吃瓜大本营

[This piece originally appreared in , The End of Trust, a collection featuring over 30 writers investigating surveillance, technology, and privacy, with special advisors the Electronic Frontier Foundation.]

Over the last five years, Edward Snowden and I have carried on an almost daily conversation, most of it unrelated to his legal troubles. Sometimes we meet in person in Moscow over vodka (me) and milkshakes (him). But our friendship has mostly taken place on secure messaging platforms, a channel that was comfortable and intuitive for him but took some getting used to for me. I learned to type with two thumbs as we discussed politics, law, and literature; family, friends, and foster dogs. Our sensibilities are similar but our worldviews quite different: I sometimes accuse him of technological solutionism; he accuses me of timid incrementalism.

Through it all, I鈥檝e found him to be the clearest, most patient, and least condescending explainer of technology I鈥檝e ever met. I鈥檝e often thought that I wished more people 鈥� or perhaps different people 鈥� could eavesdrop on our conversations. What follows is a very lightly edited transcript of one of our chats. In it, Ed attempts to explain 鈥渂lockchain鈥� to me, despite my best efforts to cling to my own ignorance.

Ben Wizner: The Electronic Frontier Foundation recently joked that 鈥渢he amount of energy required to download tweets, articles, and instant messages which describe what 鈥榯he blockchain鈥� is and how 鈥榙ecentralized鈥� currencies are 鈥榯he future鈥� will soon eclipse the total amount of power used by the country of Denmark.鈥� It鈥檚 true that there are a lot of 鈥渂lockchain explainers鈥� out there. And yet I鈥檓 ashamed to admit I still don鈥檛 really get it.

Edward Snowden: Are you asking for another math lesson? I鈥檝e been waiting for this day. You remember what a cryptographic hash function is, right?

BW: This is where I鈥檓 supposed to make a joke about drugs. But no, I do not now nor will I ever remember that.

ES: Challenge accepted. Let鈥檚 start simpler: what do you know about these mythical blockchains?

BW: That I could have been rich if I鈥檇 listened to you about this four years ago? But really, I鈥檝e heard a lot and understood little. 鈥淒ecentralized.鈥� 鈥淟edgers.鈥� What the hell is a blockchain?

ES: It鈥檚 basically just a new kind of database. Imagine updates are always added to the end of it instead of messing with the old, preexisting entries 鈥� just as you could add new links to an old chain to make it longer 鈥� and you鈥檙e on the right track. Start with that concept, and we鈥檒l fill in the details as we go.

BW: Okay, but why? What is the question for which blockchain is the answer?

ES: In a word: trust. Imagine an old database where any entry can be changed just by typing over it and clicking save. Now imagine that entry holds your bank balance. If somebody can just arbitrarily change your balance to zero, that kind of sucks, right? Unless you鈥檝e got student loans.

The point is that any time a system lets somebody change the history with a keystroke, you have no choice but to trust a huge number of people to be both perfectly good and competent, and humanity doesn鈥檛 have a great track record of that. Blockchains are an effort to create a history that can鈥檛 be manipulated.

BW: A history of what?

ES: Transactions. In its oldest and best-known conception, we鈥檙e talking about Bitcoin, a new form of money. But in the last few months, we鈥檝e seen efforts to put together all kind of records in these histories. Anything that needs to be memorialized and immutable. Health-care records, for example, but also deeds and contracts.

When you think about it at its most basic technological level, a blockchain is just a fancy way of time-stamping things in a manner that you can prove to posterity hasn鈥檛 been tampered with after the fact. The very first bitcoin ever created, the 鈥淕enesis Block,鈥� famously has one of those 鈥済eneral attestations鈥� attached to it, which you can still view today.

It was a cypherpunk take on the old practice of taking a selfie with the day鈥檚 newspaper, to prove this new bitcoin blockchain hadn鈥檛 secretly been created months or years earlier (which would have let the creator give himself an unfair advantage in a kind of lottery we鈥檒l discuss later).

BW: Blockchains are a history of transactions. That鈥檚 such a letdown. Because I鈥檝e heard some extravagant claims like: blockchain is an answer to censorship. Blockchain is an answer to online platform monopolies.

