Deprecated: Function jetpack_form_register_pattern is deprecated since version jetpack-13.4! Use Automattic\Jetpack\Forms\ContactForm\Util::register_pattern instead. in /home4/rahulsit/public_html/wp-includes/functions.php on line 6078
Decentralisation and Neutrality – Rahul Gaitonde
Categories
Data Custody Decentralisation and Neutrality Real-World Crypto

Democratisation is not the same as permissionless-ness

The Internet has democratised pretty much anything you can think of. That which is not yet democratised is spending increasing amounts every year to protect its monopoly, whether by force of law or perception.

Democratisation does not mean the end of concentration of power.

The biggest, most powerful companies are the world are tech giants. Whose products have democratised communication, access and opportunity. Those products have produced previously unimaginable social and economic value, and within a generation.

Yet they are, and have been, under investigation for abuse of power. They may have created platforms for creativity, connection, work and play for billions of us, but none of us have any control over these platforms.

A whole other class of powerful companies are financial giants. They have not even democratised access with and to their sophisticated products, unlike tech giants. We aren’t even aware of most of these products.

The excitement around cryptocurrencies, DeFi and DAOs and so much other decentralised tech is the promise of both democratisation and agency.

Some months ago a venture capitalist, new to crypto but with a lifetime’s experience of asking the right questions asked me incredulously how it was that anyone could create a new currency. And a new financial product. And a new organisation.

The key is that blockchains are permissionless by design. No one, fundamentally, needs approval to set up any of these above. The genie of trustless transactions let out of the bottle by the original Bitcoin whitepaper cannot be put back. That genie is capturing greater and greater amounts of economic value every year.

We are already seeing decentralised commerce. Decentralised financial products. Decentralised gaming. Decentralised communities. Decentralised governance. Decentralised creativity. And, of course, the original use case, decentralised currency.

Their success depends not on legislation. Or capital. Or location. Or race. It depends not even on technology, really. It is community, and, by extension, legitimacy. As the founder of the Ethereum project sums up an excellent blog post of his that I strongly recommend you read:

The concept of legitimacy (higher-order acceptance) is very powerful. Legitimacy appears in any context where there is coordination, and especially on the internet, coordination is everywhere.

There are different ways in which legitimacy comes to be: brute force, continuity, fairness, process, performance and participation are among the important ones.

Cryptocurrency is powerful because it lets us summon up large pools of capital by collective economic will, and these pools of capital are, at the beginning, not controlled by any person. Rather, these pools of capital are controlled directly by concepts of legitimacy.

Permissionless systems have lower barriers to entry. Leave alone creating competing systems from scratch, blockchains can and have been forked, preserving information and participation. And for the first time, the community of a project has the agency to act – collectivity – to do so. Because of this, a project must build and preserve legitimacy or risk irrelevance.

No matter how much a traditional tech giant may have democratised access, it is very much permissionned. In some sectors, for instance finance, that permission is regulation by the state.

As this genie of permissionless systems attracts more and more users, as those people move more and more economic activity there, backlash will follow. But both incumbents and regulators will find that permissionless systems, by their very nature, are difficult to rein in.

For tech and finance – and other – giants, the traditional rules of market capture don’t apply. For instance it is difficult for a ride sharing app company to compete for a driver’s loyalty with cashbacks or a reduced commission against a decentralised version that gives the driver actual agency over the organisation itself, that not just allows or encourages collective action, but requires it, cannot function effectively without it.

For regulators, traditional models of regulation may not apply. To begin with, permissionless entities are borderless. They are not just resistant to regulation or opposed to regulation, they transcend regulation. For instance A capital markets regulator in a country may ban participation in liquidity pools, but they will continue regardless. Regulators’ only option, then, is to block the gates to the decentralised world itself, that is, the conversion of fiat versions of value – currency – to decentralised versions of value – tokens. If a decentralised organisation gives someone enough agency, though, they will find ways to access membership of that decentralised organisation. The organisation does not need anyone’s permission to exist, to function, to create value for its members – why should I need permission, goes the thinking.

