第 80 期·中文精讀

維塔利克·布特林:以太坊、加密貨幣與貨幣的未來

Vitalik Buterin: Ethereum, Cryptocurrency, and the Future of Money

以太坊創始人談區塊鏈的技術原理、去中心化的價值,以及加密貨幣對貨幣形態的衝擊。

官方音訊00:00 / --:--
中文精讀由 AI 基於原始訪談改寫,非官方翻譯,可能存在偏差或錯誤;表述以原音訊與官方文稿為準。說明

2008年10月31日,一個自稱中本聰(Satoshi Nakamoto)的人把一份九頁的白皮書發到了密碼學郵件列表上。兩年後的2010年底,他從網際網路上徹底消失,此後再沒有公開露過面。今天,他的身份仍然是技術史上最大的謎,而他留下的比特幣,是第一種沒有發行方、沒有央行、沒有實體背書的貨幣。

以太坊聯合創始人維塔利克·布特林(Vitalik Buterin)在這期訪談裡用了很剋制的說法:這個人幾乎像神話裡的半神,進來把事情做完,然後就消失了,此後誰都聯絡不上他。布特林自己當時26歲,是世界上最有資格接著往下講的人,因為他做的正是同一件事的另一半。

比特幣的第一筆交易,發生在兩個從不認識對方的人之間

比特幣歷史上的第一筆交易,發生在中本聰和哈爾·芬尼(Hal Finney)之間。芬尼是早期密碼朋克(cypherpunk)社群的核心成員,電腦科學家,密碼學家。他後來患上漸凍症,去世後遺體被低溫儲存。多年來一直有人懷疑芬尼本人就是中本聰,因為他在比特幣誕生最初那兩年異常活躍。

如果芬尼不是中本聰,那問題就更奇怪了:一個人怎麼可能和另一個人合作得那麼緊密,卻對他的基本身份一無所知?

布特林的解釋很平實。他說,他認識很多人,但只認識他們的網名。每次想到這些人,腦子裡浮現出來的就是那個網名和頭像。其中一個人的頭像是一張顏色迷幻、不太像人臉的臉,他每次想到這個人,腦子裡出現的都是那張不是臉的圖。

網際網路把身份這件事的質地換掉了。你和一個人實時對話、交換過無數想法,但你的視覺系統從沒驗證過對方長什麼樣,你的直覺也從沒確認過"這個人就是這個人"。這個漏洞,恰好是比特幣能存在的前提之一。

創始人匿名有一個很實際的好處:它讓專案看起來不屬於任何人。你消失了,或者像芬尼那樣去世了,那麼整個過程剩下的就只有那件東西本身。沒有人能翻出你16歲時寫的一篇文章,說這個人對民主有過這樣的看法,所以這個專案一定想幹什麼。(維塔利克·布特林)

專案因此變成了一箇中性的、任人解讀的存在。它不再揹負創始人其他想法的包袱。

布特林自己也承擔著"門面"的壓力。他說這是他這些年一直在推動以太坊生態去中心化的原因之一:讓更多決策發生在以太坊基金會之外,讓客戶端實現不止一個,把自己從"單點故障"的位置上撤下來。很多人批評他,他知道。

領袖也分幾種。獨裁者控制錢,管理者控制組織,還有一種是"高階祭司",手裡沒有軍隊,只有一群推特粉絲。布特林說自己現在更接近第三種。他不怎麼去命令基金會的人做事,如果某件事確實重要,他通常只是公開說出來,或者私下跟人提一句,然後很多專案就自己開始做了。

貨幣是一場帶積分的遊戲

訪談裡有個問題問得很大:貨幣到底是什麼?

布特林的回答像程式設計師:它是一場遊戲,一場有積分的遊戲。這個遊戲裡只有一種基本操作,就是你把積分減掉一個數,同時把另一個人的積分加上同一個數。這個操作讓所有參與者都覺得公平。

公平的遊戲當然不止這一種。也可以設計成我給某人積分、你也給同一個人積分,結果這個人拿到四份。但那種遊戲不方便,而貨幣這種設計簡單、好上手、能覆蓋很多功能,於是它作為一段模因在社會里存活了幾千年。

它至少承擔三件事:儲存財富,交換價值,以及給未來的付款計價,也就是記賬單位。

20世紀的貨幣史,布特林總結成一條主線:越來越多的中介化。先是各種形式的銀行越加越多,然後美元從"由黃金支撐"變成"由黃金支撐但只有某些人能兌換",再變成不由任何東西支撐。到最後是一堆自由浮動的貨幣,人們離開銀行櫃檯,賬戶電子化,然後在支付處理器那裡再開一個賬戶,而支付處理器的背後還是銀行。

"貨幣可以不由任何實物支撐",這件事本身在哲學上很耐人尋味。布特林說,21世紀真正值錢的東西大多都不由實物支撐。他舉了推特的例子:理論上,如果所有員工想走,他們可以集體辭職去做"推特2.0",產品可以做得一模一樣甚至更好。程式碼和智慧財產權歸公司,但好的程式設計師大概三個月就能把那些東西重寫一遍。

推特值錢,靠的是網路效應和協調難題。員工不會同時跳船,使用者也不會同時遷移。這種"亞穩態"存在於幾百萬人的相互博弈裡,黏性極強,哪怕你把每個人都假設成一個完全理性、完全光滑的理想球體,這種黏性在模型里根本就不會出現。

革命的數學:為什麼第一個人總是吃虧

布特林用一個課本上常見的類比來解釋這種黏性。假設一個國家裡80%的人某天早上突然認定:現行的法律和政府只是一群普通人,另一套東西才是政府,並且開始按那種方式行動。那麼新的現實就會成立。

問題出在0到80%這一段。如果你是第一個加入的,你幾乎沒有任何動力,因為你會被當成異類,代價全在你身上。等到你是第55個百分位加入的人,風險就已經很小了,因為跟著走的人足夠多。這種切換在數學上可以建模,但一個真實結論是:切換髮生的時刻往往非常混亂。

布特林承認自己對經濟學是懷疑派,心理學是他更偏愛的業餘領域。他覺得人們經常假裝自己掌握了人類行為的規律,而心理學和經濟學的各種模型,到底有多少是一廂情願,有多少真的摸到了人性的核心,很難分辨。

錢的動機也是一樣。它遠遠算不上唯一的動機,但它是最接近普適的那一個。你讓世界上幾乎任何人去做一件事,只要加上一筆錢,他答應的機率都會變高。當然,人們經常做不最大化金錢的事,但那些別的動機往往高度依賴具體的人和具體的處境。

錢和權力是交織的。有人要錢是因為錢帶來權力。很多看起來和錢無關的消費,本質上買的是社會地位。

如果你有40億美元,那麼從40億漲到60億,最大的好處之一是你不再排在50億那個人下面,而是排在他上面。(維塔利克·布特林)

他承認,把自我價值等同於錢不健康,因為財富並不能準確反映一個人對社會的貢獻。但作為當下的現實,確實有很多人就是這麼定義自己的。

那麼經濟意義上的烏托邦長什麼樣?他的答案是:所有激勵都對齊,滿足你自己的目標和讓整個世界變好之間不再有衝突。他也直說,現有的各種經濟哲學都在系統性地偏離這個烏托邦。

公地悲劇,和把平方根加起來的辦法

偏離最明顯的地方,是公共物品。

貨幣那套積分遊戲的模型,在私有物品上工作得很好:我給你一筆錢,你給我一個三明治,雙方都賺。可網際網路上大量有價值的東西執行方式完全不同。這檔播客釋出之後,你沒法精細控制誰能聽、誰不能聽。一旦人數夠多,複製就是必然的。部落格文章更難攔。科學研究是這樣,氣候變化的緩解也是這樣。

這類事情的共同結構是:成本集中,收益分散。而貨幣作為一種積分系統,不擅長鼓勵這類行為。這就是公地悲劇:一件事讓很多人受益,但沒有哪個個體願意出錢,因為他只拿到收益的一小部分,卻要承擔全部成本。

布特林參與設計的一個機制叫二次方融資(quadratic funding)。規則是這樣:一個人給另一個人捐錢,和普通貨幣一樣。但如果是很多人同時給同一個人捐錢,而且是以匿名方式、不換取具體服務的形式,那麼接受者拿到的錢會多於所有人捐款的總和。

公式是:取每個人捐贈額的平方根,全部加起來,再把這個和平方。

如果九個人各捐一塊錢,接受者拿到的是3的平方,也就是81塊,比九個人掏出來的總額高出一大截。每個人的貢獻被放大了 n 倍,n 是參與人數。布特林說這裡甚至有一個數學證明,說明這種放大恰好最優地補償了公地悲劇帶來的缺口。

這個機制在以太坊生態裡真的跑過幾輪。他寫過幾篇文章覆盤結果。獲得支援最多的是這樣一些東西:讓普通人更容易和以太坊互動的線上介面,文件,播客,以太坊協議的客戶端軟體實現,隱私工具。都是對很多人有用、但沒人願意單獨出錢養著的東西。

拜占庭將軍問題其實早就解決了,中本聰補上的是另一個洞

回到技術。要講清楚區塊鏈,得先講1982年蘭波特(Leslie Lamport)那篇論文。兩位將軍駐紮在敵城兩側,只有同時進攻才能贏。他們只能派信使,而信使可能被敵軍殺掉,也可能送的是假訊息。蘭波特證明,只有兩位將軍時,無論來回多少輪,都不存在一個能保證雙方達成一致的方案。

將軍人數增加之後,配合簽名訊息,方案就有了。你可以籤一條訊息發出去,別人轉發時第三方仍然能驗證這條訊息最初出自你手。

這裡有個常被誤解的地方:拜占庭將軍問題並不是無解的,蘭波特早就解了。真正沒解的是另一件事:所有這些方案都假定你已經有一份固定的將軍名單,而且這些將軍在某種程度上是被半信任的。他們不能是匿名的。如果將軍可以匿名,敵人一個人就能冒充99%的將軍。

所以在80年代和90年代,分散式共識的使用場景都是企業級的。你有一份確定的節點名單,知道它們在哪、由誰維護,於是可以假定其中至少三分之二是好的。飛機的飛控系統到現在還在用這類思路。

密碼朋克要的東西完全不同:一個完全去中心化的全球貨幣,不要任何權威,也不要任何資格名單。這就把地基抽掉了。你不知道參與者是誰,怎麼防止一個人偽裝成一萬個身份?

