Hacker News new | ask | show | jobs
by IronIvan 1666 days ago
> Any application that could be done on a blockchain could be better done on a centralized database. Except crime.

After all as we all know: If you've got nothing to hide, you've got nothing to fear.

And look at how inefficient all these permissionless, trustless protocols are! What a waste! Let's just all trust a central authority and think of the savings and the children.

4 comments

Yeah, this is what I don't understand from the naysayers. Anyone who says blockchain-driven assets don't have intrinsic value seems to ignore the value of trust - the ability to trust that the ledger is accurate seems extremely valuable.

The author of the article skips over the question entirely, maybe he's addressed it elsewhere, but if the crypto skeptics continue to ignore one of its primary value propositions, I have to assume either ignorance or bad faith.

But that ledger isn't accurate. It's just distributed and difficult to change.

I technically am the owner of (quite a few) bitcoin that were being processed by MtGox when they imploded.

The wallet they were in at the time was emptied and no longer exists.

I still receive the relevant court documents as the case continues still.

As far as the ledger is concerned - they are no longer mine.

---

So question to you: How do you reconcile the theft of my property with the ledger at this point?

It turns out I have no ability to do so at all. The ledger is distributed and impossible to meaningfully change.

So while I trust that the ledger can't be changed easily - I don't trust the ledger to accurately reflect ownership (it can only represent possession, not true ownership).

So now what?

Now it turns out I have to turn around and trust a central authority anyways! That authority being the government that is handling the prosecution of MtGox for fraud and theft.

“I don't trust the ledger to accurately reflect ownership (it can only represent possession, not true ownership).”

Possession is ownership on the Bitcoin network. Not ownership in the sense of it is written down in some legal document somewhere but ownership in the sense that you have the power to perform a transaction with what you say you own.

You were trusting a central party all along. If you didn’t you wouldn’t be in the position you are in.

But the alternative here is that you have to place all your trust in an unknown and untrusted 3rd party to ever actually make an exchange.

Even the silk-road used an escrow service that required that the seller trust the buyer, and both parties trust the silk-road. (a buyer places coins in escrow with the silk-road, the silk-road confirms it has the coins to the seller, the seller ships the product, the buyer unlocks the coins escrow upon receipt)

So the whole things boils down to "trust" and it turns out that the ledger can't actually provide any trust.

After enough confirmations a transaction is final and I can trust that the transaction is final and my account balance on the ledger is correct.

Present forms of digital cash do not offer this. A payment can be reversed if the buyer claims the transaction was fraudulent and the banks involved agree to reverse the transaction. Money can be accidentally withdrawn from my account and I have to ask the bank to return it. In both these cases if the institutions involved refuse to return my money then I have to take the issue to court and I am deprived of using or investing this money in the meantime.

If consumer protections are your concern these laws exist in many countries regardless of the payment medium.

But the trust that a bitcoin transaction is final isn't enough trust to make an exchange!

Lets say you and I decide right now that we're going to use these comments to make an exchange. I will give you $5 of bitcoin in exchange for you mailing me a postcard.

Now what? How do we proceed in a meaningful manner?

How do we go about making that exchange happen if we assume that either party is self-interested, and not interested in actually completing the deal?

If I send the bitcoin first? - the second it hits your account you know for sure it's yours: No need to bother sending the postcard - that's just cash out of your pocket.

If you mail the postcard first? - Well, job's done for me, no need to send any bitcoin at all.

What if we both agree that we trust Bob, and you send him the postcard, and I send him the bitcoin, and he only forwards them along after he gets both? - Oops, now Bob can do all those things you complained about letting the bank do! He can send that bitcoin back and I won't ever get a postcard. He can mail the postcard back and you won't ever get any bitcoin (Transaction reversed!). Worse, he can take anything you give him and do what he wants while he has it (like disappear!) - or hold them much longer than you'd like after he gets them. (Freeze it).

How do you get your stuff back from Bob? Same way you would from a bank - appeal to the government.

Basically - Bitcoin without enforcement is only a ledger. The thing that keeps it in check with reality is an appeal to an authority somewhere, who provides trust that both parties in an exchange aren't getting screwed.

