually just avoid it as a gimmick. But that's why I'm genuinely interested in this discussion - I don't judge a tool about how people misuse it.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 52 points 1 year ago* (last edited 1 year ago) (5 children)

Blockchain and/or smart contracts try to solve problems that were already solved in multiple ways by adding a ton of overhead that makes them unable for large scale deployment and long term usage.

Here's what's stupid about the people who say that blockchain will revolutionize the financial sector: why add a blockchain and all the computing power to store transactions when you can take the obviously efficient route and simply store transactions on a SQL database? Before anyone screams the word "decentralization" do you really think banks will cease to exist? NO. The most likely scenario - if people keep pushing this bullshit - will be to have some kind of closed blockchain that banks use to transact money, so it essentially becomes the same thing we've now with added overhead, environmental impact and technical complexity. We have efficient system in place with safeguards, operations can be tracked, reversed etc.

Frankly it would be a better use of everyone's time, money and effort to simply fix the REAL problems in the banking industry, such as the fact that the US still doesn't have a decently working, standardized digital system to transfer money between account holders in different banks. Europe has this with SWIFT/IBAN and people can transfer money between accounts, banks and countries almost instantly by just providing the amount they want to transfer and an IBAN number (nothing else required). Now tell me, how many people in the US have bank account with IBAN numbers? Most likely only millionaires. The majority of people use a combination of poorly structured system of account and routing numbers that often fail and lead to delays. Oh btw Russia has a similar system to IBAN.

There are tons of other weaknesses in the US banking system around the way credit and debit cards work, for instance why would anyone on their right mind assume that a system where you can provide your credit cards number and CVV/CVC code over a phone to make a transfer wouln't be abused to scam people and steal money? Then, after decades of fraud, to "alleviate" the issue they decided to create a bunch of companies that offer virtual credit cards with limits. Now let this how with works in most European countries: banks will, most likely, refuse any attempt at charging a physical credit card unless its made on a physical payment terminal with the card actually physical inserted on the thing an a 4 digit PIN code typed in. If you want to buy shit over the internet simply open your bank's app or website and they'll have a function to create a single use virtual credit card for the transaction. Way more secure isn't it? :) Either way most European countries also other systems to handle those kinds of payments eg. the online stores provides you with a specific code and you then can go into any ATM or your Bank's App, insert the code and make the payment.

As you can see making the banking system efficient and having fast, secure and usable things isn't about blockchain bullshit, its usually more about common sense and creating standards that companies, such as banks, have to comply with.

[–] [email protected] 13 points 1 year ago

Great post.

One of the big things all the crypto shills constantly said was that banks are bad and crypto was the saviour because of the decentralised nature. Then they realised that it was complete shit to use without some sort of centralisation, so they made exchanges……which are just banks with less regulations……..and then those exchanges went bust and everyone lost their money and started calling for more regulation 😂

There’s no real world need for blockchain tech.

[–] [email protected] 10 points 1 year ago* (last edited 1 year ago) (3 children)

You don't need many of the features you listed to make a blockchain. Its basic form is a Merkle tree. For which there are many practical uses, some of which predate Bitcoin, and which you're probably familiar with.

Git is a blockchain. It's one of the most important tools for free and open software, which in turn powers huge parts of internet and technology.

Most of the extra stuff (proof of work etc ) were added specifically for crypto.

[–] [email protected] 9 points 1 year ago (1 children)

Many people don't consider Git to be a blockchain because it lacks more than just proof of work. No argument against merkle tree, but a blockchain is more than a merkle tree, otherwise it would just be called a merkle tree. Part of the issue is I don't think there's any real accepted definition for just a simple blockchain.

For example, you can absolutely undo a commit (it's messy, yes). This is counter to how blockchain operates. Each commit does not rewrite every previous commit.

So git is sort of a precursor to blockchain. Distributed ledger, sure. Blockchain, no.

A blockchain is extremely difficult (virtually impossible) to intentionally tamper with. Git is not. Well, relatively speaking.

[–] [email protected] 3 points 1 year ago (1 children)

You can tamper all you want with a blockchain if you hold the only copy. You just replace it with an earlier state and evolve it into a different direction. Which also applies to git.

Blockchains and git repos are only tamper resistant when they're distributed.

Blockchain is the generic idea of a distributed, tamper-resistant, independently verified ledger. Git is a practical implementation with specific goals. Merkle trees are the theoretical model. They all refer to the same concept.

[–] [email protected] 0 points 1 year ago

You can tamper all you want with git even if you aren't the only holder. You can make it to any other repos cant merge back in. If you waste a lot of time, you can make commits that will erase known work on other repos. You don't need to replace it. You can just rewind. Blockchain requires each block to contain a hash of the previous. Git doesn't really do this. It'd be extremely inefficient. Imagine every commit changes every previous commit.

Blockchains are more than merkle trees. Blockchains is a technology from 2008. Git is much older and again, this is obvious as Torvalds isn't credited with the invention of blockchain.