At the conclusion of this, I must stress that this is not a value judgement. This is not meant to unquestioningly assert the superiority of permissionless systems. It is a thinking-through of what permissionless really means. And, specifically, that it is different from democratisation in the fundamental aspect of distribution of control. It is a pointing-out of why the spread of permissionless systems is likely inevitable, inexorable.

Categories
Decentralisation and Neutrality Privacy and Anonymity

The proposed VPN ban in India is another security vs freedom debate we should but may never have

A few days ago I learnt about a proposed policy in India to ban VPN services altogether from the country. This puts the county in the august company of China, Iran, Russia and Turkey. So far, it’s a recommendation to the government from a parliamentary committee on home affairs. The Home ministry in India is responsible for internal security.

The intent is to deter criminals from communicating privately without interception. But the collateral damage is vast.

One is to businesses: for the most part, companies have been able to recreate the security of an internal network even with people working from home by having them connect via a VPN. The potential danger to this has been widely reported by the Indian press.

But this is also a blow to personal privacy, and of people’s freedom to choose and run the software they want on systems they own. I haven’t seen much coverage of this angle in print and online press – that discussion has happened mostly on Twitter.

I wrote a short Twitter thread about this, which I’m reproducing here:

Citizens use VPNs to protect themselves from

  • ~ profiling by ISPs via logging traffic
  • ~ profiling by sites via trackers
  • ~ attacks on attention & drain on bandwidth with nonstop ads
  • ~ attacks by scammers over open access n/ws

This must be addressed along with anticrime measures.

Taking away tools for self-protection online from ordinary citizens because criminals could use them is like disallowing anyone from carrying pepper spray because robbers could also use them to attack victims. Everyone is presumed guilty until proven innocent.

Laying the onus of cyber security on citizens loses much its meaning when you also take away tools they can use to protect themselves. Take this post from the government’s ‘cyber dost’ twitter handle:

Imagine if the government itself encouraged citizens to protect themselves online through VPNs, Signal, HTTPS Everywhere, Privacy Badger, tracking- and ad-blockers, educated people about PGP. But around the world they have taken the opposite approach. India is no exception.

These are questions policymakers and citizens going to face over and over again, around the world. The years-in-the-making ban on cryptocurrencies is a similar issue. As is the repeated threats of banning Whatsapp and other end to end encrypted chat services. If security wins over freedom every time, citizens will remain in the pre-internet nineties while most motivated criminals will continue to manage to access all of these.

Categories
Data Custody Decentralisation and Neutrality Privacy and Anonymity The Next Computer

My data backup strategy and tools, 2021

Here’s an overview of how I backup my data across drives and devices.

I was driven to post this because of the recently reported data loss experienced by several people around the world, caused by a malfunctioning, possibly hacked network storage device from Western Digital: “WD My Book NAS devices are being remotely wiped clean worldwide“.

Today, WD My Book Live and WD My Book Live DUO owners worldwide suddenly found that all of their files were mysteriously deleted, and they could no longer log into the device via a browser or an app.

When they attempted to log in via the Web dashboard, the device stated that they had an “Invalid password.”

“I have a WD My Book live connected to my home LAN and worked fine for years. I have just found that somehow all the data on it is gone today, while the directories seems there but empty.

The same device that Western Digital encouraged its customers to ‘Put Your Life On [It]’, lost people’s photos, music, documents, backups, probably more.

Ordinary people like you and me need a better plan for our life’s work and memories than entrusting it to a company and its specialised hardware and software. We need a plan we understand.

This is that plan.

Devices to backup

  • MacBook Pro 1TB SSD
  • iPhone 128GB
  • iPad 256GB
  • External 1TB HDD – archives, old pictures, home movies, other uncategorised data

Laptop, phone, tablet all used daily.