ES: Some of that is hype cycle. Look, the reality is blockchains can theoretically be applied in many ways, but it鈥檚 important to understand that mechanically, we鈥檙e discussing a very, very simple concept, and therefore the applications are all variations on a single theme: verifiable accounting. Hot.

So, databases, remember? The concept is to bundle up little packets of data, and that can be anything. Transaction records, if we鈥檙e talking about money, but just as easily blog posts, cat pictures, download links, or even moves in the world鈥檚 most over-engineered game of chess. Then, we stamp these records in a complicated way that I鈥檓 happy to explain despite protest, but if you鈥檙e afraid of math, you can think of this as the high-tech version of a public notary. Finally, we distribute these freshly notarized records to members of the network, who verify them and update their independent copies of this new history. The purpose of this last step is basically to ensure no one person or small group can fudge the numbers, because too many people have copies of the original.

It鈥檚 this decentralization that some hope can provide a new lever to unseat today鈥檚 status quo of censorship and entrenched monopolies. Imagine that instead of today鈥檚 world, where publicly important data is often held exclusively at GenericCorp LLC, which can and does play God with it at the public鈥檚 expense, it鈥檚 in a thousand places with a hundred jurisdictions. There is no takedown mechanism or other 鈥渓et鈥檚 be evil鈥� button, and creating one requires a global consensus of, generally, at least 51 percent of the network in support of changing the rules.

mechanically, we鈥檙e discussing a very, very simple concept, and therefore the applications are all variations on a single theme: verifiable accounting. Hot.

BW: So even if Peter Thiel won his case and got a court order that some article about his vampire diet had to be removed, there would be no way to enforce it. Yes? That is, if Blockchain Magazine republished it.

ES: Right 鈥� so long as Blockchain Magazine is publishing to a decentralized, public blockchain, they could have a judgment ordering them to set their office on fire and it wouldn鈥檛 make a difference to the network.

BW: So鈥� how does it work?

ES: Oh man, I was waiting for this. You鈥檙e asking for the fun stuff. Are you ready for some abstract math?

BW: As ready as I鈥檒l ever be.

ES: Let鈥檚 pretend you鈥檙e allergic to finance, and start with the example of an imaginary blockchain of blog posts instead of going to the normal Bitcoin examples. The interesting mathematical property of blockchains, as mentioned earlier, is their general immutability a very short time past the point of initial publication.

For simplicity鈥檚 sake, think of each new article published as representing a 鈥渂lock鈥� extending this blockchain. Each time you push out a new article, you are adding another link to the chain itself. Even if it鈥檚 a correction or update to an old article, it goes on the end of the chain, erasing nothing. If your chief concerns were manipulation or censorship, this means once it鈥檚 up, it鈥檚 up. It is practically impossible to remove an earlier block from the chain without also destroying every block that was created after that point and convincing everyone else in the network to agree that your alternate version of the history is the correct one.

Let鈥檚 take a second and get into the reasons for why that鈥檚 hard. So, blockchains are record-keeping backed by fancy math. Great. But what does that mean? What actually stops you from adding a new block somewhere other than the end of the chain? Or changing one of the links that鈥檚 already there?

We need to be able to crystallize the things we鈥檙e trying to account for: typically a record, a timestamp, and some sort of proof of authenticity.

So on the technical level, a blockchain works by taking the data of the new block 鈥� the next link in the chain 鈥� stamping it with the mathematic equivalent of a photograph of the block immediately preceding it and a timestamp (to establish chronological order of publication), then 鈥渉ashing it all together鈥� in a way that proves the block qualifies for addition to the chain.

BW: 鈥淗ashing鈥� is a real verb?

ES: A cryptographic hash function is basically just a math problem that transforms any data you throw at it in a predictable way. Any time you feed a hash function a particular cat picture, you will always, always get the same number as the result. We call that result the 鈥渉ash鈥� of that picture, and feeding the cat picture into that math problem 鈥渉ashing鈥� the picture. The key concept to understand is that if you give the very same hash function a slightly different cat picture, or the same cat picture with even the tiniest modification, you will get a WILDLY different number (鈥渉ash鈥�) as the result.

BW: And you can throw any kind of data into a hash function? You can hash a blog post or a financial transaction or Moby-Dick?

