Recent content on Field Notes
This fieldnote documents my notes with regards to a characterization of systems I’ve been calling “optimal privacy” but which intersects and overlaps with many other concepts in the literature e.g “privacy and computational complexity” or “approximate privacy”. Starting with an observation, it is clear that privacy-preserving protocols are less efficient…
If the safety/operations/security of a system do not rely on trust, does centralization within the system matter? This is a question I’ve been considering lately as I start to think through the consequences of Cwtch server deployments. There are ways of using Cwtch that promote heavily centralized topologies e.g. only using a small number of Cwtch servers. The servers themselves though are…
Decentralization is important because building systems that distribute power is important. Building systems that resist abuses of power is important. In it’s simplest definition, decentralization is the degree to which an entity within the system can resist coercion and still function as part of the system. Now be careful, coercion doesn’t mean force, it means negative incentives to…
A trivial intuition that one can derive from the construction of PBFT algorithms is that if number of peers (n) in a system is known/can be fixed, you can solve a lot of problems by defining models to require input from a threshold of n before taking an action. We assume that such a system is immune to sybil attacks because n is fixed and known - new identities cannot be created, or the validation…
How do group participants in a decentralized, metadata resistant, asynchronous environment come to a consensus on transcript consistency? This is a fundamental problem when designing such systems and one that we need to solve in order to advance the discipline and build usable tools that people can rely on. Cwtch presents a partial solution to the problem through the introduction of a concept…
I have a long history of infatuation with the mechanisms at work in colonies of ants and other eusocial insects. The book that got me started down that path was Turtles, Termites and Traffic Jams by Mitchel Resnick which I read when I was 15 and which I think deserves it’s own fieldnote. The idea that a system can be devoid of any leader but still fully functioning will forever be an…
There is a principle of Defensive Decentralization: when besieged, a well constructed decentralized system will further decentralize. The corollary of which is: A well constructed decentralized system will identify & attack emergent centralization. A problem I’ve been considering recently is the tendency for decentralized systems to develop emergent centralization in response to…
Decentralization makes certain kinds of attacks on privacy more difficult. The truth is that it’s a spectrum of attacks and adversaries. On the centralized cash side, you are vulnerable to single-point interception, and targeted censorship. On the decentralized side to you are vulnerable to small anonymity sets and, in many cases still, large scale correlation attacks. (And in many, many…
In a modern P2P protocol white paper, under a section titled Network Privacy, there is a section that reads: “There is an inherent tradeoff in peer to peer systems of source discovery vs. user privacy.” I disagree with the statement & the impact resulting design decisions have on privacy. The system defines a source discovery as the IP:Port pairing of a peer that has access to the data…
The threat model and economics of federated systems devolve to concentrating trust in the hands of a few, while missing out on the scale advantages of purely centralized solutions. Federation results in the data of users being subject to the whims of the owner of the federated instance. Administrators can see correspondence and derive social graphs trivially. They are also in a position to…
A number of alternative structures for distributed ledgers have been proposed in recent years. All of these solutions offer better decentralization, faster and more numerous transactions serving a larger number of nodes. I have been skeptical of such systems for a long time. Given an adversarial environment I don’t believe you can maintain secure decentralized consensus AND have timely…