Epicenter - Learn about Crypto, Blockchain, Ethereum, Bitcoin and Distributed Technologies - Neha Narula: MIT’s Digital Currency Initiative – A Research-Driven Approach to Blockchain

Episode Date: July 4, 2018

When the Bitcoin Foundation fell apart and funding for Bitcoin core development was needed, the MIT founded the Digital Currency Initiative to step in. In the years since, the DCI has evolved into a v...ibrant center of cutting edge research on some of the most difficult challenges around blockchain technology. DCI Director Neha Narula joined us to discuss the DCI’s position between academia and industry, their policy on conflicts of interest, and their most fascinating research topics. Topics covered in this episode: How her interest in distributed systems and scaling lead led her to the blockchain space The mission and history of the MIT’s Digital Currency Initiative How cryptocurrency might evolve over time as an academic field The DCI’s project on digital fiat currency How zkLedger could enable privacy-preserving auditing for distributed ledgers Why sharding is unlikely to succeed in the short- and medium term Why Neha is most optimistic about layer 2 approaches to scaling like lightning network The story of discovering and writing about IOTA’s vulnerability How DCI handles conflicts of interest and strives for neutrality Episode links: MIT Digital Currency Initiative Neha Narula Personal Website What’s New at MIT’s Digital Currency Initiative The Importance of Layer 2 Cryptographic vulnerabilities in IOTA zkLedger | the future of audit zkLedger Whitepaper Neha Narula: The future of money | TED Talk This episode is hosted by Brian Fabian Crain and Sébastien Couture. Show notes and listening options: epicenter.tv/242

Transcript
Discussion (0)
Starting point is 00:00:00 This is Epicenter. Episode 242 with guest Neha Narula. This episode of Epicenter is brought to you by DAPCON. DAPCON is a two-day developer conference, organized by diagnosis taking place in July 19th and 20th in Berlin. The conference focuses on decentralized applications, tooling, and scaling solutions on Ethereum. Go to dabcon.io to get you a ticket today. Hi, welcome to Epicenter, the show which talks about the technologies, projects, and startups starting decentralization, and the global blockchain revolution. My name is Sebastian Quiju.
Starting point is 00:01:06 And my name is Brian Fabian Crane. We're here today with Neha Narula. She's the director of the Digital Currency Institute at the MIT, at the Massachusetts Institute of Technology. So we did actually have an episode before a few years ago with Gavin Andreessen when we talked a little bit about this because he was back then with the DCI. But the DCI is doing some really interesting work
Starting point is 00:01:29 around research and, policy around cryptocurrencies and blockchain. So I'm super excited to have Neha on today. Yeah. Thank you, Brian and Sebastian for having me. I'm really excited to talk to you. It seems like since back then, the DCI has evolved a lot. It's doing a lot of different things. And we can speak about that in a little bit. But we'd be curious to hear from you first. Like, how did you become involved and interested in blockchain? Yeah, totally. So I really feel like I got into the field kind of late, but I think a lot of people feel that way, probably. And we all have to remember that it's still such early days.
Starting point is 00:02:10 So I had some really good friends who were very into Bitcoin as early as 2011, and I completely ignored them because I was in the middle of doing my PhD. And as I think is kind of notorious, a lot of academics weren't really that interested in Bitcoin at the time. So I was doing my PhD at MIT in distributed systems and databases. and it wasn't until I graduated in 2015 that I really started getting interested in this area. And when I finished my PhD, I did something a little bit unusual. I didn't have a plan for what I was going to do after my PhD. So I didn't have a job, I didn't have a postdoc, I didn't have a research position or anything.
Starting point is 00:02:50 I was just kind of floating. And the reason for that is because I really feel like I kind of needed a bit of a reset. So I didn't want to go and build a database or something like that and, you know, work for a big company. And I was really sort of feeling this disconnect between what I was working on and the problems that I found intellectually challenging and interesting and helping the world, like making a real impact on the world. And so I decided to just take some time off and kind of think about things. And it was at this time, the summer of 2015, Bitcoin was going to. through the scaling debate. And during my PhD, I'd been really interested in how to effectively scale systems.
Starting point is 00:03:36 And so I was like, hey, you know, maybe I could look at this problem a little bit. Maybe just see what's going on. Like, why is it so hard to scale Bitcoin, right? This was right before the first scaling Bitcoin conference happened in Montreal. So I started learning about it. And once I actually figured out how the system worked, I was totally hooked. and I was like, wow, this is amazing. This is the largest consensus algorithm in the world.
Starting point is 00:04:01 As someone who had been intellectually interested in consensus algorithms, that's an amazing thing. And so from then on, it was just down the rabbit hole. That's a fascinating story then. So let's perhaps transition to the DCI, the Digital Currency Initiative, at the Massachusetts Institute of Technology. So can you tell us what is the mission of the DCI? Yeah, so the mission of the DCI is based on, it's pretty lofty, but the idea for us is we want to help create the Internet of value.
Starting point is 00:04:35 We want to make this, we want to help bring in, usher in this set of open protocols that's going to make it as easy for people to move value around the Internet as it is for them to move information. So that's sort of high-level everything that drives us. What kind of derives out of that is we focus on open source technology, open systems, open access. We are pretty fundamentally technology focused. A lot of what we're doing right now is about how to solve some really big challenges related to making that vision a reality. And those challenges around things like scalability and privacy and figuring out sort of like how we need to operate in this regulatory environment. What kinds of things do we need to do as an academic group as part of a university to help this ecosystem as a whole. move forward. So you guys are at the MIT, right, which is, of course, a well-known university. And it's a somewhat independent institute. Can you explain, like, what's the relationship between, you know, the DCI and MIT
Starting point is 00:05:41 and maybe more generally the DCI and academia? Yeah, sure. So we're a little bit weird. It's not a traditional research group. So I had the DCI, but I'm not a professor. We do some research, but we don't just do research. So we're an initiative at a part of MIT called the MIT Media Lab. So the Media Lab is this, the MIT has a bunch of different labs.
Starting point is 00:06:07 There's the Media Lab, there's the computer science and artificial intelligence laboratory, there's a ton of other labs around engineering, ocean science, all sorts of different things. The Media Lab is under the School of Architecture, which is a little bit interesting. It was founded about a little over 30 years ago. And it's kind of this crazy, wacky mix of people. It's all sorts of different disciplines and topics. There are people who are working on synthetic neurobiology. There are people who write operas.
Starting point is 00:06:39 There are people who do art exhibits, people who build artificial intelligence systems. It really runs the gamut. So in some sense, this is the perfect home for a group that's going to focus on cryptocurrencies and blockchain technology. So we're a group of a few core research scientists. So we're all in the Media Lab at MIT, and we work on a variety of different projects, but we also work with companies a little bit. The Media Lab is actually funded by 85 large companies who are part of a consortium. And so those companies go above and beyond to help fund the DCI as well. We also work with a lot of different professors and students at MIT.
Starting point is 00:07:23 So there are a couple of economists. There's some computer science professors we work closely with. And we have students, of course. So lots of undergraduate students at MIT like to work with us. We also occasionally sort of talk to PhD students and help advise with their projects. And we've had a couple of master students so far at the DCI. So that's been really fun. The students are great.
