Background: Wright has sued a dozen former and current Bitcoin developers, demanding that they publish backdoored Bitcoin software to allow him to take coins which are unambiguously not his, and failing that he demands they pay him roughly $7 billion USD in damages.
Obviously the case isn't even intended to be successful, it's intended to take a long time so that Wright can continue selling shares in Bitcoin he doesn't own and will never have access too, and to harass people who wouldn't aid his fraud in the process.
Of course, this attack vector would be moot if all miners were anonymous and all contributors to code were anonymous, or if all amounts and addresses were private. Maybe Craig Wright deliberately made the bitcoin blockchain transparent so he could perform this attack later (/s if it's not obvious).
Wright has already attempted this: He has a fork of Bitcoin called "Bitcoin SV" (satoshi's vision) which he claims is the real Bitcoin and that Bitcoin is an imposter. Today it has well under 1% of Bitcoin's hashpower, well under 1$ of Bitcoin's price (and has fallen a LOT relative to Bitcoin), and it's now down to less than 40 reachable nodes. Most of the few exchanges that have ever had it have dropped it, and it has recently had suffered some extremely severe reorg attacks -- causing millions of dollars in losses to at least one exchange.
For the purpose of Wright's backdoor demands miners are irrelevant. If contributors were all anonymous you'd have the problem that they might actually be wright. He's even suing former developers like me, who haven't contributed for a couple years (or more!) ... really the targets of the lawsuit don't have much connection to reality. And the more obscure you make it to get the software the more ability he'd have to just setup impersonation sites to get people to run his malicious version instead.
Also, anonymity hasn't helped that much in the case of the owner of Bitcoin.org-- being anonymous just caused him to lose in a default judgement when Wright sued him because the UK will not allow an anonymous party to defend themselves. Ultimately they'll likely have to deanonymize to prevent Wright from seizing Bitcoin.org.
Addresses being private wouldn't really change anything about Wright's attack. He'd still demand to be given coins just the same. In fact, as of the moment Bitcoin is anonymous enough to severely frustrate his efforts: He claims to "own" 1.1M BTC but right now he's only suing developers for a backdoor to acces 0.111M of it, because whenever he'd claimed specific addresses for more he's gotten nailed by the true owners signing messages. So right now he's only going after a smaller portion where he can be confident the current controlling party won't speak up (the bulk of those coins were stolen from MTGox and haven't moved since).
The default judgment to me is a flaw in the legal system, if an anonymous party cannot defend themselves, how can an anonymous party be sued? This default judgment is a shame. The proper default judgment should've been "who exactly are you suing?"
He can't demand coins he doesn't even know exist, he can't even prove the coins exist to a court without keys to show that they exist. Being private would absolutely prevent this vector, he'd have to have the keys to prove to a court he owns the coins, which means he wouldn't have to prove anything to a court, he would only have to move the coins.
Interesting vector with impersonation sites, I'll have to roll that one around in my head for a while.
The common thread is that they are defendable against, but not without potentially losing your anonymity. So someone can turn up to contest the injunction against the protestors, but whether their name is made public is then in the hands of the judge (public justice normally means that parties names are in the public domain). Likewise, the anonymous contributor could show up to make a case (the court will have tried reasonably hard to effect service so they're aware) but at significant risk to their anonymity, which is only going to be defended by the judge on public interest grounds, not simply because the contributor would prefer it.
While this can lead to harsh outcomes, it's not completely without sense. 'I'm hiding, you can't sue me' creates a hole for lawless behaviour, and the legal system is more or less intended to stop that kind of thing.
In this case we have a lot of reason to believe that the plaintiff brought the case exclusively to learn the defendants identity. E.g. Before bringing the action they offered $10 million dollars to acquire the domain, and have made threatening remarks. Not to mention no actual advantage is gained by removing the Bitcoin whitepaper from a single website, as there are easily found mirrors on thousands of locations all over the world, and since Wright's initial threats that includes the websites of several national governments, US congress, research institutions, and some of the largest financial institutions in the world (e.g. Fidelity).
This privacy invasion belief was only furthered when after the case the plaintiff refused to accept the ordered costs payment from anyone except the defendant and only if they identified themselves (also, after the case the plaintiff pretty much said as much).
Their case was seriously deficient too, e.g. falsely misstating that a US copyright registration was evidence of authorship even when the copyright office had made an unprecedented move of saying exactly the opposite in the matter of this specific case. Failing to disclose that there were other copyright registrants, failing to disclose that the supposedly infringing whitepaper was distributed under the MIT license and so on. Not to mention that there were major equitable issues, e.g. the whitepaper has been on the website pretty much since it was written some 13 years ago without issue-- placed there by its (actual) author.
Cobra wrote a letter to the judge and attended the hearing via zoom, and the judge took the position that he was required by the law to ignore the letter.
But at the end of the day the UK courts are powerless to protect cobra from harassment or even assassination so exposing his identity just didn't make sense. Particularly since Cobra is outside of the UK (or so I believe, no one in the bitcoin ecosystem seems to know cobra by any other identity).
And this is why you can't access the Bitcoin whitepaper at its original location or download the bitcoin software on bitcoin.org from within the UK today.