You're overlooking defi, this is the thing being revolutionized right now; you can make all the transactions you can afford to pay transaction fees for, trade hundreds of assets, swap tokenized USD for tokenized EUR, all without an intermediary.

To be candid, you are generally trusting the contracts you're interacting with to be bug free, but you are able to audit the code just as easily as anyone else, and verify that the contracts are as advertised. Unlike dealing with a bank portal, all the logic running on the blockchain is visible and verifiable.

Afaik markets use multisig now, so the facilitator never has access to the funds unilaterally.
Not your keys not your coins. Unless you trust some central authority to take care of you, which you should by now understand that doesn't always work, and when it doesn't work, it's usually a spectacular failure.

So to answer your questions. Although possible, no reconcile is the pure spirit of a trustless network. Now? you make sure to avoid custodian services and keep your keys safe. or stay away from crypto until/if it becomes as ubiquitous as the Internet.

So we both agree - the ledger is "accurate" only in the sense that the ledger matches... (drumroll) the ledger.

Which is entirely true, and there are some useful properties to that, but the whole thing falls down the second you have a real dispute over the trade of goods for value (which I might remind you, outside of the pure speculation/gambling that occurs in bitcoin pricing, is the point of actually holding a currency).

So how do I go about safely spending these things? Oh - it turns out that still only works in the context of a central authority and the legal system they support.

the dispute concern is long solved. it happens every day with cash, but also with other form of payments. freight shows interesting practices. and, escrow is still an option.

Spending these things? I can show you how to hold securely some wallet with your own private keys (no custody), receive then "spend" these things for a few pennies per transactions and with the guarantee nobody will interfere with our exchange. from wherever you happen to reside. there is no central authority able to (practically) control many of the blockchain networks out there.

> Spending these things? I can show you how to hold securely some wallet with your own private keys (no custody), receive then "spend" these things for a few pennies per transactions and with the guarantee nobody will interfere with our exchange.

Yes, and because no one can interfere in the exchange, no one can prevent either party from abusing the other, and no third party can later reconcile the dispute without an outside framework.

I find it pretty unbelievable how comfortable the crypto crowd is about just dismissing reconciliation, when it's literally some of the oldest history have, and one of the more important roles of a functioning government (we literally have 4 thousand year old stone tablets dealing with this: https://en.wikipedia.org/wiki/Complaint_tablet_to_Ea-nasir)

> Not your keys not your coins.

so the same thing as "code is law", which is a fundamentally bad idea.

No idea is perfect. I find that one preferable over the other popular alternatives where a few people's whim are the law. Note: code is law doesn't imply it can't evolve, adapt, improves. the idea of code is law is the same as being against retro active legislation.
>Now it turns out I have to turn around and trust a central authority anyways! That authority being the government that is handling the prosecution of MtGox for fraud and theft.

In theory, DeFi can solve this. In practice it is hampered by poor UX and high transaction/gas fees. I think in the far future, the idea of ever having "your" assets in a wallet whose key you don't control will be seen as a ludicrous archaism. Sorry for your loss btw, that really sucks

> Sorry for your loss btw, that really sucks

You and me both - 41 bitcoin at $4.17 a piece. Admittedly, if they hadn't been stolen I was planning on buying a 1/4 of weed with them, so I probably wouldn't be rich either way... shrug

Fun story though - I can honestly say I spent more than USD 10 million in bitcoin on weed in college. Only about $500 at the time.

You know they recovered 150000 Bitcoin from a cold wallet and are going to repay holders?
You should be getting some of them back soon then right?
This exactly.

Turns out there is some utility to a central authority.

Proof of Authority systems
Not your private keys, not your coins. You CHOSE to gamble with your property when you gave it to someone else. Whether you understood this before you lost your property or not, is irrelevant. I've not lost any of my coin UTXOs associated with my own private keys. Unregulated, foreign Magic The Gathering trading card exchange use was never a wise choice from the day Jed McCaleb started that garbage database.
I see your perspective. There's another perspective from which you could look at the details of your situation.

You deferred to a trusted party to secure your wealth and because that third party was untrustworthy, you have to defer to an intermediary.

Had you deferred to yourself to secure your wealth you wouldn't be in this situation. The ledger would be the canonical one of ownership and possession, and you wouldn't have to defer to anyone.