Starting point is 00:07:48 So you mentioned that 85 companies are funding the media lab, or is there also like direct funders of the DCI? And are there, for example, cryptocurrency and blockchain companies that are funding DCI? Or how are their kind of resources where are they coming from? Yeah, great question. So our initial funding came from this fundraising round that was done in like 2015 to 2016. So I think it helps to explain a little bit of the origin of the DCI first. So the DCI really, it was started by Joey Edo, who's the director of the Media Lab. And actually Jeremy Rubin, who's an undergraduate from MIT. He sort of, I like to think that Jeremy like brought Bitcoin to MIT. He founded the MIT Bitcoin Club and he did this big thing in 2014 called the
Starting point is 00:08:46 the Bitcoin drop, where every undergraduate got $100 worth of Bitcoin. And they designed this huge experiment about it, ended up writing a great paper about innovation and how it spreads through communities. So Jeremy was one of the people who really made that happen. And he sort of helped Joey, I think, get to the point where he realized how important this technology was. And at the time, the Bitcoin Foundation was kind of imploding. It was going through a lot of chaos and a lot of trouble.
Starting point is 00:09:19 But there were these three developers who were employed by the Bitcoin Foundation. It was Gavin Andreessen, Vladimir van der Leyen, and Corey Fields. And these developers were working on Bitcoin for a nonprofit, the foundation. They wanted to keep working on Bitcoin. But if this foundation went under, they wouldn't have a job anymore. So Joey stepped in and said, okay, look, why don't we just support them? Why don't we, you know, try to get a university-backed fund together to support core protocol development? So that's what happened, and we raised a fund.
Starting point is 00:09:55 We raised a fund that, I think, was from, like, 20 different Bitcoin-related companies and individuals in the space, and we have a blog post about it. No more that – it was, like, on the order of a million dollars, and no more than 100,000 was. from any one company. So it was like pretty well distributed. Since then, our funding has come from the companies that fund the Media Lab, like I said. And those are pretty large companies. And also individuals who have wanted to give us money and who have wanted to support
Starting point is 00:10:27 our mission. You mentioned something before that was interesting before we started the podcast that, you know, cryptocurrencies are kind of this new field. So how does that kind of fit in? Do you think that this is a sort of test bed, then that it becomes like an academic discipline? Or do you think because it is a new field, it actually makes sense that it is more in a sort of, you know, almost tangential attachment to academia? How do you see that evolving? That's a great question.
Starting point is 00:11:00 So one thing I think that really distinguishes the work that we do at MIT from other places is that the DCI is about multiple different departments. and multiple different schools of thought coming together. It's not just the computer science department. And I think that's actually really important because cryptocurrencies and blockchain technology are so much more than just computer science. Like, yes, it's distributed systems. It's cryptography.
Starting point is 00:11:29 It's networking. But it's also regulation and game theory and market design, finance, law. Like there's so many different areas that all need to come together. and we need to figure out. And like something that's been really difficult for me is all these different areas speak very different languages.
Starting point is 00:11:48 So it's hard for people, for experts in them to even talk to each other effectively. So it's been really interesting to watch this happen. And part of the reason that I'm at the DCI is because we have people who are world-class economists, like world-class former regulators and world-class computer scientists all working together. Now, about what this is going to be, you know, I mean, I think we all recognize that something
Starting point is 00:12:17 very special is happening here. Like I said, it's more than computer science. I think that this could go in a lot of different directions. One thing I've been thinking about a lot lately is the history of computer science. So 70 years ago, computer science didn't really exist. Like, it wasn't its own discipline. It was, like, mathematics and engineering. And then I think it was at Purdue in the 60s that the first PhDs in computer science were awarded.
Starting point is 00:12:47 And now, like, computer science is the top undergraduate major at MIT and Stanford. And if you think about it, 70 years is not a lot of time to go from like zero to 60, right? Like that, you know, now it's the most popular undergraduate major. It's like a huge discipline. It's affecting everything in our lives, and it didn't even exist 70 years ago. So I could see something like that happening in the space as well. Or maybe it's something that sort of, you know, is a layer that goes across many different disciplines. So it's not a new department per se, but in computer science and economics and law,
Starting point is 00:13:23 there are sort of like subspecialties where you can kind of like, you know, learn this field. And we see new disciplines like emerging all the time. Bioinformatics is relatively new. People are starting to create a field, a discipline of stuff. around AI and ethics. So I think it's really exciting and I think it's part of our job to help shepherd this in to help create this because you really need in order to create a new discipline you need really rigorous well thought out foundations like you need really
Starting point is 00:13:55 good models and I think at MIT we're in a unique place to be able to create this so many disciplines were born at MIT like the internet was partially born at MIT so I think we're in a really good place we have have a history of sort of shepherding these new fields forward. And so that's something that we really want to do. So currently, what is the status at MIT when you look at the, you know, the normal university life of, you know, courses being taught in different departments? How is blockchain infiltrating that? And where is it taught in which ways? Yeah. So I think we at the DCI taught the first blockchain technology class,
Starting point is 00:14:37 MIT in 2015 in the fall of 2015. And it was really popular and a lot of really great things came out of that. And then we taught that class through the Media Lab. And it was kind of more application focused. We had a lot of guest speakers, a lot of people come in and talk about different things. But 2015 was really, it was a very different time. You know, it was like the Ethereum network had just launched. And so, you know, things were still developing. We taught a class in 2016, a graduate computer science class. I co-taught it with Sylvia McCauley. And that was really great.
Starting point is 00:15:14 So that was kind of a different intersection of students. It was sort of computer science graduate students who were learning about the space for the first time. And we're really like learning the fundamentals. And then this past spring, Tad Stridja and I taught sort of a more like design and engineering focused class around cryptocurrencies and blockchain technology. And that class was really about like what are the fundamentals. you know, like signatures and hashing and proof of work and transaction formats and forks and, you know, really about like how do you put these pieces together and why are they designed the way that they are. And that was also really fun. But they've been like three really different classes because I think we're still figuring out what the right way is to teach this topic.
Starting point is 00:15:57 One thing that has been true of all our classes is that on the first day they are completely oversubscribed. They are so popular. We've also had a couple classes through Sloan, the business school, also incredibly popular. There's just like this hunger from students to learn more about the space, which is really exciting. So the DCI has several different areas of research that focuses on. And if you go to the website, some of the ones that are featured there are variable. And there's some really good explanations on each of those research topics. But before we go into detail on some of those topics, tell us, you know, when looking at research topics in the blockchain space, it seems like there's just an ocean of research topics.
Starting point is 00:16:45 There's just so many things that one can look at, you know, from the technical side, the economics, the sort of social change. I mean, like, it just runs the gamut. When looking at different topics to research, what are some of the things that goes into decision making about which ones? you choose and which ones you focus on. That's a really great question, and that's really hard. And part of the challenge is that this space moves so fast that you think you have a handle on things. You think you're like, okay, this is how things are laid out, this is what we're going to do.
Starting point is 00:17:16 And then something new happens and you're just like, mind is blown. So I think what we've landed on is really trying to think about, okay, we're not like a team of 30 software engineers who are going to turn. out a product, right? We're not in it to make money either. We're an academic group, but we want to do what is necessary to move the space forward, and we want to do the things that other people are not necessarily going to do. And so there's a few different ways that we choose what to work on. First of all, we're a group of research scientists. We kind of get to pick what we want to work on, which is really exciting. So, you know, it's not like, it's not
Starting point is 00:17:56 as top down as you might think. I believe that people do the best work when they're really motivated and passionate about the work that they're doing. So people should be able to decide from themselves what to work on. But aside from that, I think that our values drive a lot of our work. So we have a big focus on technology. And like I said earlier, I think that there are a few really big pieces in the space that need to be figured out
Starting point is 00:18:21 before we can get it to a billion people. A major, major, major part of that is scalability. How do we build functionality in a way that is going to scale beyond, you know, a few million people, but into the billions. Another really challenging area is around privacy. So, you know, it's just not really feasible to have a financial system in which every transaction is out there in the public. But at the same time, you know, we can't just hide everything.
