back to index

Silvio Micali: Cryptocurrency, Blockchain, Algorand, Bitcoin & Ethereum | Lex Fridman Podcast #168


small model | large model

link |
00:00:00.000
The following is a conversation with Silvio McCauley, a computer scientist at MIT,
link |
00:00:04.880
winner of the Turing Award, and one of the leading minds in the fields of cryptography,
link |
00:00:10.320
information security, game theory, and most recently, cryptocurrency and the theoretical
link |
00:00:16.400
foundations of a fully decentralized, secure, and scalable blockchain and Algorand,
link |
00:00:22.960
a company of cryptographers, engineers, and mathematicians that he founded in 2017.
link |
00:00:28.480
Quick mention of our sponsors, Athletic Greens Nutrition Drink, the Information InDepth Tech
link |
00:00:35.760
Journalism website, FourSigmatic Mushroom Coffee, and BetterHelp Online Therapy. Click the sponsor
link |
00:00:43.200
links to get a discount at the support of this podcast. As a side note, let me say that I will
link |
00:00:47.920
be having many conversations this year on the topic of cryptocurrency. I am reading and thinking a
link |
00:00:54.080
lot on this topic. I just recently finished reading the Bitcoin Standard, a book I highly
link |
00:00:59.920
recommend. As always, with this podcast, I'm approaching it with an open mind, with compassion,
link |
00:01:06.080
with as little ego as possible, and yes, with love. I hope you go along with me on this journey,
link |
00:01:13.360
and don't judge me too harshly on any likely missteps. As usual, I will play devil's advocate,
link |
00:01:20.960
I will, on purpose, sometimes ask simple, even dumb questions, all to try and explore the space
link |
00:01:28.160
of ideas here with as much grace as I can muster. I have no financial interests here. I only have a
link |
00:01:34.400
simple curiosity and a love for knowledge, especially about a set of technologies that may
link |
00:01:40.080
very well transform the fabric of human civilization. If you enjoy this thing, subscribe on YouTube,
link |
00:01:47.040
review it, and have a podcast, follow on Spotify, support it on Patreon, or connect with me on
link |
00:01:52.400
Twitter at Lex Freedman. And now, here's my conversation with Silvio McCauley.
link |
00:01:59.200
Let's start with the big and the basic question. What is a blockchain, and why is it interesting,
link |
00:02:05.520
why is it fascinating, why is it powerful? All right, so a blockchain, think of it, is really
link |
00:02:11.920
a common database distributed, think about is a ledger in which everybody can write an entry
link |
00:02:19.600
in a page, you can write, I can write, and everybody can read, and you have a guarantee
link |
00:02:26.640
that everybody has the same copy of the ledger that is in front of you. So if whatever you see
link |
00:02:31.920
on page seven, anyone else sees on page seven. So what is extraordinary about this is this
link |
00:02:40.160
common knowledge thing that I think is really a first for humanity. I mean, if you look at
link |
00:02:47.360
communication, like right now, you can communicate very quickly images of photos, but do you have a
link |
00:02:56.800
certainty that whatever you have received has been received by everybody else? Not really.
link |
00:03:02.320
And so this common knowledge and knowledge, and the certainty that everybody can write,
link |
00:03:07.520
nobody has been prevented from having whatever they want. Nobody can erase, nobody can tear a page
link |
00:03:13.440
of a ledger, nobody can swap page, nobody can change anything. And that is a immutable common
link |
00:03:20.080
record is extremely powerful. And there's something fundamental that is decentralized about it. So
link |
00:03:28.160
at least in spirit, some degree against maybe a resistance to centralization. Absolutely. If it is
link |
00:03:35.360
not decentralized, how can it be common knowledge? If only one person or a few people have a ledger,
link |
00:03:43.440
they only, you don't have a ledger, you have to ask, you know, what is on page seven, and how do
link |
00:03:48.240
you know that whatever they tell you is on page seven, they tell the same thing to everybody
link |
00:03:52.960
else. And so that is this common knowledge is extremely powerful, just to give you an example,
link |
00:04:02.000
assume that you do an auction, okay, you have worked very hard, you build a building,
link |
00:04:08.880
and now you want to auction off. Makes sense, because you want to auction worldwide,
link |
00:04:14.880
better yet you want to organize the building and sell it in all in parcels.
link |
00:04:20.320
Now, everybody sees the bids. And you know that everybody sees the bids, you and I see the same
link |
00:04:26.400
bids, and so does everybody else. So you know that the fair price has reached, and you know, who wants
link |
00:04:32.000
what and who has paid how much. And if you do it instead of a price in an essentialized system,
link |
00:04:39.440
I put a bid say, oh, congratulations, Alex, you won. And your price is $12,570. So if instead of
link |
00:04:49.200
is that common, the knowledge is a very powerful tool for humanity. So we return to it from a
link |
00:04:57.920
bunch of different perspectives, including like a technical perspective, but you often talk about
link |
00:05:03.600
blockchain and some of these concepts of decentralization, scalability, security,
link |
00:05:10.480
all those kinds of things. But one of the most maybe impactful, exciting things that leverage the
link |
00:05:19.760
blockchain, this kind of ledger idea of common knowledge is cryptocurrency. So in the financial
link |
00:05:26.720
space. So is there, can you say in the same kind of basic way, what is cryptocurrency in the context
link |
00:05:33.520
of this common knowledge in the context of the blockchain? Great. Cryptocurrency is a currency
link |
00:05:40.320
that is on such a ledger. So imagine that on the ledger, right? Initially, you know that somehow,
link |
00:05:47.920
say, you and I are the only owner, each one, let's give it ourselves a billion each of whatever
link |
00:05:56.160
this unit. Then I start writing on the ledger, I give 100 of these units to my sister, you give
link |
00:06:04.080
my, I give this much to my aunt. And then, and then now, because it's written on the ledger and everybody
link |
00:06:10.240
can see my sister can give 57 of these units it should receive from me to somebody else.
link |
00:06:15.920
And so, and that is money. And that is money because you can see that somebody who tenders
link |
00:06:23.840
your payment has really the money there, right? You don't have any more of a doubt when you want
link |
00:06:28.400
to sell an item. If I write your check, is the check covered? If I write or do I have the money
link |
00:06:35.680
at the moment of a transaction? You really see, because the ledger is always updated, what you
link |
00:06:40.640
see is what I see, what the merchant sees, you know that the money, so is the most powerful
link |
00:06:48.800
money system there is because it is totally transparent. And so you know that you have
link |
00:06:53.440
been paid and you know that the money is there, you have not to second guess anything else.
link |
00:06:58.720
So the common knowledge applied there is you're basically mimicking the same kind of thing you
link |
00:07:04.400
would get in the physical space, which is if you give a hundred bucks or a hundred of that thing,
link |
00:07:10.640
whatever, of that cryptocurrency to your sister, the actual transfer is as real as you giving
link |
00:07:18.960
like a basket of apples to your sister because so in the case in the physical space, the common
link |
00:07:28.880
knowledge is in the physics of the atoms. And then it's digital space, the common knowledge
link |
00:07:35.360
is in this ledger. And so that transfer holds the same kind of power, but now it's operating in
link |
00:07:43.680
that digital space. Again, I apologize for a set of ridiculous questions, but you mentioned
link |
00:07:52.960
cryptocurrencies of money. What is money? Why do we have money? Do you think about this
link |
00:08:00.880
kind of from this high philosophical level at times of this tool, this idea that we
link |
00:08:08.800
humans have all kind of came up with and seem to be using effectively to do stuff?
link |
00:08:16.000
Money is a social construct, okay, in my opinion. And this has been somehow, people always felt
link |
00:08:23.200
that somehow money is a way to allow us to transact even though we want to different things.
link |
00:08:30.640
So I have two ships and then you have one cow. And I want the cow, but you are looking for blankets
link |
00:08:40.800
instead. So to have money is really simplifies this. But at the end of it, that's why a bit was
link |
00:08:46.800
invented. And you start with gold, you start with the coinage, then you start with the check.
link |
00:08:52.560
But at the end of the day, money is essentially a social construct because you know that what
link |
00:08:59.120
you receive, you can actually spend with somebody else. And so there is a kind of a social pact
link |
00:09:04.720
and social belief that you have. At the end of the day, even a barter is of requires
link |
00:09:15.360
these beliefs that other people are going to accept the quote unquote currency you offer them.
link |
00:09:20.960
Because if I'm amazing and you ask me to build a wall in your field and I did.
link |
00:09:28.480
And you, in exchange, you give me a fuzzenship. What am I going to do? Eat them all? No, I had to
link |
00:09:35.120
feed them. And if I don't feed them the dye, my value is zero. So in receiving this livestock,
link |
00:09:42.160
I must believe that somebody else will accept them in return for something else. So money is
link |
00:09:49.280
this social belief, social shared belief system that makes people transact.
link |
00:09:56.320
That's fascinating. I didn't even think about that. You have a deep network of beliefs about
link |
00:10:05.280
how society operates. So the value is assigned even to sheep based on that everyone will continue
link |
00:10:11.440
operating how they were previously operating. Somebody will feed the sheep. I didn't even think
link |
00:10:18.720
about that. That's fascinating. So that directly transfers to the space of money and then to the
link |
00:10:25.760
space of digital money, cryptocurrency. Okay. Does it bother you sort of intellectually when this
link |
00:10:32.960
money that is a social construct is not directly tied to physical goods like gold, for example?
link |
00:10:41.280
Not at all. Because after all, gold has some industrial value. Nobody delies it. It's a
link |
00:10:49.360
metal. It doesn't oxidate. It has some good things about it. But does this industrial value really
link |
00:10:56.080
represent the value to which it now is traded? No. So gold is another way to express our belief.
link |
00:11:02.480
I give you an answer. Gold, you treat it like, oh, somebody else will want this for doing
link |
00:11:08.720
something else. So it is really this notion of this. Money is a mental construct. It's really
link |
00:11:15.200
an end. It's a shared. It's a social construct, I really believe. And so some people feel that it's
link |
00:11:21.440
physical, so therefore gold exists. But then, as you know now, we, countries, most of us together
link |
00:11:30.240
country right now, they print their own money and you believe that they are not going to
link |
00:11:35.360
exaggerate it with inflation. Not everybody believes what I'm saying. There is at least
link |
00:11:40.800
a not they're not going to exaggerate it blatantly. And therefore you receive it because you know that
link |
00:11:49.120
somebody else who will accept it will have faith in the currency and so on and so forth.
link |
00:11:52.880
But the weather is gold, whether it's livestock, whatever it is, money is really a shared belief.
link |
00:11:59.600
So there is something, you know, and I've been reading more and more about different cryptocurrencies.
link |
00:12:04.800
There is a kind of belief that the scarcity of a particular resource like Bitcoin has a limited
link |
00:12:15.680
amount in its tied to physical, you know, to prefer work. So it's tied to physical reality
link |
00:12:24.000
in terms of how much you can mine effectively and so on. That that's an important feature of money.
link |
00:12:30.240
Do you think that's an important feature to be a part of what are the money is?
link |
00:12:35.520
That is certainly a very useful part. So at some point in time, you know, assume that
link |
00:12:42.320
money is something that all of a sudden we say, days is our money, our currency. Then,
link |
00:12:47.760
you know, I offer you 10 days is in payment of whatever goods and services you want to provide.
link |
00:12:53.280
But at the end of the day, if you know that you can cultivate it and generate them
link |
00:12:58.480
at will, then perhaps, you know, you should not accept my payment. Here is a bouquet of days.
link |
00:13:08.320
So you need some kind of a scarcity of the inability to create it suddenly out of nothing
link |
00:13:14.640
is an important. And it's not an intrinsic necessity, but it's much easier to accept
link |
00:13:24.640
once you know that there is a fixed number of units of whatever currency there is. And therefore,
link |
00:13:30.560
you can mentally understand I'm getting, you know, this much of this piece of pie.
link |
00:13:36.400
And therefore, I consider myself paid. I understand what I'm receiving.