Current backup plan

MacBook Pro

  • Runs Catalina; full weekly disk backup on external 1TB Time Machine HDD.
    • Quarterly restore test on 2014 MacBook Air also running Catalina
  • Backup main document and multimedia folders weekly with rsync, run manually from iTerm2, to external 2TB HDD (redundancy for above). Example: sudo rsync -aP --delete /Users/rahulgaitonde/Documents/ /Volumes/Backups/BackupDocuments

External 1TB drive

WD Elements 1TB drive
  • Backup weekly with rsync, run manually from iTerm2 to external 2TB HDD: same disk as above

iPhone, iPad

2018 12.9″ iPad Pro 256GB and 2018 iPhone XR 128GB
  • iCloud Drive backup, continuous

Other data

  • Email: Gmail and Google Workplace; downloaded locally to Thunderbird on MacBook Pro as Mbox files (which is itself backed up as above)
  • Photos: synced from iPhone and iPad to iCloud; also synced weekly from iPhone to MacBook Pro Photos.app on MacBook Pro
  • Notes: Notes.app and plaintext files; both synced to iCloud
  • Contacts, Calendar, Reminder: synced to iCloud; exported monthly to MacBook Pro
  • Passwords and secure notes: synced to Bitwarden; vault exported monthly to MacBook Pro
  • RSS feeds: synced to Feedly; OPML exported monthly to Macbook Pro
  • Bookmarks: synced to Firefox; HTML exported monthly to Macbook Pro
  • Read Later queue: synced to Instapaper and Pocket; CSV exported monthly to MacBook Pro. Some articles saved locally in Markdown in iCloud Drive

So, here are my tasks:

  • Weekly
    • Run Photos.app to sync iCloud Photos locally to Macbook Pro (turn off storage optimisation) – 10 minutes
    • Backup MacBook Pro to Time Machine external HDD – three hours
    • run rsync on MacBook Pro drive and on external 1TB HDD. Destination for both is external 2TB HDD (distinct from Time Machine). 10 minutes. First run took a long time; subsequent runs take a fraction of the time that Time Machine backups take.
    • Total time: appx. 20 active minutes; 3 hours in background
  • Monthly
    • Export Contacts, Calendar, RSS OPML, Bookmarks, Password Vault, Read Later queue and store locally – 10 minutes
    • Weekly tasks for that week
    • Total time: appx. 10 active minutes + regular weekly backup time
  • Quarterly
    • Test restore on 2014 MacBook Air – about 10 active minutes + 2 hours in background
    • Weekly and monthly tasks
    • Total time: appx. 10 active minutes + 2 hours in background + regular monthly backup time
  • Automated:
    • Downloading mail locally happens throughout the day since Thunderbird is always open
    • iCloud Drive backups happen daily automatically since iPhone charges wirelessly overnight

As you can see, I don’t actually spend a lot of time backing up my data. I last suffered a catastrophic data loss in 2008, and I’m determined to not let that happen again, especially now that storage is cheap and fast, and cloud backups exist.

In the early days of this system, I was tempted to automate large parts of it. I could run an open-source Time Capsule using an unused Raspberry Pi and Netatalk. I could also connect the external 2TB drive and run rsync from my Mac to the remote Pi machine (rsync, or remote sync, was in fact built for this use case).

That way my Time Machine backups would run every hour, not weekly. I could also automate rsync to, say, daily by using MacOS’ cron, a scheduling utility that’s part of almost every unix-based system.

But that frequency of backup seems overkill for my data, especially given that the vast majority of my everyday data, the one that changes daily, is backed up to iCloud. Even if I were to lose data mid-month, between restoring from the latest Time Machine backup and then syncing to iCloud, I’d be able to recover most, if not all, of my data. So that means leaving a computer running, with my backup disks attached, that’s really doing useful work for a tiny fraction of the time. That also means extra wear on the very disks I’m using for backup.

