Dr Maxim Orlovsky's avatar
Dr Maxim Orlovsky
dr-orlovsky@BitcoinNostr.com
npub13mhg...mnym
Towards the stars, using aspera as weapons. Cypherpunk, AI, robotics, transhumanism. Creator of #RGB #BiFi #AluVM #Contractum. #Bitcoin dissectionalist
Dr Maxim Orlovsky's avatar
dr.orlovsky 4 months ago
Libre software is dead. Long live zk-libre software. The libre software was created to protect the rights of consumers: when they buy software, they must get the whole thing, not a part: (0) ability to run, (1) ability to learn from how it is done, (2) ability to redistribute, (3) ability to modify. Well, this was an excellent strategy against Microsoft and alike. But today it turns its back to individual developers, - those investing years and their own money to do the R&D - and then having large companies just stealing the result. This is fixable - by what I call zk-libre software. Zk-libre software grants the following FIVE core freedoms to the consumer: (I) ability to run, (II) ability to learn - from reverse-engineering, or docs and specs, coming with it, (III) ability to redistribute, (IV) ability to modify a reverse-engineered version or a re-implementation, created by learning the specs and docs, (V) ability to ensure the software has no backdoors and is formally-verifiable to be safe and secure, as well as proven not to misuse the user data. It also protects DEVELOPERS rights, their intellectual work and allows them to receive the reward and funding they deserve. These all are achieved by zk-proofs of the software properties. It would take decade(s) to make it possible, but we should start already today. The software which will be developed by individuals and meritocratic teams, with no spirit of egalitarianism and leftism, poisoning “open source” fake idol of today. #freesoftware #libresoftware #opensource #zklibresoftware #freedomtech #freedom
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
Sometimes decentralized systems are worse than centralized. When? Well, if we talk about individuation, centralized self-sovereignty beats decentralized social fascism. Thus, the need is not to decentralize everything - but to build freedom-preserving tech infrastructure: an infrastructure where society and its golems (state, common good, crowd, democracy) can’t destroy individual freedoms. Privacy is a cornerstone to that.
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
Feeraiser. Part 1: Chainbound forever. Once upon a time, far away, but not long ago, one Bitcoin hodler had held his sats for many years, throughout bull and bear cycles, never selling - just stacking. He never trusted software keys - thus was using only hardware wallets. He never trusted a single vendor - thus was using only multisigs. He did only air gapped setups, to prevent leaking any information - and he had metal backups of his seed words. One day a new air gapped hardware wallet had appeared on the market - with beautiful golden engravings and bitcoin signs all around. Instead of using chips (which can’t be trusted) it was using elaborate mechanical puzzle construction to compute addresses and signatures - and expose them as golden QR codes on its surface. He decided he needed to set up a new multisig with this device - and move all his funds on it, for them to be held in a much more secure and cold way. He sent some sats to the new multisig first - to test it - and sent them back. It all worked well. Thus he did a new transaction, spending all his existing sats - and paying them as to a thousand new outputs, all under the new multisig. Everything went smoothly, except… The new key, returned by the new device, was unspendable - and our hodler was doing 6-of-6 multisig. He didn’t know that complex device mechanics were a puzzling trap, and once the first successful payment was done the device had changed its inner configuration to generate only unspendable keys. He sent his transaction - but he put a high fee for it since he knew that blockspace was filled with some ordinal and inscription spam. The transaction got mined instantly - a new block had appeared within several seconds. The luck wasn’t without holder today: he didn’t know that the new multisig was unspendable. He kept stacking for many more years, and most of his transactions got buried under years and years of new blocks ... ... until one day, when bitcoin hit 10m and he urgently needed some money to have an emergent surgery for one of his kids he discovered that he was fooled by the box. He tried to increase the fees for at least the last transactions which he did just a few days ago - pitting them higher and higher until most of the output values were going into fees - but that price was still too small to force the miners to re-org. His sats now remain chained to the old blocks forever - buried under so much PoW that it will be unprofitable to do such a deep re-org which can return his original transaction back. The poor bitcoiner got mad and stayed in his room till the end of his days, trying to manually solve the puzzle and find a combination returning a private key for the public keys generated by the box. image
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
Here is my line of thoughts on #BiFi. Of course, >10 min for confirming tx with just dozen tx-per-sec throughput will not run financial system - as it can’t run money or payment system (not to mention lack of privacy/publicity, which is worse than in VISA/MC). Thus, #Bitcoin blockchain is a non-go. There are just two approaches to solve the issue: - build layers on top, providing scalability; - replace layer one (get rid of blockchain). 1. Layers on top. First, one can’t solve problems of blockchain by doing more blockchains. Thus, side/drive/crazy/*/chain-approach changes nothing in this regard. Yes, you can experiment with them or do some interesting stuff - but that is not our topic here. Next, we have Lightning, Enigma and Ark. The last two require softfork to be trustless, so this is years - but I think they can be a solution. Current Lightning (I call it Lightning BOLT, by the name of the current standards) fails with liquidity scaling - the infamous inbound liquidity problem. It also can’t route non-fungible state (not just NFT, but for instance bonds, which are usually non-fungible), thus for financial industry (but also for global payments) it will not work as it is. The only way for making Lightning working is to build multi-peer channels, where no inbound liquidity problem is present, and where you can operate non-fungible state. This is the future #1 for #BiFi. I just discovered that there is a proposal on this matter, which may enable such future: multipeer Nucleus Lightning channels - Channel factories and other approaches are a bit worse: they either require softforks (like eltoo), require all peers to be online (thus poor sybil resistance and scalability) or less efficient in liquidity management. Other ways - like fedimints - are trusted, thus it is not what we are interested in here (no benefit over trusted crypto DeFi like on Arbitrum or zk rollups). 