link |
00:13:41.440
You described the goals of a blockchain. You have a nice presentation on this as scalability,
link |
00:13:46.480
security and decentralization. And you challenged the blockchain trilemma that claims you can only
link |
00:13:53.920
have two of the three. So let's talk about each. What is scalability in the context of blockchain
link |
00:14:01.280
and cryptocurrency? What does scalability mean? So remember, if we said that the blockchain is
link |
00:14:07.760
a ledger, and each page receives that gets some transaction, and everybody can write in this
link |
00:14:15.040
pages of a ledger, nobody can be stopped for writing and everybody can read them.
link |
00:14:18.640
Okay, scalability means how fast can you write? Just imagine that you can write an entry in this
link |
00:14:26.000
special shared ledger once every hour. Well, you know, what are you going to do if you have
link |
00:14:31.280
one transaction per hour, the world doesn't go around. So you need to have scalability means
link |
00:14:37.680
here that you can somehow write a lot of transaction, and then you can read them and
link |
00:14:45.200
everybody can validate them. And that is the speed and the number of transactions per second,
link |
00:14:53.120
and the fact that they are shared. So you want to have this speed, not only in writing, but in
link |
00:15:00.080
sharing and inspection for validity. This is scalability. The world is big. The world wants
link |
00:15:08.400
to interact with, the people want to interact with each other. And you better be prepared to
link |
00:15:12.720
have a ledger in which you can write lots and lots and lots of transactions in this special way
link |
00:15:17.360
very, very, very quickly. So maybe from a more mathematical perspective, or can we say something
link |
00:15:23.520
about how much scalability is needed for a world that is big? Well, really depends how many
link |
00:15:30.480
transactions you want. But remember that I think right now you have to go into at least
link |
00:15:38.080
a thousandth of transactions per second. Even if you look at credit cards, we are going to go from
link |
00:15:47.840
an average of 1600 to peaks of 20,000 or 40,000, something like this. But remember,
link |
00:15:56.640
it's not only a question of the transaction per se, but the value is that the transaction
link |
00:16:01.920
is actually being shared and visible to everybody. And the certainty that that is the case,
link |
00:16:09.280
I can print on my own printer way more transactions that nobody has the time to see or to inspect,
link |
00:16:16.640
that doesn't count, right? So you want scalability at this common knowledge level. That is the
link |
00:16:23.040
challenge. I also meant from a perspective of like a complexity analysis. So when you get more
link |
00:16:31.040
and more people involved, doesn't you just scale in some kind of way that... Do you like to see
link |
00:16:39.040
certain kind of properties in order to say something is scalable? Oh, absolutely. I took a
link |
00:16:44.240
little bit implicitly that the people transacting are actually very different. So if there is a
link |
00:16:49.920
two people who can do fast and slow transactions per second with each other, this is not so
link |
00:16:54.960
interesting. What we really need is to say there are billions of people at any point in time,
link |
00:17:00.000
you know, thousands and thousands of them want to transact with each other and you want to support
link |
00:17:05.280
that. So Algorand, it solves... So that's the company, the team of cryptographers and mathematicians,
link |
00:17:14.880
engineers, so on, that challenged the blockchain trilemma. So let's break it down in terms of
link |
00:17:21.600
achieving scalability. How do we achieve scalability in the space of blockchain, in the space of
link |
00:17:27.360
cryptocurrency? Okay, so scalability, security, remember, and decentralization. So that's what
link |
00:17:34.960
you want. What's the best way to approach? Can we break it down, let's start with scalability
link |
00:17:38.960
and think about how do we achieve it? Well, to achieve it at one at a time is perhaps easy,
link |
00:17:46.160
even security. If nobody transacts, nobody loses money. So that is secure, but it's not scalable.
link |
00:17:53.680
So let me tell you, I'm a cryptographer, so I try to fight the bad guys and what you want is that
link |
00:18:02.000
the vesselager that we discussed before cannot be tampered with. So you must think of it that
link |
00:18:08.960
is a special link that nobody can erase. Then it has to be everybody should be able to read
link |
00:18:16.800
and not to alter the pages or the content of the pages. That's okay. But you know what,
link |
00:18:24.880
that is actually easy cryptographically. Easy cryptographically means you can use tools invented
link |
00:18:31.120
50 years ago, which in cryptographic time is praistory, okay? We are cavemen working around
link |
00:18:37.920
and solve their problem in cryptography land. But there is really a fundamental problem,
link |
00:18:43.200
which is really almost a social seems a political problem is to say who the hell chooses or publishes
link |
00:18:53.040
the next page on the ledger. I mean, that is really the challenge. This ledger, you can always add
link |
00:19:00.160
a page because more and more transaction had to be written on there. And somebody has to assemble
link |
00:19:05.040
this, this transaction put them on a page and add the next page. Who is the somebody who chooses
link |
00:19:11.760
the page and adds it on who can be trusted to do it. Exactly. Assume it is me for what I'm being,
link |
00:19:17.680
not that I won't volunteer for the job, but then I would have more power than any absolute monarchy
link |
00:19:23.840
history because I would have tremendous power to say these are the transactions that the entire
link |
00:19:29.840
world should see. And whatever I don't write, this transaction will never see the light of day.
link |
00:19:36.320
I mean, no one had any such a power in history. So it's very important to do that. And that is
link |
00:19:43.840
the quintessential problem in a blockchain. And people have thought about it to say it's not me,
link |
00:19:50.080
it's not you. But for instance, in proof of work, what people say is okay, it's not me, it's not you.
link |
00:19:56.480
You know what it is? We make a very difficult, invent a cryptographic puzzle very hard to solve.
link |
00:20:04.320
The first one to solve it has the right to add one page to the ledger on behalf of everybody else.
link |
00:20:12.160
That's always seems okay because, you know, sometimes I solve the puzzle before you do,
link |
00:20:17.840
sometimes you solve before I do or before somebody else, somebody else solves it. It's okay.
link |
00:20:22.640
And presumably the effort you put in is somehow correlated with how much trust
link |
00:20:28.320
you should be given to add to the ledger. Yeah. So somehow you want to make sure that, you know,
link |
00:20:35.920
you need to work because you want to prevent, you want to make sure that, you know,
link |
00:20:41.600
you get one solution every 10 minutes to say, like in particular example of Bitcoin,
link |
00:20:47.680
so that is very rare that two pages are added at the same time. Because if I solve the puzzle
link |
00:20:53.600
at the same time you do, it could happen that if it happens once or twice, we can survive it.
link |
00:20:59.920
But if it happens, you know, every other page, you know, is a double page, then which of the two
link |
00:21:06.000
is the real page becomes a problem. So that's why in Bitcoin, it is important that to have
link |
00:21:12.240
substantial amount of work so that no many, how many people try on earth to solve the puzzle,
link |
00:21:18.640
you have one solution out of how many people are trying every 10 minutes so that you have,
link |
00:21:24.480
you distanciate these pages and you have the time to propagate through the network a solution
link |
00:21:30.400
and the page attached to it. And therefore there is one page at a time that is added.
link |
00:21:36.240
And they say, well, why don't we do it? We have a solution. Well, first of all, a page every 10
link |
00:21:43.840
minutes is not fast enough. It's a question of scalability. And second of all, to ensure that
link |
00:21:50.320
no matter how many people try, you get one page every 10 minutes, one solution to the riddle
link |
00:21:57.200
every 10 minutes, this means that the riddle becomes very, very hard. And to have a chance to
link |
00:22:04.960
solve it within 10 minutes, you must have such an expensive apparatus in terms of specialized
link |
00:22:12.960
computers, not one, not two, but a thousand and a thousand of them. And they produce tons of heat,
link |
00:22:17.680
okay, they dissipate heat like maniac. And you need to refrigerate them too. And so then now you
link |
00:22:23.360
have air conditioning, galore to add to the thing. It becomes so expensive that fewer and fewer
link |
00:22:30.400
and fewer people can actually compete in order to add to the page. And the problem becomes so
link |
00:22:37.840
so so crucial that you know, in in in Bitcoin, depending on which day of the week, look at it,
link |
00:22:47.600
you are going to have two or three mining pools are really the ones capable of controlling the
link |
00:22:55.360
chain. So you're saying that's that's almost like least centralization. Right. It started being
link |
00:23:03.360
decentralized. And but the expenses become higher and higher and higher when the cost becomes higher
link |
00:23:10.480
and higher, fewer and fewer people can afford them. And then, you know, it becomes de facto
link |
00:23:15.840
centralized, right? Yeah. And in a different type of approach is instead, for instance, a delegated
link |
00:23:23.840
proof of stake, which is also very easy to explain, essentially boils down to to say, well,
link |
00:23:31.360
look at these 21 people say, OK, and don't they look honest? Yes, they do. In fact, I believe
link |
00:23:38.800
that they're going to remain honest for the foreseeable future. So when do we do ourselves a
link |
00:23:42.960
favor? Let's entrust them to add the page on behalf of all of us to the ledger. OK.
link |
00:23:52.080
OK. But now we are going to say, is this centralized or decentralized? Well, 21 is better
link |
00:23:57.600
than one, I have to say, is very little. So if you look at when people rebelled to centralized
link |
00:24:04.640
power, I don't know, the French revolutions, OK, there was a monarch and the nobles. Yes.
link |
00:24:09.920
Were there 21 nobles? No, there were thousands of them, but there were millions and millions of
link |
00:24:16.000
disempowered citizens. So one is centralized, 21 is also centralized. So that's delegated
link |
00:24:22.960
proof of stake. Delegated. Kind of like representative democracy, I guess. Yes, which is
link |
00:24:29.120
good. It's working great, right? It's working great. Well, it's better than a monarch, right?
link |
00:24:36.560
But there's problems. There are problems. And so we were looking for a different,
link |
00:24:46.720
when thinking about Algorand for a different approach. And so we have an approach in that,
link |
00:24:54.400
you know, is really, really decentralized because essentially it works as follows.
link |
00:25:02.080
You have a bunch of tokens, right? These are the tokens that have equal power and you have,
link |
00:25:07.360
say, 10 billions of tokens distributed to the entire world. And the owners, each token has a
link |
00:25:17.680
chance to add the ledger equal probability of everybody else. In fact, actually, if you want,
link |
00:25:25.040
here is how it works. So think about, you know, by some magic graphic process, which is not magic,
link |
00:25:32.240
it's mathematics, but think of it the magic. Assume that you select a thousand tokens.
link |
00:25:40.400
And so sometimes a random, okay, and you have a guarantee that we're going to select it.
link |
00:25:45.200
And then the owners of these 1000 tokens somehow agree on the next page. They all sign it.
link |
00:25:53.600
And that's the next page. Okay. So it is clear that, you know, nobody has the power, but you know,
link |
00:26:00.240
you know, once in a while, one of your tokens is selected and you are in charge of this
link |
00:26:07.840
committee to select the next page. But this goes around very quickly. So and if you look at this,
link |
00:26:15.760
the question really is that it's not really centralized. And because of what, for agreeing
link |
00:26:22.000
on the same page, it is important that the 1000 tokens that you randomly selected
link |
00:26:28.320
are in honest ends, the majority of them. So which if the majority of the tokens are in honest ends,
link |
00:26:36.000
that is essentially true. Because if the majority of the tokens are in honest ends, if you select,
link |
00:26:42.800
say 90% of the people are 90% of the tokens are in honest ends. So can you randomly select
link |
00:26:50.560
1000? In this 1000, you find the 501 tokens in bad ends. Very, very improbable. So basically,
link |
00:27:00.640
when a large fraction of people are honest, then you can use randomness as a powerful tool to get
link |
00:27:06.640
decentralization. So what does honesty mean? And now we're into the social side of things,
link |
00:27:14.720
which is how do we know that like the fraction, the large fraction of people or participating
link |
00:27:24.480
parties are honest? That is an excellent question. So by the way, first of all, we should realize
link |
00:27:30.480
that the same thing is for every other system. When you look at proof of work, you rely that the
link |
00:27:36.880
majority of the mining power is in honest ends. When you look at a delegated proof of stake,
link |
00:27:43.520
you rely that the majority of these 21 people are honest. What is the difference? The difference
link |
00:27:50.320
is that in these other systems, you should say the whole economy is secure. If the majority of this
link |
00:27:58.880
small piece of the economy are honest. And that is a big question. But instead of what we in
link |
00:28:07.360
Algorand and our approach, we say, the whole economy is secure if the majority of the economy
link |
00:28:13.760
is honest. In other words, who can subvert Algorand is not a majority of a small group,
link |
00:28:19.280
but is a majority of the token holders had to conspire with each other in order to think
link |
00:28:24.240
the very economy for which they own the majority of. That I think it is a bit harder to
link |
00:28:29.680
like a self destructive majority, essentially. And you're also making me realize that basically
link |
00:28:36.000
every system that we have in the world today assumes that the majority of participants is honest.