Starting point is 00:18:54 It doesn't work for society. Like, you have to be able to measure things about the financial system as a whole. You have to be able to understand what's going on. And so how do we like address this tension between this need for privacy with this need for like some sort of transparency? That's something else that we really spend a lot of time on. And then a third thing I think is that, you know, this field could really go in a couple different directions.
Starting point is 00:19:20 So one sort of thing I like to bring up a lot is BitTorrent. So BitTorrent at one point in time was like a huge majority of the traffic on the Internet. peer-to-peer file sharing. And now I think it's around 3%. So, you know, BitTorrent really showed people that they could get music and movies over the internet. And at the time, that wasn't something that people just took for granted. And like none of the incumbent media companies were offering that. But because of BitTorrent, because BitTorrent existed, the companies realized that this was something that people really wanted. And they realized that they needed to step up and create it or they were going to go out of business. And so now
Starting point is 00:20:01 we have things like Netflix and HBO Go and Amazon Prime. I don't think we would have those things if it weren't for BitTorrent. So one way this technology might go, I'm not saying it's the way I want it to go, but one way this technology might go is it's like it catalyzes the incumbents to change and get better. And I mean, I think no matter what happens, it's going to catalyze the incumbents to change and get better, but that doesn't mean that the incumbents will still be around. but that's sort of one way that this could go. And if it goes that way, I think part of that is motivating central banks
Starting point is 00:20:36 and motivating sort of the people who control the currency in the world to move closer to cryptocurrency in the way that our Fiat currencies exist. So another big project that we're working on is around digital Fiat currency. So what would it look like? How would we want that to look? we were to take sort of the best parts of cryptocurrency and move them over to design a digital dollar, a digital euro, or a digital pound, you know, what would that even, what should that be? And I think we're in a good place to work on that because at MIT, we can work with central banks.
Starting point is 00:21:13 Like, we can actually talk to them directly and we can guide them. And so we're working with a group of six central banks to kind of answer some of the really thorny questions that exist around, that like sort of the issues that exist around this question of like how would you design a digital fiat currency okay well let's maybe stay on this topic for for a little while and we can address other other research initiatives at the DCI later in the episode so let's talk about this notion of a digital fiat currency this is a topic that we've discussed on the show quite a few times and so what is the work that the DCI is doing, and you mentioned also that you're working with central banks, or at least discussing with central banks, can you tell us about how this topic is being received,
Starting point is 00:22:02 how digital currencies in this sort of form that they take in terms of like cryptocurrency and blockchain, like how is that topic being received at central banks? Yeah, so I was just in Geneva a couple, a month or so ago, at this event called the Geneva Conference, which was a lot of European Central Bank. bankers. And it's really interesting. They're very skeptical that cryptocurrencies like Bitcoin could replace fiat currency. I think rightly so. They raise a lot of the challenges around scalability and privacy and energy consumption and people losing private keys, et cetera, like all the usual questions. But at the same time, they're a bunch of nerds and they're
Starting point is 00:22:50 fascinated by this technology too. I think they're really interested and they're really excited about it actually. Yeah, it was really interesting for me. This was the first time I'd spent a lot of time around economists and especially central bankers. Central bankers are quite conservative. Like, they're very focused on maintaining financial stability. That's very, very important to them. They see that as their job. And so I think when you realize they're coming at it from that lens, you understand why they're like not jumping up and down for joy about about cryptocurrencies. It's it's pretty disruptive, but at the same time, they're interested. I don't think that, like, we're working with a pretty large central bank.
Starting point is 00:23:30 So we're working with the Federal Reserve, the ECB, Monetary Authority of Singapore, the Bank of Japan, Bank of Canada. And this is all on our website, so you can go look and see. And, you know, I don't think that any one of these institutions is going to be the first to really issue digital fiat currency. but I think that probably a smaller central bank will really, really soon. Like it's going to happen. We're going to start experimenting with it.
Starting point is 00:23:56 There's still so many, like if you realize that the focus of these institutions is on financial stability, though, like it's really hard to figure out how to do that in a way that's safe. That's not going to totally destroy your economy or cause a run on the banks or, you know, just have like these really unintended side effects. And I think a major challenge standing in the way is, around user experience and UI and sort of like what's the interface with the average citizen when you're talking about digital fiat currency.
Starting point is 00:24:26 Like right now, people can't even handle usernames and passwords. Like people are getting fished and hacked constantly. Like public-private key pairs is like a whole other paradigm that people don't really understand. So we're still like really far away from being able to just give everybody a digital wallet and have them hold their money on their phone or in a hardware wallet. You know, it's not, we're not ready for that yet. There's still a lot of stuff to figure out on the way. Yeah, I agree.
Starting point is 00:24:55 Like, as an example, we just had Eric Lachshavec of Ledger on last week. And although they're doing fantastic work on the user experience side and also on the security side, we're still a lot years away from being able to give, you know, just your average person a hardware wall and say, hey, like, these are your keys and, you know, you're going to have to manage your own currency. You know, but one could imagine some sort of an intermediary solution where a central bank could be some sort of custodian or at least partly custodian of the keys.
Starting point is 00:25:27 And also perhaps some intermediary companies like payment service providers also providing security there, but where ultimately the sovereignty of your keys lies in your ability to sign like a multi-statement of transaction or something like that. Yeah, I think we're getting closer. Like, you know, we're starting to experiment and try to figure these things out. Again, you have to remember central banks are coming from this position of, like, extreme conservatism, right?
Starting point is 00:25:53 Like, they just want to make sure the economy doesn't explode. The person leading this effort here at the DCI is a former central banker, actually. His name is Rob Ali, and he was the former manager of digital currencies at the Bank of England. So he really understands kind of both sides, and he has some really interesting ideas. is about a new type of structure because central banks probably aren't going to like they are not in the business of servicing customers directly that's just not what they do that's not what they're good at they would mostly rather that the private sector kind of handle that side of things and that's kind of why we have the banking industry that we have today banks are the ones who interface with the customers
Starting point is 00:26:36 but can we create a different structure around that and what does that structure look like that that's sort of the question. Is there any thought given to, and I know this is probably quite unlikely, but is there any thought given to sort of the scenario where central banks begin to, in some places, be disrupted by initiatives like cryptocurrency initiatives and decentralized currency initiatives? I mean, I think that's why central banks are paying attention, because this is something happening in the private sector that's a new form of money. It really is a new form of money. And it is possible that a lot of people really start using it, right? So I think that there is a
Starting point is 00:27:21 potential for that. But I think that's a good thing. I think that puts pressure on the central bankers and sort of that ecosystem to kind of step up and start thinking about what could this look like. You know, I think I do want to mention one thing, which is I think, I don't know if we've been having the most productive conversation across the two worlds, the cryptocurrency world and the central banking world. I think, you know, there's a lot of talk about how, like, fiat currency is dead, and, like, cryptocurrencies are going to replace it, and central bankers are just, like, what are you talking about? You can do seven transactions per second. This is, like, this is not going to fly. Why are you telling me this? And, you know, I kind of, I get both sides. Like, on one
Starting point is 00:28:02 side, well, this is not forever. We are, like, cryptocurrencies are moving forward. We're going to address the scalability issues. We're going to address a lot of these issues. But at the same time, via currency has a place. Like, there's a reason that countries have their own currency. There's a reason nation states exist and, you know, they need to be able to control their own economy. So you can't just say, like, one or the other. We're going to live in a world where both exist. And the question is, how are they going to both exist? And also, like, are they going to move closer together? I think those are really interesting questions. Yeah. So for people who are interested in this, we did an episode, this was
Starting point is 00:28:37 several years ago, maybe three years ago, I don't know, with David Andolfofer, I don't know if you know him, but he's at the Fed. And he wrote this, he's a researcher there and he wrote this article or these articles on this idea of a Fed coin. And it was interesting because we did this episode and actually talking with him, we realized just how disruptive the idea of a Fed coin is too. because at least it seemed like it's actually incompatible with like fractional reserve banking. You know, if it's a bearer asset, even whether it's issued by a central government or not, then you can't really have fractional reserve banking. So that was very interesting.
