create account

RE: Blockchain Update: Platform Independent State Files by sneak

View this thread on: hive.blogpeakd.comecency.com

Viewing a response to: @smooth/pytohr

· @sneak ·
$0.06
> Just throwing these files around without accountability is dangerous as it leaves open the potential of everyone being too cheap or lazy to do their own verification

I think perhaps the threat model here is overblown.  Releasing them with simple CS hashes is fine, IMO.
👍  
properties (23)
authorsneak
permlinkpywo6h
categorysteem
json_metadata{"app":"steemit/0.1"}
created2019-10-05 14:27:54
last_update2019-10-05 14:27:54
depth2
children1
last_payout2019-10-12 14:27:54
cashout_time1969-12-31 23:59:59
total_payout_value0.029 HBD
curator_payout_value0.029 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length272
author_reputation28,694,344,106,492
root_title"Blockchain Update: Platform Independent State Files"
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id91,254,374
net_rshares306,730,003,712
author_curate_reward""
vote details (1)
@smooth · (edited)
We've already had (and possibly still have), I believe a majority or close to it of top witnesses (and certainly at least the 1/3 required break BFT) run by a single person because of outsourcing (witness as a service). Still others rely on a packaged software (and chain data?) distribution from this same person without doing any real validation of the contents of it beyond checksum to guard against download failure. It is hard to overstate the hazards that come from people taking the easy path when given the choice.

I would not at all rule out that a majority of witnesses could (mostly with good intentions) grab an erroneous or malicious state file, copy from each other (checksums check out!) and start running consensus on top of it without ever verifying it. At that point, the erroneous or malicious state mutation either becomes consensus or will need to be rolled back, both being very damaging to the credibility of the chain. This only needs to  happen once, ever, to have potentially catastrophic consequences. A example of a situation where I could particularly see this happening is under pressure to recover quickly from a chain halt.
properties (22)
authorsmooth
permlinkpyx4uy
categorysteem
json_metadata{"app":"steemit/0.1"}
created2019-10-05 20:28:12
last_update2019-10-05 20:31:03
depth3
children0
last_payout2019-10-12 20:28:12
cashout_time1969-12-31 23:59:59
total_payout_value0.000 HBD
curator_payout_value0.000 HBD
pending_payout_value0.000 HBD
promoted0.000 HBD
body_length1,156
author_reputation260,342,945,372,716
root_title"Blockchain Update: Platform Independent State Files"
beneficiaries[]
max_accepted_payout1,000,000.000 HBD
percent_hbd10,000
post_id91,263,216
net_rshares0