中本聰的解法,是用經濟資源來限制你能拿到多少身份。你解開一道需要消耗算力的數學題,就得到一個身份;解五道,就得到五個身份。這就是工作量證明。

這個技巧本身不新。1994年辛西婭·德沃克(Cynthia Dwork)和莫尼·納奧爾(Moni Naor)就提出過,最初是用來反垃圾郵件的:發郵件必須附上一小段計算量,發給朋友很便宜,發給十億人貴到離譜。

中本聰做的事情,是把這個反垃圾郵件的小技巧,改造成了匿名世界裡分配身份的方法。用真金白銀的成本,替代"我知道你是誰"這種社會信任。這就是布特林在 Def Con 那場演講裡說的"中本聰到底發明了什麼"的答案,他稱之為密碼經濟學。

區塊鏈,最長鏈,和23.2%

區塊鏈可以這樣理解:一大堆電腦被連在一起,對外假裝成一臺單獨的電腦,並且在這臺電腦的一個相當大的部分以任意方式壞掉(關機、作惡、亂髮訊息)的時候,它仍然能正常工作。

密碼朋克要在這臺虛擬電腦上跑的,只有一個程式:一個貨幣系統。它處理一連串交易,每一筆交易檢查傳送方餘額夠不夠、數字簽名對不對,透過了就把幣從一個賬戶扣掉、加到另一個賬戶上。

之所以叫"區塊鏈",是因為這些系統用的資料結構是這樣的:網路裡的節點週期性地釋出區塊,每個區塊是一批交易,外加一個指向前一個區塊的雜湊指標。區塊一個個接上去,就成了一條鏈。

容錯是怎麼實現的?假設有兩個節點幾乎同時各出一個塊,於是鏈上出現了一個分叉。這有時候是巧合,有時候是攻擊者故意在舊塊上重建,試圖把已經發生的事情抹掉。比特幣的規則很簡單:節點永遠跟隨最長的那條鏈。如果攻擊者想回滾的區塊已經埋在鏈裡很深了,所有人都會無視他的分叉。如果只差一個塊,那就看下一個塊接在哪邊,接在哪邊哪邊就是新的頭部,另一邊被忘掉,一切照常繼續。

那麼要作惡需要多少算力?答案取決於你假設的模型和具體的攻擊型別,區間是23.2% 到 50%。算力佔比超過23.2%,可做的事情就很多了;超過50%,基本可以為所欲為。

歷史上要拿到這個量級的算力極其困難。從零開始湊齊的經濟成本,按布特林的說法,是"幾十億美元"這個量級。他說的"算力"指的是專用硬體,也就是 ASIC。

比特幣用的演算法是 SHA-256,一個雜湊函式。題目就是找一個數,讓它的雜湊值落在某個閾值以下。由於雜湊的輸出看起來是隨機的,你只能一個個試。ASIC 就是專門為反覆計算這個雜湊而設計的電路,一個盒子裡疊上幾百萬甚至幾十億個雜湊計算單元,然後24小時不停地跑。

量子計算會不會掀桌子

布特林把量子演算法分成兩族。

第一族是 Shor 演算法。它能徹底瓦解某幾類數學問題的難度,最出名的是大數分解:哪怕數字極大,它也能很快找出質因數。它同樣能破解橢圓曲線密碼,能破解任何有限群上的離散對數。也就是說,現在絕大部分好用的密碼學,它都能破。

好訊息是,Shor 演算法能破的每一種主要用途,都已經有抗量子的替代方案,只是現在還不用,因為效率通常低五到十倍。整個加密行業在等這一天,也準備好了到時候換過去。

第二族是 Grover 演算法,一般人更容易聽懂:它解決搜尋問題。如果經典計算機要試 N 次才能找到一個滿足條件的數,量子計算機只要試根號 N 次。

Grover 理論上可以用來挖礦。有兩種可能。一種是有人先造出能跑 Grover 的量子計算機,於是他的挖礦速度遠超所有人,行業再經歷一次當年 ASIC 出現時的洗牌,最後收斂到新平衡。但請注意,這個加速是平方級,不是指數級。震撼,但不改規則。

另一種可能是量子計算機的開銷太大。維持量子態本身就極其複雜,而最近大家越來越清楚,讓量子計算機真正工作還需要量子糾錯,一個邏輯位元要靠一千個物理位元撐著。如果執行開銷高於 Grover 帶來的加速,那麼工作量證明就繼續照常運轉。

以太坊是怎麼被寫出來的

2011年,布特林進入比特幣社群,先給一個叫《比特幣週刊》的網站寫稿,後來又給《比特幣雜誌》寫。高中和大學之間他休學了一年,然後在那一年的年底退學,全職做比特幣相關的事。

他花了大約六個月滿世界跑:新罕布什爾、西班牙、其他歐洲城市、以色列,最後到舊金山,一路見各種在做比特幣專案的人。

在以色列,他碰到幾個很聰明的團隊在做"比特幣2.0"。一個是彩色幣(Colored Coins),思路是別隻把比特幣當錢用,還拿它發行其他資產。另一個協議叫萬事達幣(Mastercoin),除了發行資產,還支援金融合約、域名註冊等等,什麼都能塞進去。

布特林很快意識到,萬事達幣可以被大幅通用化。他用的比喻是瑞士軍刀:25種交易型別對應25種應用。但其中好幾類其實可以合併。比如三種不同的金融合約,可以換成一種通用的金融合約,你只要指定一個數學公式,說明在什麼情況下每一方拿到多少錢。

金融合約是什麼?簡單說,是雙方(或一方)先押上保證金,然後根據某些條件決定各自拿到多少資產,條件可以是價格,可以是雙方的行為。合約是金融系統裡最核心的互動單元。期權、差價合約,都是這一族。它們的關鍵問題在於,你必須相信合約會被執行。

布特林把通用化的想法提給那個團隊。對方的回覆大意是:想法很好,但看起來太複雜,短期內排不進路線圖。他的反應是:他們沒意識到這件事有多革命。那我自己做。

他先給這個程式語言起了個名字,叫"終極指令碼"。又迭代了幾輪之後,以太坊的雛形出現了:一個區塊鏈,核心單元叫合約,是能持有資產、有自己的內部儲存、由一段程式碼控制的賬戶。你往合約裡發以太幣,之後這些幣去哪裡,唯一能決定的就是那段程式碼本身。

這套正規化就是"把資產發給計算機程式"。協議的執行寫在程式碼裡,程式碼成了合約的一部分,於是有了"智慧合約"這個詞。他原本以為這是個自己隨便做幾個月、發出來、然後回去上大學的專案。結果白皮書一發,一大堆人湧過來說要幫忙,數量遠超預期,他意識到這件事比自己想的要大得多,於是開始了一段長得多的開發苦役。

三個月的計劃,做了二十個月

布特林把軟體工程第一定律講得很直白:別人給你的時間表,把單位換成再大一號的單位,再加一。他們自己就栽在這上面。原本說三個月,最後花了二十個月。

但他說的更大的挑戰不在技術上,在人身上。

他自稱是一個在學校裡從沒被惡意對待過的極客,所以進入加密圈時,他預設所有人都會一樣利他和友善。問題出在他挑聯合創始人的演算法上。用他自己的話說,那是電腦科學家口中的貪心演算法:最先表示願意幫忙的前50個人,就成了聯合創始人。

隨著專案變大,問題開始冒出來。有人想做非營利,有人想做營利;有人彼此完全無法共事;有人想方設法給自己撈好處。大約六個月後爆發了第一次治理危機,領導層被重新洗牌。九個月後又來一次,然後還有第三次。

大約經過四輪洗牌,我們才湊出一個看起來還比較穩定、比較愉快的結構。(維塔利克·布特林)

被問到是不是有辦法最佳化這個環節,布特林說他喜歡去中心化的原因之一正在這裡:權力會吸引有強烈自我的人,而很小比例的一批人就能毀掉很多東西。他也說,研究團隊裡確實找到了很多非常好的人,他們純粹對技術本身感興趣,事情進展得相當順。

權益證明:把燒電換成押幣

以太坊從第一天起就說要做的一件事,是從工作量證明切換到權益證明(proof of stake)。

原理是:你鎖進去一百個幣,系統把它當作一張"虛擬選票",隨機地分配給你出塊的權利。別人鎖了兩百個幣,他的選票就是你的兩倍,出塊頻率也是兩倍。它想做的事和工作量證明類似,區別在於,決定你參與程度的指標從算力換成了你願意押進去的幣。

這立刻引出那個常見的批評:那不就是越有錢的人越有話語權嗎?布特林的回應是,工作量證明其實更是這樣,而且更糟:你還要真的去買機器、燒電、砍樹。要作惡,仍然需要拿到系統裡鎖定的絕大部分幣。

轉向權益證明的一個明確動機是能耗。當時最新的數字是比特幣的耗電量已經相當於一個奧地利,以太坊大概只比它小半個數量級。

以太坊2.0是攢了很久的一批大升級,其中最兩件大事,一件是權益證明,另一件是分片(sharding)。

分片解決的是擴充套件性問題。現在網路裡每個參與者都要親自下載並驗證每一筆交易,分片的意思是,每個參與者只下載和驗證一小部分交易,誰負責哪部分隨機分配。因為分配是隨機的,想汙染任何一個分片,仍然需要控制整個網路中很大一部分,安全性得以保留。

技術難度上,分片比權益證明更高。權益證明改的是共識層,分片還得改網路層。在網路層,現在所有節點都是廣播式的:有人發一條訊息,全網每個人都能聽到。分片之後必須切成許多子網,節點還要能在子網之間快速切換,子網之間要能互通。這套架構在加密貨幣領域還沒人真正做過。

以太坊2.0分成幾個階段。階段零先建一條獨立的權益證明鏈,也就是信標鏈,一開始和現有的工作量證明鏈分開跑,給它時間自己成長、自己改進。階段一加入分片,但只分片資料儲存,不分片計算。再往後是合併,把現有以太坊1.0上的賬戶和智慧合約整體搬進新系統,老鏈被忘掉,原來活在上面的東西繼續在新系統裡活著。

當時階段零已經接近實現,剩下的是大量安全審計和測試。布特林的感覺是,大致相當於當年以太坊主網上線前四個月的狀態。但他強調這只是直覺。

共識演算法叫 Casper FFG。它把設計上的兩個流派縫在了一起。一派能容忍50%的故障,但依賴網路同步性,前提是所有節點能在幾秒內互相收到訊息。另一派只容忍33%的故障,但在網路不同步的情況下也安全,一旦某個東西被最終確定,哪怕下一秒網路徹底崩壞,也無法回滾。

Casper FFG 讓兩者互補:網路同步時,鏈按最長鏈往前推;網路失去同步時,最近幾個塊可能被替換,但已經被最終確定的部分不可回滾。論文的作者是他自己和維吉爾·格里菲斯(Virgil Griffith),掛在 arXiv 上。

把想法做成五到十行的小塊

訪談裡有一個插入的話題:為什麼加密專案都愛公開論文。布特林的回答很直接,因為加密的全部意義就是讓人不需要信任運營方就能相信系統能工作。如果底層機制是閉源的,那整套邏輯就死了。這個品類的根本屬性逼著你開放。

開放還有額外好處。這幾年加密領域冒出了大量臨時性的學術協作。他們有一個論壇叫 ethresear.ch,上面釋出的東西介於正式論文和隨手一寫之間:可以寫數學,但長度往往短得多。布特林的觀察是,絕大多數新想法其實是很小的碎塊,五到十行就能講清楚,根本不需要論文那種格式,不需要十頁的填充,也不需要引言和結論。直接把想法貼出來,別人在下面評論,這就夠了。

可組合性:貓、龍,和那個 X 乘以 Y 等於 K

被問到區塊鏈世界裡最漂亮的想法時,布特林給了兩個。

一個是貨幣可以從一個資料庫裡憑空長出來,只要相信它的人足夠多。

另一個是可組合性。你在以太坊上建一個應用,別人可以建一個和它對話的應用,而不需要你的許可,甚至不需要和你說話。

最有趣的例子是一段真實發生過的歷史。以太坊上有個遊戲叫 CryptoKitties,玩法是繁殖數字貓。有另一個人做了個遊戲叫 Crypto Dragons,玩法是你養一條龍,然後喂以太坊上的貓給它吃。整個遊戲就是一堆以太坊合約,它去呼叫由另一個合約定義的代幣,兩個團隊之間根本不需要聯絡。

這種任意可組合性讓人可以各自幹活。布特林說,這套東西會長到貓和龍之外,長成整個軟體生態。過去兩年裡,去中心化金融(DeFi)領域發生的大量有意思的事情,就是這麼冒出來的。

他舉了兩類東西。一類是穩定幣,代幣的價值錨定在一美元,但背後由加密貨幣支撐。另一類是去中心化交易所。

這裡有個布特林特別喜歡的構造,叫 Uniswap。它是一個智慧合約,持有兩種代幣的餘額,維持一個不變式:A 的餘額乘以 B 的餘額,等於一個常數。這條曲線就是 X 乘以 Y 等於 K。