Starting point is 00:29:18 So it's hard for me actually to reconcile how you could have fractional reserve banking and even a fiat digital currency at the same time. Is that also, I guess, one of those thorny questions or? Yeah, I would say so. I think that's the question that I've heard the most talking to central bankers is what about, you know, if digital fiat currency coexist with the current system of fractional reserve banking, then what does that mean in times of crisis? Is there a flight? Is it, you know, are you going to exacerbate the potential of a run on the banks? I think that's a big question
Starting point is 00:29:55 that a lot of people would like to think about and understand and have answers to. I don't know the answer. I don't know how both systems can coexist effectively, but what I do know is that with the advent of more and more stable coins, like this is, you know, I think something's going to have to happen. Like, people are pumping stable coins out into the market at a pretty fast clip because there's a real desire for stable coins. And by stable coins, I mean, like, coins that are kind of pegged, try to be pegged to the dollar.
Starting point is 00:30:27 You know, whether or not those are good designs is another question. but I think that part of the reason that stable coins even exist is because of the lack of a digital fiat currency with cryptocurrency like properties. So in some ways, the private sector is stepping up already and just saying, hey, we're going to figure out how to do this, whether it's with reserves or an algorithm. And so I think that central bankers and governments are going to have to deal with this. Cool. Yeah, absolutely. I think that would be a fascinating area of a key. in the next years. This episode of Episunner is brought to you by DabCon Berlin. Dapcon is a non-profit, two-day developer conference
Starting point is 00:31:09 that brings together the Ethereum community to learn, build, and think big around the topic of decentralized applications, tooling and scaling solutions for Ethereum. The conference organized bygnosis is taking place on July 19th, 20th in Berlin. So put that in your calendar now, July 19th and 20th in Berlin.
Starting point is 00:31:28 There will be panel discussions, talks, workshops, Find topics like governance mechanisms, usability, or the next generation of decentralized exchanges. So this is a conference organized by developers and for developers, and that's good news for you because it means there will be all useful content and none of the fluff that you see at other conferences. And they have a fantastic roster of speakers. I counted, and there's actually 11 former episode of guests among the speakers and one host. And those include people like hypernet Eric founder, Lloyd Liu.
Starting point is 00:32:01 the founder of Gollum, Julian Zabwisdowski, the co-founder of Status, Jared Hope, or of the Web 3 Foundation, Peter Saban, and they even have Ethereum co-founder and Consensus CEO Joe Lubin. So don't miss out, get your ticket, you'll be joining a fantastic crowd and be part of people who really can take this technology to the next level. So go to dabcon.io, so that's d-A-P-P-C-O-I-O. get your ticket now and Berlin's calling and we hope to see you there in Berlin in July. So you mentioned scalability before, so we'd love to come to that topic.
Starting point is 00:32:40 And one interesting thing that struck me kind of looking at your background is that your PhD thesis, the title was like parallel execution for conflicting transactions. Now this sounds like a perfect description of like, you know, the problem of sharding, right, where you have like you want to parallelly execute these transactions and, well, they may conflict, maybe they're double spends or so I'm curious like how how do you think that research like carries over to the blockchain space yeah that's a really good question I mean this is why I got in the space at the beginning was because of the scalability issue and I think it's really fascinating um so I worked on sharding in distributed databases during my PhD and I worked at Google before my PhD and so I kind of looked you know there was a lot
Starting point is 00:33:28 of sharding and partitioning of databases at Google as well. It's not a trivial undertaking. Like even when you're dealing with a system where it's under one company's control, so they can set everything. They can set the partition key. They can set the number of nodes. They can like redo everything whenever they feel like it. You know, they control the traffic. Even when it's entirely under one company's control is really difficult. And it's very workload dependent. and sometimes the performance ends up being worse than if you just had one really fast machine. I think that was what was sort of most interesting
Starting point is 00:34:06 and at the same time frustrating to me was that if your workload could fit on one machine, it was almost always better to just run out on one machine than to partition and to shard and try to get better performance that way. Now that said, we're dealing with a whole different ecosystem here. And I wrote this post about layer two scalability and in the post, I was pretty pessimistic about sharding
Starting point is 00:34:30 for the reasons that I just said. But that doesn't mean, I think that it will be helpful. Like, I think it's just going to be hard. It's going to be a lot harder than people think. It's not like, oh, we're going to roll out sharding next year. I don't think that that's going to happen. Or I think if that does happen, it's going to turn out to be broken or not performant in really subtle ways.
Starting point is 00:34:50 It's going to take a long time to figure out. So it's not that I think it's impossible. I just think it's going to be a little. a lot harder than people are making it out to be. And I don't think it's like the magic, like the silver bullet for scalability. I think that in order to reach a billion people, we really have to think about what needs to be on-chain and what needs to be off-chain. But the really exciting thing to me is that we can do things off-chain with similar security guarantees to what we can do on-chain. Like, that's amazing. That's like magic to me, right?
Starting point is 00:35:23 Like you don't have to run everything on-chain. That's really cool. and that means that we can shift a lot of the work that was being done on-chain to off-chain. And that's through layer two protocols like the Lightning Network or Raiden or even things like Trubit. So we had a conference here in Boston called the Layer 2 Summit that we put on with Fidelity where we invited like all the people that we could think of and I know we missed a bunch which is really unfortunate and I wish that we hadn't but we're still learning about the space. We invited all the people who were working on layer two type projects to come and explain what they're doing.
Starting point is 00:36:01 And then we had a hackathon where people could build using their APIs, which was really fun. And it was really great because it was like, okay, where's your code? Show us your layer two solution. Show us how to use it. And we're going to have people, students and all the other people who are participating in the hackathon actually build stuff. And that was really eye-opening for me to see where all of the different projects were in terms of maturity. I'm still really excited about layer two. I think there's quite a bit to do.
Starting point is 00:36:28 The incentives are what worry me the most right now. Like how do you incentivize people to work on layer two to build, to create projects, to create companies without issuing a token? Because I don't think you need a token. I don't think that's the point of layer two. So that's a pretty big open question for me right now, is how do we sort of have? And I also just felt like there wasn't enough attention on this space.