ES: Right. So we hash these different blocks, which, if you recall, are just glorified database updates regarding financial transactions, web links, medical records, or whatever. Each new block added to the chain is identified and validated by its hash, which was produced from data that intentionally includes the hash of the block before it. This unbroken chain leads all the way back to the very first block, which is what gives it the name.

I鈥檓 sparing you some technical nuance here, but the important concepts to understand are that blocks in the chain are meant to be verifiable, strictly ordered by chronology, and immutable. Each new block created, which in the case of Bitcoin happens every ten minutes, effectively testifies about the precise contents of all the ones that came before it, making older blocks harder and harder to change without breaking the chain completely.

So by the time our Peter Thiel catches wind of the story and decides to kill it, the chain has already built a thousand links of confirmable, published history.

Money is, of course, the best and most famous example of where blockchains have been proven to make sense.

BW: And this is going to鈥� save the internet? Can you explain why some people think blockchain is a way to get around or replace huge tech platform monopolies? Like how could it weaken Amazon? Or Google?

ES: I think the answer there is 鈥渨ishful thinking.鈥� At least for the foreseeable future. We can鈥檛 talk Amazon without getting into currency, but I believe blockchains have a much better chance of disrupting trade than they do publication, due to their relative inefficiency.

Think about our first example of your bank balance in an old database. That kind of setup is fast, cheap, and easy, but makes you vulnerable to the failures or abuses of what engineers call a 鈥渢rusted authority.鈥� Blockchains do away with the need for trusted authorities at the expense of efficiency. Right now, the old authorities like Visa and MasterCard can process tens of thousands of transactions a second, while Bitcoin can only handle about seven. But methods of compensating for that efficiency disadvantage are being worked on, and we鈥檒l see transaction rates for blockchains improve in the next few years to a point where they鈥檙e no longer a core concern.

BW: I鈥檝e been avoiding this, because I can鈥檛 separate cryptocurrency from the image of a bunch of tech bros living in a palace in Puerto Rico as society crumbles. But it鈥檚 time for you to explain how Bitcoin works.

ES: Well, I hate to be the bearer of bad news, but Zuckerberg is already rich.

Money is, of course, the best and most famous example of where blockchains have been proven to make sense.

BW: With money, what is the problem that blockchain solves?

ES: The same one it solves everywhere else: trust. Without getting too abstract: what is money today? A little cotton paper at best, right? But most of the time, it鈥檚 just that entry in a database. Some bank says you鈥檝e got three hundred rupees today, and you really hope they say the same or better tomorrow.

Now think about access to that reliable bank balance 鈥� that magical number floating in the database 鈥� as something that can鈥檛 be taken for granted, but is instead transient. You鈥檙e one of the world鈥檚 unbanked people. Maybe you don鈥檛 meet the requirements to have an account. Maybe banks are unreliable where you live, or, as happened in Cyprus not too long ago, they decided to seize people鈥檚 savings to bail themselves out. Or maybe the money itself is unsound, as in Venezuela or Zimbabwe, and your balance from yesterday that could鈥檝e bought a house isn鈥檛 worth a cup of coffee today. Monetary systems fail.

BW: Hang on a minute. Why is a 鈥渂itcoin鈥� worth anything? What generates value? What backs the currency? When I own a bitcoin, what do I really own?

ES: Good question. What makes a little piece of green paper worth anything? If you鈥檙e not cynical enough to say 鈥渕en with guns,鈥� which are the reason legal tender is treated different from Monopoly money, you鈥檙e talking about scarcity and shared belief in the usefulness of the currency as a store of value or a means of exchange.

Let鈥檚 step outside of paper currencies, which have no fundamental value, to a more difficult case: why is gold worth so much more than its limited but real practical uses in industry? Because people generally agree it鈥檚 worth more than its practical value. That鈥檚 really it. The social belief that it鈥檚 expensive to dig out of the ground and put on a shelf, along with the expectation that others are also likely to value it, transforms a boring metal into the world鈥檚 oldest store of value.