link |
00:28:45.040
Yes. The only difference is the majority of whom. And in some cases, the majority of a club.
link |
00:28:51.040
And in our cases, the majority of the whole system, the whole system. Okay. So that's that's
link |
00:28:56.400
fast. So through that kind of random sampling, you can achieve decentralization.
link |
00:29:04.000
You can achieve. So the scalability, I understand. And then the security that you're referring to,
link |
00:29:14.000
basically the security comes from the fact that the sample selected would likely include honest
link |
00:29:20.080
people. So it's very difficult to. So by the way, the security, as you, as you mentioned,
link |
00:29:26.080
that you're referring to is basically security against dishonesty, right? Or manipulation
link |
00:29:33.120
or whatever. Yes. Yes. So essentially, when what you're going to do is to the following,
link |
00:29:38.400
say, say, well, see if you understood what you're saying, but somebody has to randomly
link |
00:29:42.880
select this tokens when I believe you. So then who does this random selection?
link |
00:29:46.560
That's a good point. And in an algorithm, we do something a little bit unorthodox,
link |
00:29:52.800
essentially is the token choose themselves at random. And you say, if you think about it,
link |
00:30:00.480
that seems to be a terrible idea. Because if you want to say, choose yourself at random,
link |
00:30:05.200
and whoever chooses himself is a thousand people committee, you choose the page for,
link |
00:30:10.480
for the rest of us. And because if I'm a bad person, I'm going to select myself
link |
00:30:15.200
over and over again, because I want to be part of the committee every single time.
link |
00:30:19.520
But not so fast. So what do we do in algorithm? What does it mean that I select myself with each
link |
00:30:25.520
one of us in the privacy of our own computer, actually a laptop? What you do is that you
link |
00:30:32.720
execute your own individual lottery. And think about that, that you pull a lever
link |
00:30:40.240
of a slot machine, you can only pull the lever once, not until you win, not enough times until
link |
00:30:46.080
you win. And when you pull the lever case one, either you win in such a case, you have a winning
link |
00:30:51.360
ticket, or you lose, you don't get any winning ticket. So if you don't have a winning ticket,
link |
00:30:58.800
you can say anything you want about the next page in the ledger, nobody pays attention.
link |
00:31:03.920
But if you have a winning ticket, people say, oh, wow, this is one of the 1000 winning tickets,
link |
00:31:10.320
we better pay attention to what he or she says. And that's how it works. And the lottery is a
link |
00:31:17.600
cryptographic lottery, which means that even if I am an entire nation, extremely powerful with
link |
00:31:24.240
incredible computing powers, I don't have the ability to improve even minimally my probability
link |
00:31:30.480
of one of my talking with the lottery. And that's how it happens. So everybody pulls the lever,
link |
00:31:37.760
the 1000 random winners say, oh, here is my winning ticket. And here is my opinion up or down
link |
00:31:44.480
about the block. These are the ones that count. And if you think about it, while this is distributed,
link |
00:31:51.920
because there is the case of Algon, there is 10 billion tokens, and you selected a 1000 of them
link |
00:31:57.600
more distributed than this, you cannot get. And then why is this, you know, scalable? Because
link |
00:32:04.240
what do you have to do? Okay, you have to do the lottery. How long the lottery takes? It takes
link |
00:32:09.920
actually one microsecond. Whether you have one token or two tokens or a billion tokens is always
link |
00:32:16.240
one microsecond of computation, which is very fast. We don't hit the planet with a microsecond of
link |
00:32:22.480
computation. And finally, why is this secure? Because even if I were a very evil and very,
link |
00:32:32.480
very powerful individual, I'm so powerful that I can corrupt anybody I want instantaneously in the
link |
00:32:38.400
world. Whom would I want to corrupt? The people in the committee, so that I can choose the page of
link |
00:32:45.520
the ledger. But I do have a problem. I do not know whom I should corrupt. Should I corrupt this lady
link |
00:32:53.520
in Shanghai, this other guy in Paris? Because I don't know, the winners are random, so I don't
link |
00:32:59.520
know whom I should corrupt. But once the winner come forward and say, here is my winning ticket,
link |
00:33:05.520
and you propagate your winning ticket across the network, together with your opinion about the block,
link |
00:33:11.840
now I know who they are. For sure, I can corrupt all thousand of them given to my
link |
00:33:16.960
incredible powers. But so what? Whatever they said, they already said, and their winning tickets and
link |
00:33:24.080
their opinions are widely propagated across the network. And I do not have the power,
link |
00:33:30.000
no more than the US government or any government has the power to put back in the bottle
link |
00:33:35.040
a message widely propagated by WikiLeaks. So everything you just described is kind of,
link |
00:33:43.200
is fascinating, a set of ideas. And, you know, online I've been reading quite a bit and people
link |
00:33:49.280
are really excited about the set of ideas. Nevertheless, it is not the dominating technology
link |
00:33:56.000
today. So Bitcoin, in terms of cryptocurrency, is the most popular cryptocurrency in the Ethereum,
link |
00:34:05.040
and so on. So it's useful to kind of comment, we already talked about proof of work a little bit,
link |
00:34:10.480
but what in your sense does Bitcoin get right, and where is it lacking?
link |
00:34:16.640
Okay, so the first thing that Bitcoin got right is to understand that there was the need
link |
00:34:22.080
of a cryptocurrency. And that, in my opinion, they deserve all the success because they say
link |
00:34:29.840
that the time is ripe for this idea. Because very often it's not enough to be right here,
link |
00:34:34.160
to be right at the right time, and somebody got it right there. So hard to offer to Bitcoin for that.
link |
00:34:42.640
And so what they got to write is that it is hard to subvert and change the ledger,
link |
00:34:50.880
to cancel a transaction. It's not impossible. That is very hard. What they did not get right is
link |
00:34:59.280
somehow that is a great store of value, currency wise, but money is not only a question that you
link |
00:35:06.880
store it, and you put under the mattress. Money wants to be transacted. And the transaction
link |
00:35:12.640
in Bitcoins are very little. So if you want to store value, everybody needs to store value,
link |
00:35:17.680
matter as well, use Bitcoin. I mean, it's the plant, but if you don't look at that for a moment,
link |
00:35:26.240
at least it's a great store of value, and everybody needs a store of value. But most of the time,
link |
00:35:31.440
we want to transact. We want to interact. We don't put the money under the mattress, right?
link |
00:35:35.200
So we wanted to, and that, they didn't get it right. That is too slow to transact. Too few
link |
00:35:42.320
transactions. There's a scalability issue. Is it possible to build stuff on top of Bitcoin
link |
00:35:48.720
that sort of fixes the scalability? I mean, this is the thing. You look at, there's a bunch of
link |
00:35:54.800
technologies that kind of hit the right need at the right time, and they have flaws, but we kind
link |
00:36:04.640
of build infrastructures on top of them over time to fix it, as opposed to getting it right from
link |
00:36:11.200
the beginning. Or is it difficult to do? Well, that is difficult to do. So you are talking to
link |
00:36:17.600
somebody that when I decided to throw my heart in the arena, and I decided, first of all, as I
link |
00:36:24.800
said before, I much admire my predecessors. I mean, they got it right, a lot of things, and I
link |
00:36:31.360
really admire for that. But I had a choice to make. Either I patch something that holds all over
link |
00:36:38.960
the place or start from scratch. I decided to start from scratch, because sometimes this is a
link |
00:36:42.800
bit of a way. So what about Ethereum, which looks at proof of stake and a lot of different
link |
00:36:48.880
innovative ideas that kind of improve or seek to improve on some of the flaws of Bitcoin?
link |
00:36:55.040
Ethereum had another great idea. So they figured out that money and payments are important as they
link |
00:37:02.320
are. They are only the first level, the first stepping stone. The next level are smart contracts,
link |
00:37:10.240
and they were at the vision to say, the people will need smart contract, which allow me and you
link |
00:37:17.360
to somehow to transact securely without being shopped around by a trusted third party, by a
link |
00:37:23.280
mediator. By the way, because mediators are hard to find. And in fact, maybe even impossible to
link |
00:37:29.680
find if you live in Thailand and I live in New Zealand, maybe we don't have a common person
link |
00:37:35.360
that we know and trust. And even if we find them, guess what? They want to be paid. So much so right
link |
00:37:42.000
that 6% of the world GDP goes into financial friction, which is essentially third party.
link |
00:37:50.320
So headed right to the world needed that. But again, the scalability is not there. And the system
link |
00:38:01.200
is, or smart contracts in Ethereum is slow and expensive. And I believe that is not enough to
link |
00:38:09.520
satisfy the appetite and the need that we have for smart contracts.
link |
00:38:13.920
Well, what do you make of just as a small sort of a side in human history, perhaps it's a big one,
link |
00:38:20.160
is the NFT, the non fungible tokens, do you find those interesting technically,
link |
00:38:24.560
or is it more interesting on the social side of things?
link |
00:38:28.080
Well, both, I think, you know, I think it's NFTs are actually great, right? So you have this,
link |
00:38:34.400
you are an artist to create a song or you could be a piece of art. He has many unique
link |
00:38:46.000
representation right over a unique piece, where there is an artifact of something dreamed up
link |
00:38:53.920
by you. And as unique representation, but now you can trade and allow. And the important part is that
link |
00:39:00.560
now you have this, not only the NFTs themselves, but the ability to trade them quickly, fast,
link |
00:39:08.640
securely, knowing that who owns which rights. And that gives a totally new opportunity for
link |
00:39:17.200
content creators to be remunerator for what they do.
link |
00:39:20.720
So but ultimately, you still have to have that scalability, security,
link |
00:39:25.040
and decentralization to make it work for bigger and bigger applications.
link |
00:39:33.360
Correct. Yeah.
link |
00:39:34.880
Yeah. I still wonder what kind of applications are yet to be enabled by it, because so much,
link |
00:39:41.360
the interesting thing about NFTs, if you look outside of art, is just like money,
link |
00:39:49.920
you can start playing with different social constructs, is you can start playing with ideas.
link |
00:39:57.840
You can start playing with, even like investing, somebody was talking about almost creating
link |
00:40:06.240
an economy out of like creative people or influencers. Like if you start a YouTube channel
link |
00:40:14.400
or something like that, you can invest in that person and you can start trading their creations.
link |
00:40:20.720
And then almost like create a market out of people's ideas, out of people's creations,
link |
00:40:25.760
out of the people themselves that generate those creations. And there's a lot of interesting
link |
00:40:32.400
possibilities of what you can do with that. I mean, it seems ridiculous, but you're basically
link |
00:40:37.440
creating a hierarchy of value, maybe artificial in the digital world and are trading that.
link |
00:40:46.080
But in so doing are inspiring people to create. So maybe as a sort of our economy gets better
link |
00:40:54.880
and better and better, where actual work in the physical space becomes less and less in terms
link |
00:41:00.880
of its importance, maybe we'll completely be operating in a digital space where these kinds
link |
00:41:08.080
of economies have more and more power. And then you have to have this kind of blockchains to
link |
00:41:15.040
the scalability, security and decentralization. And decentralization is of course the tricky one
link |
00:41:21.040
because people in power start to get nervous. Absolutely. Once in power, you're always nervous
link |
00:41:29.440
to be supplanted by somebody else. But this is your job. So congratulations, your job,
link |
00:41:34.880
the top job. And now everybody wants it. Well, what is your sense about our time and the future
link |
00:41:41.920
hope about the decentralization of power? Do you think that's something that we can actually achieve
link |
00:41:51.040
given that power corrupts and absolute power corrupts? Absolutely. And it's so wonderful
link |
00:41:56.640
to be absolutely powerful. Well, good question. So first of all, I believe by the way,
link |
00:42:05.600
it's a complex question, Alex. Like all the rest of your questions.