2. Replacing blockchain. The only proposal for that is #prime, but I expect more to come (https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2023-June/021732.html). With prime, you do not need soft/hardforks, Lightning or anything else: it is quite simple to be built within a ~year (prime is simpler than bitcoin blockchain, all the business/verification is moved to RGB, which is already working). The only problem with prime is that for $BTC one can move in - but not come back to Bitcoin blockchain in a trustless way. I do not see that as a problem at all (there will be those taking the risk, and the adoption will gradually build, with most of bitcoins eventually moving to the prime), but some hodlers are afraid. Well, I will leave them alone so they can push for their favorite soft-forks for enabling trustless pegouts: zk-opcodes, simplicity, some advanced schemata with CTV/APO etc - or drivechains, if they think that economically-incentivized miners can be trusted due to some Nash equilibriums. Anyway, I do not care on that part and the future of #BiFi on prime/RGB doesn’t depend on them: if bitcoiners will be slow to move to prime, those who were brave enough with moving BTC one way will have their BTC priced higher, leading more BTC to move there - and so on. TL;DR: Without softfork one can build #BiFi either with Nucleus multipeer Lightning channels (hard way) or on #prime (easy way). With a softfork some Ark/Enigma/channel factories can also become an option - but a softfork will take >2 years and by that time we may either have prime or Nucleus. PS: What’s Next Those interested in designing & building #prime can join tech group by LNP/BP Association here: LNP/BP Association is the non-profit leading #RGB, #prime, multipeer channels development, which needs grants/patrons for 2024 In we are building products for the described #BiFi stack and are looking for VCs
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
A new tool for those interested in developing for #RGB has arrived: It is an explorer for the world of Bitcoin Finance #BiFi and smart contracts on #Bitcoin & Lightning ⚡️- and it is supports all the new #RGB 🚥 features from the latest v0.10 release. The interesting thing about it is that it is made without a single line of JavaScript on both client and server side. Client-side it is just pure HTML and CSS, no trackers or google analytics etc; server-side - it is made with rust (rocket.rs), not ysing any cookies or authorization.
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
MyCitadel 1.4 "Ivana Kupaly" has arrived! It ships with a number of usability improvements, bugfixes and new distributive formats. UI improvements * Improved fonts and colors for the transaction list * Context menus for transaction, address and coin lists * Copy txid, address, amounts, heights to clipboard via context menu * Ability to pay full wallet balance to an address Bugfixes * Fixed date & time precision for the list of transactions * Fixed display of transactions in mempool * Fixed signer renaming persistence in wallet settings * Fixed scrolling for the list of beneficiaries in the transaction composer Distributive * New distributive format: AppImage (!) * Included Python packaging in Windows, simplifying the installation process 📦 Grab it here: Or use `cargo install mycitadel` from the command line.
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
#RGB scalability is mind blowing: A single #Bitcoin  UTXO may contain assets from 100k different contracts - and all of them may be transferred in one tx. For 200 outputs - 2m contracts (!) Ethereum has ~2m contracts; all their state evolution can fit in a dozen of RGB bitcoin transactions. image
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
The question of trust is the fundamental question for the future of our civilization - and Universe as a whole. The economy is made of contracts. They either must be enforced through central authority (thus trusted) - or in a trust-minimized way by some technological means. However trust to central authority means unification, always leading to loss of adaptivity and extinction. The idea that “blockchain technology” can solve the trust issue is a fallacy: even if consensus protocols can solve some aspects of trust (like in PoW), the solution is unscalable - and all other aspects of trust can’t be solved at all. Contracts, as well as an economy, can be seen as a computation in a multi-agent system. The way one agent can prove something to the other agent without leaking sensitive information (i.e. preserving privacy) is by providing zk-proofs of its own state (or computation on a contract). Unlike blockchain, this can scale - and doesn’t leak privacy into an informationally-centralized (i.e. transparent) public ledger (aka blockchain). Economy means computing. Economy can’t exist without heterogenous autonomous self-sovereign agents - thus not only humans, but also AI-based agents - or other species after humanity will fork into multiple species or will face other civilizations. Privacy is fundamental. Zero-knowledge computing - and not blockchain - is the solution. image
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
“Scaling and anonymizing Bitcoin at layer 1 with client-side validation” - our new proposal, also sent to bitcoin-dev mail list. “We propose a way to upgrade Bitcoin layer 1 (blockchain/timechain) without a required softfork. The upgrade leverages properties of client-side validation, can be gradual, has a permissionless deployment option (i.e. not requiring majority support or miner cooperation) and will have the scalability sufficient to host billions of transactions per second. It also offers higher privacy (absence of publically available ledger, transaction graphs, addresses, keys, signatures) and bounded Turing-complete programmability with a rich state provided by RGB or another client-side-validated smart contract system.”