Basically, you kept your bitcoin in a traditional, legally enforceable arrangement instead of the bottom layer, algorithmically enforced environment and now have to defer to the traditional system to restore possession.

Ok - so follow along with me here:

I owned no bitcoins at the time I desired to trade bitcoins for a physical product (in this case: ~7g of Cannabis)

What recourse do I have that does not require trusting a third party?

I do not own the required compute power to mine it myself (not technically true at the time, although certainly true today)

I'd like to have you walk me through the exact set of steps to acquire my bitcoin and use them to purchase that physical good, where I can magically avoid placing any trust in a 3rd party.

1) generate a private key,

2) move it to the private key.

When you're ready to spend it, spend it. Those places where you were looking to buy cannabis have escrow services, at the time you'd have had to trust the platform only upon purchase, nowadays multisig escrow is standard, which requires significantly less trust in a single party.

Move what to the private key? How do I get those coins in the first place?
They want you to go back to frontier days before specialization in the economy, you are supposed to hoard your wealth yourself and protect your family with a gun
This exactly! (not to mention only ever making exchanges in person, because remote exchanges require trust)

Which is hilarious. Because that's actually all that bitcoin was good for: black market deals/trades, where enforcement is left up to you anyways.

Unfortunately, that makes it a (fucking terrible) medium of exchange for absolutely anything else, unless you add back in all the government regulation that the crypto folks hate.

You could have reduced the risk substantially by transferring off their wallet to yours right after purchase. You still could have purchased your weed too.
There was no holding. It wasn't an asset I was interested in holding, it was a medium of exchange to purchase a good I couldn't otherwise get.

The coins would sit in the wallet for as long as it took me to figure out how to place an order on silk-road again, where I would buy down to as small an amount of bitcoin as I could.

I got unlucky the last time through and hit it right when the service went down.

Which is funny - because the attitude that I should be hiding my coins away as tightly as possible is exactly why I'm so non-plussed on bitcoin: It's no longer an medium of exchange, it's a speculative asset with price completely unhinged from utility (which in my opinion is basically just buying black market goods).

> How do you reconcile the theft of my property with the ledger at this point?

Authorities must find whoever received those bitcoins and make them transfer the funds back to you.

You know, there is a reason why crypto people chant "Not your keys, not your coins".
Sure, but value without an enforcement mechanism is not very useful.

People usually want to trade stored value in exchange for goods and services (at least in a functioning value store - I don't really believe bitcoin serves that purpose at the moment).

So lets say we agree that I pay you 10k in bitcoin in exchange for you remodeling my bathroom (and ignore how unlikely this scenario is with real crypto currencies). I pay you 50% up front (to purchase materials), and 50% on completion.

Then you run off with my initial 50%.

Now what?

----

Every solution I've seen is riddled with pitfalls and gotchas

- Use escrow? Wait - now we're just trusting a central authority again.

- Use Eth contracts? Well, maybe - but it requires a perfectly written contract or you're open to all sorts of strange edge behavior and side effects.

- Sue over the theft? Now the central authority is just the government again, and we're back at square one!

You see the disconnect I'm getting at? Eventually, if disagreements occur about how value was traded, there has to be a reconciliation mechanism. Right now, even in modern crypto - that reconciliation mechanism is still a central authority: Your government.

You're conflating two issues with each other. One is having a decentralized currency with a fixed monetary policy. Another issue is the counterparty risk.

Bitcoin is not designed to solve the counterparty risk, it's just a digital cash that has a fixed emission schedule. It can be stolen just like regular physical cash can be.

Smart Contracts try to solve the counterparty risk issue, but it's just an extra layer around cryptocurrencies, that has it's pros and cons.

See, I think you're disconnecting two issues which are inherently related.

Fraud is not going anywhere anytime soon. If you have no proposed mechanism to reconcile fraud, I'd argue there's not any true value stored.

If the proposed mechanism is "just use the existing government" then the whole house of cards in built on the back of that central authority enforcing ownership for you anyways in which case why not just use the currency that authority already sponsors and has a proven track record of enforcing?