link |
00:42:14.080
I'm so very sorry. It's okay. I am enjoying it. So there are two things. First of all,
link |
00:42:21.840
power has been centralized for a variety of reasons. When you want to get it, it's easier for
link |
00:42:28.000
somebody, even a single person to grab power. But there is also some kind of a technology
link |
00:42:36.640
lack thereof that justified even in power. Because in a way, in a society in which even
link |
00:42:42.960
communication never mind blockchain, which is common knowledge, but even simple unilateral
link |
00:42:48.400
communication is hard, it's much easier to say, you do as I say, because the alternative is,
link |
00:42:56.240
but as so there is a little bit of a technology barrier. But I think that and now to get to this
link |
00:43:02.160
common knowledge that is a totally different story. Now we have finally the technology for
link |
00:43:06.720
doing this. So that is one part. But I really believe that, you know, by having a distributed
link |
00:43:12.320
system, not only you don't have a way, you have to actually much more stable and durable system.
link |
00:43:19.840
Because not only for corruption, but even for things that go astray and you give it a long
link |
00:43:24.320
enough time by strange version of Murphy's law, whatever goes wrong, goes wrong. And so
link |
00:43:32.560
and if the power is diffused, you actually are much more stable. If you look at any
link |
00:43:39.120
any living, complex living being is distributed. I mean, I'm, I don't have somebody is a, okay,
link |
00:43:48.240
tell Sylvia now it's time to eat. You have millions of cells in your body. You have
link |
00:43:52.960
billions of bacteria. Exactly. Help me in the guts of a thing. You know, we are in a soup.
link |
00:43:58.960
It keeps us alive. And so it's strange enough, however, when we design systems,
link |
00:44:05.840
we design them centralized. We ourselves are distributed beings. And when we plan to say,
link |
00:44:12.880
okay, I want to get an architecture, how about I make a pyramid, I put the top and the power
link |
00:44:21.920
flows down. And so again, it's a little bit perhaps of a technology problem. But now the
link |
00:44:28.080
technology is there. So that is a big challenge to rethink how we want to organize power in very
link |
00:44:34.880
large system and, and, and distributed system in my opinion, are much more resilient.
link |
00:44:41.280
Let's put it this way. There was a wine, or my Italian compatriots, right? You know,
link |
00:44:47.760
Machiavelli, who, who looked at the time, there was a big, there was a bunch of small state
link |
00:44:53.680
democratic Republic of Florence of Venice and the other thing. And there was the Ottoman Empire,
link |
00:44:58.560
but at the time was an empire and a certain was very centralized. And I made a political observation
link |
00:45:05.760
that goes roughly to say, whenever you have such a centralized thing is very hard to
link |
00:45:10.800
overtake that, that form of government is centralized. But if you get it, it's so easy to
link |
00:45:16.720
keep the population. One instead, these other, these other things are much more resilient.
link |
00:45:24.800
And when the power is distributed, it's much more, it's going to be lasting for much longer
link |
00:45:30.400
time. And ultimately, maybe the human spirit wants that kind of resilience, wants that kind
link |
00:45:35.200
of distributed. It's just that we didn't have technology throughout history. Machiavelli didn't
link |
00:45:39.520
have the computer, the internet, and that is certainly part of a reason. Yes. You've written
link |
00:45:47.040
an interesting blog post. If we take a step out of the realm of bits and into this,
link |
00:45:54.160
the realm of governance, you wrote a blog post about making Algorand governance decentralized.
link |
00:46:01.280
Can you explain what that means, the philosophy behind that? How do you
link |
00:46:05.760
decentralize basically all aspects of this kind of system? Well, the philosophy and the
link |
00:46:12.960
how let's start with the philosophy. So I really believe that nothing fixed last very long. And
link |
00:46:21.760
so I really believe that life is about intelligent adaptation. Things change, and we have to be
link |
00:46:30.240
nimble and adjust to change. And when I, when I see a lot of a crypto project, actually very
link |
00:46:41.680
proud to say it's fixed in stone, right, you know, code is low, law is called, I very
link |
00:46:48.160
of a code will never change. Wow. When I'm saying this is a recipe to me of disaster,
link |
00:46:53.680
not immediately, but soon. Just imagine you take an ocean liner and you want to go, I don't know,
link |
00:46:59.840
from Lisbon to New York, and you set a course, iceberg, no iceberg, tempest, no tempest,
link |
00:47:10.160
and all. It doesn't matter. But it's not the way. You need a till, you need to correct,
link |
00:47:15.840
you need to adjust. And so, by the way, we design an algorithm with the idea that the code was
link |
00:47:25.920
evolving as the needs. And of course, a waiver is a system in which every time there is an
link |
00:47:32.240
adjustment, you must have essentially a vote that right now is orchestrated at 90% of the
link |
00:47:39.120
stake. They say, okay, we are ready, we agree on the next version, and we pick up this version.
link |
00:47:44.800
So we are able to evolve without losing too many components left and right. But I think
link |
00:47:50.000
without evolving, any system essentially become asphatic, and that is going to shrivel and die
link |
00:47:55.760
sooner or later. And so that is needed. And what do you want to do on the blockchain? You have a
link |
00:48:03.680
perfect platform in which you can log your wishes, your votes, your things so that you have a
link |
00:48:11.440
guarantee that whatever vote you express is actually seen by everybody else. So everybody
link |
00:48:16.720
sees really the outcome, call it a referendum or a change. And that is, in my opinion, a system
link |
00:48:25.280
that wants to live long as to adapt. There's an interesting question about leaders. I've talked
link |
00:48:31.120
to Vitalik Buterin. I'll probably talk to him again soon. He's one of the leaders, maybe one of
link |
00:48:38.560
the faces of the Ethereum project. And it's interesting, you have Satoshi Nakamoto, who's
link |
00:48:45.120
the face of Bitcoin, I guess, but he's faceless. He, she, they. It does seem like in our whatever
link |
00:48:55.040
it is, maybe it's 20th century, maybe it's Machiavellian thinking, but we seek leaders. Leaders
link |
00:49:02.160
have value. Linus Torvald, the leader of Linux, the open source development a lot. I mean, there's
link |
00:49:10.800
no, it's not, it's not that the leadership is sort of dogmatic, but it's inspiring. And it's also
link |
00:49:20.080
powerful in that through leaders, we propagate the vision, like the vision of the project is
link |
00:49:27.200
more stable, maybe not the details, but the vision. And so do you think there's value to, because
link |
00:49:34.400
there's a tension between decentralization and leadership, like in vision areas? What do you
link |
00:49:40.880
make of that tension? Okay, so I really believe that that's a great question. I think of it, you
link |
00:49:46.400
know, I really believe in the power of emotions. I think the emotions are of a creative impulse
link |
00:49:52.560
of everybody else. And therefore it's very easy for a leader to be a physical person, a real being,
link |
00:50:00.720
and that interprets our emotions. And by the way, this emotion has to resonate. And what is good
link |
00:50:07.840
is that the more intimate our emotions are, the more universal they are, paradoxically. The more
link |
00:50:14.800
personal, the more everybody else somehow magically agrees and feels a bit of the same.
link |
00:50:20.880
And so, and it's very important to have a leader in the initial phase that
link |
00:50:26.480
generates out on nothing something. That is important leadership. But then the true tested
link |
00:50:31.600
leadership is to disappear after you led the community. So in my opinion, the quintessential
link |
00:50:37.680
leader in my, according to my vision is George Washington. He served for one term,
link |
00:50:47.040
he served for another term, and then all of a sudden he retired and became a private citizen.
link |
00:50:52.880
And 200 and change years later, we still are with some defects, but we have done a lot of
link |
00:50:59.600
things right. And we have been able to vote. That to me is success in leadership. Well,
link |
00:51:05.600
instead, you contrast our experiment with a lot of experiments. I've done so much, so well,
link |
00:51:10.800
that I want another four years. And why shouldn't I be only a four? And I have another eight. Why
link |
00:51:16.800
should it be another eight? Give me 16 and we'll fix all your problem. And now then is the type,
link |
00:51:21.920
in my opinion, of failed leadership. Leadership ought to be really lead, ignite, and disappear.
link |
00:51:29.200
And if you don't disappear, the system is going to die with you. And it's not a good idea for
link |
00:51:34.240
everybody else. Is there, so we've been talking a little bit about cryptocurrency, but is there
link |
00:51:39.280
spaces where this kind of blockchain ideas that you're describing, which I find fascinating,
link |
00:51:47.040
do you think they can revolutionize some other aspects of our world that's not just money?
link |
00:51:53.120
A lot of things are going to be revolutionized is independent of finance. By the way,
link |
00:51:59.920
I really believe that finance is an incredible form of freedom. I mean,
link |
00:52:07.600
if I free to do everything I want, but I don't even mean to do anything, that's a bad idea.
link |
00:52:11.760
So I really think financial freedom is very, very important. But you just can say that
link |
00:52:18.240
against censorship, you write something on the chain and now nobody can take it out. That is a
link |
00:52:24.640
very important way to express our view. And then the transparency that you give, because
link |
00:52:35.840
everybody can see what's happening on the blockchain. So transparency is not money,
link |
00:52:41.600
but I believe that transparency actually is a very important ingredient also of finance.
link |
00:52:49.040
Let's put it this way. As much as I'm enthusiastic about blockchain and decentralized finance,
link |
00:52:57.040
and we have actually our expression, we're creating this future five, because as much as we
link |
00:53:02.560
want to do, we must agree that the first guarantee of financial growth and prosperity
link |
00:53:10.720
are really the legal system, the courts. Because we may not think about them and say,
link |
00:53:16.160
oh, the courts are a bunch of boring lawyers. But without them, I'm saying there is no certainty.
link |
00:53:22.080
There is no notion of equality. There is no notion that you can resolve your disputes thing.
link |
00:53:29.200
That's what drives the commerce and things. And so what I really believe that the blockchain
link |
00:53:34.160
actually makes a lot of this trust essentially automatic by making it impossible to cheat in
link |
00:53:40.320
the real way. You don't even need to go to court if nobody can change the ledger.
link |
00:53:46.880
So essentially it's a way of you cannot solve an illegal system that uses to a blockchain.
link |
00:53:54.080
But what I'm saying, a big chunk of it can actually be guaranteed. And there is no reason
link |
00:53:59.920
why technology should be antagonistic to legal scholarship. It could be actually
link |
00:54:06.080
equestrian. And one should start to doing the interest things that the technology alone cannot
link |
00:54:11.520
do. And then you go from there. But I think that is essentially is blockchain can affect
link |
00:54:20.640
all kinds of our behavior. Yes, in some sense, the transparency, the required transparency ensures
link |
00:54:29.520
honesty prevents corruption. So there's a lot of systems that could use that and the legal system
link |
00:54:34.080
is one of them. There's a little bit of attention that I wonder if you can speak to where this
link |
00:54:40.560
kind of transparency, there's attention with privacy. Is it possible to achieve privacy if
link |
00:54:48.960
you wanted on a blockchain? Do you have ideas about different technologies that can do that?
link |
00:54:55.680
People have been playing with different ideas. So absolutely. The answer is yes. And by the way,
link |
00:55:03.600
I'm a cryptographer. Right. So I really believe in privacy and I believe in and I've devoted in
link |
00:55:11.520
all a big chunk of my life to guarantee privacy even when it seems almost impossible to have it.
link |
00:55:19.040
And it is possible to have it in also in the blockchain too. And however, I believe in timing
link |
00:55:26.560
as well. And I believe that the people have the right to understand
link |
00:55:32.960
their system they live in. And right now, people can understand the blockchain to be
link |
00:55:43.760
something that is not, cannot be altered and is transparent. And that is good enough.