Starting point is 00:36:51 Like people were always talking about sharding, and they were always talking about proof of state. and as a solution to scalability. And I don't think that they are by themselves a solution to scalability at all. So I really just wanted to help shed more light on the space and to get more people thinking about it and working on it. And this kind of goes back to actually sort of a core thesis
Starting point is 00:37:11 of the DCI, which is that the best way for this space to develop is in layers. So if you look at the internet, for example, the internet is composed of these layers of open protocols. You've got Ethernet, a base layer. for how to connect machines together. You've got TCPIP for routing messages around a network, HTTP the web on top of that.
Starting point is 00:37:32 And each of these protocols developed independently. I think that's really important to note. They developed independently, but the people between, like, with the different layers, were always talking to each other. And at the same time that these layers were kind of evolving, you also had these, like, walled gardens and these, like, full-stack things, like Minitel,
Starting point is 00:37:54 or, you know, AOL is another example of this. And the full stacks lost out to the layers. Now, the internet was a whole different time period. It didn't have a ton of VC funding when these layers were developing. It was very, very different. So it's unclear if the same thing's going to happen right now. But I do think that we need to take more of this layered approach. So could you maybe just come back and talking about sharding,
Starting point is 00:38:18 explain your skepticism in a bit more detail and why you feel, broadly that these layered systems are a better approach for scaling. Yeah. So there's a couple of things when you're issuing queries in a distributed system that can kind of end up tricking you up. So let's think about, let's like break down the cost of issuing a query. And in this case, when I say query, I mean like submitting a transaction and have it processed, right?
Starting point is 00:38:48 So if you only have to talk to one machine to submit a query, then that's great. You have the overhead of communicating with that machine. You have the time it takes that machine to sort of process what it's doing, and you have the time it takes to return to you, right? And in a system like Bitcoin, every machine is processing every query, but they're kind of all doing so independently. Like they don't depend on each other, but they all have to process every query,
Starting point is 00:39:14 and they all kind of need to catch up and get to the same spot. Now, in a sharded system, if a query can be, handled by one shard, that's great. That's awesome. Then if each shard can sort of independently handle queries and you get this nice parallel speed up because the shards are handling queries in parallel. But there are some queries that cannot be handled by one shard because they sort of touch data that lives on multiple shards. This means your workload is not perfectly partitionable. And most, a lot of workloads are not perfectly partitionable, especially when you think about workloads that are kind of more like
Starting point is 00:39:56 graphs, right? Like social networks. We're like, I'm friends with you, but you're friends with Brian and you guys are on different shards, right? So it's like we can never find a partitioning which makes all of our queries sort of work together because we have friends everywhere and it's just all too complicated and connected. So like when you apply this idea to things like money, money is like pretty, is not a perfectly partitionable workload. It's very, very, interdependent. Like there's a lot of relationships between the money. And so what ends up happening is that you have to sort of like stop both of the shards in order to process a query that touches both shards. And that means that you're slowing things down. You're slowing things down a lot.
Starting point is 00:40:39 And that overhead with which you're slowing things down can be so high that it's actually sort of like worse than if you just did everything together sort of like one at a time. It's not always intuitive. And like I'm trying to map like a distributed system onto a cryptocurrency, which is a little bit hard to do. But it's that it's that basic idea that there's going to be cross-shard coordination and that cross-shard coordination is really expensive. Cool. That's very interesting. I mean, I presumably probably some listeners have heard that Ethereum has done some big replanning about their roadmap and now they wanted to Casper, like the full Casper as well as sharding and at the same time and BLS signatures. So threshold relay
Starting point is 00:41:28 signatures. What are your thoughts on that? And in particular, the sharding as they want to do it in Ethereum. So I've only looked a little bit at Ethereum sharding design. I haven't sort of, I, you know, I looked at a small amount. Like, first of all, let me say I'm really excited about all of the research the Ethereum Foundation is doing. I think it's great that they are pushing forward so fast in all these ideas that they are putting effort into experimenting and into building into trying all these different things. And I think it's really cool because we can learn from it. You know, I wouldn't believe a promise that this is going to work necessarily in the next year or two. Like I don't think we can rely on that. I think it's great
Starting point is 00:42:11 to try all of these different things. But from what I've seen, like building a really robust distributed system is a challenging task. It takes multiple years. And that's a system that doesn't even have the sort of malicious, everybody's trying to attack each other and steal each other, sort of facet to it. So I just don't see how this could really happen and work and be robust in the time period of like a year, for example.
Starting point is 00:42:43 Can you build something? Yeah, totally. You can absolutely build something, and you can try it out. You can see how it works. And it might even work in production for a while. But I think eventually you're going to have, there are going to be bugs.
Starting point is 00:42:57 There are going to be problems. Like even distributed systems protocols that have existed for years and were like peer reviewed, end up having subtle flaws that people find like many years later, it's really, really hard to get these things right. And it doesn't, you know, I think that's a big challenge in the space around security, and that's something that we've been thinking about a lot and are trying to figure out how to handle. Just because your system hasn't broken yet doesn't mean
Starting point is 00:43:27 that it's secure. And just because no one's bothered attacking your system yet doesn't mean it's secure. And so what you have to realize is that there's a lot of code out there right now. There's a lot of cryptocurrencies out there right now. And there's very, there aren't that many people who have the expertise to actually effectively evaluate these systems. And also, evaluating these systems is really time-consuming and really hard. And so, you know, it's not necessarily in someone's interest to do it for you. So what we're seeing is that there's a lot of code out there, there's a lot of systems out there that are very, very broken and nobody knows it. It's really fascinating to me that there are a lot of sort of these 51% attacks happening right now.
Starting point is 00:44:12 Like, we always kind of knew, like, hey, if you don't have enough hash power, then it's possible that someone could just kind of invest a bit of money and 51% attack you and double spend. But nobody bothered doing it until recently. And now we're seeing it happen. It's like, oh, yeah, this is a problem. Hmm, we should figure out how to fix this. And it's like, we always knew it was going to be a problem. It just no one had bothered doing it.
Starting point is 00:44:34 And there's just going to be more and more and more of this as things become more valuable. Cool. No, that's super interesting. Now, I wanted to zoom in on the layer two stuff a little bit more. So you kind of hinted at that in your hackathon, it seems like you had the impression that, oh, this is, you know, there's so much work to do and it's still going to take a fairly long time. So what makes you so much more optimistic? And what is your kind of assessment of the current state of, you know, let's say something like Lightning Network?
Starting point is 00:45:08 The reason I'm optimistic about Lightning Network is because people are actually building applications on it. So one of the people we had, you should have him on your show, by the way, is Alex. Bosworth, who's building a bunch of stuff on top of the Lightning Network. And his talk was super interesting because he just had a lot of insights that were based on actual experience, like running a website, taking lightning payments. And so that was really cool. And, you know, he had done it. He'd done it.
Starting point is 00:45:42 And that's what it's about. It's like, are you running an application that is using this stuff? are you servicing real users and do you have real traffic? And it's not like huge amounts of traffic, but there were enough projects like Satoshi's Place and yalls and all sorts of things that are actually using the software that are like putting it through its paces, that are finding bugs that are realizing, you know,
Starting point is 00:46:06 hey, it's kind of annoying to have to have my keys online in order to like, you know, sign these transactions. Like what can we do about this? Like people are actually building and actually finding out what's going on. So that's, that was what made me hopeful. There are a lot of layer two projects, like Lightning's been around for a long time, you know, and it's taken a few years for it to get to this point. There are some projects that are newer that are, that are still, I think, building and still trying to get to that point. But it's all about real users. I think it's all
Starting point is 00:46:36 about people really using your system. We're very keen to see. And of course, we did Lightning. Yeah, I mean, we did a podcast about Lightning episode with Tudge and Joseph, proven when the white paper came out. And I remember we did the podcast with Greg Maxwell and Adam back, like in 2000. Maybe it was 2015 or something like that. And they had the opinion back then. You know, they said it was going to take like four or five months and lightning will be live. So, although, of course, we also had, I think, like, Vitalik on, you know, two and a half years.