你交易之前處在曲線上的某一點,交易之後落在曲線上的另一點。你投入的 Δx 和你拿到的 Δy,就是這次交易的量。當前這一點上曲線的斜率,就是價格。

整個交易所就是這麼回事。沒有訂單簿,沒有做市商報價,參與者可以很少,機制簡單到可以幾句話說清,任何人都能參與,而它提供的價值非常大。

穩定幣 Dai 的機制也值得一提。它由一個智慧合約發行,合約裡押著一堆以太幣,人們把以太幣存進去換出 Dai。願意存的人是想對自己的以太加槓桿,想要 Dai 的人是想避開波動,這個合約把兩類需求配對在了一起,讓其中一方拿到一個可以按一美元匯率換回以太的資產。它還內建了不少穩定機制。

加密貨幣會不會成為主流貨幣

布特林的判斷相當剋制。他認為法幣會繼續存在,會繼續保持強勢,並且在未來幾十年裡自己完成數字化。這裡說的法幣,就是美元、歐元這類由政府支撐的貨幣。

他同時認為加密貨幣會扮演一個重要角色:確保人們永遠有一個備選。如果法幣開始崩,比如委內瑞拉那種高通脹環境;如果一個國家因為某些操作被切斷了國際金融體系;或者出現大規模的貿易中斷,甚至更糟的情況,那麼加密貨幣因為其全球中立性,永遠在那兒,你可以繼續用它。

被追問"難道不可能成為主要貨幣嗎",他給出了一個更硬的理由,不只是"現在還早"。

對貨幣的需求本身是波動的,衰退、繁榮、技術變化都會影響它。如果一種貨幣的供給是固定的,那麼需求的波動只能全部體現在價格上,貨幣的波動就變成了用這種貨幣計價的所有東西的價格波動。如果供給可以調整,需求上升時供給跟著擴大,供給就能吸收一部分波動,價格的波動就小得多。

比特幣的供給是固定的。以太坊稍微靈活一點,但真正需要的是能對"這種貨幣值多少錢"做出反應的供給彈性。這是他眼中加密貨幣成為主要儲值形式的最大障礙。

政府和普京,還有三千種幣

談到政府,布特林的看法不走極端。他提醒一件事:政府顯然不完全是敵人。如果政府當年就允許谷歌、Facebook、推特隨便發行中心化的數字貨幣,那今天人們看到的會是一堆科技巨頭髮的幣。去中心化貨幣仍然會吸引一部分人,但肯定比現在少得多。從這個角度看,監管在某種意義上是給去中心化貨幣騰出了生存空間。

政府也確實做過好事:打擊欺詐專案,打擊營銷最離譜的那些專案。

而且政府自己就是區塊鏈的潛在使用者,遠不止監管這一個角色:身份記錄、財產登記、本國貨幣的安全發行,都是可以用上的地方。讓人遺憾的是政府在技術採用上往往落後幾年,自動駕駛領域也是類似情況,能幫他們追上來是件好事。

訪談裡聊到普京。布特林出生在科洛姆納,一個莫斯科以南大約150公里的城市,在莫斯科長大。他見到普京的時間大約只有一分鐘,印象是照片裡看著比真人高。他也見到了幾位政府部長,其中有人對用區塊鏈做政府的反腐敗用例有興趣。但一次對話很難分辨哪些是真的感興趣,哪些只是黃金手錶式的客氣。

主持人 Lex 提到,聽奧巴馬談人工智慧的時候,能聽出來哪怕他只是讀了一頁維基百科,他確實認真想過這項技術意味著什麼。布特林說,這取決於你問誰。普京是不是也這樣想過區塊鏈,他沒答案,因為他只談了一分鐘。

當時全世界有三千種加密貨幣在活躍交易。布特林認為多樣性是好事,但三千種太多了。合適的數量應該大於一,可能大於二,甚至大於五,但肯定不是三千,也不是40個高質量平臺在做同一件事。

他描述了這條光譜的兩端:一端是某個人錯誤地以為十二小時就能造出一個加密貨幣,完全不考慮社群維護;另一端是真正的騙子。中間是認真做事但只做了很小的一個東西的人,以及做出真正成功專案的人。他說這種實驗是健康的。

加密和AI,面對的是同一類問題

訪談最後繞到了人工智慧。布特林說他想過這個問題,包括控制問題和AI可能帶來的威脅。他覺得兩個領域有共同的挑戰。

共同點在於:兩者都是試圖用一個簡單系統去指揮一個更復雜的系統。

在超級智慧的場景裡,簡單系統是人類,複雜系統是人類釋放到宇宙裡的那個東西。在區塊鏈的場景裡,簡單系統是一段靜態的、完全開源的演算法程式碼,複雜系統是所有可能選擇參與這個網路的人類行為者。兩邊的策略問題結構是一樣的:一段寫死的規則,怎麼約束一群它無法完全預測的參與者。

關於死亡,布特林說確實想過。如果給他永生的選項,他要先看細則。如果是在空無一物的宇宙裡飄上一千萬億年,那不算永生;如果是有意義、有朋友、有值得探索的挑戰、有真正有意思的事情可做,那當然要。