link |
00:55:51.280
And right now, any way to add and there is a pseudo privacy for the fact that
link |
00:55:56.640
who knows if the keys belong, public key belongs to me or to you, right? And I can,
link |
00:56:01.600
when I want to change my money from one public key, I split it to other public keys going to
link |
00:56:06.400
figure out which one is silver or all of them are silver or only one of silver. Who knows?
link |
00:56:10.640
So you get some vanilla privacy, not the one acrector. And I think it's good enough because
link |
00:56:16.640
and it's important for now that we absorb this stage because the next stage, we must understand
link |
00:56:22.880
the privacy tool rather than taking on faith. When the public starts say, I believe in the
link |
00:56:27.920
scientists and whatever they say, I swear by them and therefore they tell me private is private
link |
00:56:32.800
and nobody understands that we need a much more educated about the tools we are using.
link |
00:56:39.920
And so I look forward to deploying more and more privacy on the blockchain.
link |
00:56:46.560
But we are not, I will not rush to it until the people understand and are behind whatever we have
link |
00:56:54.400
right now. So you build privacy on top of the power of the blockchain. You have to first
link |
00:57:00.240
understand the power of the blockchain. Yes. Yes. So Algorand is like one of the most exciting,
link |
00:57:06.400
technically at least from my perspective, technologies, ideas in this whole space.
link |
00:57:12.240
What's the future of Algorand look like? Is it possible for it to dominate the world?
link |
00:57:17.040
Let's put it this way. I certainly working very hard with a great team to give the best blockchain
link |
00:57:26.960
that one can demand and enjoy. And they said, I really believe that there is going to be,
link |
00:57:35.760
it's not a winner takes them all. So it's going to be a few blockchains and each one is going to
link |
00:57:42.080
have its own brand and it's going to be great at something. And sometimes it's a scalability,
link |
00:57:49.600
sometimes it's your views, sometimes it's a thing. And it's important to have a dialogue between
link |
00:57:56.320
these things. And I'm sure and I'm working very hard to make sure that Algorand is one of them.
link |
00:58:01.440
But I don't believe of it. It's even desirable to have a winner takes all because we need to
link |
00:58:11.120
express different things. But the important thing is going to have enough interoperability
link |
00:58:16.320
of various systems so that you can transfer your assets where you have the best tool to
link |
00:58:23.120
service them, whatever your needs are at the time. So there's an idea, I don't know,
link |
00:58:28.160
they call themselves Bitcoin maximalists, which is essentially the bet that the philosophy that
link |
00:58:35.680
Bitcoin will eat the world. So you're talking about, it's good to have variety. Their claim is
link |
00:58:43.200
it's good to have the best technology dominate the medium of exchange, the medium of store value,
link |
00:58:52.400
the money, the digital currency space. What's your sense of the positives and the negatives of that?
link |
00:59:01.280
So I feel people are smart and it's going to be very hard for anybody and
link |
00:59:11.440
to win. And because people want more and more things, there is an Italian saying that goes
link |
00:59:18.000
as translates well, I think. It goes, appetite grows while eating. I think you understand
link |
00:59:25.360
what he means. So I say, I'm not hungry. Okay, food. Let me try this and that. So we want more
link |
00:59:31.600
and more and more. And when you find something like Bitcoin, which I already had very good things to
link |
00:59:37.280
say, but it does something very well, but it's static. I mean, store value, yes, I think it's a
link |
00:59:45.440
great way. For the rest, it would be a sad world if the world in which we are so anchoring down,
link |
00:59:52.480
so and defensive that we want to store value and hide it on the mattress. I long for a world in which
link |
00:59:58.960
it is open. We all want to transact and interact with each way. And therefore, when you want to
link |
01:00:04.880
store value, one, perhaps one chain, where you want to have to transact, maybe is another. I'm
link |
01:00:11.760
not saying that, you know, one chain cannot be stored value or the other thing, but I really
link |
01:00:16.880
believe that I believe in the ingenuity of people and in the innovation that is intrinsic to the
link |
01:00:24.480
human nature. We want always different things. So how can it be something invented? Whatever it is
link |
01:00:29.680
decades ago is going to fulfill the needs of our future generations. I'm not going to fulfill my
link |
01:00:36.880
needs, let alone my kids or their kids. We are going to have a different world and things will
link |
01:00:46.240
evolve. So you believe that life, intelligent life is ultimately about adaptability and
link |
01:00:53.600
evolving. So static is, static loses in the end. Yes. Let me ask the, well first, the ridiculous
link |
01:01:04.400
question. Do you have any clue who Satoshi Nakamoto is? Is that even an interesting question?
link |
01:01:10.960
Well, is it you? Your questions are very interesting. So I would say, first of all,
link |
01:01:19.920
it's not me and I can prove it because, you know, if I were Satoshi Nakamoto, I would have not found
link |
01:01:26.000
an algorithm that takes totally different principles to approach to the system. But the
link |
01:01:32.000
other thing, who is Satoshi Nakamoto? You know what the right answer is? It's not him or she,
link |
01:01:37.520
her or them. Satoshi Nakamoto is Bitcoin because to me, it's such a coherent proof of work that
link |
01:01:46.720
at the end, the creator and the creation identify themselves. So he says, okay, I understand the
link |
01:01:53.840
Michelangelo. Okay, he did the Sistine Chapel fine. He did the St. Peter's Dome fine. He did
link |
01:02:00.720
the Moses of the Pietra statue fine. But besides this, who was Michelangelo? That's a very long
link |
01:02:06.720
question. This is his own work that is Michelangelo. So I think that when you look at the Bitcoin,
link |
01:02:13.760
is a piece of work that, as it defects, yes, like anything human, but it was captivated
link |
01:02:21.920
the imaginations of millions of people as subverted the status quo. And I'm saying, you know,
link |
01:02:29.200
whoever this person of people are, he's living in this piece of work. I mean, it is Bitcoin.
link |
01:02:38.560
The idea of the work is bigger. We forget that sometimes. It's something about our biology
link |
01:02:44.880
once likes to see a face and attach a face to the idea, when really the idea is the thing we love,
link |
01:02:50.960
the idea is the thing that impact ideas, the thing that ultimately we, you know, Steve Jobs or
link |
01:02:56.000
something like that, we associate with the Mac, with the iPhone, with just everything he did at
link |
01:03:01.920
Apple. Apple actually, the company is Steve Jobs. Steve Jobs, the man is a pales in comparison to
link |
01:03:10.160
the creations of the man. Correct. And the sense of aesthetics that has brought to the daily lives.
link |
01:03:15.200
And very often aesthetic wins in the long, in the long, in the long end. And these are very
link |
01:03:22.240
elegant design product. And when you say, oh, elegance, a very few people care about it, apparently
link |
01:03:29.760
millions and millions and millions and millions of people do because we are attacked by beauty.
link |
01:03:34.320
And these are beautifully designed products. And, and, and, you know, and they've, in addition
link |
01:03:42.560
to ever the technological aspect of the other thing. And I think, yes, that is,
link |
01:03:46.880
yeah, as the Steyesky said, beauty will save the world. So I'm, I'm with you on that one.
link |
01:03:52.720
Right. It currently seems like cryptocurrency, all these different technologies are gathering
link |
01:04:03.440
a lot of excitement, not just in our discourse, but in their like, scale financial impact.
link |
01:04:10.320
A lot of companies are starting to invest in Bitcoin. Do you think that the main method of
link |
01:04:18.880
store value and exchange of value, basically money will soon, or at some point in the century,
link |
01:04:27.280
will become cryptocurrency? Yes. So mind you, as I said, that the notion of cryptocurrency,
link |
01:04:34.560
like any other fundamental human notion has to evolve. But yes. So I think that he has a lot
link |
01:04:43.760
of momentum behind it. And it's not only static, as this programmable money, as I think smart
link |
01:04:52.000
contracts, all the time. It allows a peer to peer interaction among people who don't even
link |
01:04:58.800
know each other, right? And they don't even, therefore cannot even trust each other just
link |
01:05:03.760
because they never saw each other. So I think it's so powerful that it's going to do this.
link |
01:05:11.280
Again, a particular cryptocurrency should develop and cryptocurrency will all develop.
link |
01:05:19.120
But the answer is yes, we are going towards a much more, unless we have a society,
link |
01:05:26.320
a sudden crisis for different reasons, which nobody hopes. There's always an asteroid,
link |
01:05:31.680
there's always a nuclear war and all the existential crisis that we think about,
link |
01:05:38.640
including artificial intelligence. Okay. It's funny you mentioned that
link |
01:05:45.840
Michelangelo and Steve Jobs, a set of ideas represents the person's work. So we talked
link |
01:05:50.880
about Algorand, which is a super interesting set of technologies. But he did also win the
link |
01:05:58.480
Turing Award. You have a bunch of ideas that are seminal ideas. So can we talk about
link |
01:06:10.080
cryptography for a little bit? What is the most beautiful idea in cryptography or computer science
link |
01:06:15.680
or mathematics in general? Asking somebody who has explored the depths of all?
link |
01:06:21.680
Well, a few contenders.
link |
01:06:31.200
Either your work or other work. Let's leave my work aside.
link |
01:06:39.120
But one powerful idea and it's both an old idea in some sense and a very, very modern one.
link |
01:06:49.120
And it might be on this idea of a one way function. So a function that easy to evaluate.
link |
01:06:57.520
So given X, you can compute f of X easily. But given f of X is very hard to go back to X.
link |
01:07:05.840
Okay. Think alike, breaking a glass easy, reconstruct the glass harder, frying an egg
link |
01:07:15.680
easy from the side egg to go back to the original egg harder. If you want to be extreme,
link |
01:07:22.400
killings are living big. Unfortunately, easy. The other way around, very hard. And so the fact
link |
01:07:29.760
that the notion of a function, which you have a recipe that is in front of your eyes to transform
link |
01:07:35.360
an X into f of X, and then from f of X, even though you see the recipe to transform it,
link |
01:07:41.520
you cannot go back to X that, in my opinion, is one of the most elegant and momentous
link |
01:07:50.560
notions that there are. And there is a computational notion because of the difficulties
link |
01:07:56.160
in a computational sense. And it's a mathematical notion because we were talking about function.
link |
01:08:01.920
And it's so fruitful because that is actually the foundation of all the cryptography.
link |
01:08:07.200
And let me tell you, it's an old notion because very often in any mythology that we think of,
link |
01:08:16.640
the most powerful gods or goddesses are the ones of X and the opposite of X, the gods of love and
link |
01:08:24.800
death. And when you take opposite, they don't just erase one another, you create something way
link |
01:08:32.080
more powerful. And this one way function is extremely powerful because essentially becomes
link |
01:08:39.840
something that is easy for the good guys and hard for the bad guys. So for instance,
link |
01:08:47.600
in pseudo random number generation, the easy part of the function corresponds, you want to
link |
01:08:52.960
generate bits very quickly. And hard is predicting what the next bit is. It doesn't look the same.
link |
01:09:00.800
One is Excel for X going from X for X to XR, what does do predicting bits by a magic of
link |
01:09:07.920
reductions and mathematical apparatus. This simple function morphs itself into sort of
link |
01:09:15.840
random generation. This simple function morphs itself in digital signature scheme,
link |
01:09:20.960
in which digitally signing should be easy and forging should be hard. Again, a digital signature
link |
01:09:26.960
is not going from X to F for X, but the magic and the richness of this notion is that it is so
link |
01:09:34.400
powerful with morphs in all kinds of incredible constructs. And in both, these two opposites
link |
01:09:42.800
coexist, the easy and the hard. And in my opinion, it is a very, very elegant notion. So that
link |
01:09:50.160
simple notion ties together cryptography. And like you said, pseudo random number generation,
link |
01:09:55.520
you have work on pseudo random functions. What are those? What's the difference in those and the
link |
01:10:06.000
generators, pseudo random number generators? How do they work? Let's go back to pseudo random number
link |
01:10:13.680
generation. First of all, people think that the pseudo random number generation generates random
link |
01:10:18.720
number. Not true, because I don't believe that from nothing you can get, you can get something.