In conclusion

My solution is a mix of cloud sync and manual backup.

The cloud portion – for frequently changing data – uses iCloud, which seems to be the most privacy-centric of all cloud services.

The manual portion – for redundancy and archived data – uses open source tools and doesn’t rely on either an always-on computer, specialised hardware or a connection to the Internet, unlike the Western Digital NAS this post began with.

Finally, the solution doesn’t take a lot of time to run, and can be restored from pretty quickly. The only vulnerability in this system is that all the devices and disks are in my house. If there’s a catastrophic event at my place, the data that’s backed up manually will be lost.

Categories
Data Custody Decentralisation and Neutrality Discovery and Curation Products and Design The Dark Forest of the Internet

Preserving the web that matters to us

A quarter of the deep links in The New York Times’ articles are now “rotten”, or no longer accessible. The older the web page, the more likely it is that the articles it links to no longer exist. This chart makes it clear:

The internet is decentralised by design. That means no single entity decides whether a given article on the web is taken down.

But that also means that no single entity can ensure that that article can stay up. If the owner of the domain dies, forgets to renew, or simply chooses not to, it’s gone. The Internet archive can’t archive every single web page that ever existed.

That means it is up to each of us to preserve, privately, those parts of the web that matter to each of us.

I am personally a long-time user of both Instapaper and Pocket (from when they were personal projects of their creators), and have thousands of articles in each. Should either of these services shut down, I will be able to export my saved articles. For articles and web pages with more significant personal value, I also have a folder full of markdown-formatted versions of them. I ended up creating an iOS Siri Shortcut to automate this, which I use every day.

Other ways are to save the full text in Evernote, or OneNote, or Notion using their browser extensions, and they’ll be available to you as long as these services are active. You could also copy the web page, paste it in an email and mail it to yourself, creating a library within email. Which again is accessible – and searchable! – as long as you have access to that email address. There’s no perfect solution.

The important take-away here is that what makes the Internet resilient as a whole makes it fragile at a microscopic level. Saving bookmarks alone is no guarantee that you’ll be able to access something on the web later. You’ll need to save the page itself, and find a system for this that works for you.

Categories
Decentralisation and Neutrality Discovery and Curation Wellness when Always-On

“The News consumes us”

Quick quote from a short blog post I read last week:

The News is like alcohol. Both are drugs that give you a quick buzz but both are depressants. Both are habit forming. Some people can do moderation but many struggle with that.

2020 showed us that if you lock people in their homes for months on end, deprive them of the people they love, their basic freedoms and hook them up to The News and Social Media 24 hours a day, they go completely mental.

it has felt like The Public Square is broken. Online discussion is a poor substitute for face to face discussion. It’s only when discussing things face to face that you get the full range of vocal cues, body language and tonal emphasis. 

To me, the most important bit in the post was this:

We can choose to reduce and control our intake. We can get more of our information from primary sources. 

The most reliable information in the right context is from primary sources. It’s suprising how many news articles, tweets and blog posts all eventually quote the same source. And how different interpretations (not always malign) can change the original meaning.

But locating that source takes time. And it follows that because you can only read so many news sources, that you pick them carefully.


Related:

Categories
Decentralisation and Neutrality Products and Design The Next Computer

The Mighty browser and web bloat

The Mighty browser, recently unveiled, “lets you have more tabs while taking 10x less memory” because it “streams your browser from a powerful computer in the cloud”.

Here’s how it works:

Mighty designed a custom server to “keep costs low,” built a low-latency networking protocol, and forked Chromium to “integrate directly with various low-level render/encoder pipelines.”…

Each browser instance is powered by “16 vCPUs” running on dual Intel Xeon processors that clock up to 4GHz, Nvidia GPUs, and 16GB of RAM.