Blockchain-based cryptocurrencies like Bitcoin have very limited fundamental value: at most, it鈥檚 a token that lets you save data into the blocks of their respective blockchains, forcing everybody participating in that blockchain to keep a copy of it for you. But the scarcity of at least some cryptocurrencies is very real: as of today, no more than twenty-one million bitcoins will ever be created, and seventeen million have already been claimed. Competition to 鈥渕ine鈥� the remaining few involves hundreds of millions of dollars鈥� worth of equipment and electricity, which economists like to claim are what really 鈥渂acks鈥� Bitcoin.

Yet the hard truth is that the only thing that gives cryptocurrencies value is the belief of a large population in their usefulness as a means of exchange. That belief is how cryptocurrencies move enormous amounts of money across the world electronically, without the involvement of banks, every single day. One day capital-B Bitcoin will be gone, but as long as there are people out there who want to be able to move money without banks, cryptocurrencies are likely to be valued.

BW: But what about you? What do you like about it?

ES: I like Bitcoin transactions in that they are impartial. They can鈥檛 really be stopped or reversed, without the explicit, voluntary participation by the people involved. Let鈥檚 say Bank of America doesn鈥檛 want to process a payment for someone like me. In the old financial system, they鈥檝e got an enormous amount of clout, as do their peers, and can make that happen. If a teenager in Venezuela wants to get paid in a hard currency for a web development gig they did for someone in Paris, something prohibited by local currency controls, cryptocurrencies can make it possible. Bitcoin may not yet really be private money, but it is the first 鈥渇ree鈥� money.

Bitcoin has competitors as well. One project, called Monero, tries to make transactions harder to track by playing a little shell game each time anybody spends money. A newer one by academics, called Zcash, uses novel math to enable truly private transactions. If we don鈥檛 have private transactions by default within five years, it鈥檒l be because of law, not technology.

As with all new technologies, there will be disruption and there will be abuse. The question is whether, on balance, the impact is positive or negative.

BW: So if Trump tried to cut off your livelihood by blocking banks from wiring your speaking fees, you could still get paid.

ES: And all he could do is tweet about it.

BW: The downside, I suppose, is that sometimes the ability of governments to track and block transactions is a social good. Taxes. Sanctions. Terrorist finance.

We want you to make a living. We also want sanctions against corrupt oligarchs to work.

ES: If you worry the rich can鈥檛 dodge their taxes without Bitcoin, I鈥檓 afraid I have some bad news. Kidding aside, this is a good point, but I think most would agree we鈥檙e far from the low-water mark of governmental power in the world today. And remember, people will generally have to convert their magic internet money into another currency in order to spend it on high-ticket items, so the government鈥檚 days of real worry are far away.

BW: Explore that for me. Wouldn鈥檛 the need to convert Bitcoin to cash also affect your Venezuelan teen?

ES: The difference is scale. When a Venezuelan teen wants to trade a month鈥檚 wages in cryptocurrency for her local currency, she doesn鈥檛 need an ID check and a bank for that. That鈥檚 a level of cash people barter with every day, particularly in developing economies. But when a corrupt oligarch wants to commission a four hundred million-dollar pleasure yacht, well, yacht builders don鈥檛 have that kind of liquidity, and the existence of invisible internet money doesn鈥檛 mean cops won鈥檛 ask how you paid for it.

The off-ramp for one is a hard requirement, but the other can opt for a footpath.

Similarly, it鈥檚 easier for governments to work collectively against 鈥渞eal鈥� criminals 鈥� think bin Laden 鈥� than it is for them to crack down on dissidents like Ai Weiwei. The French would work hand in hand with the Chinese to track the activity of bin Laden鈥檚 Bitcoin wallet, but the same is hopefully not true of Ai Weiwei.

BW: So basically you鈥檙e saying that this won鈥檛 really help powerful bad actors all that much.

ES: It could actually hurt them, insofar as relying on blockchains will require them to commit evidence of their bad deeds onto computers, which, as we鈥檝e learned in the last decade, government investigators are remarkably skilled at penetrating.

BW: How would you describe the downsides, if any?

ES: As with all new technologies, there will be disruption and there will be abuse. The question is whether, on balance, the impact is positive or negative. The biggest downside is inequality of opportunity: these are new technologies that are not that easy to use and still harder to understand. They presume access to a level of technology, infrastructure, and education that is not universally available. Think about the disruptive effect globalization has had on national economies all over the world. The winners have won by miles, not inches, with the losers harmed by the same degree. The first-mover advantage for institutional blockchain mastery will be similar.

