tim-clancy.eth

User layer @ethereumfndn, I love @ethereum with a Crusader's zeal; suffer not the weaker souls. Magnifica Æthereum. Was zealot @Sigil_L2 still zealot.

[tim-clancy.eth @_Enoch]

Yeah nothing matters because we've only got 2PC and the attestor can always forge proof of payment but I meant we could remove the seller's trust in the faithful downstream evaluation of an otherwise-correct proof; that logic could be proven onchain instead of running offchain. We could get to a point where it would really mean that the only way to screw a seller would be to actually forge a proof. Bigger fish to fry I suppose.

[tim-clancy.eth @_Enoch]

@zkpedrongmi @SpaceComputerIO Make your sattelites deliberately very reflective so we can observe them 24/7 to make sure nobody is approaching to kidnap them. It's an exit window, of sorts. TEEs in space are hilarious and this is actually the only place I'd ever trust them.

[tim-clancy.eth @_Enoch]

We might be talking past each other. The attestation gets posted onchain but it sounds like the current check is confirming it came from the trusted attestor. What I'm saying is that with zkTLS, the seller should not actually need to trust the attestor because a smart contract should be able to do all of the attestor's verification work by confirming correctness of the zkTLS details directly (or a zkVM consumes the zkTLS data and generates a proof).

[tim-clancy.eth @_Enoch]

Yeah of course, I just mean that once the buyer/attestor finished the 2PC I thought the zkTLS output was being verified onchain, either directly or via wrapping in a zkVM first or something. You can never shake the liveness problem but you could enforce soundness for the seller's end and only release their funds with an actual proof. This seems strictly better than the TEE assumptions.

[tim-clancy.eth @_Enoch]

@z0r0zzz @dxnzn_ @tacitfi you should make a version where we don't need to assume the trust assumptions of an alt-L1

[tim-clancy.eth @_Enoch]

@drahcir @peerxyz Ouch. I'd been under the impression that the zkTLS proof itself was being verified on Ethereum as a precondition for seller release, and a malicious attestor screwed the buyer. What you've described is a lot weaker than I misunderstood Peer to be.

[tim-clancy.eth @_Enoch]

@CarlotaFang77 carlota this is an alt-L1

[tim-clancy.eth @_Enoch]

@NeerajKA How much does this concession hurt future Romans when evil prosecutors try to allege that building unconditional privacy tools means one had _specific intent_? I'm disappointed in this one because I saw the 1960 change as the entire point.

[tim-clancy.eth @_Enoch]

@0xjei Do you know if the zkTLS path is at least still available as an option?

[tim-clancy.eth @_Enoch]

Nooooooo!!!

[Peer (Prev. ZKP2P) @peerxyz]

Peer is now running on TEEs.

Payment verification just got 100x faster, from ~30s to <300ms.

Here's what changed.

[tim-clancy.eth @_Enoch]

@ambire beautiful

[ambire.eth @ambire]

@_Enoch Yes

[tim-clancy.eth @_Enoch]

@thothxmr The real patrician choice of an unstoppable private asset is Tornado Cash Ether; much higher total cost of attack.

[tim-clancy.eth @_Enoch]

@alpeh_v @jimjim_eth @Zodomo @joddoss It's not atomic because someone needs to broadcast the presigned transaction, yeah? Not that it's a problem for deploys. I wonder if that's a meaningful advantage of 8141.

[tim-clancy.eth @_Enoch]

@basche42 https://t.co/El2hMmZdec

[tim-clancy.eth @_Enoch]

Sure, but in order to do that they'd need to do the work to regenerate a valid proof swapping in their recipient address. If it takes on the order of 30 minutes or so to generate the rollup proofs it's not very likely they'd be able to pull that off. From the perspective of the L2 user they also don't care who gets the fees.

[tim-clancy.eth @_Enoch]

@alpeh_v @Zodomo @joddoss @jimjim_eth Is there a way to make that a group effort and preserve the suicide pact nature of things?

[tim-clancy.eth @_Enoch]

Oh, I wasn't even necessarily thinking about being based. I was thinking about the case where you have L1 and any number of sequencers can exist at the frayed head of the L2 all posting blobs, with the first one proving advancing the canonical state and reorging the rest.

That's at least what Sigil chose.