具體能做什麼

這期訪談資訊密度很高,但落到行動上其實很清晰。給想認真理解這個領域的人,有幾件可以馬上著手的事。

  • 先讀歷史,不要先讀白皮書。比特幣史看 Nathaniel Popper 的《Digital Gold》,以太坊史看 Matthew Leising 的《Out of the Ether》。先搞清楚人和事是怎麼發生的,技術細節才有地方掛。
  • 技術入門讀 Andreas Antonopoulos 和 Gavin Wood 合寫的《Mastering Ethereum》。Gavin Wood 是以太坊最早的實現者之一,書裡的工程細節比二手解讀靠得住。
  • 想跟研究前沿,直接去看 ethresear.ch 和 arXiv。Casper FFG 的論文在 arXiv 上,作者是維塔利克·布特林和 Virgil Griffith,值得完整讀一遍。
  • 建一個人的關注名單,然後嚴格篩選。布特林給的判斷標準很簡單:如果一個人顯得在自我推銷,直接取關。學術密碼學可以從斯坦福區塊鏈研究中心和 Dan Boneh 這條線開始,零知識證明方向可以看 Zooko Wilcox 這類人。
  • 讀布特林那篇《Quadratic Payments: A Primer》。二次方融資是這幾個極少數在真實世界裡跑過、並且有數學證明支撐的新機制之一,理解它對判斷其他公共物品融資方案很有用。
  • 看任何區塊鏈專案時,問那個問題:用區塊鏈比用 Excel 好在哪。布特林自己說他經常這麼問建立在以太坊上的創業公司,只有能給出好答案的,才說明你碰到了真正有意思的東西。
  • 遇到講不清楚技術細節、只講宏大敘事的內容,把它當成廣告而不是知識。這個領域裡最響的聲音往往不是最有資訊量的。
我經常問那些建立在以太坊上的創業公司一個問題:你能告訴我,用區塊鏈比用 Excel 好在哪嗎?如果他們能給出一個好答案,那就是你知道自己碰到有意思的東西了。(維塔利克·布特林)
文稿由本站用語音識別模型(基於官方釋出音訊)機器轉寫,可能有識別錯誤,人名與數字請以音訊為準。
[00:00:00] The following is a conversation with Retallack Budarin, cocreator of and author of the white paper that launched Etherial and Ether, which is a cryptocurrency that is currently the second largest digital currency after Bitcoin. Ethereum has a lot of interesting technical ideas that are defining the future of blogging technology. And the topic is one of the most brilliant people innovating in the space today. Unlike Satoshi Nakamoto, the unknown person or group that created Bitcoin, Retallack is very well known and at a young age is thrust into the limelight as one of the main faces of the technology that may redefine the nature of money and all forms of digital transactions in the 21st century. [00:00:50] This is the artificial intelligence podcast, if you enjoy it, subscribe on YouTube, review it with five stars, an Apple podcast supported on Patrón or simply connect with me on Twitter. Elex Friedman spelled F.R. Idi Amin. As usual, I'll do one or two minutes of ads now and never any ads in the middle that can break the flow of the conversation. I hope that works for you and doesn't hurt the listening experience. Quick summary of the ads to sponsors Master Class and Express VPN. [00:01:24] Please consider supporting the podcast by signing up to master class and master class dot com slash leks and getting express VPN and express VPN dot com slash leks pod. The show is sponsored by Master Class Sign up at master class dot com slash likes to get a discount to support this podcast. When I first heard about master class, I honestly thought it was too good to be true for one hundred and eighty dollars a year, you get an all access pass to watch courses from experts at the top of their field to list some of my favorites. [00:02:02] Chris Hadfield on space exploration, Neil deGrasse Tyson on scientific thinking and communication will write the creator of SIM City and Sims on game design. I love that game. Jane Goodall and Conservation. Carlos Santana, one of my favorite guitarists on guitar. Garry Kasparov on chess. Obviously I'm Russian. I love Gary Dannehy on the ground on poker. [00:02:28] One of my favorite poker players. Also Phil Ivey is gives a course as well and many, many more. [00:02:35] Chris Hadfield explaining how rockets work and the experience of being launched into space alone is worth the money. By way of advice. For me, the key is not to be overwhelmed by the abundance of choice. Pick three courses you want to complete. Watch each all the way through from start to finish. It's not that long, but it's an experience that will stick with you for a long time. I promise. It's easily worth the money you can watch. [00:03:00] And basically any device once again sign up and master class dotcom likes to get a discount and to support this podcast. This show sponsored by Express VPN Download Express Dotcom Slash Lex Pod to get a discount to support this podcast. I've been using Express for many years. I honestly love it, it's easy to use press the big power on button and you privacy's protected and if you like, you can make it look like your locations anywhere else in the world. [00:03:35] I might be in Boston now, but I can make it look like I'm in New York, London, Paris or anywhere else. This has a large number of obvious benefits, for example, certainly it allows you to access international versions of streaming websites like the Japanese version of Netflix or the U.K. version of Hulu. As you probably know, I was born in the Soviet Union. So sadly, given my roots and appreciation of Russian history and culture, my website and the website for this podcast is blocked in Russia. [00:04:08] So this is another example of where you can use Express VPN to access sites like the podcast that are not accessible in your country. Express VPN works on any device you can imagine, I use a Linux shout out Dubon to Windows Android. It's available everywhere else to once again download it and express VPN Dotcom's Lux pod to get a discount and to support this podcast. And now here's my conversation with the topic Budarin. So before we talk about the fundamental ideas behind a theory of the currency, perhaps it'd be nice to to talk about the the origin story of Bitcoin and the mystery of Satoshi Nakamoto. [00:05:15] You gave a talk that started with sort of asking the question, what did Satoshi Nakamoto actually invent? Maybe you could say, who is Satoshi Nakamoto and what did he invent? Sure. So Satoshi Nakamoto is the name by which we know the person who originally came up with Bitcoin. So the reason why I say the name by which we know is that this is the anonymous fellow who has shown himself to us only over the Internet, just by first publishing the white paper for Bitcoin, then releasing the original source code for Bitcoin, and then talking to the very early Bitcoin community on Bitcoin forums and and interacting with that, but helping the project blog for a couple of years. [00:06:06] And then at some point in late 2010, early 2011, he disappeared. So Bitcoin is a fairly unique project and how it has this kind of. Mythical kind of quasi godlike founder who is just kind of popped in and did the thing and then disappeared and we've somehow just never heard from him again. So in 2008 was the white paper was the first do you know the white paper was the first time the name will actually appear Satoshi Nakamoto? [00:06:39] If so, so how is it possible that the creator of such impactful project remains anonymous? [00:06:48] That's a tough question and there's no similarity to it in the history of technology, as far as I'm aware. Yeah. So one possibility is that it's Delphine because Delphine was also active in the Bitcoin community and as how Affinia in those two beginning years and how is how thin he may be, he is one of the people at the end of early cypherpunk community. He was a computer scientist, computer scientists, cryptographers, people interested in technology, Internet freedom, those kinds of topics. [00:07:32] Was it correct that there that he seemed to have been involved in either the earliest or the first transaction of Bitcoin? [00:07:38] Yes, the first transaction of Bitcoin was between Satoshi and Delphine. Do you think he knew who Satoshi was if he wasn't Satoshi, you probably know how is it possible to work so closely with people and nevertheless not know anything about their fundamental identity? [00:07:56] Is this like a natural sort of characteristic of the Internet? I like to think about it because you and I just met now there's a there's a depth of knowledge that we now have about each other that's like physical like my vision system is able to recognize you. I can also verify your identity of uniqueness. Like, yeah, this like it's very hard to fake you being you. [00:08:22] Yeah. So the Internet, the Internet has a fundamentally different quality to it, which is just fascinating. [00:08:30] Definitely interesting, as I definitely just know a lot of people just by their Internet handles. And to me when I think of them, like I see their Internet handles and one of them has a profile picture is the same kind of face that's kind of not quite human with a bunch of psychedelic colors. And what I visualize have to just visualize that that's not an actual face. [00:08:56] Yeah, you are the creator of the second. Well, he's currently the second most popular cryptocurrency Ethereum. So on this topic for just the Constitution to come over for a little bit longer, you may be the most qualified person to speak to the psychology of this anonymity that we're talking about, like your identity is known, like I've just verified it. [00:09:20] But from your perspective, what are the benefits in creating a cryptocurrency and then remaining anonymous like a fucking psychoanalyse, Satoshi Nakamoto? Is there something interesting there or is that just a peculiar quirk of him? [00:09:37] It definitely helps create this kind of image of this sort of neutral thing that doesn't belong to anyone. And then you've created a project and because you're anonymous and because you also have disappear or as unfortunately happened to health, any of that is him. He ended up dying of Gehrig's disease and he is in a cryogenic freezer now. But if you pop in and you and you created an in your God and all that's remaining of that whole process is the thing itself, then no one can go and try to interpret any of your other behavior and try to understand, like, oh, the this person wrote this thing in some essay idea at age 16 where he expressed particular opinions about democracy. [00:10:33] And so because of that, this project is like is a state that's trying to do this specific thing. Instead, it creates this environment where the thing is what you make of it and it doesn't have the right or the burden of your other ideas, political thought and so on. So so now we're sitting with you. Do you feel the burden of being kind of the face of a theory? [00:11:01] I mean, there's a very large community of developers, but nevertheless, you know, is there like a burden associated with that? [00:11:09] There definitely is. This is definitely a big reason why I've been trying to kind of push for the Ethereum ecosystem to become more decentralized in many ways, just encouraging a lot of and, of course, theory and work to happen outside of the theory of foundation and of expanding the number of people that are making different kinds of decisions, having kind of multiple software limitations instead of one and all of these things. There's a lot of things that have tried to do it to and remove myself as a single points of failure, because that is something that a lot of people criticize, criticize me for. [00:11:48] So if you look at, like, the most fundamentally successful open source projects, it seems that it's a sad reality. [00:11:57] When I think about it is it seems to be that one person is a crucial contributor. Often you feel Galina's from from for for Linux, for the kernel that is possible. [00:12:09] And I'm definitely not planning to disappear. [00:12:12] And that's the interesting tension that projects that this kind of desire a single entity, and yet they're fundamentally distributed. [00:12:25] I don't know if there's something interesting to say about that kind of structure and thinking about the future of cryptocurrency. Does there need to be a leader? [00:12:34] There's different kinds of leaders, you know, there's there's dictators who control all the money, there's people who control organizations, there's a kind of high priests that just have themselves have their Twitter followers. What kind of leader are you, would you say? [00:12:49] You know, in these days, actually a bit more of the high in the high priest direction than before? Yeah, like. I definitely actually don't do all that much of kind of going around and ordering theory foundation people to do things, because I think those things are important. If there's something that I do think it's important that I do, just usually I kind of say it publicly or just sort of say it to people. And quite often projects just sort of start doing it. [00:13:22] So let's ask the high philosophical question about money. Yeah. What at the highest level is money? What is money? [00:13:32] It's a kind of game and it's a game where you have points. And if you have points, there is this one move where you can reduce your points by a number and increase someone else's points by the same number. And these sorts of fair game, hopefully. [00:13:47] Well, it's one kind of fair game. Like, for example, you know, you can have other kinds of fair games, like you're going to have a game where if I give someone a points and you give someone a points, then instead of that person getting two points, that person gets four points. And that's also fair is the but no money is easy to set up for. [00:14:06] And it serves a lot of useful functions. And so it kind of just survives in society as a meme for thousands of years. [00:14:14] It's useful for the storage of wealth, it's useful for the exchange of value, and it's also useful for denominating future payments to account as a unit of account. [00:14:28] So what if you look at the history of money in human civilization? [00:14:32] What just if you're a student of history, like how has its role or just the mechanisms of money changed over time, in your view? Even if we just look at the 20th century before and then leading up to cryptocurrency, that's something you think about. Yeah, and I think I think the big thing in the 20th century is that if we saw a lot more intermediation and yes, I think in the first part is kind of the move from being adding more of different kinds of banking. [00:15:05] And then we saw the move from that of dollars being backed by gold to dollars being backed by gold. That's only redeemable by certain people. The dollar is not being backed by anything, too. [00:15:20] And it's just this system where you have a bunch of free floating currencies and then people like getting rid of bank accounts and then those things becoming electronic, people getting accounts with payment processors that have bank accounts. So. So what do you make of that? [00:15:39] That's a fascinating philosophical idea, that money might not be backed by anything. [00:15:46] What is that like confessing to you that money can exist without being backed by something physical? [00:15:52] It definitely is. What do you make of that fact? How is that possible? Is that stable? If you look at the future of human civilization, is it possible to have money at the large scale, at such a hugely productive and rich societies, be able to operate successfully without money being backed by anything physical? Feel like? The interesting thing about the 21st century especially, is that a lot of the important valuable things are not backed by anything. [00:16:21] Like if you look at the tech companies, for example, something like Twitter, and you could theoretically imagine that if all of the employees wanted to, they could kind of come together, they would quit and start working on Twitter 2.0 and then. The value of and just kind of build the the the exact same products or possibly build a better product and then just kind of continue on from there. And the original the original Twitter would just not have people left anymore. [00:16:55] Right. Like the there is theoretically kind of code and like IP that's owned by the company. But in reality, like good programmers could probably read up, rewrite all that stuff in three months. [00:17:05] So the like the reason why the thing has value is just kind of network effects and coordination. Problems like these employees in reality are going to switch all at once. And also the users aren't all going to switch at once because it's just difficult for them to switch at once. And so there is this kind of metastable and if equilibrium in interactions between thousands and millions of people that are just actually quite sticky, even though if you try to kind of assume that every once a perfectly rational and kind of perfectly slippery spherical cow, they don't seem to exist at all that stickiness. [00:17:46] Do you have a sense, a grasp of the sort of the fundamental dynamic, like the physics of that stickiness? It seems to work, but and I think some of the cryptocurrency ideas kind of rely in it working. [00:18:00] And it's you know, it's the sort of thing that's definitely been economically model a lot like one the kind of analogy of something similar that you often see in textbooks as like what is the government like if for like 80 percent of people in a country just like tomorrow, suddenly had the idea that the laws that are currently the laws and the government that currently is the government are just people. And some other thing is the government and they just kind of start acting like it then that we're kind of become the new reality. [00:18:36] And then the question is, well, what happens if and if between zero and 80 people or an 80 percent of people start believing that like what is the thing? You all you see is that if there is one of these kind of switches happening is kind of revolution, then if you're the first person to join, then you probably don't have the incentive to do that. [00:19:01] But then if you're the 50 fifth percentile person to join, then suddenly becomes quite safe, too. And so it's definitely is the sort of thing that you can kind of