BW: And the internet economy has shown that a platform can be decentralized while the money and power remain very centralized.

ES: Precisely. There are also more technical criticisms to be made here, beyond the scope of what we can reasonably get into. Suffice it to say cryptocurrencies are normally implemented today through one of two kinds of lottery systems, called 鈥減roof of work鈥� and 鈥減roof of stake,鈥� which are a sort of necessary evil arising from how they secure their systems against attack. Neither is great. 鈥淧roof of work鈥� rewards those who can afford the most infrastructure and consume the most energy, which is destructive and slants the game in favor of the rich. 鈥淧roof of stake鈥� tries to cut out the environmental harm by just giving up and handing the rich the reward directly, and hoping their limitless, rent-seeking greed will keep the lights on. Needless to say, new models are needed.

BW: Say more about the environmental harms. Why does making magical internet money use so much energy?

ES: Okay, imagine you decide to get into 鈥渕ining鈥� bitcoins. You know there are a limited number of them up for grabs, but they鈥檙e coming from somewhere, right? And it鈥檚 true: new bitcoins will still continue to be created every ten minutes for the next couple years. In an attempt to hand them out fairly, the original creator of Bitcoin devised an extraordinarily clever scheme: a kind of global math contest. The winner of each roughly ten-minute round gets that round鈥檚 reward: a little treasure chest of brand new, never-used bitcoins, created from the answer you came up with to that round鈥檚 math problem. To keep all the coins in the lottery from being won too quickly, the difficulty of the next math problem is increased based on how quickly the last few were solved. This mechanism is the explanation of how the rounds are always roughly ten minutes long, no matter how many players enter the competition.

The flaw in all of this brilliance was the failure to account for Bitcoin becoming too successful. The reward for winning a round, once worth mere pennies, is now around one hundred thousand dollars, making it economically reasonable for people to divert enormous amounts of energy, and data centers full of computer equipment, toward the math 鈥� or 鈥渕ining鈥� 鈥� contest. Town-sized Godzillas of computation are being poured into this competition, ratcheting the difficulty of the problems beyond comprehension.

This means the biggest winners are those who can dedicate tens of millions of dollars to solving a never-ending series of problems with no meaning beyond mining bitcoins and making its blockchain harder to attack.

BW: 鈥淎 never-ending series of problems with no meaning鈥� sounds like鈥� nihilism. Let鈥檚 talk about the bigger picture. I wanted to understand blockchains because of the ceaseless hype. Some governments think that Bitcoin is an existential threat to the world order, and some venture-capital types swear that blockchains will usher in a golden age of transparency. But you鈥檙e telling me it鈥檚 basically a fancy database.

ES: The tech is the tech, and it鈥檚 basic. It鈥檚 the applications that matter. The real question is not 鈥渨hat is a blockchain,鈥� but 鈥渉ow can it be used?鈥� And that gets back to what we started on: trust. We live in a world where everyone is lying about everything, with even ordinary teens on Instagram agonizing over how best to project a lifestyle they don鈥檛 actually have. People get different search results for the same query. Everything requires trust; at the same time nothing deserves it.

This is the one interesting thing about blockchains: they might be that one tiny gear that lets us create systems you don鈥檛 have to trust. You鈥檝e learned the only thing about blockchains that matters: they鈥檙e boring, inefficient, and wasteful, but, if well designed, they鈥檙e practically impossible to tamper with. And in a world full of shifty bullshit, being able to prove something is true is a radical development. Maybe it鈥檚 the value of your bank account, maybe it鈥檚 the provenance of your pair of Nikes, or maybe it鈥檚 your for-real-this-time permanent record in the principal鈥檚 office, but records are going to transform into chains we can鈥檛 easily break, even if they鈥檙e open for anyone in the world to look at.

The hype is a world where everything can be tracked and verified. The question is whether it鈥檚 going to be voluntary.

BW: That got dark fast. Are you optimistic about how blockchains are going to be used once we get out of the experimental phase?

ES: What do you think?