Git is not tamper resistant.

[–] [email protected] 7 points 1 year ago

I haven’t heard anyone ever refer to git as a blockchain. The main point of “blockchains” is to have a trustless security mechanism, which git doesn’t have. I don’t think blockchain and merkle trees are the same thing at all, even if blockchain uses merkle trees under the hood.

[–] [email protected] 3 points 1 year ago (1 children)

This right here is really the spirit of the post. Yes there's many impractical applications. Much like there are many impractical applications for RDBMSs, but the tech has such a stank on it, it's important to remember it's just a tool that can be useful despite the hype cycle.

[–] [email protected] 4 points 1 year ago (1 children)

Blockchains don't really have a "stank" on it. It's just that it's a technology in search of a problem. Not many issues have been answered with "a complicated linked list across the internet will fix this." Blockchains are incredibly specific in implementation that you really need something that needs those things. Like someone else mentioned, audit logs actually benefit from the properties of blockchains. You can't just delete a record without needing to then literally modify every single record before and after it. Blockchain offers security for transactions. It works for finance in the scope of cryptocurrency. But it's missing many features of other currencies that are provided by central authorities. So it's essentially incompatible with those other currency systems. Blockchains are great for tracking ownership of a digital thing within its own ecosystem. It sucks at tracking ownership of a thing that exists outside it's ecosystem (digital or otherwise). This is put on full display with NFTs. Within the world of NFTs it's easy to prove ownership. Outside that system, I can easily post copies of that digital item. Cryptocurrency is better in that it has no value/representation outside its own system.

So that's why blockchain is a fairly old technology (relatively speaking) with very little real-world use outside crypto and NFT.

[–] [email protected] 2 points 1 year ago

Sorry, I didn't mean to be dismissive. I wholeheartedly agree with you. What I meant was that it's a shame I, as an engineer in the year 2023, would have a hard time pitching a blockchain solution to a non-crypto problem to paying customers no matter how fitting the solution might be. I don't think that's very disputable. Now this attitude is entirely driven by the last decade of unsubstantiated crypto hype and associated bad faith actors. It has nothing to do with the technology as it is.

[–] [email protected] 6 points 1 year ago (2 children)

There is actually a system in the works called FedNow that banks here can sign up to be a part of to allow national money transfer between any two people. Probably a lot of banks aren't taking part yet since it's barely a couple weeks old, but it's promising.

[–] [email protected] 9 points 1 year ago (1 children)

Just an FYI for those that don’t know - outside of America everyone has been able to transfer money between any 2 people’s banks whenever they want without issue for decades.

[–] [email protected] 3 points 1 year ago* (last edited 1 year ago) (1 children)

Tbf, this isn't entirely true (it's as true as it would be for the US). This is more about the time required. Europe has had instant transfers for approximately a decade.

Edit: to be clear, I'm just refuting the plural of the word decade. The US is still behind by quite a bit though.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (1 children)

When we're getting technical about it being one or two decades behind something as simple as this, we’re at the point where the distinction is irrelevant.

[–] [email protected] 2 points 1 year ago (1 children)

I mean, it's not. Exaggeration is still lying. 10 years behind technologically is worlds away from 20 years behind. Especially in the government world, regardless of government. It's still bad. You don't have to lie and make it look worse. It undermines your own argument when your cited number is off by a 100%.

[–] [email protected] 1 points 1 year ago (1 children)

Australia has instant transfers for 20 years+.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (1 children)

Uh, Australia got them in 2018.

Edit: The NPP was introduced in 2018 which allowed instant transfers in Australia.

See, the other reason I'd like to point these out is that, even in the US, we have "instant transfers" but the banks are actually just covering it essentially. And I think a lot of folks are getting confused with that.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (1 children)

It doesn’t matter how they’re instant, just that they are.

If your money is in a bank, the bank is “covering” every transaction you make.

[–] [email protected] 1 points 1 year ago

Uh. Then yeah, the US had "instant" transfers for decades too. You're missing the entire point. If you don't know what you're talking about, just stop talking about it.

[–] [email protected] 6 points 1 year ago* (last edited 1 year ago) (1 children)

Yes it is, and I hope it actually fixes the issue. But I'm not sure how it works in detail and it doesn't seem to actually replace the mess that banks made but instead just add a bandage. At least is seem to use ISO 200022 message standards but as I said would it be THAT hard to simply ditch all the crap and model a baking system around what the EU/Russia does? Actually I don't get why the US can't just adopt the internationally used SWIFT system and the IBAN improvements that is used by 77 countries world wide for their national and international transfers. This system won't make the US dependent on anyone as it is mostly a bunch of technical standards and recommendations on how to transfer money between banks.

[–] [email protected] 2 points 1 year ago* (last edited 1 year ago) (1 children)

The US can and does use SWIFT for international transfers. SWIFT doesn't automatically make something instant. Nor does IBAN since that is just a code.