They're now seeing an additional nearly million usd worth of costs for their unopposed default judgement too. O_o
For me, the question is not so much whether the respondent should be anonymous from the legal system (I think fairly clearly not) but whether there should be a scope of anonymity from the claimant and the public (a reasonable case here, I think, as none of the copyright issues really turn on the respondent's identity) and whether the application could be made without putting the identity on record first. And the High Court, against a deep pocketed opponent, without my own legal team, is not an ideal venue to try to find out. And, depending on Cøbra's opsec, it may be that they would be exposable via a third-party Norwich Pharmacal order anyway :-/
The costs are really in the same problem space as the main claim, I think: an application for costs to be assessed would probably dramatically lower the amount 'reasonably' due - but that would mean appearing as a party. [edit: not to say it wouldn't be ruinously expensive anyway - I see the summary assessment of costs up to summary judgment already runs to £35k. The High Court is not cheap.]
The tricky thing here is that what Cobra needs isn't protection from the public, -- which would be hard to provide with any reliability but at least is conceptually not challenging, but privacy from the plaintiffs -- because he has a reasonable fear that the plaintiffs will use the information in some criminal way to harm him.
(Also because in another case Wright went ahead and publicly disclosed the identity of a confidential witness that the court had sealed, and Wright suffered no consequence for it.)
I think privacy from the plaintiffs is harder conceptually, because there may come some point where there needs to be a factual argument that depends on their identity-- certainly the plaintiffs would push as hard as they could in whatever direction they needed to accomplish that-- including, based on prior conduct, forging documents to support a false narrative.
[One of the reasons we think they've been trying to get Cobra's identity-- beyond just threatening him with it-- is that we know wright has told people that Cobra "stole" bitcoin.org from him, but since he knows nothing about who cobra is or how he ended up in control of Bitcoin.org he can't fake up any documentary support for this fiction.]
It's unclear if they could obtain Cobra's identity from a third party. They certainly tried pretty hard. When they were trying to obtain my address they used a storm of pretexting phone calls and such. At least they tried very hard, and were unsuccessful absent an order.
Yeah, indeed, Cobra has the same problem with costs-- he's having a difficult time within the legal framework of challenging them without exposing his identity.
Agreed. But imagine that there is no normie accessible place on the web to get non-malicious Bitcoin software. And anyone running a site distributing it is at risk if their identity is leaked. What effect is that going to have in the long run?
"There are levels of survival we are prepared to accept." -- Bitcoin would survive in such a state, but I don't think it would be a great outcome.
> The default judgment to me is a flaw in the legal system, if an anonymous party cannot defend themselves, how can an anonymous party be sued? This default judgment is a shame.
Fully agreed.
> He can't demand coins he doesn't even know exist, he can't even prove the coins exist to a court without keys to show that they exist.
He's actually argued that he could just demand the developers issue more coins too. And he doesn't have keys, but that isn't slowing him down!
The big legal flaw he exploits is that if you go to trial it can be extremely expensive (esp in the UK where you pay the other sides legal costs for every failed motion, and wright sticks a whole firm on his case). ... normally the expense of trial is protected against by preliminary motions like summary judgements. But in a summary judgement the court assumes all disputed facts favor the non-movant, and wright fills his cases with forgeries to makeup whatever disputed fact he needs to keep the case going. The huge volume of forgeries which require expert analysis and debunking also add massively to the cost of being in litigation with him. His goal isn't to win (though I'm sure he'd be happy if he did)-- his goal is to burn time and the opponents resources.
This is where we get off in the weeds about the architecture of the internet. Ideally, we would have a decentralized domain registry and everyone would use tools like onion sites for everything. Hopefully that is the outcome, but likely not.
>Ultimately they'll likely have to deanonymize to prevent Wright from seizing Bitcoin.org.
I didn't know this was a risk. It would actually be a mild disaster if bitcoin.org was compromised. If Cøbra wants to remain anonymous, one idea is to transfer the domain to one of the current bitcoin devs whose identity is public (and maybe transfer it back once this blows over?) I don't know if it's too late for that, given the domain is already the subject of a lawsuit. The whole situation sounds like a mess. I'm sorry you got wrapped up in it.
Wow that's a shitty move. Have you had to retain a lawyer to deal with this nonsense? I was once sued over some open source software I wrote, because one of the keywords used in the DSL was the same as a completely unrelated trademark. As you can imagine the whole lawsuit was baseless nonsense. Luckily they also sued my employer who happens to be Red Hat and our legal department stomped on the claimant for me.
Wright is unusually challenging even compared to the more typical litigation trolls, because he puts out a lot of forged documents that make it harder to establish a clear set of facts to kill a case in preliminary motions, which cost a lot of expert time to debunk, and carry a risk that a less technical judge/jury might be snowed by them in spite of expert debunking.
This problem doesn't usually exist because in the long run the forgeries will make him lose... but he's not playing for the long run, he's playing to just keep it going as long as he can.
Fortunately the community and industry has been able to step up and provide financial support, so far. But that doesn't replace the time and stress of dealing with it and only partially addresses the chilling effect.
I heard that he's also just recently sent threat letters for two more unrelated lawsuits (sent by a separate set of shell companies), one alleging that the Bitcoin developers are infringing his "database rights" through their use of the Bitcoin blockchain without his permission, and one alleging that their use of the word "Bitcoin" is "passing off" (how he's going to argue that without a trademark is mystifying to me) and he's been saying in public that he's planning a patent lawsuit too.
I know them well, all the way back to the 90s. Good luck with your case against him is all I can say.
This wouldn't be the case for legacy systems that depend on trusted third party authorities.
What it does tell you though is how much nonsense people will treat seriously. The same media that is misreporting on Wright's litigation is also the same media saying that Bitcoin is a big deal. :)