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
RGB is a computing platform. Like each of the other computing platforms (OS, Web, embedded, cloud, blockchain-based, VM-based) it has its own distinctive features. Unlike blockchain-based computing platforms, it has access to ephemeral state data, which may be a part of the Lightning channel state, or data provided by a decentralized data network. This is possible since in client-side validation, unlike in blockchain, a single contract may have an invalid state and this doesn’t affect the state of the platform as a whole. For instance, in Ethereum, if an invalid transaction under some contract is included in the blockchain, the whole blockchain becomes invalid (and a different tip is selected). In RGB no global consensus on the validity of all contracts and transactions is required. RGB isolates each of the programs (“smart contracts”) in its sandbox environment, which provides much better scalability and security than blockchain-based platforms. Unlike device-based and Web platforms, RGB doesn’t provide random memory access, I/O, or UI, which makes RGB well-suited for embedded devices and environments. One of the distinctive features of the platform is the use of the functional registry-based virtual machine (#AluVM) and functional type system. RGB is the first computing platform utilizing PRISM computing model, which is closer to cellular automation computing than instruction-based or neural networks. PRISM stands for “partially replicated state machines”, which at their core represent a highly-parallel multi-agent system made with a functional approach. Today, RGB (together with AluVM) can be run on x86, AMD64, Aarch64, microcontrollers, and WASM instruction set architectures, i.e. it is a ubiquitous platform (desktop, mobile, server, embedded, Web). image
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
Web2, Web3, Web5… What are those? Let’s start with defining Web itself. My take: #Web is a computing platform - like POSIX, Windows, Java, embedded etc. Web differs from Internet the same way Windows differs from BIOS. As a computing platform Web brings a number of protocols, toolchains, SDKs and technologies: 1. Networking is restricted to the TCP/IP subset: HTTP(s), WebSocket and WebRTL 2. Supported instruction set architectures: WASM, JavaScript virtual machine(s), both browser- and server (NodeJS)-based. 3. UI uses HTML, CSS, DOM, WebGL, Canvas. On top of that UI frameworks proliferate - like in POSIX world we have Qt, GTK etc in Web world we have React, Angular, Vue, Svelte etc. Why Web is so popular? It was the first computing platform created at the age of networking - and for network-based apps first. It allows to run apps without installing them - and do that on any consumer UI-based device: desktop, laptop or mobile. It allows simple creation of cross-platforms apps. It avoids censorship of app stores. The drawbacks of Web are mostly direct consequences of its advantages: - low security: a remote code is executed locally; - privacy leaks as a result of client-server model; - agility allowing cross-platform UI and schema-less network messaging results in “spaghetti code” and wired JavaScript VM non-determinism - Web is poorly decentralized and censorship-resistant: an inherited client-server model doesn’t allows proper decentralization. Web passed through a generations: Web, Web2 - and now attempts of Web3 and Web5 are there. The main difference between Web and Web2 was: - interactivity (brought through JavaScript AJAX, and later WebSockets); - dynamic UI (with JavaScript DOM manipulations); - abandoning of Java applets; - move from CGI to custom web servers with embedded server-side business logic (NodeJS, Python and web frameworks in almost each language); - better markup languages (HTML5, CSS3), including graphic markup (SVG, Canvas, WebGL). What people were looking for in post Web2-era etc? - better decentralizaiton and censorship-resistance; - integration of native internet money and payment methods; - smart contracts (complex automations based on cryptographic and economic incentives); - better privacy. Does Web3 or Web5 delivers on that? No: it promises to deliver, but fails: there can’t be a privacy nor scalability with blockchain-based things; there can’t be censorship-resistance with PoS; there can’t be decentralization with the old client-server hosting of content. How the proper “next Web” should look like? - based on P2P (where is possible) or relay-based systems (where P2P is impossible); with relays being self-hosted; - end-to-end encrypted communications; - over Mix networks (Tor, Nym, I2P etc); - authentication based on public key cryptography (and not passwords) and decentralized identities (SSH, GPG and future systems); - based on zero-knowledge state; i.e. not leaking privacy data to the web servers or nodes; - using deterministic functional computing; - using PoW and bitcoin single-use-seals - but not for storing a state like in Web2 (!); only for cryptographic commitments (OTS etc); - using client-side-valdiated smart contracts like RGB; - integrated with Lightning payments and #BiFi (bitcoin finance); - using decentralized data protocols like #Storm, #Slashtags, #Nostr-based and like solutions. I call this future Web4, and we are working on it at @lnp_bp, @pandoraprime_ch, @cyphernet_io together with parter projects like @nymproject @radicle @DarkFiSquad doing things like mixnets, end-to-end encryption, #reNostr, #Storm, #RGB smart contracts and other exciting projects. Everyone is welcome to check one of our releases we did this year: cyphernet, a Rust library providing support for mixnets and pure rust implementation of Noise E2E encryption: More fill follow soon!