Starting point is 00:47:09 And he was like six months and like Casper and proof of steak. So it seems like. estimating timelines in this industry is a challenge. Well, there's one other thing we wanted to speak about before when it comes to research agendas, which is this ZK ledger thing. Can you tell us a little bit about what ZK ledger is and what problem it's trying to solve? Yeah, totally. So I mentioned that I think one of the fundamental challenges facing the space is sort of this tension
Starting point is 00:47:41 between privacy and having an effective working system. So when I first sort of got into the space, I was hearing about projects like Zcash and Snarks and LibSnark. And one of the research scientists at the DCI is Madariz Fierza, who's one of the authors of Zero Cash, the paper, and Lib Snark. So knows a lot about Zero Knowledge Proofs. And it was really interesting talking to him and learning more about the assumptions baked into Snarks, what zero knowledge proofs could do effectively, what they can't do effectively. I think Zcash is super cool. I just went to ZCon Zero.
Starting point is 00:48:20 They have amazing technology. They have really high-quality cryptographers working on this stuff. But the problem that seemed a little bit open to me was, okay, you've got things like Bitcoin in which the transactions are totally public, and then you have things like Zcash in which the shielded transactions of which there aren't that many right now, but, you know, assuming they were used, shoulder transactions are totally private. And they really don't give a regulator or an outside observer or anyone, any insight into the system. And it seems like insight into the financial system is actually really important.
Starting point is 00:48:59 And so we wanted to see, we wanted to think about, could we find a point in the design space that provided privacy, but at the same time also gave the ability for a third party to sort of do provably correct analytics over the system to measure things about the system. And so that's why we designed ZK Ledger. It's a research project. So we had a paper in NSDI in April, and we presented it there. And it's more of a design on top of a distributed ledger than an actual distributed ledger. So we kind of like abstract out the ledger part. But the idea behind the design is you have a set of participants. They're all working together to, they're all creating transactions, transferring assets back and forth. And these transactions that, you know, a participant might make a transaction
Starting point is 00:49:45 transferring, let's say, like, a hundred euros to someone else. And the transaction's totally private. You can't see who's involved in the transaction, but it's still publicly verifiable. So everyone in the system can look at the transaction and verify that all of the proofs match up, even though they can't tell how much the transaction is for or who's involved. Like they can tell that no assets were created out of nowhere. They can tell that whoever's transferring the assets had the right to do so and that sort of everything balances out. And then in addition to that, a third party could kind of audit the participants of the ledger
Starting point is 00:50:24 and run analytics over the ledger. So they can say like how much of this asset do you have on your balance sheet? Or what was the average price that this asset traded? at over the last month. Or, you know, what is the overall sort of distribution of this asset in this network? So they can run these provably correct queries. And so we design the sort of like auditing system on top of the zero knowledge proofs in the ledger to be able to do this.
Starting point is 00:50:57 And I think part of the reason that I'm interested in the space at all is because we recently hired Gary Gensler at MIT, and he's the former chairman of the CFTC, and he's working with us pretty closely at the Digital Currency Initiative. I think we really need to have a lot of conversations with regulators. I don't think regulators know that zero knowledge proofs exist, and that they could be like a really effective tool for preserving privacy and at the same time trying to achieve their public policy goals. Like public policy goals are actually pretty reasonable. It's like we want these markets to be to have integrity, right? We want to make sure that participants are like doing the right thing. We want to protect consumers. Like these are reasonable
Starting point is 00:51:41 goals, public policy goals. And I don't think anyone would disagree with them. It's just, you know, it's, it's how that regulation is enacted that can kind of be problematic. And so we really wanted to show that there's this technology out there that can help you in your quest to achieve these public policy goals called zero knowledge proofs. And here's how they work. Cool. That's super fascinating. I'm just maybe one question on like how this actually works. So you said, okay, let's say a regulator could make these queries and learn. And so you gave the example, okay, for example, like how much of this asset you have in your balance sheet. So that doesn't seem like how is that preserving privacy or like what, I mean, what kind of is it,
Starting point is 00:52:26 does that like, you know, it's predefined what type of queries can be made up front and then it is in those areas that maybe some privacy is given up? Can you expand? Yeah, the idea is that you can kind of get these aggregate answers about the system without revealing individual transactions. So you never have to open up the individual transactions. So like, you know, I could say how many assets I have on my balance sheet without the regulator knowing that I got them from you or from Sebastian
Starting point is 00:52:57 or like, you know, who they went through or what happened or who I've been, who my trading partners were, basically. So the idea is that you can answer aggregate queries. And the answering is voluntary. It's interactive. So it's not like the auditor can just, like, look at the ledger and figure out all sorts of stuff on its own. It has to be this interactive process.
Starting point is 00:53:19 And so there's always the chance that I just might not answer the auditor, in which case they couldn't learn anything. But the idea here is you're kind of existing in the system where you want to show you're complying with regulations. Also, it's kind of up to the participants in the auditor to sort of define the acceptable set of queries. So our system sort of only supports certain types of queries, linear functions over the transactions. You know, we can't do arbitrary things. But obviously you shouldn't, like, answer the question, how much of this asset you have on your balance sheet, like, every five seconds?
Starting point is 00:53:52 Because if you do that, that's going to reveal, that's going to end up revealing the content of the transactions. but that can be something that's kind of determined between the auditor and the participants. So where do the interest for this project come from? Like where do you think that there are some practical applications where this could be applied, you know, like maybe today or in a few years? Yeah, that's a great question. So we were kind of noticing that a lot of companies were coming to us, and they were really interested in using blockchain technology for various sorts of things,
Starting point is 00:54:24 you know, supply chains, all sorts of weird asset transfer sort of use cases, but they were not doing it because they didn't want all of the transactions to be public. And then you have systems like Cora where the design for how to keep transactions private is use trusted notaries or don't put them on the ledger. So that means that they're not publicly verifiable. So you're kind of like losing the whole benefit of blockchain technology in the first place. So we kind of saw this tension where people wanted to think about using these ledgers, but the privacy thing was just like a no-go. They were like, no, we cannot show what we're doing to our competitors.
Starting point is 00:55:06 Like if you think about, for example, some people think that it's a reasonable use case to use a blockchain for supply chains, but the members of that supply chain consortium are probably competitors and don't want to show all their data. So that's kind of where this thinking came from. In terms of use cases, we're still sort of figuring it out. It's a research project at the moment. We have a paper coming out soon about how to potentially apply this to the asset-backed securities market. So that's something that we looked into a little bit.