link |
01:10:26.960
So nothing from nothing. But randomness, you cannot create that on nothing. But what you can do
link |
01:10:35.120
is that you can be expanded. So in other words, if you give me somehow 300 random bits, truly
link |
01:10:42.160
random bits, then I can give you 300,000, 300,000, 300 trillions, 300 quadrillions, as many as you
link |
01:10:49.280
want random bits. So that even though I tell you the recipe by which I produce these bits,
link |
01:10:56.720
but I don't tell you the initial 300 random numbers, I keep them secret. And you see all the bits I
link |
01:11:03.280
produced so far. If you were to bet, given all the bits produced so far, what is the next bit in
link |
01:11:10.480
my sequence? Better than 50, 50. Of course, 50, 50, anybody can guess, right? But to be inferring
link |
01:11:17.440
something, you have to be a bit better. Then the effort to do this extra bit is so enormous that
link |
01:11:24.800
is the factor random. So that is a pseudo random generator, are these expanders of secret randomness,
link |
01:11:33.120
which goes extremely fast. Okay, that said, what is the... Expanders of secret randomness,
link |
01:11:39.280
beautifully put. Okay. So every time, every time somebody, if you're a programmer is using a function
link |
01:11:45.760
that's not called pseudo random, it's called random usually, you know, these programming
link |
01:11:50.080
languages and it's generating different, that's essentially expanding the secret randomness.
link |
01:11:57.200
But they should. In the past, actually, in most of the library, they used something
link |
01:12:03.200
pre modern cryptography. Unfortunately, they would be better served to make 300 real seed
link |
01:12:12.080
random number and then expand them properly, as we know now. But that has been a very
link |
01:12:21.440
old idea. In fact, one of the best philosophers have debated whether the world was deterministic
link |
01:12:29.200
or probabilistic. Very big questions, right? Does God play dice? Exactly. Einstein says it does,
link |
01:12:35.920
it doesn't. But in fact, now we have a language that even at the Albert time was not around,
link |
01:12:43.120
but it was this complexity theory, modern complexity based cryptography. And now we know
link |
01:12:47.760
that in the universe, as 300 random bits, whether where is random or probabilistic or deterministic,
link |
01:12:56.960
it doesn't matter, because you can expand this initial seed of randomness forever in which
link |
01:13:02.960
all the experiments you can do, all the influences you can do, all the things you can do, they are,
link |
01:13:08.720
you are not able to distinguish them from truly random. So if you are not able to distinguish
link |
01:13:14.320
truly random from this super duper pseudo randomness, are they really different things?
link |
01:13:21.120
So for things to be different, but I don't have in my lifetime, in my lifetime of the universe,
link |
01:13:29.680
animated, to set them aside, well, I should be intellectually honest to say, well,
link |
01:13:36.880
pseudo random in the special function is as good as random.
link |
01:13:41.040
Do you think true randomness is possible? And what does that mean?
link |
01:13:46.640
So, practically speaking, exactly as you said, if you're being honest,
link |
01:13:53.200
the pseudo randomness approaches true randomness pretty quickly. But is it, maybe this is a
link |
01:14:01.680
philosophical question, is there such a thing as true randomness?
link |
01:14:06.400
Well, the answer is actually maybe, but if it exists, most probably is expensive to get.
link |
01:14:14.160
And in any case, if I give you one online random, you will never tell them apart.
link |
01:14:23.600
By no any other shape, no matter how much you work on it. So in some sense,
link |
01:14:28.240
if it exists or not, it really is a quote philosophical sense in the colloquial way to
link |
01:14:35.040
say that we cannot somehow pin it down. Do you ever, again, just to stay on philosophical
link |
01:14:41.280
for a bit for a brief moment? Do you ever think about free will? And whether that exists? Because
link |
01:14:49.200
ultimately, free will sort of is this experience that we have, like we're making choices.
link |
01:14:57.200
Even though it appears that, you know, the world is deterministic at the core, I mean,
link |
01:15:04.160
that's against the debate. But if it is, in fact, deterministic at the lowest possible level,
link |
01:15:09.360
at the physics level, how do you make, if it is deterministic, how do you make
link |
01:15:18.800
sense of the difference between the experience of us feeling like we're making a choice and
link |
01:15:23.120
the whole thing being deterministic. So first of all, let me give you a gut reaction to the
link |
01:15:28.080
question. And the gut reaction is that it is important that we believe that there exists free
link |
01:15:36.880
will. And second of all, almost by weird logic, if we believe it exists, then it does exist.
link |
01:15:47.520
So it's very important for our social apparatus, for our sense of the day or ourselves,
link |
01:15:53.040
that it exists. And the moment in which, you know, we so want to be almost we conjure it up in
link |
01:15:58.880
existence. But again, I really feel that if you look at some point, the space of free will
link |
01:16:05.280
so seems to shrink. We realize how more and more, how much of our, say, genetic apparatus
link |
01:16:14.080
dictates who we are, why we prefer certain things than others, right? And why we react to noises
link |
01:16:20.640
of music. We prefer poetry. We may explain even all this. But at the end of the day,
link |
01:16:28.560
whether it exists in a philosophical sense or not, it's like randomness. If you can, if pseudo
link |
01:16:35.440
random is as good as random, vis a vis lifetime of the universe, our experience, then it doesn't
link |
01:16:41.440
really matter. So, you know, we're talking about randomness. I wonder if I can weave in
link |
01:16:49.520
quantum mechanics for a brief moment. There's, you know, a lot of advancements on the quantum
link |
01:16:56.320
computing side. So leveraging quantum mechanics to perform a new kind of computation. And there's
link |
01:17:03.680
concern of that being a threat to a lot of the basic assumptions that underlie cryptography.
link |
01:17:11.120
What do you think? Do you think quantum computing will challenge a lot of cryptography?
link |
01:17:17.680
Will cryptography be able to defend all those kinds of things?
link |
01:17:22.080
Okay, great. So first of all, for the record, because I think it matters, but it's important
link |
01:17:26.960
that the record, there are people who continue to contend that quantum mechanics exist, but
link |
01:17:33.760
there's nothing to do with computing. It's not going to accelerate it. At least, you know,
link |
01:17:41.440
very basic, you know, hard computation. That is a belief that you cannot take it out. I'm a little
link |
01:17:49.120
bit more agnostic about it, but I really believe going back to whatever I said about the one way
link |
01:17:55.920
function. So one way function, what is it? That's the cryptography. So does quantum computing
link |
01:18:02.480
challenge the one way function? Essentially, you can boil it down to does one computing
link |
01:18:07.600
find a one way function? What is one way function? Easy in one direction, hard in the other.
link |
01:18:11.920
Okay, but if quantum computing exists, when you define what it is easy, it's not by easy,
link |
01:18:19.120
by a classical computer, and hard by a classical computer, but easy for a quantum computer. That's
link |
01:18:25.280
a bad idea. But once easy means it should be easy for a quantum and hard for also quantum.
link |
01:18:33.520
Then you can see that you are, yes, it's a challenge, but you have a hope because you
link |
01:18:38.160
can absorb if one computing really realizes and becomes available, according to the promises,
link |
01:18:45.920
then you can use them also for the easy part. And once you use it for the easy part, the choices
link |
01:18:52.880
that you have a one way function, they multiply. So, okay, so they particularly candidates of one
link |
01:18:58.480
way function, they not be one way anymore, but quantum one way function may continue to exist.
link |
01:19:07.120
And so I really believe that for life to be meaningful is the one way function had to exist.
link |
01:19:19.520
Because just imagine that anything that is it becomes easy to do. I mean, what kind of life
link |
01:19:27.840
is it? I mean, so you need that. And if something is hard, but it's so hard to generate, you'll never
link |
01:19:34.880
find something which is hard for you. You want that there is abundance that is easy to produce
link |
01:19:40.960
hard problem. That's my opinion is why life is interesting because hard problem pop up
link |
01:19:46.960
really relatively speed. So in some sense, I almost think that I do hope they exist if they
link |
01:19:54.000
don't exist somehow life is way less interesting than it actually is.
link |
01:19:58.960
Yeah, it does. That's funny. It does seem like the one way function is fundamental to all of life,
link |
01:20:05.920
which is the emergence of the complexity that we see around us seem to require the one way
link |
01:20:12.080
function. I don't know if you play with cellular automata. That's just another formulation of
link |
01:20:19.120
I know, but yes, very simple. It's almost a very simple illustration of starting out with
link |
01:20:25.760
simple rules and one way being able to generate incredible amounts of complexity. But then you
link |
01:20:32.720
ask the question, can I reverse that? And it's just, it's just surprising how difficult it is to
link |
01:20:40.800
reverse that. It's surprising even in constrained situations, it's very difficult to prove anything
link |
01:20:48.320
that it almost I mean, the sad thing about it. Well, I don't know if it's sad, but it seems
link |
01:20:56.320
like we don't even have the mathematical tools to reverse engineer stuff. I don't know if they
link |
01:21:02.720
exist or not. But in the space of cellular automata, when you start with something simple
link |
01:21:06.960
and you create something incredibly complex, can you take something, a small picture of that
link |
01:21:12.160
complex and reverse engineer? That's kind of what we're doing as scientists here.
link |
01:21:17.120
You're seeing the result of the complexity and you're trying to come up with some universal law
link |
01:21:21.840
that generate all of this. What is the, you know, the theory of everything? What are the basic
link |
01:21:26.880
physics laws that generate this whole thing? And there's a hope that you should be able to do that,
link |
01:21:32.000
but it gets, it's difficult. Yeah, but there is also some poetry on the fact that it's difficult
link |
01:21:37.680
because it gives us a mystery to live without which I mean, it's not so fun. Life will be less
link |
01:21:48.080
fun. Can we talk about interactive proofs a little bit and zero knowledge proofs? What are those?
link |
01:21:53.920
Okay. How do they work? So interactive proof actually is a modern realization and conceptualization
link |
01:22:05.280
of something that we knew was true, that, you know, that is easy to go to lecture. In fact,
link |
01:22:11.520
that's my motivation. We invented schools to go to lecture and we don't say, oh, I have the
link |
01:22:15.920
Minister of Education, I published this book, you read it. And this is a book for this year,
link |
01:22:20.720
this book for this year. We spend a lot of our treasury in educating our kids and in person,
link |
01:22:29.280
educating, go to class, interact with each other on the blackboard and chalk on my time. Now we can
link |
01:22:35.200
have, you know, whiteboard and presumably you're going to have actually these magic pens and a
link |
01:22:40.720
display instead. But the idea is that interactively you can convey truth much more efficiently.
link |
01:22:49.840
And we knew this psychologically. It's better to hear an explanation than just to belabor some paper,
link |
01:22:56.480
right? Same thing. So interactive proofs is a way to do the following. Rather than doing
link |
01:23:03.040
in some complicated, very long papers and possibly infinitely long proofs, exponentially long proofs,
link |
01:23:09.520
you say the following. If this theorem is true, there is a game that is associated to the theorem.
link |
01:23:16.480
And if the theorem is true, this game, I have a winning strategy that I can win half of the
link |
01:23:22.320
time, no matter what you do. Okay. So then you say, well, is the theorem true? You believe me?
link |
01:23:28.960
Why should I believe you? So, okay, let's play. So, and if I prove that I have a strategy that,
link |
01:23:35.360
and I win the first time, and I win the second time, then I lose the third time, but I win
link |
01:23:42.640
more than half of the time, or I win, say, all the time if the theorem is true and at least
link |
01:23:47.200
at the most half of the time, if the theorem is false, you statistically get convinced you can
link |
01:23:52.800
verify this quickly. And therefore, when the game typically is extremely fast,
link |
01:24:01.760
so you generate a miniature game in which if the theorem is true, I win all the time,
link |
01:24:07.200
in the theorem is false, I can win at most half of the time, and if I win, win, win, win, win,
link |
01:24:12.880
win, win, win, you can deduce either the theorem is true, which most probably is the case on this week,
link |
01:24:19.040
or I've been very, very unlucky because it's like if I had 100 coin tosses and I got 100 heads,
link |
01:24:27.120
very improbable. So that is a way, and so this transformation from the formal statement of a
link |
01:24:35.120
proof into a game that can be quickly played, and you can draw statistics on many times you win,
link |
01:24:42.640
and is one of a big conquest of modern complexity theory, and in fact, actually as highlighted,
link |
01:24:52.960
the notion of a proof has really given us a new insight of what to be true means, and what
link |
01:24:58.560
what truth is, and what proofs are. So these are legitimately proofs. So what kind of mysteries
link |
01:25:08.240
can it allow us to unlock and prove? You said truth. So what does it allow us, what kind of truth
link |
01:25:18.080
does it allow us to arrive at? So it enlarges the realm of what is provable, because in some sense
link |
01:25:25.760
of the classical way of proving things was extremely inefficient from the very fire point of view.