This cloud implementation is said to let you load anywhere from “50+” to “hundreds of tabs without it stalling, freezing, and slowing down your computer

This reminds me of the Opera Mini browser I used to use on my Nokia N series phones. It pre-rendered web pages on a server before sending a compressed end result to my phone:

Unlike straightforward web browsers, Opera Mini fetches all content through a proxy server, renders it using the Presto layout engine, and reformats web pages into a format more suitable for small screens.

A page is compressed, then delivered to the phone in a markup language called Opera Binary Markup Language (OBML), which Opera Mini can interpret.

According to Opera Software, the data compression makes transfer time about two to three times faster,[29] and the pre-processing improves the display of web pages not designed for small screens.

As someone who uses ten year old laptops as my daily machines, I also can’t help but agree with this:

https://twitter.com/notnullnotvoid/status/1387093359806853127

(Featured Image Photo Credit: Ian Battaglia/Unsplash)

Categories
Decentralisation and Neutrality Real-World Crypto

Of bitcoin and asset bubbles

In an efficient financial market, high volatility is correlated with high expected returns. This is one of the most basic principles of finance. Volatility is the cost that investors pay to hold an asset that is likelier to yield them bigger rewards. Risk is the pain, expected return is the gain…

 Many people over the years have argued that Bitcoin is this type of trash asset. … But let’s assume it’s not. Suppose Bitcoin’s value is slowly rising to some long-term equilibrium. The existence of semi-regular bubbles and crashes every few years will tend to slow that process, because it keeps some people scared and keeps them out of the Bitcoin market. That depresses the price today. But then as the bubbles keep happening and the skeptics realize that this is just how Bitcoin works, they eventually lose their fear and jump into the market, and Bitcoin’s price rises.

– Triumph of the HODLers

The article goes on to make the point about bitcoin as a hedge not just against equities or bonds or a specific asset class, but against “system failure”:

 The system of governments, banks, financial regulations, etc. etc. that currently runs the world is not infinitely robust. In the places and times and future conditions in which that system fails, peer-to-peer financial solutions like Bitcoin are inherently very valuable. That gives Bitcoin fundamental value.

and then ultimately hazards a guess at what makes Bitcoin so political.

All around, an excellent read.


Related post:

Categories
Decentralisation and Neutrality Real-World Crypto

Single point of failure of imagination

I’ve been thinking about India’s will-they-won’t-they reckoning with the legality of cryptocurrency. Even a year after the Supreme Court ordered the RBI to rescind its ban on banks dealing with cryptocurrency-linked exchanges and directing the government to formulate a law instead, there isn’t one. Instead, there’s a bill that has wound its way through committee and is now awaiting tabling in the ongoing session of Parliament.

The one-line description of the bill makes a reference to the banning of “private cryptocurrencies”. As a consequence, the sword of damocles that has hung above India’s collective cryptocurrency ecosystem since the RBI ban in 2018 has gotten a little wobblier. Every week, for weeks, people in the ecosystem have parsed the odd statement by the minister of finance, and the governor of the RBI and other bureaucrats to glean some indication of which way the wind is blowing.

One day – no one knows when – everyone’ll refresh their feed and discover whether India’s entire industry lives free or dies or is condemned to a highly circumscribed life. That decision determines the access of one-sixth of humanity to something as transformative as decentralised ledger technology – someone in the industry draws comparisons with India’s mid-1990s decision to allow (extremely constrained) access to the Internet itself.

This is a terrible way to live.

Finally, what’s worse is that it’ll eventually be one person – whether an influential bureaucrat or an elected official – who’ll make the difference.

This isn’t unique to India. While in India the eventual lynchpin might be faceless, policy making in the US is transparently but routinely held hostage to a small handful of elected officials.

These are single points of failure. Failures of imagination. Failures that can and often do set entire populations and economies back by a generation.

Corporations make similar decisions at different levels in their hierarchy. The difference for people like you and me is one of choice. We can usually switch to another product, another provider, another subscription. There are switching costs, of course. But the costs of switching countries are many orders of magnitude higher.

