logo

drewdevault.com

[mirror] blog and personal website of Drew DeVault git clone https://hacktivis.me/git/mirror/drewdevault.com.git

Cryptocurrency-is-a-disaster.md (8312B)


  1. ---
  2. title: Cryptocurrency is an abject disaster
  3. date: 2021-04-26
  4. ---
  5. This post is long overdue. Let's get it over with.
  6. <div class="alert alert-danger">
  7. 🛑 <strong>Hey!</strong> If you write a comment about this article online,
  8. disclose your stake in cryptocurrency. I will explain why later in this post.
  9. For my part, I held &lt;$10,000 USD worth of Bitcoin prior to 2016, plus small
  10. amounts of altcoins. I made a modest profit on my holdings. Today my stake in
  11. all cryptocurrency is $0.
  12. </div>
  13. Starting on May 1st, users of sourcehut's CI service will be required to be on a
  14. paid account, a change which will affect about half of all builds.sr.ht
  15. users.[^1] Over the past several months, everyone in the industry who provides
  16. any kind of free CPU resources has been dealing with a massive outbreak of abuse
  17. for cryptocurrency mining. The industry has been setting up informal working
  18. groups to pool knowledge of mitigations, communicate when our platforms are
  19. being leveraged against one another, and cumulatively wasting thousands of hours
  20. of engineering time implementing measures to deal with this abuse, and
  21. responding as attackers find new ways to circumvent them.
  22. [^1]: If this is the first you're hearing of this, a graceful migration is planned: [details here](https://man.sr.ht/ops/builds.sr.ht-migration.md)
  23. Cryptocurrency has invented an entirely new category of internet abuse. CI
  24. services like mine are not alone in this struggle: JavaScript miners, botnets,
  25. and all kinds of other illicit cycles are being spent solving pointless math
  26. problems to make money for bad actors. Some might argue that abuse is inevitable
  27. for anyone who provides a public service &mdash; but prior to cryptocurrency,
  28. what kind of abuse would a CI platform endure? Email spam? Block port 25.
  29. Someone might try to host their website on ephemeral VMs with dynamic DNS or
  30. something, I dunno. Someone found a way of monetizing stolen CPU cycles
  31. directly, so everyone who offered free CPU cycles for legitimate use-cases is
  32. now unable to provide those services. If not for cryptocurrency, these services
  33. would still be available.
  34. Don't make the mistake of thinking that these are a bunch of script kiddies.
  35. There are large, talented teams of engineers across several organizations
  36. working together to combat this abuse, and they're losing. A small sample of
  37. tactics I've seen or heard of include:
  38. - Using CPU limiters to manipulate monitoring tools.
  39. - Installing crypto miners into the build systems for free software projects so
  40. that the builds appear legitimate.
  41. - Using password dumps to steal login credentials for legitimate users and then
  42. leveraging their accounts for mining.
  43. I would give more examples, but secrecy is a necessary part of defending against
  44. this &mdash; which really sucks for an organization that otherwise strives to be
  45. as open and transparent as sourcehut does.
  46. Cryptocurrency problems are more subtle than outright abuse, too. The integrity
  47. and trust of the entire software industry has sharply declined due to
  48. cryptocurrency. It sets up perverse incentives for new projects, where
  49. developers are no longer trying to convince you to use their software because
  50. it's good, but because they think that if they can convince you it will make
  51. them rich. I've had to develop a special radar for reading product pages now: a
  52. mounting feeling of dread as a promising technology is introduced while I
  53. inevitably arrive at the buried lede: it's more crypto bullshit. Cryptocurrency
  54. is the multi-level marketing of the tech world. "Hi! How've you been? Long time
  55. no see! Oh, I've been working on this cool distributed database file store
  56. archive thing. We're doing an ICO next week." Then I leave. Any technology which
  57. is not an (alleged) currency and which incorporates blockchain anyway would
  58. always work better without it.
  59. There are hundreds, perhaps thousands, of cryptocurrency scams and ponzi schemes
  60. trussed up to look like some kind of legitimate offering. Even if the project
  61. *you're* working on is totally cool and solves all of these problems, there
