Joseph Poon [ARCHIVE] on Nostr: 📅 Original date posted:2015-08-20 📝 Original message: On Fri, Aug 21, 2015 at ...
📅 Original date posted:2015-08-20
📝 Original message:
On Fri, Aug 21, 2015 at 12:12:15AM +0200, Anthony Towns wrote:
> But C could achieve that outcome on its own, just by delaying
> notifying B until near the timeout; no collusion necessary. In any
> event, if the transaction's going to succeed, the money on the B-C
> channel's HTLC is going to be C's, so C is mainly depriving itself by
> filing to communicate.
Yes, the point is that pending sends between participants in this cartel
have a shorter time than outside this cartel. So the point is that
C<->D<->E links will always have shorter HTLCs in transit than B's. It's
only C holding it up, but before that D and E decided not to hold it up.
> If you have B and D collude instead, so that E reveals R to D, and D
> reveals R to B instead of C, then the payments could go:
>
> D pays E
> D reveals R to B
> A pays B
> B pays D
>
> with the transaction from B->C and C->D remaining open until the
> timeout, but everyone else is square.??? That would inconvenience C,
> possibly cheaply for B and D. If there's already a channel between B
> and D (for the "B pays D" step), I'm not sure why B and D wouldn't
> just announce that, and once it was announced, I don't see why A would
> route via C anyway...
Perhaps I may be misunderstanding things, but the purpose of not
announcing is to collectively make any paths to C delay closing out the
HTLC as long as possible, so that anyone that transacts with C has to
wait a long time, which will decrease the incentive to transact with C.
So the threat is that if C is being attacked, and B is not colluding,
then A and B will dislike transacting with C, even though it's not C's
fault. There's insufficient incentive to push funds when closing out the
HTLC (as opposed to pulling), e.g. A->B, due to the off-chance they
forget, but I may be wrong here, this is a bit speculative.
--
Joseph Poon
Published at
2023-06-09 12:44:04Event JSON
{
"id": "bcef24a414455cbe8d962810b83f268d9b433cc9a9e7643b6f4b48676174999a",
"pubkey": "ccb4cc87c455b74febaee5929cfd0726421b2eea64ad2b16440b68e8c7433211",
"created_at": 1686314644,
"kind": 1,
"tags": [
[
"e",
"a92f734d740b85399f0e70711c3ef451f97eec2048c08c21ef8e0700fe174d1c",
"",
"root"
],
[
"e",
"9430e9b8eb0b95e82f32f777747689c68aeee568b3069ab864d7eacf9ee881bc",
"",
"reply"
],
[
"p",
"f0feda6ad58ea9f486e469f87b3b9996494363a26982b864667c5d8acb0542ab"
]
],
"content": "📅 Original date posted:2015-08-20\n📝 Original message:\nOn Fri, Aug 21, 2015 at 12:12:15AM +0200, Anthony Towns wrote:\n\u003e But C could achieve that outcome on its own, just by delaying\n\u003e notifying B until near the timeout; no collusion necessary. In any\n\u003e event, if the transaction's going to succeed, the money on the B-C\n\u003e channel's HTLC is going to be C's, so C is mainly depriving itself by\n\u003e filing to communicate.\n\nYes, the point is that pending sends between participants in this cartel\nhave a shorter time than outside this cartel. So the point is that\nC\u003c-\u003eD\u003c-\u003eE links will always have shorter HTLCs in transit than B's. It's\nonly C holding it up, but before that D and E decided not to hold it up.\n\n\u003e If you have B and D collude instead, so that E reveals R to D, and D\n\u003e reveals R to B instead of C, then the payments could go:\n\u003e \n\u003e D pays E\n\u003e D reveals R to B\n\u003e A pays B\n\u003e B pays D\n\u003e \n\u003e with the transaction from B-\u003eC and C-\u003eD remaining open until the\n\u003e timeout, but everyone else is square.??? That would inconvenience C,\n\u003e possibly cheaply for B and D. If there's already a channel between B\n\u003e and D (for the \"B pays D\" step), I'm not sure why B and D wouldn't\n\u003e just announce that, and once it was announced, I don't see why A would\n\u003e route via C anyway...\n\nPerhaps I may be misunderstanding things, but the purpose of not\nannouncing is to collectively make any paths to C delay closing out the\nHTLC as long as possible, so that anyone that transacts with C has to\nwait a long time, which will decrease the incentive to transact with C.\nSo the threat is that if C is being attacked, and B is not colluding,\nthen A and B will dislike transacting with C, even though it's not C's\nfault. There's insufficient incentive to push funds when closing out the\nHTLC (as opposed to pulling), e.g. A-\u003eB, due to the off-chance they\nforget, but I may be wrong here, this is a bit speculative.\n\n-- \nJoseph Poon",
"sig": "7b1b0276ee8fa19b367784786cbde4878256bb3df899cc38719542c7d525796c1f30d8893154eebcce0cc14ab3d1a9efd0df256adf7e9a6c8fd9793dbaa68888"
}