Not sure why you're being downvoted for providing a good answer here. When you use Bitcoin, or cash it is solely your responsibility to protect that counterparty risk via your own means. Without a contract and receipt, the same would happen to your cash if you walked into a business and the owner decided to keep a small sum of your money with no record of transaction. If you gave a shop owner or autobody mechanic $50-500 cash with no receipt he could very easily just keep your cash. You have no recourse. Call the police? Doesn't matter in real life because you have no receipt or contract. It's your word against his. Since I see that you've just replied and still want "recourse" if someone steals your money I'll just clearly spell that out for you. You cause the level of recourse of your stolen money that you require. Whether via violence or a counter-theft and damage to the thief equaling what was stolen from you. It's left up to you with Bitcoin. If you can't stand the heat, get out of the kitchen. We don't want government intervention.
> the ability to trust that the ledger is accurate seems extremely valuable

Maybe it "seems" valuable, but why exactly is it valuable? For what use case and which situation (besides crime)?

I think the issue is that many don't see value in its "primary value proposition" because the features they want from banks are already there (stability, FDIC insurance). The only thing I personally see missing is no/low-fee instant transfers, but crypto hasn't solved that either (too slow and/or high fees).

One IMO realistic use-case is providing a wealth preservation mechanism for people living in a country with a corrupt government that's experiencing hyperinflation, for example Lebanon.
> One IMO realistic use-case is providing a wealth preservation mechanism for people living in a country with a corrupt government that's experiencing hyperinflation, for example Lebanon.

Sure, but (like it or not) that's covered under the umbrella of "crime".

In that case, I think the point is that some "crime" is ethically justified and worth supporting technologically. The OP's statement implies that all crime is bad.
Sure. But it is worth asking if this particular channel of support is worth enabling all the other forms of criminality that use cryptocurrencies.
Yep, but all that means is that "crime" is a meaningless distinction itself.
> One IMO realistic use-case is providing a wealth preservation

Any other fiat currency already provides this such as usd, euro, Israeli currency etc and they are at least currently far easier to aquire and done have any gas feeds other than consumption tax if any

On Lebanon where electricity is unreliable seems like a particularly bad idea to use any sort of Crypto, let alone the user friction as a consequence of network gas prices

On real world scenarios, if a country is having issues relating to inflation or is a small market to begin with, consumer prices are denominated on Usd or some other currency anyway

True but opening foreign bank accounts is difficult and like western countries physical cash can be legally seized by authorities even if it was acquired legally.
Cryptocurrencies can also be legally seized. Anything can be.
People living under a corrupt government and experiencing hyperinflation are no safer or necessarily better off with cryptocurrency. Conducting cryptocurrency transactions requires a non-trivial amount of infrastructure. Even "offline" transactions with a Rube Goldbergian number of mesh network components needs all those components to work.

A fortune in Bitcoin in a conflict/disaster zone is no more useful than a fortune in dollars in a bank if you can't access it readily. Your fortune means shit if you can't buy a loaf of bread.

Even if you can access the infrastructure necessary to spend cryptocurrency to buy a loaf of bread they provide no protection against localized inflation. Prices of goods in a conflict zone increase significantly due to dangers/difficulty associated with the supply chain or lack thereof. Sometimes they increase due simply to greed. Transacting in a cryptocurrency doesn't help at all with this. Your Bitcoin fortune can be wiped out just feeding your family since your only other option is to starve to death.

> ...(besides crime)

First you have to define "crime." If by "crime" you mean "any activity outside the purview of regulatory authorities" then you're defining everything that isn't a bank account as crime. It is circular logic. "Its only use case is crime because using it is crime." If you more narrowly define crime as criminal acts besides just unregulated financial activities, then you can start to see the value proposition.

That is a straw man. This is not my definition of crime, I was thinking things like money laundering, tax evasion, ransomware payments, and blackmarket purchases.

I'm genuinely not sure what a use case for unregulated financial activity would be that doesn't fall into those buckets.

Someone mentioned retaining assets in countries with hyperinflation. To me it appears a central bank digital currency would be more appropriate there.

A straw man? I just wanted a definition of "crime".

"Blackmarket purchases" has the same problem "crime" does, it's self supporting.