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
Cryptography is the ultimate computing science. What resembles the main value in computing science is computationally irreducible computing. Cryptography is the science of NP!=P, i.e. computationally irreducible computing. The real intelligence is computationally irreducible; future civilization will compute only in irreducible way; i.e. there will be no forms of computing which is not a cryptography. Also on the topic:
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
My comparison of different elliptic-curve based signature schemes. Overall, #ECDSA and #Schnorr look poorly comparing to #EdDSA and #BLS; I see no reasons of selecting them. EdDSA is better than BLS due to support of adaptor signatures (and scriptless scripts like DLCs); BLS are better in size and possible Lamport combination. Thinking in terms of #reNostr, the obvious choice should be not Schnorr but EdDSA (not BLS, since EdDSA are used in most of identity systems like SSH and GPG). Use of Schnorr sigs in #Nostr are noncence: public key re-use (a condition for a social network) leaks private key. image
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
Choose where you belong to! I had to work on distributed computing (#RGB) and now “ascending” to game theory models (RGB- and LN-based #BiFi), userland (Contractum language, Descriptor wallet library) & apps (@mycitadel_io wallet) Wish I can “descend” to cryptography eventually image
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
For those who suppose to be self-sovereign individuals: there are four things which you should control and take care of by yourself - without delegation. 1. Your will, desire and actions (including speech, transactions, and information transfer). This is called freedom. 2. Your health: study medicine (it takes just ~10 years, with future longevity it won’t be a problem). 3. Your physical security: the price of getting you (kidnapping, hunting, arresting) must be higher than the potential benefits for the bounty hunters/gangsters/government. 4. Computing: you must be able to compute and control what is computed by your hardware. In fact, this is the same number (1) - just your mind extended to external computing mediums. Running Bitcoin Core is not “don’t trust verify”: you must be able to ensure how it operates, what consensus logic it has and how it is configured. The same applies to all other critical software which affects (1)-(3): how you think, how free you are, how you are healthy, and how secure you are. Don’t trust: just do it yourself. #NewMotto
Dr Maxim Orlovsky's avatar
dr.orlovsky 2 years ago
I am doing AI since 1998. Those days, when I wrote my first “AI” app in C for my Neuroscience PhD at Medical University - the app which was doing recognition of cells in microscopic images (it was also a “dApp” running on a computer cluster of the University network :) - those days the “AI” was still called “neural networks” and perceptrons. So I have some knowledge of the industry. It is so much fun seeing people being scared of digital parrots of ChatGTP kind - and governments addressing those “issues” in their usual “COVID dovecot” style (“fly in, shit over everything around and fly out”), that I can’t stop laughing. Yes, digital parrots will cause many people to lose their jobs - but this fact says much more about people lacking real intelligence than AI possessing any intelligence. Jobs were taken from people many times before - agriculture took the jobs of hunters, engineering took the jobs of slaves, automation took the job of factory workers etc, etc. None of them was a form of “intelligence” - neither ChatGPT is. Do you know who was fighting these technologies for the “good of people”? Luddites. So congrats to the EU, which is now run by Luddites - and those “advanced opinion leaders and innovators” from the “crypto industry” like Vitalik Buterin welcoming regulations. “Have fun staying stupid” - probably this should be the new meme for those who’d like to address neo-Luddites. But what about real GAI? Is it possible? Would it happen one day? So far, even most humans, possessing the same brain, is still not able to develop a proper generic natural intelligence (GNI), so what we can say about GAI? Of course, it is possible, but not with training on human-generated data sets of some large statistical models using differential equations and calling that “neural networks”. These neural networks are like guinea pig: not a pig - and not from Guinea: they are neither “neural” nor “networks”.