link |
01:25:34.080
Yes. Right. So and so therefore, there is so much proof that you can take, but in this way,
link |
01:25:41.680
you can actually very quickly, minutes, verify something that is the correctness of an assertion,
link |
01:25:50.000
that otherwise would have taken a lifetime to belabor and check all the passages of a very,
link |
01:25:56.800
very long proof, and you better check all of them, because if you don't check one line,
link |
01:26:02.560
an error can be in that line. And so you have to go linearly through all the stuff rather than
link |
01:26:08.240
bypass this. So you enlarge tremendous amount, what the proof is. And in addition,
link |
01:26:16.160
once you have the idea that essentially a proof system is something that
link |
01:26:22.000
allows me to convince you of a true statement, but does not allow me to convince you of a
link |
01:26:28.640
false statement. And that at the end says events of proof, proof can be beautiful, should be,
link |
01:26:35.040
should be elegant, but at the end says is true or false. If you want to be able to differentiate,
link |
01:26:40.400
it is possible to prove the truth and it should be impossible or statistically extremely hard
link |
01:26:46.240
to prove something false. And if you do this, you can prove way, way more once you understand this.
link |
01:26:51.440
And on top of it, we got some insight, like in this zero knowledge proofs, that is in
link |
01:27:00.000
something which you took for granted, where the same knowledge and verification
link |
01:27:06.400
are actually separate concepts. So you can verify that an assertion is correct
link |
01:27:12.720
without having any idea of why this is so. And so people felt to say, if you want to verify
link |
01:27:19.040
something yet to have the proof, once you have the proof, you know why is true, you have the proof
link |
01:27:24.320
itself. So somehow you can totally differentiate knowledge and verification validity. So totally,
link |
01:27:35.200
you can decide if something is true and still have no idea. Is a good example in your mind?
link |
01:27:40.400
Oh, actually, you know, at the beginning, we labored to find the first knowledge,
link |
01:27:46.720
zero knowledge proof, then we found the second, then we found the third. And then a few years later,
link |
01:27:52.480
actually, we proved a theorem which essentially says every theorem, no matter what about,
link |
01:27:58.960
can be explained in a zero knowledge way. Okay. So it's not a class of theorem, but old theorems.
link |
01:28:08.320
And it's a very powerful thing. So we were really, for thousands of years,
link |
01:28:12.960
bought this identity between knowledge and verification, to be hand in hand together,
link |
01:28:19.680
and for no reason at all. I mean, we had to develop a way of technology, as you know,
link |
01:28:25.040
and very big technology, because it makes us more human and make us understand more things
link |
01:28:32.240
than before. And I think that is a good thing. So this interactive proof process,
link |
01:28:40.240
there's power in games. And you've recently gotten into, recently, I'm not sure you can
link |
01:28:47.440
correct me, mechanism design. Yeah. So it's, I mean, first of all, maybe you can explain
link |
01:28:53.440
what mechanism design is and the fascinating space of playing with games and designing games.
link |
01:29:03.200
Mechanism design is that you want to, you want a certain behavior to arise, right? If you want
link |
01:29:09.840
to organize, you know, a societal structure or something, you want to have some orderly
link |
01:29:15.680
behavior to arise, right? Because it is important for your goals. But you know that people,
link |
01:29:24.320
they don't care what my goals are, they cares about maximizing their utility. So put it crossly,
link |
01:29:31.280
making money, the more money, the better, so to speak. But I'm exaggerating.
link |
01:29:36.320
Self interest in what?
link |
01:29:37.680
Self interest. Whatever way then. So what you want to do is ideally, what you want to do is to
link |
01:29:46.480
design a game so that while people played, so to maximize their self interest,
link |
01:29:55.040
they achieve the social goal and behavior that I want. That is really the best type of thing.
link |
01:30:01.840
And it is a very hard science and art to design these games. And it challenges us to
link |
01:30:17.280
actually come up with a solution concept for way to analyzing the games that need to be broader.
link |
01:30:24.480
And I think the game theory has developed a bunch of very compelling
link |
01:30:29.280
ways to analyze the game that if the game has a best property, you can have a pretty good guarantee
link |
01:30:37.360
that is going to be played in a given way. But as it turns out, and not surprisingly,
link |
01:30:44.000
these tools have a range of action like anything else. All these so called the
link |
01:30:48.720
technically solution concept, the way to analyze the game like
link |
01:30:52.480
dominant strategy, something comes to mind to be very meaningful.
link |
01:30:56.400
But as a limited power, in some sense, the games that can be
link |
01:31:03.600
admit such a way to be analyzed.
link |
01:31:05.600
There's a very specific kind of games and the rules are set, the constraints are set,
link |
01:31:09.920
the utilities are all set. So if you want to reason, if there is a way say
link |
01:31:16.240
that you can analyze a restricted class of games this way. But most games don't fall
link |
01:31:23.520
into this restricted class. Then what do I do? Then you need to enlarge away what a rational
link |
01:31:31.120
player can do. So for instance, in my opinion, at least in some of my, I played with this for
link |
01:31:39.520
a few years and I was doing some exoteric things, I'm sure in the space that were not exactly
link |
01:31:48.000
mainstream. And then I changed my interest and blockchain. But when I'm saying for a while,
link |
01:31:54.080
I was doing that. So for instance, to me, is a way in which I design the game and you don't
link |
01:32:00.640
have the best move for you. The best move is the move that is best for you, no matter what the
link |
01:32:06.000
other players are doing. Sometimes a game doesn't have that. Okay, it's too much to ask. But I can
link |
01:32:11.040
design the game, such of it, given the option in front of you say, oh, these are really stupid
link |
01:32:16.960
for me, take them aside. But these, these are not stupid. So if you design them, the game,
link |
01:32:23.360
so that in any combination of non stupid things that the player can do, I achieve what I want,
link |
01:32:30.640
I'm done. I don't care to find the very unique equilibrium. I don't give a damn. I want to say,
link |
01:32:38.000
well, as long as you don't do stupid things and nobody else does stupid things, good social
link |
01:32:43.600
things, outcome arise, I should be equally happy. And so I really believe that this type of analysis
link |
01:32:53.040
is possible. And as a bigger radius, so it reaches more games, more classes of games.
link |
01:33:02.880
And after that, we have to enlarge it again. And it's going to be, we are going to have fun,
link |
01:33:08.800
because human behavior can be conceptualized in many ways. And it's a long game.
link |
01:33:15.600
It's a long game. Do you have favorite games that you're looking at now? I mean, I suppose
link |
01:33:20.560
your work with Blockchain and Algorand is a kind of game that you're, you're basically this
link |
01:33:26.240
mechanism design, design the game such that it's scalable, secure and decentralized, right?
link |
01:33:33.440
Yes. Yes. And very often yet to say, and very, and you must also design so that the incentives
link |
01:33:39.120
are, are, are, and then, then you have a tool for whatever little I learned from my venture
link |
01:33:47.520
in mechanism design is that incentives are very hard to design, because people are very complex
link |
01:33:55.280
creatures. And so, and so somehow the way we design Algorand is a totally different way,
link |
01:34:01.520
essentially with no incentives, essentially. And, and, but, but technically speaking,
link |
01:34:08.480
there is a notion that is actually believable, right? So that to say,
link |
01:34:16.080
people want to maximize their utility, yes, up to a point. Let me, let me tell you, assume that
link |
01:34:22.880
if you are honest, you make a hundred bucks. But if you are dishonest, no matter how dishonest
link |
01:34:30.320
you are, you can only make a hundred bucks and one cent. What are you going to be? I'm saying,
link |
01:34:35.840
you know, what technically speaking, even that one cent, nobody bothers and say,
link |
01:34:42.160
how much am I going to make by honest hundred? If I'm devious, and if I'm a criminal,
link |
01:34:46.640
one hundred bucks and one cent, you know, I might as well be honest. Okay. So that essentially is
link |
01:34:51.040
called, you know, epsilon utility, equilibrium, but I think it's good. And, and, and, and that's
link |
01:34:59.360
what we designed. Essentially means that, you know, there is an, uh, having no incentives is
link |
01:35:06.080
actually a good thing because to prevent people from reasoning how else I'm going to gain the system.
link |
01:35:11.840
But why can we achieve an algorithm to have no incentives and in Bitcoin instead yet to pay
link |
01:35:17.680
the miners because they do tremendous amount of work? Because if you have to do a lot of work,
link |
01:35:24.800
then you demand to be paid accordingly. Because you, right? But if I're going to say,
link |
01:35:29.760
you had to add the two and two equal to four, how much you want to be paid for this? Or if you
link |
01:35:33.760
don't give me this, I don't add the two and two. I would say you can add two and two in your sleep.
link |
01:35:38.880
You don't need to be paid to add the two and two. So the idea is that if we make the system so
link |
01:35:43.520
efficient, so that generating the next block is so damn simple, it doesn't hit the universe,
link |
01:35:50.560
let alone my computer, let alone take some micro signal computation, I might as well
link |
01:35:56.080
not being received incentives for doing that and try to incentivize some other part of the system,
link |
01:36:02.080
but not the main consensus, which is a mechanism for generating and adding block to the chain.
link |
01:36:08.800
Since you're Italian, Sicilian, I also heard rumors that you are a connoisseur of food.
link |
01:36:15.600
You know, if I said today is the last day you get to be alive, I'm Russian. You shouldn't
link |
01:36:24.640
have trusted me. You never know whether you're going to make it out or not. If you had one last
link |
01:36:30.480
meal, you can travel somewhere in the world. Either you make it or somebody else makes it.
link |
01:36:36.800
What's that going to look like? All right. If it's one last meal, I must say,
link |
01:36:41.760
you know, in this era of COVID, I've not been able to see my mom and my mom was a fantastic chef,
link |
01:36:53.600
okay? And they had this very traditional food. As you know, the very traditional food are great
link |
01:36:59.920
for a reason because they survived hundreds of years of culinary innovation. So there is one
link |
01:37:06.960
very laborious thing, which is, and you heard of a name, which is Parmigiana,
link |
01:37:14.800
but to do it is a piece of art. There were so many hours, but only my mom could do it.
link |
01:37:19.600
If I had one last meal, I want Parmigiana, okay? What is the laborious process? Is it the ingredients?
link |
01:37:28.160
Is it the actual process? Is it the atmosphere and the humans involved?
link |
01:37:34.640
And the latter. The ingredients, like in any other Italian cuisine,
link |
01:37:43.040
believes in very few ingredients. If you take, say, quintessential Italian recipe,
link |
01:37:51.680
spaghetti pesto, okay? Pesto is olive oil, very good extra virgin olive oil,
link |
01:37:57.840
basil, pine nuts, pepper, a clove of garlic, not too much. Otherwise, you overpower everything.
link |
01:38:10.080
And then you have to do either two schools of thought, Parmesan or pecorino or a mix of the two.
link |
01:38:17.200
I mentioned six ingredients. That is typical Italian. I understand that there are other
link |
01:38:22.640
cuisines, for instance, a French cuisine, which is extremely sophisticated and extremely combinatorial,
link |
01:38:28.960
or some Chinese cuisine, which has a lot of, many more ingredients than this. And yet the
link |
01:38:35.040
artists, to put them together, a lot of things. In Italy, it's really the striving for simplicity.