try to analyze that understands mathematically. But one of the kind of results is that the sort of like when the switch happens definitely can be chaotic sometimes. Yeah. But still like to me, the idea that the network effects that the fact that human beings at a scale like millions or billions can share even the idea of currency like. [00:19:38] Yeah, all agree. That's just I know economic model. I'm a skeptic on economics and it's like some my my favorite sort of field, maybe recreationally. Psychology is trying to change human behavior. And I think sometimes people just kind of pretend that they can have a grasp on human behavior, even though we it's such a messy space that all the models that psychology or economics, those different perspectives on human behavior can have or are difficult. [00:20:08] It's difficult to know how much that's wishful thinking and how much it is actually getting to the core of understanding human behavior. [00:20:15] But on that idea, what do you think is the role of money in human motivation? [00:20:23] So do you think money from an economics perspective, from a psychology perspective, is core to like human desires? [00:20:35] Money is definitely very far from the only motivator. It is a big motivator. And that's one of the closest things you have to a universal motivator, I think, because ultimately, in almost any person in the world, if you ask them to do something, they'll be more inclined to do it. If you also offer some offer the money. [00:20:57] And that's like there's definitely many cases where people will do things other than things that maximize how much money they have. And that happens all the time. But like the a lot of those other things are kind of much more specific to and if that person is and of what their situation is, the relationship between the motive in the action and these other things. What do you think is the interplay of the other motivator, like Neetu prospectives, power? [00:21:25] Do you think money equals power or do you think those are conflicting ideas? Do you think I mean, that's one of the ideas that decentralized currency, decentralized applications are looking at, is who holds the power? [00:21:37] Yeah, money is there. Only a kind of power, and there's definitely people who want money because it gives them power, and then even if my money doesn't seem to explicitly be about money, a lot of things that people spend money on are ultimately about social status of some kind. So I definitely view those two things as of Interplaying. And then there's also money as just a way of like measuring how successful you are. I guess the scoreboard right to this kind of gets back to the game, really. [00:22:16] Like if you have four billion dollars, then the main benefit you get from going out, one of the big benefits you get from going up to six billion dollars is that now instead of being below the guy who has five year above, the guy who has five. [00:22:30] So you think money could be kind of in the game of life? It's also a measure of self-worth is Zarqawi. [00:22:38] It's definitely how how a lot of people perceive it. Define ourselves in the hierarchy of. Yeah, and I'm not not saying it's sign of a healthy thing that people define their self-worth as money because it's definitely far from a perfect indicator of how much you value you provide to society or anything like this. But I definitely think that as a matter of kind of current practice, a bunch of people do feel that way. So what does utopia from an economic perspective look like to you? [00:23:14] What is a perfect world look like? [00:23:17] I guess segue to the economist's utopia would be one where kind of. Everything is incentive airlines in the in the sense that there are kind of conflicts between what satisfies your goals and of what is good for everyone in the world, in the world as a whole, would you think that would look like? [00:23:43] Does that mean they're still poor people and rich people? There's still income inequality. Do you think sort of Marxist ideas are strong? [00:23:52] Do you think sort of ideas of objectivism are like where the market rules is strong? Like what? Is there a different economic philosophies that just seem to be reflective of utopia would be? No, I definitely think the existing economic philosophy is do end up kind of systematically deviating from the utopia. And a lot of ways, like one of the big things I talk about, for example, is public goods and public goods are especially important on the Internet has like the idea is what kind of money has this game where I was a few coin, a few coins and you gave the same number of coins, that this usually happens in a trade where I wish some money. [00:24:40] You gain some money, you lose a sandwich and I get a sandwich. And this kind of model works really well when the thing that we're using money to incentivize the sort of private goods. Right. Things that you provide to one person to really benefit comes to one person. But the like on the Internet especially, but also many, many contacts. And if off the Internet there's actions that of individuals or groups can take where instead of the benefit going to one person, the benefit just goes to many people at the same time. [00:25:16] And you can't control where the benefit goes to. Right. So, for example, this podcast know we publish it and when it's published, you don't have any fine grained control over like, oh, these thirty eight thousand people could watch it and then like these other twenty nine thousand people can't. It's like once the number goes high enough then people just copy it. And then when I write articles on a blog that they're just free for everyone and that stuff's even harder to prevent anyone from copying. [00:25:45] So aside from that, things like, you know, scientific research, for example, and even taking more pedestrian examples like climate change mitigation would be a big one. So there's a lot of things in the world where you have these kind of individual actions which have concentrated costs and distributed benefits and money as a point system does not do a good job of encouraging these things. And one of the other things, even tangentially connected to crypto, but kind of theoretically outside of it that I work on is the sort of mechanism called quadratics funding. [00:26:26] And the way to think about it is kind of imagine a point system where if if one person gives coins and gives coins to one other person, then it works the same way as money. But if multiple people give coins to one person and they do so anonymously, so it's kind of not in consideration for a specific service to that person themselves, then the number of coins the received by that person is of greater than just the sum of the number of coins that have given by those different people. [00:27:02] So the actual formula is you take the square root of the amount that each person gave, then you add all the square roots and then you have to square the subscript. Yeah. Then give that. And the idea here would basically be that if let's say, for example, you just started going off kind of planting a lot of trees and there's a bunch of people that are really happy that you're planting trees. So they go an all kind of throw a coin your way. [00:27:29] Then the there is like basically the fact that kind of you get more than the Sobhi, you get this kind of square of some of these of a square root, some of these tiny amounts is that this actually kind of compensates for the tragedy of the commons redness. There is even this kind of mathematical proof that it's sort of optimally compensates for it. What is the tragedy of the Commons? This is just this idea that if there is this situation where there is some public good that lots of people benefit from, then no individual person wants to contribute to it, because if they contribute, they only get a small part of the benefit from their contribution. [00:28:09] But they pay the full cost of their contribution. [00:28:11] In which context is this? [00:28:13] So what does the term quadratic quadratic funding like? [00:28:18] What's in which context does this mechanism use for so obvious? [00:28:24] You said. To combat the tragedy of the Commons, but in which context you see it as useful if you practice this. Yes, theoretically public goods in general. Right. So like like services, like what do we what are we talking about? [00:28:36] What the public does within the ethereal ecosystem, for example, like we've actually tried using this mechanism. I wrote a couple of articles about the sort of on Vitello dossier where I go through some of the most recent rounds. And it's been really interesting. Some of the top ones that people supported, there were things like just online user interfaces that make it easier for people to interact with a theory. [00:29:05] There was no documentation, there are podcasts, there were no software and of clients the kind of implementations of the theory and protocol of privacy tools, just like lots of things that are useful to lots of people. There weren't a lot of people are contributing like funding a particular particular entity. That's really that's really interesting. Is there something special about the quadratic, the the the sum of the square roots? And. [00:29:38] Yeah, so another way to think about it is like, imagine if any people each give a dollar, then the person gets and squared. Right. And and so each individual person's contribution gets multiplied by an and because they have nine people. And so that kind of perfectly compensates for the kind of end one tragedy of the commons. I just wonder if the squared part is fundamental though. [00:30:02] It is. And I'd recommend you go to the overtalk Nazia. I have this article called A Quadratic Payments, a Primer and highly recommended. It's kind of at least my attempt so far of exploiting the intuition behind this intuition. So if we could, can we go to the the very basics? [00:30:24] What is the block chain? [00:30:27] Or perhaps we might even start at the the Byzantine generals problem in presenting fault tolerance in general, that I Bitcoin was taking steps to providing a solution for them. [00:30:42] So the Byzantine generals problem, it's this paper that Leslie Lamport published in nineteen eighty two where he has to start experiments where if you have two generals that are kind of camped out on opposite sides of a city and they're planning when to attack the city, then the question is then of how could those generals coordinate with each other and they could send messengers between each other. But those messengers kind of could get sniped by the enemy on the road road. Some of those messages could end up being traitors, that if things could end up happening and with just the two best generals, it turns out that there's kind of no solution and a finite number of rounds. [00:31:32] That guarantee is that they will be able to kind of coordinate on the same answer. But then in the case where you have more than two generals to then once we analyze this case as like, ah, the messenger message is kind of just all messages are the messages kind of signed messages. So I could give you a solid message and you can pass along that side the message. And the third party could still verify that. I originally made that message. [00:31:58] And depending on those different cases, there is kind of different bounds. I'd like given how many generals that how many traitors among those generals and like under what conditions, you actually can't agree what to launch an attack. So it's actually a big misconception that the Byzantine generals problem was unsolved. So ultimately the reports solved it. The thing that was unsolved, though, is that all of these solutions assume that you have already agreed on a fixed list of who the generals are. [00:32:30] And these generals have to be kind of semi trusted to some extent. They can't just be anonymous people because if they're anonymous, then, like the enemy could just be ninety nine percent of the generals. And so. Right. The, um, in the 1980s, in the nineteen nineties, head of the general use case for distributed system stuff was more kind of enterprise, the stuff where you could kind of assume that you know who the nodes are that are running these kind of computer networks. [00:33:03] So if you wants to have some kind of decentralized computer network that pretends to be a single computer that you can kind of do and have operations on, then it's made out of the sort of fifty and specific computers. And we know kind of cool and where they are. And so we have a good reason to believe that, say, at least 11 of them would be fine and it could also be within a six. [00:33:24] Legal system. Exactly. Almost a network of devices, sensors go on like an airplanes and I think like flight systems in general still use these kinds of ideas. Yep. Yep. So that's the 80s. That's the 80s and 90s. Now, the cypherpunks had a different use case in mind, which is that they wanted to create a fully decentralized global position with currency. And the problem here is that they didn't want any authorities and they didn't even want any kind of privilege, the list of people. [00:33:55] And so now the question is, well, how do you use these techniques to create consensus when you have no way of kind of measuring identity is right. You have no way of determining whether or not some 99 percent of participants aren't actually all the same guy. And so the clever solution that Satoshi had, this is kind of going back to that presentation I made at Def Con a few months ago where I said that the things that she invented was crypto economics. [00:34:25] Is this really neat idea that you can use economic resources to kind of limit identify how many identities you can get and the if there isn't any existing decentralized digital currency, that the only way to do this is with proof of work. Right. So with proof of work, the solution is just. You publish a solution to a hard mathematical puzzle that takes some kind of clearly calculable amount of computational power to solve, you get an identity and then you solve five of those puzzles, you get five identities. [00:35:04] And then these are the identities that we run the kids and the cell growth of between. [00:35:09] So the proof of work mechanism you just described is like the fundamental idea proposed in man in the white paper defines bitcoin. What's the idea of consensus that we wish to reach worldwide consensus important here? What is consensus? [00:35:29] So the goal here is just simple technical terms is to basically kind of wired together a set of a large number of computers in such a way that the kind of pretends to the outside world to be a single computer where that single user keeps working, even if a large portion of the kind of constituents computers that make it up, break it kind of break in arbitrary ways, like they could shut off, they could try to actively break a system, they could do lots of things. [00:36:00] So the reason why the cypherpunks wanted to do this is because they wanted to run one particular program on this virtual computer. And the one particular program that they wanted to run is just a currency system. Right? It's a system that just processes a series of transactions. And for every transaction, it verifies that the sender has enough coins to pay for the transaction and verifies that the digital signature is correct. And if the checks pass, then it subtracts the coins from one account to announce the coins to the other account to roughly. [00:36:34] So first of all, the the the proof of work idea has kind of I mean, at least to me, seems pretty fascinating. It is. I mean, that's a kind of revolutionary idea. Is it is it obvious to come up with that? You can use you can exchange basically computational resources for for identity. [00:36:55] So it's it actually has a pretty long history. It was first proposed in a paper by Cynthia Work and the DNA or in nineteen ninety four, I believe, and the original use case was combating email spam. So the idea is that if you send an email, you have to send it with the work attached and like this makes it reasonably cheap to send emails to your friends, but it makes it really expensive to send spam to a billion people. [00:37:22] Yeah, that's a simple, brilliant idea. So maybe also taking a step back. So what is the role of block chain in this? [00:37:31] What is the block chain? Sure. [00:37:33] So the blocking my way of thinking about it is that it is this kind of system where you have this kind of one virtual computer created by a bunch of these nodes in the network. And the reason why the term block chain is used is because the data structure that these systems used, at least so far, is one where they have different nodes in the network periodically publish blocks and a block is a kind of list of transactions together with a pointer, like a hash of a a previous block that it builds on top of. [00:38:13] And so you have a series of blocks that that nodes in the network create for each bullet points to the previous block. [00:38:21] And so you have this chain of them is fault tolerance mechanism built into the idea of block chain or a lot of possibilities of different ways to make sure there's no funny stuff going on. [00:38:33] There are