Standards are as you stated, just standards on defining how to record a transaction. It doesn't define a system to process these transactions. It's like a file format. You still need something to process/transfer that file. The EU (currently) relies on SEPA for instant transfers. And it requires both endpoints to use euros.

Instant transfers are not as simple as everyone thinks and most folks don't actually know what is behind them or how they work. I am far from an expert but I'm just trying to point out it is sort of esoteric stuff and most people don't even know if the transfer they're performing is even actually instant or not.

Blockchain would also make it very difficult to have disputes where one must be forced to pay another. It assumes everyone is "equal" and one can't forcefully take money from another. You can believe that's great, but garnishment and repossession of funds is a thing that all countries will need to be able to do. That's a fundamental break in how blockchain effectively works. It works against it.

Edit: I also just realized you're not pro-blockchain for finance, but my points still stand for the concept in general.

[–] [email protected] 1 points 1 year ago (1 children)

Banks in the EU are required to implement SWIFT and also follow the PSD2 directive that includes the means for "instant transactions".

My previous posts weren't about saying that because there's SWIFT/IBANs the EU has instant transactions, but about the fact that US institutions made a very fragmented mess out of money transactions and the quickest way to get out of it is to adopt the SWIFT/IBAN standards that everyone else use. Why have different messaging standards for national and international transfers? SWIFT/IBAN standards are proven and used by a large number of countries and fixed a ton of messes.

After they clear the account identification scheme mess, they can, then, easily roll out a US version of SEPA. The first step is always standardization and simplification and luckily for the US most of the world has been testing, using and improving the standards for a while.

I agree and share your concerns about blockchain for finance and I know the systems we've were designed to avoid those same concerns and get the job done.

[–] [email protected] 1 points 1 year ago (2 children)

Again, US banks do. But SWIFT and IBAN are used almost exclusively for international transactions, EU included. It's their whole purpose. SEPA exists alongside SWIFT and does not rely on SWIFT. It's why is so much more restrictive and can only do euro to euro.

The US banks are standardized. That's not the problem. It's really control and cost. Like right now, FedNow still costs 4 cents per transaction which is expensive. ACH costs about half that. But it's also controlled by NACHA instead of the government.

In any case, I'm about as far down this rabbit hole as I'd like to go. We at least agree on blockchains... "usefulness".

[–] [email protected] 1 points 1 year ago

The US banks are standardized

Are they? Routing and account numbers, transactions that fail often and people complaining all the time. Is that enough standardization, most likely not.

[–] [email protected] 1 points 1 year ago (1 children)

US banks are standardized. That’s not the problem

https://www.tiktok.com/@mel.octavia/video/7264977051441040672

You were saying... :P

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (1 children)

I am not on TikTok and it won't play the whole video, so this does nothing. Its not a useful rebuttal. I'm fine if you want to cite your argument, but this is useless. Who goes around using TikTok as damn evidence. "Hey, look at this random stranger say something."

Edit: transfers don't generally fail unless there's a lack of funds. And that isn't the definition of standard anyway. Standards can be unreliable. And what is wrong with routing and account? Put together it contains much of the same info as an IBAN.

[–] [email protected] 1 points 1 year ago (1 children)

And what is wrong with routing and account? Put together it contains much of the same info as an IBAN.

Yes I know, but what about the rest of the standards? What about having something like SEPA and others? It kinda looks like banks break deals between each other and implement whatever they want and how they want with little accountability.

[–] [email protected] 1 points 1 year ago

No. They go through the ACH which is operated by NACHA. They don't just have private deals between the two of them (I mean, I guess they can). I mean, you keep saying what about the rest of the standards and then naming a specific system. A system isn't a standard. It's possible you're just using the wrong terminology and I'm completely misunderstanding you. But all banks in the US operate the same basic way. According to standards that are required to operate in the ACH plus to meet federal regulations. FDIC insured isn't just all willy nily.

[–] [email protected] 5 points 1 year ago

I live in Europe and have some direct experience with how the banking system works (I was pentesting the system that shares transaction data between banks over their closed intranet), and I had no idea that US doesn't have something like that. That's interesting, that sounds like a lot of inconveniences.

[–] [email protected] 1 points 1 year ago

A closed blockchain doesn't need or use expensive hashing nor is expensive hashing required for a public blockchain.

Every rant about how blockchains are bad SQL databases is ignorant of the actual, novel uses of a decentralized blockchain and whatever system it uses as proof to find the current block's validator.

Blockchains allow for the synchronization of many actors up to the agreement of the majority of actors. They eliminate a class of corruption. Which is at least those where the authority over a log of data uses that authority to alter the log outside the will of the majority of those who use said log.

You can make all the arguments you want about the usefulness of that ability, you can make arguments that the cost of adding that ability being too high vs the reward.

You vague argued that its complicated and it wont end banks so its pointless. Neither of which is much of an argument. Also, the blockchain replaces central banks, not member banks.

Is that worth doing? Likely not at the current state of the technology.