[Cryptography] People vs AI
Ray Dillinger
bear at sonic.net
Sun Mar 16 13:28:06 EDT 2025
I thought for a while about the "telling humans from bots" problem, and
I didn't come up with any solution that works at scale and remotely. If
I'm setting up something like a financial market, ultimately the user
database comes down to some equivalent of government-issued photo IDs on
file for all participants. This is because it will be necessary for any
of them, or anyone else affected by their businesses, to take any of the
others to court in the (inevitable) event of financial malfeasance,
consumer fraud, breach of contract, or government intervention in the
businesses the companies are engaging in.
Radical cypherpunk ideology aside, businesses control resources and
offer goods or services for money. They have to be liable to the public
for the misuse of those resources or for failure to provide those goods
and services. Debt can appear or be imposed as a result of judicial
judgment or fines, so you can't restrict the problem to a pseudonymous
or anonymous ledger with irrevocable cash-only transactions. We saw what
happened with Bitcoin; it was a failure. Such appearance of debt is not
a flaw that can or should be engineered away in the case of real
business being done with real assets. It is a core, necessary feature of
any system that allows business to be done. Businesses undertake
obligations and have to be held liable to those obligations. You don't
get liability without specific identifiable human beings held to account.
Also, is-a-human is not a permanent status. Human beings have finite
lifetimes that end, and the digital identity of a dead person must not
continue to be usable to do new business. So your irrevocable ledger, in
addition to the possibility of debt, has to account for the unexpected
termination of accounts holding or owing debt, and the execution of
instruments (such as wills) contingent on the death of a real-world human.
And that doesn't happen "for free" or "bottom up." That means somebody
is paying human beings - at the very least notary publics - to verify
identity and execute some kind of contract document to initiate the
relationship, and it means somebody is paying human beings for keeping
that data safe, keeping it up to date, and not misusing it.
Cryptography can be used to keep identities secret from other users in
the event that debt does not appear, but once debt exists the debtor
must have a real-world identity that can be revealed. And somebody has
to be able to verify that real-world identities not yet revealed are in
fact real and still alive.
Bear
More information about the cryptography
mailing list