indeed a lot of possibilities. So any kind of just simple architecture, as I just described, the way the fault tolerance happens is like this, right? So you have a bunch of nodes and they're just happily of occasionally creating blocks, building on top of each other's blocks. And let's say you have kind of one block, we'll call it kind of block one and then someone else builds another block, honestly, or called block two. Then we have an attacker. [00:39:01] And what the attacker tries to do is the attacker tries to revert back to the way they revert back to is instead of doing the thing they're supposed to do, which is build a block on top of block two or they're going to build another block on top of block one. Um, so you have block one, which has two children, block to block to prime. Now, this might sometimes even happen by random chance if two nodes in the network just happen to create blocks at the same time and they don't hear about each other things before they create their own. [00:39:30] But this also could happen because of an attack. Now, if this happens, you have an attack then the no. In the Bitcoin system, the nodes follow the longest chain. So if this attack had happened and when the original channel had more than two blocks on it, so if it was trying to kind of revert more than more than two blocks, then everyone would just I would just ignore it and everyone would just keep following the regular chain. [00:40:00] But here, you know, we have block two and we have block two prime. And so that you were kind of either and then whatever block the next block is created on top of. Soucy Block three is now created on top of block two prime. Then everyone agrees that Block three is the new head and block two prime is just kind of forgotten. And then everyone just kind of peacefully builds on top of block three and then continues. [00:40:25] So how difficult is it to mess the system? I know. [00:40:29] So how if we look at the general problem, like how many what fraction of people who participate in the system have to be bad players in order to mess with actually. [00:40:42] OK, what's there is there is there a good number theory as well, depending on what your model of the participants is and what kind of attack we're talking about, it's anywhere between twenty three point two and fifty percent. Of what? Of all of the computing power of the network, sorry. So twenty to twenty three point between twenty three point two and fifty percent and 50 percent can be compromised. [00:41:11] So, like, once your once your purse, your portion of the total computing power of the network goes above the twenty three point to level, that there's a lot of things that you could mean, things that you can potentially do. And as your percentage of the network kind of keeps going up, then the your abilities as you mean things kind of goes higher than if you have above 50 percent, then you can just break everything. So how hard is it to achieve that level? [00:41:37] It seems that. So far, historically speaking, it's been exceptionally difficult. So this is a challenging question. So the economic cost of acquiring that level of stuff from scratch is fairly high. I think it's somewhere in the low billions of dollars. And when you say that stuff, you mean computational resources? [00:41:59] Yeah. So specifically specialized hardware and of ASX that people use to solve these puzzles just to do the mining is not a small tangent. So obviously I work a lot and deep learning with GPS and asks for that application. And I tangentially kind of hear that so many of these cities and views are sold out because of this other application. [00:42:24] I would do if you can comment, I don't know if you're familiar or interested in the space, what kind of a6 what kind of hardware is generally used these days for to do the actual computation for the proof of work. Sure. So in the case of Bitcoin and Ethereum are a bit different. So in the case of Bitcoin, there is an algorithm called the shots. Fifty six. That's just a hash function. And so the puzzle is just coming up with a number, with the hash over the numbers below some threshold. [00:42:52] And so because the hashes are designed to be random, you just have to keep on trying different numbers until one works. And the Aztecs are just like specialized circuits that contain additive circuits for evaluating this hash over and over again. [00:43:08] And you have like millions or billions of these hash evaluators and just stacked on top of each other inside of a box. And you just keep on running the box 24/7. [00:43:17] And there there's literally specialized hardware designed for this. Yes, this is we live in an amazing world. Another tangent and I'll come back to the basics. But does quantum computing throw a wrench into any of this? [00:43:31] Very good question. [00:43:32] So quantum computers have two main and to families of algorithms that are relevant to cryptography. One is Shor's algorithm ensures the algorithm is one that kind of completely breaks the hardness of some specific kinds of mathematical problems. So the one that you've probably heard of is it makes it very easy to factor in numbers. So figure out kind of what prime factors are, the kind of that you need to multiply together to get some number, even if that number is extremely big. [00:44:03] Shor's algorithm can also be used to break elliptic curve cryptography. It can break any kind of hit in order groups. The big breaks, a lot of kind of cryptographic nice things that we're used to. But the good news is that for every kind of major use of things that Shor's algorithm breaks, we already know of quantum proof alternative's. Right now, we don't use these Quisenberry alternatives yet because in many cases they're five to 10 times less efficient. [00:44:32] But and the crypto industry in general, ahead of those of this is coming eventually and sort of ready to take the hit and switch to that stuff when we when we have to. The second algorithm that is the relevance of cryptography is Grovers algorithm and engravers algorithm might even be a bit more familiar to people that's basically usually described as solving search problems. But the idea here is that if you have a problem over the form, finds a number that satisfies some property, then if with a classical computer you need to try and have end times before before you find the number, then with the quantum computer, you only need to do a square root of N computations. [00:45:21] And Grovers could potentially be used for mining. But there's two possibilities here. One is that Grovers could be used for mining and whoever creates the first working quantum computer that could do Grovers will just mind way faster than everyone else. And we'll see another round of what we saw when ASX came out, which is that's kind of the new hardware, just kind of dominated the old stuff. [00:45:46] And then eventually it switched to a new equilibrium, by the way, way faster, not exponentially faster, quite dramatically faster, radically faster, which is not sort of it's not game changing. [00:46:00] I would say it's like ASX like you said it would be. [00:46:02] Exactly. Yeah. So it would not necessarily break proof of work. That's right. Yeah. [00:46:07] Now, the other kind of possible world, right, is that quantum computers have a lot of overhead. There is a lot of complexity involved in maintaining quantum states. And there's also, as we've been realising recently, making quantum computers actually work requires that of quantum error correction, which requires kind of a thousand real cubits per logical garbage. And so there the very real possibility that the overhead of running a quantum computer will be higher than the speed up you get with Grovers, which would. [00:46:38] Kind of sad, but which would also mean the proof of work will just keep working fine, so beautifully put, so, so proof of work is the core idea of Bitcoin is there are other core ideas before we kind of take a step towards the origin story and ideas of Ethereum. Is there other stuff that were key to the white paper of Bitcoin? [00:46:59] There is proof of work and that there is just the cryptography is just kind of public keys and signatures that are used to verify transactions, those two really big things. [00:47:08] So then what is the origin story? Maybe the human side, but also the technical side of a theory, I'm sure. [00:47:16] So I joins the Bitcoin community in 2011, and they started by just writing. I first wrote for this sort of online thing called Bitcoin Weekly. Then I started writing for Bitcoin magazine and sorry to interrupt. [00:47:33] You have this funny kind of story, true or not, is that you were disillusioned by the downsides of centralized control from your experience with, Wow, World of Warcraft. [00:47:45] Is this true or you're just being witty? I mean, the event is true of the fact that that's the reason I do decentralization is what you maybe just a small tangent. [00:47:56] Have you always had a skepticism of centralized control? Is that some degree? [00:48:03] Has that feeling evolved over time or is that just always been a core feeling that decentralized control is the future of human society? [00:48:12] It's definitely been something that felt very attractive to me ever since I could have heard that such a thing is possible. Possible even. Yeah. So great. So you're enjoying the Bitcoin community in 2011. [00:48:23] You say you began writing. So what's next? [00:48:27] I started writing, moved from high school to university. Halfway in between that, I spent a year in the university. Then at the end of that year, I dropped out to do Bitcoin things full time. And this was a combination of continuing to write Bitcoin magazine, but also increasingly to work on software projects. And I traveled around the world for about six months and just going to different Bitcoin communities like I went to first in New Hampshire, then Spain, other European places, Israel and then San Francisco and along the way. [00:49:04] And I've met a lot of other people that are working on different Bitcoin projects. And when I was in Israel, there were some very smart teams there that were working on ideas that people were starting to have called Bitcoin 2.0. So one of these was colored coins, which is basically saying that, hey, let's not just use the bullshit for Bitcoin, but it's also a kind of issue, other kinds of assets on it. And then there was a protocol called Master Quired that supported issuing assets, but also supported many other things, like financial contracts, like domain name registration and a lot of different things together. [00:49:40] And I spent some time working with these teams and I quickly realized that this masticating protocol could be improved by a kind of generalising it more right. So the best the analogy I use is that the MasterCard protocol was like the Swiss Army knife. You have twenty five different transaction types for twenty five different applications. [00:50:03] But what I realized is that you could replace a bunch of them with things that are more general-purpose. So one of them was that you could replace like three transaction types for three types of financial contracts with a generic transaction type for a financial contract. Just once you specify a mathematical formula for kind of how much money each side gets. [00:50:26] By the way, it's a small pause once you see a financial contract, just the terminology, what is the contract? What's a financial contract? [00:50:35] So this is just generally an agreement where kind of either one or two parties kind of put collateral or kind of end and then they, depending on if certain conditions like this could involve prices of assets that could involve the actions of the two parties, could involve other things, but they kind of get have different amounts of kind of assets out that just depend on things that happened. So a contract is really a financial contract is at the core. It's it's the core interactive element of a financial system. [00:51:10] Yeah. There's there's many different kinds of financial contract. There's things like options where you kind of give someone the right to buy a thing that you have for some specific price for some period of time. There's contracts for difference where you basically are kind of making a bet that says, like for every dollar this thing goes up, I'll give you seven dollars, or for every dollar the thing goes down, you give me seven dollars or something like that. And but the main idea that. [00:51:38] These contracts have to be enforced and trust them. Yes, exactly. You have to trust that they will work out in a system where nobody can be trusted. [00:51:46] Yes. This is such a beautiful, complicated system. [00:51:51] OK, so so you are seeking to kind of generalize this basic framework of contracts. Mm hmm. So what does that entail? So what technically are the steps to creating a theory? [00:52:05] I'm sure so I guess just kind of continue a bit with this master coin story. So started by giving ideas for how to generalize the thing. And eventually this turned into a much more kind of fully fledged proposal that just says, hey, how about you scrap all your future is and instead you just put in this programming language. And I gave this idea to them and their response was something like, hey, this is great, but this seems complicated and it seems like something that we're not going to be able to put onto our roadmap for a while. [00:52:37] And my response to this was like, we do not realize how revolutionary this is. We'll just go do it myself. [00:52:43] And then I was the name of the programming, which I just called it ultimate scripting. So then I kind of went through a couple more rounds of iteration and then the idea for a theory of itself started to form. And the idea here is that you just have a block chain where the core unit of the thing is what we call contracts as these accounts that can hold assets and they have their own internal memory but that are controlled by a piece of code. [00:53:19] And so if I send some ether to a contract, the only thing that can determine where that either the currency inside a theory goes after that is the code of that contract itself. And so basically, you're kind of sending assets to computer programs becomes this sort of paradigm for creating these sort of a self executing agreements, self executing as so-called. The code is sort of part of this contract. So that that's what's meant by smart contracts. Yeah. So how hard was it to build this kind of thing? [00:53:57] Harder than expected. Originally, I actually thought that this would be a thing that I would kind of casually work on for a couple of months, publish and then go back to university. Then I released it and a bunch of people or I released a white paper, white paper that was there. The idea, the white paper, a whole bunch of people came in offering to help a huge number of people and have expressed interest. And this was something that was totally not expecting. [00:54:25] And then I realized that this would be something this kind of much bigger than I had ever thought that it would be. And then we started on this kind of much longer development slog of making something that lives up to this sort of much higher level of expectations. What are some of the is it fundamentally like software engineering challenges? It was social. OK, so there's no social. [00:54:54] So so what are the biggest interesting challenges that you've learned about human civilization and in software engineering through this process? [00:55:04] So I guess one of the challenges for me is that I'm one of the kind of apparently unusual geeks who was sort of never treated with anything but kindness in school. And so when I got into crypto, I never expected everyone would just kind of be the same kind of altruistic and nice in that same way. But the job of the algorithm that I used for finding co-founders for this thing was not very good. It was sort of literally what computer scientists called the greedy algorithm. [00:55:37] It's sort of the first 50 people who applied back offering to help kind of are the co-founders. [00:55:42] I mean, like literally the people that form formed to be the founders, co-founders of the community, the algorithm. I like how you call it the algorithm. Yeah. And so what happened was that these especially as the project got really big, like there started to be a lot of this kind of infighting and there were a lot of like I wanted the thing to be a nonprofit and some of them wanted to be a for profit. And then there started to be people who were just kind of totally unable to work with each other. [00:56:16] There were people that were kind of trying to get an advantage for themselves and a lot of different ways. And this just about six months later led to this big governance crisis. And then we got a reshuffled leadership, a bid, and then the project kept on going. Then nine months later, there was another governance crisis and an. There was the third governance crisis. So is there a way to if you're looking at the human side of things, is there a way to optimize this aspect of the cryptocurrency world? [00:56:49] It seems that there is. From my perspective, there's a lot of different characters and