Blog

Is this new Amboss function as harmful because it seems? The analytics firm unveiled “Reported Channel Balances” and the bitcoin world instantly reacted with extreme criticism. Were they overreacting or did they’ve some extent? Is bitcoin’s Lightning Network in danger? Let’s research precisely what occurred and discover out. It all begins with the notion {that a} node’s capability just isn’t the identical as a node’s liquidity. 

We’ve additionally given node operators the flexibility to share and analyze their node standing, together with channel balances. This will permit us to ship higher insights, notifications, and valuations for bought channels. pic.twitter.com/YgJmxFokS8

— AMBOSS 🔳 👾 (@ambosstech) October 26, 2022

In the medium post announcing the “Reported Channel Balances” function, Amboss expands on the concept: 

“One major piece of information that has been missing since the beginning of the lightning network is the difference between lightning’s capacity and its liquidity. To find the difference, we need a piece of information that (thankfully) is private by default: channel balances.”

Since that’s nonetheless a key piece of data, many actors discover out channel balances through the use of the probing approach, “which is an attempted payment designed to fail, reveals private information about channel balances without consent. It is, in a way, an attack on the privacy of nodes.” So, Amboss is aware of that the Lightning Network’s privateness is at stake. The sender’s funds are additionally a stake, since they “may get locked, temporarily.” And it’s even worst for the goal.

Amboss’ Idea: Reported Channel Balances

So, to part out probing, Amboss enabled a manner for nodes to voluntarily report their balances. “we’ve created a single endpoint that users can send this data to and it will be displayed on the node’s Amboss page.” There’s the potential for sharing the information simply with Amboss, however nodes can go public with their data if they need. “The settings span from Private (shared only to Amboss), Range (balance shown publicly as 25%, 50%, or 75%), or Public (the specific percentage is shown to Amboss visitors).”

In common, the concept behind the function appears slightly naive, and nowhere is that extra evident than in the way in which they’ll deal with mendacity nodes. “In truth, anyone can write a script to lie about their balances. Instead of trying to rout out the liars from our data set, we’ll try a different approach: deliver services based solely on the information we’re told.” The Amboss individuals took “kill them with kindness” to a brand new stage.

“We’re building tools to help node operators whether it be through providing notifications and alerts or through providing insights that help users make good decisions with their nodes. The best way that we can help is if users are sharing their balances honestly.”

So, the inducement to be sincere is the precious data that Amboss provides you with? Sounds frail. 

BTC value chart for 10/28/2022 on Kraken | Source: BTC/USD on TradingView.com

The Case Against Reporting Channel Balances

Lightning developer Openoms, whose twitter bio says “Building nodes for Security, Privacy and Freedom,” lead the cost in opposition to Amboss’ new self-policing function. “If this data sharing and aggregation by Amboss gets widespread and accurate we’ll have a huge problem with Lightning privacy.” He additionally supplied options, doable guidelines, and a transparent plan of action. “Good it is open-source, let’s make it not possible to share more than 2 bits of data.”

Some mitigations for now:
cannot actually inform if somebody is sharing privately, nonetheless:
* do not peer with sharing nodes
* keep away from paying via sharing nodes
* look out for CLN friends who cannot run Thunderhub
* feed it random information if something
* use aggressive MPP and longer routes

— openoms (@openoms) October 27, 2022

Openoms additionally breaks the already frail logic behind the function and poses that as an alternative of constructing “data sharing the norm because probing is already possible” we must always “make probing more difficult, expensive and inconclusive.” As for the actionable gadgets, Openoms affords “some mitigations for now:”

• “Don’t peer with sharing nodes”
• “Avoid paying through sharing nodes”
• “Look out for CLN peers who can’t run Thunderhub”
• “Feed it random data if anything”
• “Use aggressive MPP and longer routes”

How did Amboss react to the criticism?

Amboss’ Quick Response

Say what you’ll in regards to the analytics firm, however their response was cool, calm, and picked up. “We sincerely appreciate all of the feedback (even if it’s negative) with respect to our channel balance sharing feature,” Amboss tweeted. Then, they gave credit score the place credit score was due. “Special shout out to Tony Giorgio & Openoms who’ve provided valuable insight on serving our users while preserving network-level transaction privacy.” Amboss additionally clarified that the function is opt-in and comes disabled by default.

One vital truth to get proper amidst the controversy: The @thunderhubio design is OPT-IN solely and personal by default.
Thunderhub is a user-friendly MIT-Licensed node supervisor that respects the consumer’s selections.

— AMBOSS 🔳 👾 (@ambosstech) October 27, 2022

Before we go, we’ve to seek out out what did Tony Giorgio say that was so insightful. He led the discussion within the phenomenal Stacker News, and began the fireplace by writing:

“We do so much to try to protect the privacy of the lightning network but always going to be constantly fighting the tendencies for society to give away information for convenience. I can’t begin to tell you how aggregating this information to a single party is an attack on Lightning and the privacy of all individuals as a whole.”

Sweet, previous comfort. How a lot bother have you ever led humanity into?

Featured Image: The platform's dashboard, from this tweet | Charts by TradingView