  62. are 100 other projects pretending to be like yours which are ultimately
  63. concerned with transferring money from their users to their founders. Which
  64. one are investors more likely to invest in? Hint: it's the one that's more
  65. profitable. Those promises of "we're different!" are always hollow anyway.
  66. Remember the [DAO][DAO]? They wanted to avoid social arbitration entirely for
  67. financial contracts, but when the chips are down and their money was walking out
  68. the door, they forked the blockchain.
  69. [DAO]: https://en.wikipedia.org/wiki/The_DAO_(organization)
  70. That's what cryptocurrency is all about: not novel technology, not empowerment,
  71. but making money. It has failed as an actual *currency* outside of some
  72. isolated examples of failed national economies. No, cryptocurrency is not a
  73. currency at all: it's an investment vehicle. A tool for making the rich richer.
  74. And that's putting it nicely; in reality it has a lot more in common with a
  75. Ponzi scheme than a genuine investment. What "value" does solving fake math
  76. problems actually provide to anyone? It's all bullshit.
  77. And those few failed economies whose people are desperately using cryptocurrency
  78. to keep the wheel of their fates spinning? Those make for a good headline, but
  79. how about the rural communities whose tax dollars subsidized the power plants
  80. which the miners have flocked to? People who are [suffering blackouts][blackouts]
  81. as their power is siphoned into computing SHA-256 as fast as possible while
  82. dumping an entire country worth of COâ‚‚ into the atmosphere?[^2] No,
  83. cryptocurrency does not help failed states. It exploits them.
  84. [^2]: "But crypto is far from the worst contributor to climate change!" Yeah, but at least the worst offenders provide value to society. See also [Whataboutism](https://en.wikipedia.org/wiki/Whataboutism).
  85. [blackouts]: https://www.rferl.org/a/bitcoin-blackouts-russian-cryptocurrency-miners-minting-millions-sucking-abkhazia-electricity-grid-dry/30968307.html
  86. Even those in the (allegedly) working economies of the first world have been
  87. impacted by cryptocurrency. The price of consumer GPUs have gone sharply up in
  88. the past few months. And, again, what are these GPUs being used for? Running
  89. SHA-256 in a loop, as fast as possible. Rumor has it that hard drives are up
  90. next.
  91. Maybe your cryptocurrency is different. But look: you're in really poor company.
  92. When you're the only honest person in the room, maybe you should be in a
  93. different room. It is impossible to trust you. Every comment online about
  94. cryptocurrency is tainted by the fact that the commenter has probably invested
  95. thousands of dollars into a Ponzi scheme and is depending on your agreement to
  96. make their money back.[^3] Not to mention that any attempts at reform, like
  97. proof-of-stake, are viciously blocked by those in power (i.e. those with the
  98. money) because of any risk it poses to reduce their bottom line. No, your
  99. blockchain is not different.
  100. [^3]: This is why I asked you to disclose your stake in your comment upfront.
  101. Cryptocurrency is one of the worst inventions of the 21st century. I am ashamed
  102. to share an industry with this exploitative grift. It has failed to be a useful
  103. currency, invented a new class of internet abuse, further enriched the rich,
  104. wasted staggering amounts of electricity, hastened climate change, ruined
  105. hundreds of otherwise promising projects, provided a climate for hundreds of
  106. scams to flourish, created shortages and price hikes for consumer hardware, and
  107. injected perverse incentives into technology everywhere. Fuck cryptocurrency.
  108. <details>
  109. <summary>A personal note</summary>
  110. <p>
  111. This rant has been a long time coming and is probably one of the most
  112. justified expressions of anger I've written for this blog yet. However, it
  113. will probably be the last one.
  114. <p>
  115. I realize that my blog has been a source of a lot of negativity in the past,
  116. and I regret how harsh I've been with some of the projects I've criticised. I
  117. will make my arguments by example going forward: if I think we can do better,
  118. I'll do it better, instead of criticising those who are just earnestly trying
  119. their best.
  120. <p>
  121. Thanks for reading 🙂 Let's keep making the software world a better place.
  122. </details>