personalities and egos. And like you said, I don't know if. [00:57:00] You know, I also like to think that most of the world, most of the people in the world are well-intentioned, but the way those intentions are realized may perhaps come off, as you know, as negative. [00:57:13] What is there is there a hopeful message here about creating a governance structure for cryptocurrency that where everyone gets along and after about four rounds of reshuffle, I think we've actually come up with something that seems to be pretty stable and happy and think I mean, I definitely do think that most people are well intentioned. [00:57:40] I just think that one of the reasons why I like decentralization is just because there is like this thing about power where power attracts people with egos. And so that just allows those very small percentage of people to just to ruin so many things. [00:57:54] You think ego as you think ego has a use like is ego always bad? [00:58:01] It seems like sometimes does. But then the theory research team, I feel like we've found also a lot of a lot of very good people that are just. Primarily, you're just interested in things for the technology and things seem to just generally be going quite well. [00:58:23] Yeah, when you're when the focus and the passion is in the tech, so on. So that's the human side of things with the technology side. What have you learned? What have been the biggest challenges of bringing a theory to life? On the technology side, so I think, first of all, just. There are others, like the first law of software development, which is that when someone gives you a timetable of a switch, the unit of times, the next largest unit of time and one, we basically fell victim to that. [00:58:55] And so instead of taking that like three months, that ended up taking 20 months to watch the thing. [00:59:05] And that was just, I think, underestimating the sheer technical complexity of the thing. [00:59:10] There were research challenges like so for example, one of the things that we've been saying from the start that we would do one is a switch from a proof of work to proof of stake, more proof of stake as to this alternative consensus mechanism where instead of having to waste a lot of computing power on solving these mathematical puzzles that don't mean anything, you kind of prove that you have access to coins inside of the system and this that it gives you some level of participation and the consensus. [00:59:40] Can you maybe elaborate on that a little bit? I understand the idea of before work. I know that a lot of people say that the idea of proof of steak is really appealing. Maybe linger a longer explain what it is. [00:59:52] Sure. So basically, the idea is like if I kind of walk up a hundred coins, then I turn that into a kind of, quote, virtual binder and the system itself kind of automatically, sort of randomly assigns that in a virtual binder is a right to create blocks that particular travels. And then if someone else has 200 coins and then a walk on the walk, there's 200 coins, then they get a kind of twice as big a virtual binder. [01:00:22] They'll be able to create their blocks twice as often. So it tries to kind of do similar things to proof of work, except instead of the thing kind of limiting your participation to being your ability to crank out solutions to kind of hash challenges. The thing that really makes your participation is kind of how much coins you're walking into this mechanism. [01:00:46] OK, so interesting so that that limited participation doesn't require you to run a lot of compute. Does that mean that the richer you are, so rich people are more like their identities, more right. And the stable. Yeah, four or five or whatever, whatever the right terminology is, right, and this is definitely a covid critique, I think my usual answer to this is that like proof of work is even more of that kind of system. Exactly. [01:01:20] Yeah, because I didn't mean it. And that that as a criticism, I think you're exactly right. That's equivalent to proof of war because the same kind of thing. [01:01:28] But the before work, you have to also use physical resources. Yes. [01:01:33] And broken computers and burn trees and all of that stuff. Is there a way to mess with the system of the proof of proof stake? [01:01:42] There is. But you will once again need to have a very large portion of all the coins that are locked in the system to do anything bad. Got it. [01:01:50] Yeah, and just that maybe take a small change in one of the criticisms of cryptocurrency is the fact that it gets for the proof of work mechanism if to use so much energy in the world. Yes. Is one of the motivations of proof of stake is to move away from this. Definitely. What's your sense of that? Maybe I'm just under informed. Is there like legitimately environmental impact from this? [01:02:15] Yeah. So the latest thing was that Bitcoin consumed as much energy as the country of Austria or something like that. Yeah. And then Ethereum as of right now, maybe only like half an order of magnitude smaller than Bitcoin. I've heard you talk about a Ethereum 2.0. So what's the what's the dream of Ethereum 2.0? What's what's the status of proof of state? Because the mechanism that Ethereum moves towards and also how do you move to a different mechanism of consensus within a cryptocurrency? [01:02:48] So Ethereum 2.0 is a collection of major upgrades that we've wanted to do to Ethereum for quite some time. The two big ones, one is proof of stake and the other is that we call sharding. Sharding solves another problem with big chains, which is a scalability. And what Sharding does is it basically says instead of every participant in the network having to personally download and verify every transaction, every participant in the network only downloads and verifies a small portion of transactions. [01:03:19] And then you kind of randomly distribute who gets how much work. And because of how the distribution is random, it still has the property that you need a large portion of the entire network to corrupt what's going on inside of any Shahd. But the system is still at a very redundance and very secure as brilliant. [01:03:40] How hard is that to implement and how hard is proof of stake to implement? Like on the technical level? [01:03:47] Yeah, software level, proof of stake and sharding are both challenging. I'd say sharding is a bit more challenging. The reason is that proof of stake is kind of just a change to the core. The consensus layer works. Sharding does both that, but it's also a change to the networking layer. The reason is that sharding is kind of pointless if at the networking layer you still do what you do today, which is you kind of gossip everything, which means that if someone publishes something, every other node in the client hears it from on the networking layer. [01:04:18] And so instead we have to have enough sub networks and the ability to quickly switch between sub networks and other sub networks talk to each other. And this is all doable. But it's a more complex architecture and it's definitely the sort of thing that has not yet been done in cryptocurrency. So most most of the networking layer in cryptocurrency is you're shouting broadcast messages and this is more like ad hoc networks, like you're shouting within smaller groups, smaller group, but you have like a bunch of subnet like executive and you have to switch to, oh, man, I'd love to see the as it it's a beautiful idea. [01:04:55] So from a graph, theoretical perspective, but just the software and who's responsible is Ethereum project like the people involved, would they be implementing like what's the actual you know, this is like legit software engineering who like how does that work? [01:05:12] How do people collaborate, build that kind of project? Is this like almost like is there a software engineering lead? [01:05:20] Is there is a legit almost like large scale open source project is. Yeah. So we have someone named Danny Ryan on our team who has just been brilliant and regrade all around. And he is a kind of de facto kind of development coordinator. I guess it's like you have to invent job titles for this stuff. And the reason is that, look, we also have this unique kind of organizational structure where the Ethereum Foundation itself and it does research in-house, but then the actual implementation is done by independent teams that are separate companies and they're located all around the world and fun places like Australia. [01:06:01] And so you can kind of just need a bunch of sort of almost non. Cat herding to just keep getting these people to talk to each other and kind of implement this back, make sure that everyone agrees on what's going on and kind of how to interpret different things. So how far into the future are we from these two mechanisms and a theorem to point out like, what's your sense of the timeline, keeping in mind the previous comment you made about the sort of general Kurzem software projects? [01:06:36] So Ethereum 2.0 is split into three phases. So Phase Zero just creates a bit of stake network. And it's actually separate from kind of proof of the proven work network at the beginning just to kind of give it time to grow and improve itself. The people get to choose. Sorry to interrupt. [01:06:54] If people get to choose, I guess we can think as they choose to move over if they want to, then phase one adds sharding, but it only adds sharding of active data storage and not sharding of computation. And then after that, there is that of the merger phase, which is where the and the accounts are kind of smart contracts like all of the activity on the existing etha, one system just kind of gets cut and pasted into two and the word change gets forgotten and then and things all the things that were living there before and just kind of continue living inside of the system. [01:07:30] So for timeline's phase zero has been kind of almost fully implemented and now it's just a matter of a whole bunch of security auditing and testing. My own experience is that right now it feels like right about a phase comparable to when we were doing the original Ethereum launch, when we were maybe about four months away from launch. But that's just a hunch and that's just a hunch. [01:08:02] Yeah. So how you know, it took it took over a decade for people to move from Python to Python three. How do you see the move from, like this phase of zero of four four different concepts? [01:08:17] The mechanism do you see there being a drastic phase shift in people just kind of jumping to this better mechanism? [01:08:25] So in phase zero, don't expect too many people to do much because in phase zero, in phase one, the new chain of deliberately, it doesn't have too much functionality or none. It's there just like if you want to be a proof of stake validator, you can get things started. If you want to store data for other botulin applications, you can get started. But existing applications will largely keep living on E one. And then when the merger happens, then the merger is the operation that happens all at once. [01:08:57] So that's sort of one of the benefits of such a system. Like on the one hand, you have to coordinate the upgrade, but on the other hand, the upgrade can be coordinated. [01:09:06] So what's Kasparov FFG, by the way, Kasparov G is the consensus algorithm that we are using for the of stake. [01:09:14] Is there something interesting specific about Kasparov of like some beautiful aspect of it that there is so Kasparov Evgenia combines together kind of two different schools of, say, algorithm design. [01:09:29] So the general two different schools of the of the design are right. One is at a 50 percent fault tolerant but dependent on network security. So 50 percent volks, holer fault tolerant, but it gets all read up to 50 percent of fault's, but not more. But it depends on an assumption that all of the nodes can talk, talk to each other within some of a limited period of time. Like if I send the message, you'll receive it within a few seconds. [01:09:57] And the second school is thirty three percent fault tolerant but safe under a synchrony, which means that if we agree on something, then nothing is finalized. And even if the network goes horribly wonky the second after that thing is finalized, there's no way to revert that thing. And that's fascinating how you would make that happen. It's definitely quite clever. I'd recommend the Kasparov of paper if you just search like archive. I said like er XIV Kasper FFG. [01:10:29] It's the papers and archive. Yeah. Who are the authors. Myself and Virgil Griffith. That's awesome. I take a small tangent. This idea of just putting out white papers and papers and putting them on archives is putting them publicly. [01:10:46] Is it, is that at the core. Is that a necessary component of currencies that the tradition started with and Satoshi Nakamoto is what we make of it? What do you make of the future of that kind of sharing of ideas? [01:11:00] I guess so, yeah. And it's definitely something that's kind of mandatory for crypto because, like, crypto is all about making systems where you don't have to trust the operators to trust that the thing works. And so if anything behind our system works is closed, source to that kind of kills the point. And so there is the kind of a sense in which the fundamental properties of the category of the thing we're trying to build just kind of forces openness, but also openness just has proven to be a really great way to collaborate. [01:11:36] And there's actually a lot of sort of innovation and academic collaboration that's just kind of happened ad hoc in the crypto space the last few years. So like, for example, we have this forum called Ethe Research that's like ETG or NCAR, the dots. And there we publish kind of just ideas in a form that's kind of how formal like it's halfway in between. Like it's it's a kind of a text right up and you can have math in it, but it's often sort of much shorter than a paper. [01:12:09] And it turns out that the great majority of new ideas, like they're just kind of fairly small nuggets that you can explain in like five to 10 lines that they don't really need the whole format of the paper. [01:12:22] Exactly. They don't require the kind of like 10 pages of filler. And so introduction conclusion is not needed. Yeah. So instead you just kind of publish the idea that people will your comments on it. Yeah. This has been so great for us. I think I interrupted you. Was there something else on Caspar FFG that's just Casper FFG is just kind of combines together these two schools. And so basically it creates this system where if you have more than 50 percent that are honest then and you have network synchrony, then the thing kind of goes has a chain. [01:13:02] But then if Network Sacranie fails, then kind of the last few blocks of the chain might get replaced. But anything that was finalized by this set of more asynchronous process gets like can't be reverted. And so you essentially get a kind of best of both worlds between those two models. [01:13:21] OK, so I know what I'm doing to you reading the Gettysburg Paper. I apologize for the romanticized question, but what to you are some or the most beautiful idea in the world of a theorem? Just something surprising, something beautiful, something powerful. [01:13:40] Yeah. I mean, I think the fact that money can just emerge out of a database if enough people believe in it, I think is definitely one of those things that's up there. I think one of the things that I really love about a theorem is also this concept of possibility. So this is the idea that if I build an application on top of a theory, then you can build an application that talks to my application and you don't even need my permission. [01:14:07] You don't even need to talk to me. But so one really fun example of this, as there was this sort of game on a theory called Crypto Kiddie's, the just involvement of breeding digital cats. And someone else created a game called Crypto Dragons, where the way you play Crypto Dragons is you have a dragon and you have to foetid crypto kitties. And they just created the whole thing, just like as an ethereal contract that you would send these these tokens that are defined by this other Ethereum contract. [01:14:41] And for the interoperability to happen, like the projects that don't really need to look, the teams don't really need to talk to each other. You just kind of interface with the existing program arbitrarily, composable in this kind of way. You have different groups that could be working. And so you could see it scaling to just outside of dragons and kiddie's. It could be built like entire ecosystems of software. [01:15:06] Yeah, it's kind of like I mean, especially in the decentralized finance space that's been popping up in the last two years. There has been a huge amount of of really interesting things happen as a result of this is a particular kind of like financial applications kind of thing. Yeah. [01:15:23] I mean, there's like stable coins. So this is kind of tokens that retain value equal to one dollar, but they're kind of backed by a cryptocurrency that there's decentralized exchanges. So as far as decentralized exchanges goes up, there's this really interesting construction