link |
01:38:40.880
Yet to find few ingredients, but the right ingredients to create something. So in Parmigiana,
link |
01:38:46.800
the ingredients are eggplants, they are tomatoes, they are basil. But how to put them together
link |
01:38:54.000
and the process is an act of love, okay? Labor and love. It's that you can spend the entire day
link |
01:39:04.560
when I'm exaggerating, but the entire morning for sure, to do it properly.
link |
01:39:09.920
Yeah, as a Japanese cuisine too, there's a mastery to the simplicity with the sushi.
link |
01:39:14.480
I don't know if you've seen Georgians of sushi, but there's a mastery to that that's propagated
link |
01:39:18.960
through the generations. It's fascinating. You know, people love it when I ask about books.
link |
01:39:24.880
I don't know if books, whether fiction, nonfiction, technical or completely nontechnical,
link |
01:39:31.920
had an impact in your life throughout, if there's anything you would recommend,
link |
01:39:35.760
or even just mention as something they gave you an insight or moved you in some way.
link |
01:39:40.560
So, okay. So I don't know if I recommend because in some sense, you almost had to be Italian or
link |
01:39:48.400
to be such a scholar, but being Italian, one thing that really impressed me tremendously
link |
01:39:56.000
is the divine comedy. It is a medieval poem, a very long poem divided in three parts,
link |
01:40:02.080
hell, purgatory and paradise. And that is the non trivial story of a middleman man
link |
01:40:13.520
gets into a crisis, personal crisis. And then out of this crisis, he purifies,
link |
01:40:22.240
when he's a catastrophe, purifies himself more and more and more until he's become capable
link |
01:40:29.120
of actually meeting God. Okay. And this is actually a complex story. So you had to get some very
link |
01:40:36.240
sophisticated language, maybe Latin at that point that we were talking about 1200s in Italy,
link |
01:40:45.520
in Florence. This guy instead, he chose his own dialect, not spoken outside his own immediate
link |
01:40:52.800
circle, right? A Florentine dialect. Actually, Dante really made Italian. How can you express
link |
01:41:01.920
such a sophisticated things and so forth? And then the point is that these words that nobody
link |
01:41:09.600
actually knew because they were essentially dialect, and plus a bunch of very intricate rhymes
link |
01:41:15.600
in which you had to rhyme with the things and turns out that by getting meaning from the things that
link |
01:41:22.720
you rhyme, you essentially guess what the word means. And you invent Italian and you communicate
link |
01:41:30.240
by almost osmosis what you want is a miracle of communication in a dialect, a very poor language,
link |
01:41:36.400
very unsophisticated to express very sophisticated situation. I love it. People who love it and
link |
01:41:45.200
Italians and not Italian. But what I got of it is that very often limitations are our strength.
link |
01:41:54.880
Because if you limit yourself at a very poor language, somehow you get out of it and you
link |
01:42:00.800
achieve even better form of communication if you're using a hyper sophisticated and literary
link |
01:42:05.440
language with lots of resonance from the prior books so that you can actually instantaneously
link |
01:42:10.240
quote, he couldn't quote anything because nothing was written in Italian before him. So I really felt
link |
01:42:16.160
that limitations are our strength. And I think that rather than complaining about the limitations,
link |
01:42:23.520
we should embrace them because if we embrace our limitation, limited as we are, we find
link |
01:42:31.360
very creative solutions that people with less limitation we have, we would not even think
link |
01:42:37.840
about it. Well, the limitation is a superpower if you choose to see it that way. Since you speak
link |
01:42:44.400
both languages, is there something that's lost in translation to you? Is there something you
link |
01:42:50.080
can express in Italian that you can't in English and vice versa maybe? Is there something you
link |
01:42:56.240
could say to the musicality of the language? I've been to Italy a few times and I'm not sure if it's
link |
01:43:02.560
the actual words, but the people are certainly very, there's body language too. There's just the
link |
01:43:11.280
whole being is language. So I don't know if you miss some of that when you're speaking English in
link |
01:43:18.160
this country. Yes. In fact, actually, certainly I miss it and somehow it was a sacrifice that I
link |
01:43:28.480
made consciously by the time I arrived, I knew that this I was not going to express myself
link |
01:43:35.920
at a better level. And it was actually a sacrifice because given you have also your
link |
01:43:43.520
mother tongue is Russian, so you know that you can be very expressive in your mother tongue
link |
01:43:48.640
and not very expressive as a new language. And then what people think of you in the new language
link |
01:43:54.880
because when the precise of expression of things, it generates, it shows elegance or it shows
link |
01:44:04.240
knowledge or it shows as a sense or it shows as a caste or education, whatever it is. So all of a
link |
01:44:10.720
sudden I found myself on the bottom. So I had to fight all my way up back up. But what I'm saying,
link |
01:44:18.560
I go back to the limitations are actually our strength. In fact, it's a trick to limit yourself
link |
01:44:27.360
to exceed. And there are examples in history. If you think about or Hernán Cortés goes to
link |
01:44:34.880
invade Mexico, he has what? A few hundred people with him and he has a hundred thousand people
link |
01:44:42.240
in arms on the other side. First thing he does, he limits himself. He sinks his own ship. There is
link |
01:44:49.520
no return. Okay. And I'm very proud of the actual manager. That's really profound. I actually,
link |
01:44:57.600
first of all, that's inspiring to me. I feel like I have quite a few limitations, but more
link |
01:45:02.560
practically on the Russian side, I'm going to try to do a couple of really big and really tough
link |
01:45:09.360
interviews in Russian. Once COVID lifts a little bit, I'm traveling to Russia. And I'll keep your
link |
01:45:16.960
advice in mind that the limitations is a kind of superpower. We should use it to our advantage,
link |
01:45:23.040
because you do feel less like you're not able to convey your wisdom in the Russian language.
link |
01:45:31.360
Because I moved here when I was 13. So you don't, you know, the parts of life you live under a
link |
01:45:37.680
certain language are the parts of life you're able to communicate. You know, I became, I became a
link |
01:45:43.920
thoughtful, deeply thoughtful human in English. But the pain from World War II, the music of the
link |
01:45:55.360
people, that wasn't still with me in Russian. So I can carry both of those and there's limitations
link |
01:46:00.880
in both. I can't say philosophically profound stuff in Russian, but I can't in English express
link |
01:46:07.520
like that melancholy feeling of like the people. And so combining those two all somehow.
link |
01:46:13.520
Oh, beautifully said. Thanks for sharing. This is great. Yes, I totally understand you. Yes.
link |
01:46:18.880
You've accomplished some incredible things in this space of science, in a space of technology,
link |
01:46:27.360
a space of theory and engineering. Do you have advice for somebody young, an undergraduate student,
link |
01:46:34.400
somebody in high school or anyone who just feels young about life or about career,
link |
01:46:41.680
about making their way in this world? So I was telling before that I believe in emotion and
link |
01:46:47.520
my thing is to be true to your own emotion. And that I think that if you do that, you're doing
link |
01:46:56.560
well because it's a life well spent and you are going never tire because you want to solve all
link |
01:47:04.160
these emotional knots that have always intrigued you from the beginning. And I really believe that
link |
01:47:11.360
to live meaningfully, creatively, and yet to live your emotional life. So I really believe
link |
01:47:18.720
that whether you're a scientist or an artist even more, but a scientist, I think of them as
link |
01:47:23.920
artists as well. If you are a human being, so you are really to live fully your emotions and
link |
01:47:29.120
to the extent possible, sometimes emotions can be overbearing. And my advice is try to
link |
01:47:36.880
express them with more and more confidence. Sometimes it's hard, but you are going to be
link |
01:47:41.920
much more fulfilled by suppressing them. What about love? One of the big ones? What role does
link |
01:47:48.720
that play? That's the bigger part of emotions. It's a scary thing. It's a lot of vulnerability
link |
01:47:58.160
that comes with love, but there is also so much energy and power and love in all senses,
link |
01:48:09.120
and in the traditional sense, but also in the sense of a broader sense for humanity,
link |
01:48:16.480
this feeling, this compassion that makes us one with other people and the suffering of other
link |
01:48:23.200
people. I mean, all of this is a very scary stuff, but it's really the fabric of life.
link |
01:48:32.880
Well, the sad thing is it really hurts to lose it.
link |
01:48:38.240
Yes, that's why the vulnerability that comes with it.
link |
01:48:41.360
That's the thing about emotion is it's up and down, and the down seems to come always with up,
link |
01:48:48.480
but the up only comes with the down. Let me ask you about the ultimate down, which is,
link |
01:48:58.880
unfortunately, we humans are mortal or appear to be for the most part. Do you think about your
link |
01:49:06.160
own mortality? Do you fear death? I hope so, because without death there is no life,
link |
01:49:16.560
so at least there is no meaningful life. Death is actually, in some sense, our ultimate motivator
link |
01:49:23.040
to live a beautiful and meaningful life. I myself felt as a young man, unless I got something that
link |
01:49:31.600
I wanted to do and I don't know why I got the idea of something to say. If I'm not able to say,
link |
01:49:36.560
I would suicide. Maybe it was a way to motivate myself, but you don't need to motivate it because
link |
01:49:42.480
in some sense, unfortunately, death is there. You better get up and do your thing,
link |
01:49:50.160
because death is the best motivation to live fully. What do you hope your legacy is?
link |
01:49:59.040
Do you imagine you have two kids? Yes. I really feel that on one side is
link |
01:50:15.040
my biological legacy, and that is my two kids and their kids, hopefully, and that is one fine.
link |
01:50:26.080
The other thing is this common enterprise, which is society, and I really feel that my legacy would
link |
01:50:36.320
be better by providing security and privacy. Actually, for me, our metaphorical, to say I want
link |
01:50:46.080
to give you the ability to interact more and take more risks and reach out to more and more people
link |
01:50:52.800
as difficult and dangerous as they may seem, but my own scientific work is about to guarantee
link |
01:50:59.600
privacy and give you the security of interaction. Not only in a transaction, like it would be a
link |
01:51:07.120
blockchain transaction, but that is really one of the hardcore of my emotional problems. I think
link |
01:51:15.280
of it and these are the problems I want to tackle. Ultimately, privacy and security is freedom.
link |
01:51:24.480
Freedom is at the core of this. It's dangerous. It's like the emotion thing,
link |
01:51:30.480
but ultimately, that's how we create all the beautiful things around us. Do you think there's
link |
01:51:34.080
meaning to it all? This life except the urgency that death provides and us anxious beings create
link |
01:51:44.560
cool stuff along the way. Is there a deeper meaning? If it is, what is it? Well, meaning of life.
link |
01:51:51.600
Actually, there are three meanings of life. Great. That's great. One, to seek. Two, to seek, and three,
link |
01:52:00.080
to seek. To seek what? Or is there no answer to that? There's no answer to that. I really think
link |
01:52:06.800
that the journey is more and more important than the destination, whatever that be. I think that
link |
01:52:13.920
is a journey and in my opinion, at the end of the day, it must admit meaningful in itself.
link |
01:52:24.560
We must admit that maybe whatever your destination might be, we may never get there,
link |
01:52:33.520
but hell was a great ride. Well, I don't think there's a better way to end this,
link |
01:52:40.000
Silvio. Thank you for wasting your extremely valuable time with me today, joining on this journey
link |
01:52:47.280
of seeking something together. We found nothing, but it was very fun. I really enjoyed it. Thank
link |
01:52:54.160
you so much for talking to us today. Thank you, Alex. It was really special for me to be interviewed
link |
01:52:58.800
by you. Thank you for listening to this conversation with Silvio McCauley, and thank you to our
link |
01:53:04.400
sponsors, Athletic Greens Nutrition Drink, the Information in Depth Tech Journalism website,
link |
01:53:11.920
FourSigmatic Mushroom Coffee, and BetterHelp Online Therapy. Click the sponsor links to
link |
01:53:17.840
get a discount and to support this podcast. And now, let me leave you with some words from
link |
01:53:23.040
Henry David Thoreau. Wealth is the ability to fully experience life. Thank you for listening,
link |
01:53:30.320
and hope to see you next time.