I
Ian Grigg
iang.org · Personal blog · on HN since 2010
Ian Grigg writes on financial cryptography, secure protocol design, PKI, and triple-entry accounting.
What HN saysHN commenters call his writing worth reading, especially on security design, and link him for triple-entry accounting and the 'market for silver bullets' idea.
21HN people shared it
13linked it in comments
9stories submitted
70story points
4 years agolast shared
2010people per year2026
Most-shared posts
- 1Triple Entry Accounting (2005)7 people · 62 points · first shared 2011 · 19 comments on HN
- 2Security - a Market for Silver Bullets3 people · 2 points · first shared 2013 · discussion on HN
- 3The threat model for SSL is flawed (2003)2 people · 2 points · first shared 2011 · discussion on HN
- 4There is only one mode, and it is Secure2 people · 1 points · first shared 2013 · 1 comments on HN
- 5Hard Truths about the Hard Task of finding Good Random Numbers1 people · 1 points · first shared 2014 · discussion on HN
- 6Financial Cryptography in 7 Layers (2000)1 people · 1 points · first shared 2017 · discussion on HN
- 7PKI considered harmful1 people · 1 points · first shared 2012 · discussion on HN
- 8Ricardian contract1 people · first shared 2013
- 9Intersection ricardian smart1 people · first shared 2017
- 10David1 people · first shared 2010
- 11Hn hypotheses in secure protocol design1 people · first shared 2013
- 12BitcoinBreachesGreshamsLaw.pdf1 people · first shared 2015
What HN people wrote when they linked it
MattJ100 · 2013-07-13
Grigg's other writings are also worth a read: http://iang.org/ssl/hn_hypotheses_in_secure_protocol_design.html
But for me, this is the one that stands above the others. It's such a common problem that people only seem to add in security where they think it matters, whereas a system is only as secure as its weakest point.
tef___ · 2011-08-24
many cs majors are underexposed to operational and system concerns
so i'd add Jim Gray's 'Why Do Computers Stop and What can be done about it' http://www.hpl.hp.com/techreports/tandem/TR-85.7.pdf
Also, 'Reflections on Trusting Trust' is a good one to add under security. I'd also recommend 'What's your threat model?' http://iang.org/ssl/wytm.html
basch · 2021-07-06
A blockchain is triple entry accounting, which has advantages over double.
http://www.warrenhenke.com/writing/essays/triple-entry-accounting
https://iang.org/papers/triple_entry.html
I find it odd to say "thats a human problem" as if technical invention over centuries isnt specifically to abstract away human inefficiency.
A group of somewhat trusting firms doesnt need crazy PoW/PoS. The idea of companies sharing a collaborative ledger when working together shouldnt be dismissed so flippantly. Everyone keeping their own (unreconciled automatically with each others) book may be the status quo, but it doesnt make it optimal.
sanxiyn · 2020-06-17
No, it is not a market for lemons. It is a market for silver bullets!
https://iang.org/papers/market_for_silver_bullets.html
thesehands · 2017-11-27
I would assume double entry land to refer to the current system we operate today, and triple entry land would refer to a system where transactions occurred in crypto currency.
Triple entry is well laid out here: http://iang.org/papers/triple_entry.html And point to the fact that transactions between two parties are digitally signed by a third party, thereby creating a third record
Chirael · 2017-11-21
It also seems to conflate online access to land records with bitcoin.
It's possible that the same folks that pushed MERS (trying to move land records out of county systems and into a private, mortgage industry-controlled system) may be pushing this as a second attempt at the same (just with the word "blockchain").
The only way it makes sense to me is as a further means of authenticating exactly what was done and who the parties were. See "Triple Entry Accounting" for a similar concept (added value from blockchain use): http://iang.org/papers/triple_entry.html
haspok · 2017-07-19
Try this for a start:
https://hackernoon.com/why-everyone-missed-the-most-important-inventio…
Actually, this is better:
http://iang.org/papers/triple_entry.html
My attempt at trying to explain it in one sentence: blockchain provides the technology to connect the double entry ledgers of two (or more) parties by recording the transactions between them, in a way that makes it possible to _prove_ the existence and validity of the transaction independently, without relying on either party's ledger.
yithump · 2017-06-17
Democratic Autonomous Organizations -- which are corporations whose law is created not by human organizations; the law for ricardian contracts is instead defined by a relationship between trustless consensus and formally verifiable logic.
See the og tao here: http://chriseth.github.io/browser-solidity/?gist=192371538cf5e43e6dab#…
and read about the $50 million tao debacle on wiki:
https://en.wikipedia.org/wiki/The_DAO_(organization)
more about ricardian contracts on ethereum here: http://iang.org/papers/intersection_ricardian_smart.html
pitay · 2017-05-09
It may also be good to look at 'The market for silver bullets' (2008) [1]. This discusses security products as products where both the seller and buyer do not know enough to judge the efficacy of security products. Also where the cost of a breach may be far lower than the PR costs and fallout for example.
[1]: http://iang.org/papers/market_for_silver_bullets.html
schoen · 2015-07-02
One thing you might be thinking of is "there should be one mode, and it should be secure".
http://iang.org/ssl/h3_there_is_only_one_mode_and_it_is_secure.html
This isn't exactly the same as what you said, but I think it's an argument in favor of your point of view.
Another analogous thing is that academic cryptographers will regard an algorithm or protocol as broken if an adversary can gain a significant advantage (probability of distinguishing things that are supposed to be indistinguishable, reduction in work factor, etc.), even if the resulting work factor to mount the attack is still enormous. For example, if there were an attack that could break AES in 2¹⁰⁰ operations, AES would be considered broken even though we believe there is no one who can perform 2¹⁰⁰ operations, because it no longer provides the designed or advertised security margin.
mikeyouse · 2015-05-13
There was an interesting paper a few years ago about this inevitability;
http://iang.org/papers/BitcoinBreachesGreshamsLaw.pdf
Then it was in the context of botnets and chinese miners -- but the theory is that dishonest mining (stolen electricity) will necessarily drive our honest mining which will spell doom for Bitcoin.
jchrisa · 2013-04-30
Can this be computed with map reduce?
Also related, it might be an interesting way to encode Ricardian Contracts http://iang.org/papers/ricardian_contract.html
tokenadult · 2012-06-19
I guess the problem with a long article, even an interesting long article like the one submitted here, is that it is hard to read to the end. Near the end of the submitted article is this paragraph:
"A second problem is that even when it comes to alternative energy sources, Germany doesn't reward carbon dioxide reduction. Rather, its policy establishes well-defined subsidies for specific technologies: a kilowatt-hour of solar power is rewarded more than power from offshore wind, which in turn earns more than power from onshore wind. Even though solar subsidies have been reduced to rates far lower than the ones Leurs locked in, solar power still pays the highest rates. If reducing emissions were the focus, however, more money would be directed toward reducing energy use. 'If you could choose the optimal instruments, focusing on those areas first where you can achieve your goals most inexpensively, you would focus not so much on renewables but much more on efficiency,' says Pittel, the energy economist from Munich."
This ignores the advice of Amory Lovins
http://www.rmi.org/Amory+B.+Lovins
(Amory Lovins profile page at Rocky Mountain Institute website)
http://www.ted.com/speakers/amory_lovins.html
(TED profile)
http://www.ted.com/talks/amory_lovins_a_50_year_plan_for_energy.html
(TED Talk video "A 40-year plan for energy")
and generally the advice of any thoughtful scholar on how to improve worldwide energy efficiency. The German Energiewende plan is a remarkable…