that has existed for about one one and a half years now called. So what you swipe is that's a smart contract that holds the balances of two tokens we'll call token, and so it can be and it maintains that invariants that the balance of talking a multiplied by the balance of token, B has to equal the same value. [01:16:04] And so the way that you trade against the thing is basically like you have this kind of curve, you know, like X times Y equals K, and before you trade it at some points on the curve, after you trade, you just like picks up any any other points on the curve. And then whatever the Delta X is that's stimulative because you provide whatever the Delta Y is, that's the amount of detail that you get or vice versa. And that's just and then kind of the slope at the current points on the curve is the price. [01:16:33] And so that just is the whole thing. And that just allows you to have this exchange for tokens. And even if there's very few participants and the whole thing is just like so simple and it's just very easy to set out, very easy to participate in, and it just provides so much value to people. And the the fundamental the the distributed application infrastructure allows that somehow. Yes. [01:17:07] So this is a smart contract meeting. [01:17:09] This is all a computer program that's just running through some smart contracts who are just fascinating. They are. OK, do you think cryptocurrency may become the main currency in the world one day? [01:17:22] So where do you think we're headed in terms of the role of currency, the structure type of currency in the world? [01:17:29] I definitely expect some fiat currencies to continue to exist and continue to be strong. And I definitely expect fiat currencies to also digitize, have their own way over the next couple of decades. What's fiat currency, by the way? Oh, just like things like US dollars, like dollars and euros and yet these other things. And they're sort of backed by governments. Yes. [01:17:51] But I also expect a sort of cryptocurrency to play this kind of important role in just making sure that people always have an alternative if fiat currencies start breaking. [01:18:03] So if or if you're in some kind of very high inflation place like Venezuela, for example, or if your country just kind of gets cut off, cut off from other financial systems because of something the banks do a gift for any kind of if there is even some major trade disruption or something worse happens, then like cryptocurrency. These are the sort of thing that just because of the kind of global neutrality, they're just always there and you can keep using them. [01:18:39] It's interesting that you're quite humble about the possibilities of the future of cryptocurrency. You don't think there's a possible future where it becomes the main sort of currency because it feels like fear. [01:18:52] It feels like the centralized control by governments of currency is limiting somehow. Maybe my naive utopian view of the world. [01:19:03] It's and it's definitely very possible, I think, for cryptocurrency as being the main form of value to work. Well, like, you do need to have some much more price stability than they have today. And there are no stable coins and there are kind of crypto cryptocurrency is to try to be more stable than existing things like Bitcoin and ether. But that just is to me, the kind of the main challenge. Do you think or do you think that's a characteristic of just just being the early days is such a young concept. [01:19:42] Ten years is nothing in the history of money. And I think it's a combination of two things. One is it's it's still early days, but the other is a kind of more durable, any kind of economic problem, which is that the demand for currency is volatile. Right, because of like recessions, booms, changes to technology, lots of things. And if people's demand for how much currency they want to hold changes and if you have a currency that has a fixed supply, then the change in demand has to be entirely expressed as a change in value of the currency. [01:20:17] And so what that means is that kind of the volatility of demand becomes entirely translated into volatility and head of prices of things that are updated in that currency. But if you have a currency where instead the supply can change and so the supply can go up when there's more demand, then you have the supply ahead of absorbing more of that volatility. And so the price of the currency would absorb whatever the volatility on that topic. So Bitcoin does have a limited supply of specific fixed supply. [01:20:46] Yes. What? Was the idea and a theorem doesn't, but can you clarify just in the comments you just made, is a theory qualify to the kind of currency that you're talking about and being flexible in the supply? [01:21:01] And it's a bit more flexible. But the thing that you would really want is something that's kind of specifically flexible in response to how valuable the currency is in. And I'd recommend you to look at stable coins as well. SELEK things like die, for example. [01:21:20] It's like baseball that day and with stable coins. [01:21:26] Is that a type of cryptocurrency? It is the type of cryptocurrency. It's a type of cryptocurrency that's issued by a smart contract. One of these Ethereum computer programs that where the smart contract holds a bunch of ether and then it is basically like that people deposit and then it issues die. And the reason why people deposit is because they want to kind of go high leverage on their ether. And so it kind of pairs these two sets of users, one that wants stability and one that kind of wants extra risk together with each other. [01:21:57] And it basically creates or gives one set of participants a guarantee that they'll be that they have this asset that can that can be later converted back into the ether, but specifically at the end of the one dollar rate. And it has some kind of stabilizing network effects. [01:22:18] Yeah, yeah. It has many kinds of stabilizing mechanisms in it. [01:22:23] That's fascinating. OK, this world is awesome. Technically, just from a scientific perspective, it's an awesome world that I often don't see from an outsider's perspective. What I often see is kind of maybe hype and a little bit, if I may say so, like charlatanism. Mm hmm. And you don't often see, at least from an outsider's perspective, the beautiful science of it and the engineering of it maybe. [01:22:48] Is there a comment you can make of who to follow, how to learn about this world without being interrupted by the charlatans and the hype people in this space? [01:23:04] I think you do need to just know the specific just people to follow. Like, there's you know, there's all the kind of the cryptographers and the researchers. There's just like even just the theory research crew like myself and grad Danny Just and the other people were. And then the academic cryptographers before this today was at Stanford. And Stanford has the center for watching the research and of anybody that's really famous and great cryptographer is running it. And there's a lot of other people there. [01:23:43] And there's people working on zero knowledge proofs, for example, and Zucco from the caches of one other person that I respect. So I think if you follow the technical, you crawl along that. [01:23:59] Yeah, you just start with your and group and and look at academics day by day and so on, and then just cautiously expand the network of people who follow. Yeah, exactly. And like, if someone seems to to self promotional, then just like remove them because they're books that are. So there's these white papers and we just discussed about, about ideas being condense into really small parts is there are books that are emerging that are kind of good introductory material, so prefer historical ones. [01:24:30] Then there's like Nathaniel Popper's Digital Gold, which is just about the history of Bitcoin. There's one thing Matthew Lysenko doubts that there's one about the history of Ethereum for technical ones and there's a sense of Nobelists mastering Ethereum. [01:24:46] Great. So let me ask you, sort of sorry to pull back to the. The idea of governments and decentralized currency, you know, there's a tension between decentralization of currency and the power of nations, the power of governments, you what's your sense about that tension? Can. Is there some rule for regulation of currency? [01:25:13] You. Yeah. [01:25:14] Is there like is the government the enemy of digital currency of distributed currency or can they be like cautious friends? [01:25:27] I mean, I think the one thing that people forget is that it's clearly not entirely an enemy because they think if. There had been so much government regulation on the hand of centralized, issuing centralized digital currencies that we'd be seeing things that people like Google and Facebook and Twitter just kind of issuing them left and right. And then if that was the case, then decentralized currencies would still appeal to some people, but they definitely would appeal to less people than today. [01:25:59] So even in that sense, I think it's clearly been sort of more of a just kind of set the stage for the end of the existence of the sector in some ways. But also and I think some of both, there's definitely things that governments can do in some cases have done to hurt the spread of and of growth of a of by chance. There is things that they've done to help. And there have been, in some cases, definitely done a good job of going after fraudulent projects and going after some of the projects that have some of the craziest and most misleading marketing. [01:26:45] There is also the possibility that governments will end up using Billikens for a lot of different things like governments than they do a lot more than just regulating. There is also the they have the kind of. Identity records say they have a property registry is even their own currency is secure. Lots of different things that they're operating and there's even watching applications in a lot of those. [01:27:17] And they can you know, they can leverage technology to do a lot of good for our society. [01:27:23] It is a little unfortunate that governments often lag behind in terms of their acceptance of leverage of technology. If you look at the autonomous vehicle space, I in general, there there are a few years behind. It'd be nice to help them catch up. That's a that's always ongoing problem. [01:27:44] You met Vladimir Putin to discuss the centralised currency or you're born and where we were in Colombia. [01:27:53] It's a city about 150 kilometers south of Moscow. [01:27:56] In Russia, yes. Yeah. I grew up in Moscow. I mean, it's Vladimir Putin is the central figure in this part of the world. So what was that like, meeting or meeting him? [01:28:10] What was that experience like? He's taller and photos than in person. Yeah, he's. Yeah, that's right. He's five seven I think. Five eight maybe. Yeah, it's the. Unfortunately, we didn't actually have too much of a chance to talk to him, like I managed to see him for about one minute at the end of this meeting. And I did get a chance to see of some of the other end of government ministers. And he recommended some and some of them are are actually interested in trying to use some fortunes to look for various government use cases of corruption and other things. [01:28:51] And I have it's hard to tell from one conversation kind of what things are genuine and what things are just like gold watch. It is cool that you watch it. [01:29:00] But, you know, when I when I listen to, like, Barack Obama talk about artificial intelligence, there's certain things I hear were OK. [01:29:11] So he may not be an expert in AI, but he knows he actually studied it carefully enough to think about it like he can, like even if he's just reading a Wikipedia page, like he really thought about what this technology means. [01:29:26] Did you get a sense that Putin or some of the ministers like thought about block chain, thought about the fundamentals of technology, like understand it intuitively, or are they too old school to try to grasp it somewhere, old school somewhere or a new school? [01:29:43] It depends. It's it's definitely depends on who you talk to. [01:29:47] I mean, that's an open question for me with Putin, because Putin has said, I don't know, I've only talked to him for about one minutes, but sometimes you can pick up sort of insights as a quick comment. They're there about maybe you can correct me on this, but there are three thousand cryptocurrency is being actively traded. [01:30:07] Yes. [01:30:08] And Ethereum is one of a lot of people believe that there will be the main cryptocurrency. I think Bitcoin is currently still the main cryptocurrency, but Ethereum very likely might become that the main one. [01:30:21] Is this kind of diversity good in the world? This is sticking around. Should there should there be a winner? Like should there be some consensus globally around Bitcoin or around a theory? I'm like, what's your what's your sense? [01:30:34] I definitely think the diversity is good. And I definitely think also that there's probably too many people trying to make separate fortunes. And of right now, the numbers should definitely be greater than one and probably greater than two or even five. [01:30:48] Not three thousand, not three thousand. And also not even like forty high quality platforms to try to do the same thing. There's definitely this range from just like one person who just like wrongly thinks that you can create a cryptocurrency in like twelve hours and doesn't even think about kind of the community aspects of maintaining it, going to people actually trying, but only creating a really tiny one or two like scammer's to people making something that's actually successful. And then there's a lot of different categories of watching the project in terms of what it's trying to do and what applications it's for. [01:31:33] And I think the experimentation is definitely healthy. [01:31:37] If you look at the two worlds, that might be a little bit disjointed, but the distributed applications, cryptocurrency and in the world of artificial intelligence, do you see there's some overlap between these worlds that both worry about centralized control? Is there is some overlap. That's interesting that you think about do you think about A.I. much? [01:31:57] Yeah, and I think definitely and have thought about things like in like the ahead of control problems that a lot of the problems and all of those things you worry about the potential threat of A.I. It's definitely one of the things I worry about is they think but there's a lot of kind of common challenges because in both cases, what you're ultimately trying to do is you're trying to kind of get a simple system to direct a more complex system, like in the case of these strong eyes, the idea would be that the simple systems people and the complex system as well, whatever thing the people, the people end up unleashing on the universe, that will hopefully be a great thing in in the case of block change, the end of the complex. [01:32:48] Well, the simple thing is the algorithm, which is a piece of static and fully open source code. And the more complex thing is just the all of the different possible. And if human actors, the end of the strategy is that they might choose to participate in the network, do you think about your own mortality, like what you hope to accomplish in your life? [01:33:11] You know, I definitely I definitely think about ending my own mortality. [01:33:15] So that's if I gave you the option to live forever, would you? Depends a lot on what the find does the. [01:33:23] And if it's one of those things where I'm going to be a kind of like floating through empty space for ten to the seventy five years to know if it's forever worth of having, you know, of fulfilling life with meaning with with friends, to just spend the time with what's going to be meaningful challenges to explore an individual. Interesting things to be working on then I think absolutely. [01:33:54] It's beautifully put live forever but you'd have to check the fine print. I think there's no better way to end the talk. Thank you so much for talking to us. So exciting to follow your work distance and thank you for creating a revolutionary idea and sticking with it and building it out, doing some incredible engineering work. And thanks for talking today. [01:34:16] Thank you. Thanks for listening to this conversation with Vrdolyak Budarin and thank you to our sponsors Express, VPN and Masterclass. Please consider supporting the podcast by signing up to master class at master class dot com slash Lex and getting Express VPN and Express VPN. Dotcom neglects pod. If you enjoy this podcast, subscribe on YouTube. Review it with five stars and Apple podcast supported on Patron or simply connect with me on Twitter. Allex Friedman. And now let me leave you with some words from Retallack Budarin. [01:34:53] The thing that I often ask startups on top of a theorem is can you please tell me why using a theory and block chain is better than using Excel? And if they can come up with a good answer, that's when you know you got something really interesting. Thank you for listening and hope to see you next time.

本集資源與出處