• 0 Posts
  • 73 Comments
Joined 2 years ago
cake
Cake day: February 6th, 2024

help-circle

  • You’re the one who mentioned “game theory” in the first place, I was just directly quoting you. My sentence was of the form “game theory doesn’t say X”, not “game theory does say Y”. I added quotation marks to clarify.

    My point here is that you can make whatever philosophical and ethical arguments about the situation you want, but none of game theory, Arrow’s theorem, nor the concept of a dictator have any bearing on it. It is an ethics question rather than a mathematical question, and it is an error to claim that your argument is a mathematical one.




  • i can kinda understand “liking the idea” in the same way that I “like” the very simple currency systems in single-player video games, where you do work (fight monsters, collect items, win Pokemon battles) and are automatically rewarded with currency you can use to buy items, which are always reasonably-priced because the game developers balanced it that way. It’s just that these systems have nothing to do with reality. But that simplistic view of money is pretty much all that’s left of cryptocurrencies if you look past the get-rich-quick scheme.




  • Yeah and I agree that in principle we should be trying to move to cryptosystems which aren’t known to be broken by quantum algorithms. I just don’t think the argument in the article is sound. There are costs, including actual security risks, inherent to switching. To name a couple:

    1. There will be implementation errors any time a new cryptosystem is implemented; this is practically inevitable especially if you are trying to rush the process through in 3 years.
    2. Quantum-unbroken systems are slower and require bigger keys than elliptic curve systems. Users will be inconvenienced by the resulting performance hit, which will both impede adoption of cryptography in general, and tempt implementors into using incorrect parameters.

    You have to actually weigh the benefits of resistance to quantum algorithm computers (which may or may not actually appear) against these costs (which certainly will). Paranoia isn’t a threat model.

    And to be clear cryptographers already know these things and if they still think we should all move to lattice cryptosystems despite the costs then that’s totally fine. I just wish they would write their blog posts to reflect that instead of talking about the 1% thing.