Finally, corporations reverse decisions quickly as well. The feedback mechanism is tighter. Decision making is more agile than countries to begin with. It’s a lot harder to rescind an executive order and reverse a law: citizens have only the judiciary and the ballot box.

In the coming face-off between corporation-states and nation-states, this agility will be a big competitive advantage.

Categories
Data Custody Decentralisation and Neutrality Real-World Crypto

The difference between a central bank digital currency and a prepaid wallet

This article in last week’s issue of The Economist is a decent overview of central bank digital currencies, or governments issuing their own cryptocurrency.

According to the article, the main difference between these and the cashless payment systems we already use, like prepaid wallets, is “money held on a CBDC app or website will be equivalent to a deposit at the central bank”.

Similarly, the article predicts, such money held in private payment/wallet apps will still be equivalent to being held at the bank, not on the payment providers’ balance sheet. This is unlike today, where adding money into an Amazon Pay prepaid wallet is no longer on your banks’ balance sheet, it’s on whatever Amazon subsidiary holds the prepaid wallet license.

To be clear, none of these central bank digital currencies are really on ‘public’ blockchains, even though governments may piggyback on the term since it’s usually associated with them. They’re centralised, in that while their architecture may nominally resemble decentralised one like, say, the Ethereum blockchain, there’s almost certainly going to be tight control over who can run nodes.

Finally, I was disappointed that the article made only one passing reference to the programmable nature of digital currency, something that is widely done in crypto projects today’s using “smart contracts”, often the most innovative part of such projects. But back in September 2020, we had explored this topic in more detail:

Categories
Decentralisation and Neutrality Real-World Crypto

What needs to happen before bitcoin or crypto really threaten banks

The Financial Times writes about how cryptocurrency companies plan to make money through good old credit:

[BlockFi] is launching a credit card, a joint venture with Visa. The card rewards purchases with Bitcoin instead of airline miles. The purchases, though, are paid for with a consumer loan, like any other credit card.

Nexo, another crypto-finance company, will lend fiat cash against Bitcoin, at a 60 per cent loan-to-value ratio. That loan is brand-new credit money. Likewise, Kraken Financial, a crypto-coin brokerage, will let you trade on a so-called margin account in which they’ll lend you part of the purchase price of a coin.

– Bitcoin cannot replace the banks, Financial Times.

The article argues that in doing so, these companies are doing exactly what commercial banks have done for centuries – find new ways of issuing credit and creating new money in the process:

So-called “fiat” money derided by bitcoin supporters is usually defined as government-issued currency not backed by an asset like gold. But a lot of fiat money, which we use for purposes such as paying taxes, is actually a bunch of loans, regulated by governments but produced by commercial banks.

And so for all the promise of decentralisation and control over one’s own money,

Bitcoin is turning out to be a good way to reinforce the system we already have. There’s a lot about this system that functions poorly. The supply of credit money can be unstable, as banks stop making loans in a downturn, right when people need them the most. There is little incentive to extend cheap credit to people who need small loans. But there isn’t much, so far, that Bitcoin seems to have done to fix these things, and it’s not at all clear how it will.

This ultimate dependence on fiat cash is ultimately because of bitcoin’s limitations in being used as currency: there are issues of speed, scale, cost, convenience. Until those are sorted out, bitcoin will continue to be used mainly as a store of value, like gold.

When it does begin to be used widely enough as a medium of exchange – as currency, it will also begin being used as a unit of account. That is, transactions will be denominated in bitcoin, and in that context it won’t matter much what its price in dollars or euro or yuan is.

At this point, bitcoin fulfills the three functions of money.

Once that happens, to return to the FT’s examples above, BlockFi’s credit card will be used for purchases in bitcoin too. Nexo’s loans won’t always be fiat-for-bitcoin, they’ll simply be bitcoin-at-interest. And so on.

And it’s then that banks will be in existential trouble. But a long of things have to go right before one gets to that point.