Starting point is 00:55:39 And we're hoping when we put that out, people will sort of see that and sort of come to us with more use cases. And so when speaking to these companies that we're interested in using blockchain for these sort of like supply chain use cases or, traceability use cases. What were some of the other sort of negative connotations that they may have had about blockchains that these tools actually provide, that tools like ZK. Ledger provides? I think like the top two things are probably privacy and scalability. But I want to be frank here. I think like the vast majority of the time, blockchains don't make sense for these use cases. So, you know, I think that they rightly have a lot of issues with using blockchain technology because they don't need blockchain technology. They just need to run a database. And I kind of
Starting point is 00:56:30 want to distinguish between blockchain technology and distributed databases. Like distributed databases are a thing that have existed. They are, you know, and I think a lot of the times when you're talking about permission blockchain use cases, you're really talking about a distributed database. So, you know, I think that's part of the challenge. It's not just like, oh, I can't use the blockchain because of the privacy. It's like, yeah, you probably shouldn't be using a blockchain anyway. There's one topic that we want to bring up here, and that is a post that you wrote in September of last year, so not quite a year ago, about some of the vulnerabilities, cryptographic vulnerabilities in IOTA that you discovered. Can you tell us why you decide to look
Starting point is 00:57:14 into Iota? Yeah. So this started like early last year. It was totally a side project. So I want to make it clear we don't do this full time. This was kind of a side thing. And what happened was one of the people in the DCI was coming to us and was talking about this awesome new project called Iota and how it solved all of the problems with blockchains. My colleague Tadj, got really grumpy about this and was like, there's no way that it does all of this. And I was like, Tadj, you say this about everything. That might be true, but you have to start proving it. And so Tadge was like, fine. And so Tadj and went and looked at the code for Iota.
Starting point is 00:58:01 And one of the things he noticed almost immediately was that they were using their own hash function and that it looked like pretty weird. And he didn't think that there was any, way that this hash function could be secure. So Tadge noticed it. And then he happened to be having lunch with Ethan Heilman. Ethan is a PhD student at BU who was starting a company at the time. And Ethan has done a lot of work on security and hash functions and things like that. So Ethan saw this and got really intrigued and was curious if he could break the hash function using differential
Starting point is 00:58:42 Cryptanalysis. So Ethan, I think like the story is that he actually missed going to someone's going away party because he stayed at home to like work on breaking this hash function. He was so interested in it. So Ethan kind of figured out a technique for getting the time down to find collisions pretty low. And then we, the three of us started working together on getting that down even further. And later on, we started talking to Madar's, who's a really good cryptographer, to see if he could find sort of a parallel technique for trying to break it, but he ended up not doing that. And so then the three of us were kind of working on it,
Starting point is 00:59:21 and we were like, OK, I wonder if you could actually use this to produce. In Iota, they're called bundles, not transactions, but to actually produce bundles that collide. And so we worked on that for a bit, and we were able to produce bundles that, we were able to produce two bundles, that spent money, like different amounts of money to different addresses, but hashed to the same thing and thus had the same signature.
Starting point is 00:59:52 So that means you could use a signature for one bundle on another bundle. So that's what we did. That's what we were trying to show that we did. And we actually did this in parallel with doing a vulnerability disclosure to the IOTO folks. So Ethan emailed them and told them about what he found. and they were skeptical that it seemed like they were skeptical that we could actually use the hash function collision to produce bundles that were this way. They pointed out a lot of checks in the code.
Starting point is 01:00:27 Like, look, the timestamp has to look like this and the value has to look like that. And, like, you know, it has to. And yeah, those are constraints, But those constraints weren't enough to make it unreasonable to produce the colliding bundles. The things you have to realize with hash functions and collisions and things like that is, yes, all hash functions have collisions. But it's supposed to take you a ridiculously long time to find them. And if you can find them faster than a ridiculously long time, that's really bad.
Starting point is 01:01:00 That's really, really, really bad. and usually if someone can find a way to get that time down even a little bit, it means that with more work, you're going to be able to get that time down a lot more. Like it's just a matter of time. So we were able to get the time down to a point where we can produce colliding bundles on my machine like in less than a minute. So that's bad. Do you have any idea why they would choose to design their own hashing function
Starting point is 01:01:25 and not just use the ones that everybody uses and they've been tried and tested for decades? No. They've said a lot of different things about this. I don't know. I'm not sure why. I don't think it's a good idea. So what was the reaction like? The reaction was surprising.
Starting point is 01:01:44 And I think that part of the problem, again, was that we were speaking very different languages. So there's a community that sort of does vulnerability disclosures and understands the process for that, right? Like, you contact the team, you give them time to fit. and then once you fix it, you're allowed to share the story about what you did. Like, that's interesting to people. People want to hear the story and how it worked and what it was like. And it's also, like, good for the team to share that. So we were kind of operating under that paradigm, and I think that the IOTA community
Starting point is 01:02:20 hadn't had a lot of experience with that paradigm. And so, you know, they were confused about why we published the vulnerability disclosure after it had been fixed. Well, it's like, we're not going to publish it before it's been fixed because then people could use it to attack the system. And we don't want that to happen. So obviously, you publish it after it's been fixed. No, we're not saying we found something new. We're explaining what we did find that was new when we found it.
Starting point is 01:02:45 So, you know, the reaction was surprising. And I think it probably had a lot to do with a difference in sort of backgrounds of where we were coming from. But, you know, honestly, yeah, that it was. it was a, it was a very strange experience. As I just wanted to spend like a minute on, on the actual vulnerability, right? So let me, maybe please correct me if I'm, I get this correctly, right? So let's say in Bitcoin, right, I have, you have an address and there's a particular amount of, or, you know, a particular amount of bitcoins are kind of, you know, tied to a particular address.
Starting point is 01:03:25 So then if you can produce, uh, basically a transaction hash, or if anything, but that private key, right? If I can generate some other, use some other key and create a transaction hash that, like, matches that, you get the same hash, then I could basically, you know, create a transaction, move that money to myself, submit it, you know, and steal the money without actually having the private key. Is that sort of what the situation was and how one could have used it,
Starting point is 01:03:49 or was it in a different way? Yeah. Well, I think it was really different than Bitcoin. It's like a really different design. So it's hard to kind of map it onto Bitcoin directly. maybe like at a high level. So signatures in Iota are on the hash of the bundle. So you sign the hash of the bundle,
Starting point is 01:04:17 and that signature is what shows that, you know, you know the private key that can spend these funds. So if two bundles hashed to the same thing, then a signature on one will, apply to a signature on the other. It doesn't mean that you've cracked someone's private key, and it doesn't mean that you can generate brand new signatures on anything. It definitely does not mean that. It just means that if you have a signature for a bundle, so if you see, like, out there in the wild, a bundle that is signed, and you can produce a different bundle that hashes to the same
Starting point is 01:04:55 thing, you can just copy that signature over, and it'll be a valid signature. assuming, you know, that the bundle is valid as well. So that's kind of the attack. Does that make sense? Yeah, okay. So let's say you send a transaction and, you know, you kind of relayed in the network. I'm the first one. I'm the attacker.
Starting point is 01:05:15 I'm the first one to get that transaction. You know, maybe I don't relay it because you just connected to me. And then I use this attack to produce my own bundle, sealing the money and then sending it out with your signature into the network, that sort of thing. And I guess if you could get the time down to a second or less, then you could maybe be successful with that. Yeah, we didn't go all the way in trying to produce the attack. And just to be clear, you know, we never sent any messages on the IOTA network.
Starting point is 01:05:47 We never actually tried to do this attack. All we did was produce conflicting bundles. But I think the thing is you shouldn't even be able to do that. Like even just being able to do that is really bad. So whether or not it's sort of like feasible to actually steal someone's money with this is sort of a different question in my mind. I think that we just didn't even try to answer that question. I mean, I think that we could produce two different bundles that had the same hash. That doesn't necessarily mean that someone sitting on the network could like take any bundle and produce something.
Starting point is 01:06:28 else that would be accepted by the network but was bad. Like that's not the case at all. Like this, you know, this is something that only works in sort of really special circumstances. And it's unclear how often those circumstances happen. But the fact of the matter is you don't want a cryptocurrency that has this sort of problem to begin with at all, no matter how like unlikely or likely it is.
Starting point is 01:06:50 Like it's just really bad that this is even a thing, right? And I think that might have been something that got a little lost in the, in the communication. Yeah, I mean, I remember following that pretty closely, meeting your post and responses, and it was astonishing just that the anger and the vitriol and people like you guys are somehow, you know, have a big financial interest in IOTA competitors
Starting point is 01:07:17 and you want to see the IOT price go down. And there was all of these absurd theories. Yeah, that was sort of like laughable, actually, because, like, I don't have any vested financial... Like, I have no material interest in cryptocurrencies, and this is something that... And, like, Tadge is the same way. And to accuse us of conflict of interest
Starting point is 01:07:38 was really surprising to me because we really, like, don't have a financial interest in this stuff. Like, yes, we work on open-source software projects. So does everybody. And just because we work on open-source software projects doesn't mean that we have a conflict of interest. That kind of would COI out, like, everyone in the space.
Starting point is 01:07:55 we work really hard to try to stay financially neutral. And it was really, like, I was really sad that that was a story that was being carried around. Like, I never worked on Zcash or anything like that. And I don't understand, I really don't understand where that came from. I think, yeah, I was really surprised about that. So this is an interesting point. So you mentioned you're a financial neutral and touch as well. So I presume that means you guys don't hold cryptocurrencies.
Starting point is 01:08:27 We don't hold material amounts. We hold small amounts because I think it's important if you're in this field to at least have some skin in the game. But yeah, no, we're not like, you know, it's not the case that we're like all about a certain cryptocurrency or something like that. And so do you think that's something that is sort of a general approach or policy or stance of the DCI? and is this is something you, like, require from people on the staff or that they make disclosures, or how do you guys handle that in general? Yeah, that's a great question. So I think there are sort of like circles, concentric circles, for sort of some of the core part of the staff,
Starting point is 01:09:05 people like myself and Rob, who works with central banks, you know, that is true. There are people who are sort of in outer circles of the DCI who we work with for whom that might not be true. For example, Madarza was a co-founder of Zcash. So his research paper ended up getting turned into that. So it's not true for everyone in the DCI, but I think that we try to make that true for a core part of it. So that's definitely the case. And Joey Edo as well sold all of his cryptocurrencies holdings
Starting point is 01:09:40 and his shares in companies that invest in cryptocurrencies when he founded the DCI. So that was kind of baked in at the very beginning. So we talked about funding much earlier in the episode, but so how does this tie into funding in organizations that may want to fund the DCI? What is your approach there? Yeah, that's a great question. So we're starting to sort of figure out our funding philosophy. One thing that is true is that we can take donations in like the popular cryptocurrency,
Starting point is 01:10:19 sort of the ones that are traded on large exchanges, we will convert them to dollars immediately. We don't hold cryptocurrency at all. And, yeah, that's pretty much it. Obviously, MIT has certain rules on doing KYC and AML for taking donations. And at the moment, we're kind of aligning ourselves with MIT's rules for that.
Starting point is 01:10:45 But my question was more along the lines of, you know, projects that would potentially fund research that the DCI is conducting. Is there a philosophy or a policy around that? Is that even something that should be discussed? So one thing is we don't do sponsored research at all. So any project that funds us does so through the form of a gift. So there's no strings attached. There's no sort of tip for tat.
Starting point is 01:11:15 We don't sort of do research for people necessarily. if you want to fund the DCI, it's like a one-time, no-contract sort of a thing, which helps us stay neutral again. Another thing is we try to make sure that we're taking funding from a really wide variety of sources, so no single source has invested a lot of money in what the DCI is doing. When it comes to the actual projects that have given the DCI money, so far, it's mostly been large companies and individuals. like I said, except for the initial Bitcoin dev fund.
Starting point is 01:11:54 And we're sort of still determining the filtering mechanism for taking funding in the future. Great. So as we come to a close here, please tell us about the things that you're looking forward to in terms of the DCI and what do you think it will accomplish in the next five years. Yeah, so we're really excited about expanding the DCI. I think that we have a really important role to play. being a place that is really rigorous and that can help kind of set the foundation for this new field. Like this new field is really exciting.
Starting point is 01:12:30 Everybody has an important role to play. Large companies, startups, sort of new projects. But it's also the case that a lot of people in this field have like a financial stake in the game. They're selling their platform or they're selling their token. and even nonprofit institutions that are formed to govern a certain token are like usually hold a lot of that token. And that's just like not the way DCI operates. We are not about that. And I think that that's a really important role to play.
Starting point is 01:13:00 I think it's really exciting that this new area of study is developing. We don't even really have a shared vocabulary for it yet. Like, you know, I don't know how you define what a blockchain is, but I think there are like 50 different definitions out there. People are constantly saying different things. We just don't have like the terms even set yet. We don't have like the methodology. Like one thing Joey asked me the other day is like, what is a fact? You know, like what does it mean for something to be a fact in this space? Does it mean that like there's a white paper about it or does it mean that there's a blog post or does it mean that it's been like peer reviewed? Like what does that even mean? What does it take for something to be
Starting point is 01:13:39 accepted by the community? Like we're still figuring all of this out. And these are the kinds of questions that we're thinking about here and trying to push this space forward. Another big part of what we do, part of MIT's mission is service. So MIT actually has it like baked into its mission statement that it's about service. It's about serving the public good.
Starting point is 01:13:57 And we take that really seriously within the DCI too. And so a large part about what we think about is like how can we make sure that as we create the space, as we create the framework around it, that we're thinking about helping people and we're thinking about making the world a better place. We're thinking about things like access and inequality and ethics. Like what, you know, what is the set of ethics that we want to have in the space? We look at what's happening in AI right now with a lot of people talking about
Starting point is 01:14:27 bias and sort of like unintended consequences. Like how do we use that and apply it to the cryptocurrency space? So those are like some of the high level things that we're thinking about. We're also like pushing forward really hard with the layer two stuff and with work on privacy. and digital fiat currency. So more to come there. Cool. Well, Neha, thanks so much for joining us today. It was really fascinating to hear about DCI
Starting point is 01:14:53 and all of the progress that has been made on that front. And it's very impressive. I think the activities, and I totally agree that you guys are doing very important work. And hopefully we'll do much more of it. Thanks for having me, guys. This is really fun. And, of course, thanks so much for a listener,
Starting point is 01:15:08 for once again tuning in. So we're going to have in the show notes, you know, links to DC. a few articles that we mentioned and, you know, kind of other things that people can check out if they want to learn more about it. There's really quite a few interesting projects and research on there that, you know, I recommend people have a look at. And of course, we are going to be back next week with another episode. In the meantime, if you want to subscribe to the show, you can do so on iTunes or any kind of podcast application or you can watch the videos on YouTube. com slash episode of Bitcoin.
Starting point is 01:15:40 And if you want to support the show, you can do so by leaving our YouTube. in iTunes for you. That really helps new people find the show. So thanks so much and we look forward to being back next week.

There aren't comments yet for this episode. Click on any sentence in the transcript to leave a comment.