Banks can give your money away without your knowledge. Happens all the time, and people have little recourse. Worse yet, it's seen as the victim's responsibility and not the bank's.
A blockchain doesn’t provide trust, though. A person who doesn’t understand technology doesn’t trust a distributed ledger, but they do trust their centralised bank because it’s regulated.
It provides "distributed trust", in the sense that you know no single person or group is in control and you trust the distributed consensus, in terms of ledger state and algorithm accuracy.
I'm not fully up to speed but are modern blockchains still susceptible to a 51% attack?
Current PoW chains, yes. Some other consensus schemes have higher threshold requirements to pull off a similar sort of attack, in particular you can look at Casper FFG and other byzantine fault tolerant PoS schemes.

There are some with lower threshold tolerance of these attacks based on the idea that they're unlikely and the added threshold doesn't actually add security. I don't know about that but some people seem to think so.

Maybe no single entity is literally in full control but large mining pools and the developers of the software both have extreme influence over the chain.
I would question how much of the layperson's trust is due to bank regulation and how much is due to familiarity.
Probably nearly 100% due to regulation.
There are plenty of non-tech people with investments in crypto that would disagree with you. Also, some exchanges are FDIC insured.
They do though. A very small percentage of current holders of crypto have an understanding of the technology.

Trust will (continue to) come with time.

You sound privileged enough to have access to a reliable and trustworthy bank. Many, many people aren't as lucky.
So this person lives in a place they can't trust banks...

But they have access to computers, internet, enough money to pay the tx fees of cryptocurrencies... amazing

Less snark would be preferred to elicit a response, but yes- there are more cheap computers than people in the world, and smart phones are near ubiquitous even in very poor places. You simply don't have the life experiences to make this criticism. i.e. PRIVILEGE
Don't forget enough tech expertise to be able to use any of this crap in any "decentralized" way (if they all just use coinbase, where is that decentralization?)
The article discusses pseudo-money, not generic decentralized databases. The main point is that even if a blockchain distributed database technically "works" it is highly inadequate for many practical money-like applications, particularly because trust has to include the real world.
In some context I would agree, there is theoretical value to a decentralized trustless ledger[0]. What I can't agree with, however, is that entries in a decentralized trustless ledger are inherently valuable as cryptocurrency proponents would like us to believe. The entries in the ledger have no inherent meaning, they're just a number associated with another number and the only reason anyone equates that with a monetary value is that, for the moment, they can find someone else[1] to give them money to shuffle those numbers around. I think that, at best, one could say that BTC is backed by hype and speculation. I am not convinced that is a useful basis for a currency[2].

This is in contrast to fiat currencies which their various governments offer guarantees that they will honor.

NFTs, on the other hand, make even less sense to me. They seem like they are just cryptocurrency in disguise trying to fool people who otherwise question the concept of inherent value by claiming (falsely) that they are equivalent to ownership of digital goods[3].

[0] I have yet to hear a use case for which they are actually better than traditional alternatives, but I can imagine that one might exists.

[1] read: greater fool.

[2] Leaving aside all the energy wasted on PoW.

[3] And that's before we get into my conviction that attempts to force artificial scarcity into a post-scarcity space are backward and perverted.

Money in your bank account is just a number in a database somewhere.
You must have missed a significant portion of my post if you do not see why I do not believe those are equivalent.

I'll reiterate: the number in the database represents an amount of tokens guaranteed to be accepted by the government of the country I live in. Cryptocurrency 'coins' carry no such guarantee, only the possibility of greater fools.

It turns out in history lots of people committed crimes where the evil party was not the criminal, but the state deeming their actions criminal.
Is trust in bank records generally low? Especially in moderately modernized countries?
That argument doesn't work with currency, because money requires trust by definition (as opposed to immediate barter), and, as a backup -- enforcement.

In the end, it's just a question of whether you trust a centralised authority that's ultimate accountable, however imperfectly, or decentralised authorities that are accountable only to themselves and have no enforcement power.

If you give me bitcoin and I don't give you goods in exchange, or vice-versa, aren't you going to run to that central authority?

The same can be said about NFTs: you must verify their authenticity off-chain, you must trust that off-chain authority, or sue people off-chain if they infringe on your off-chain property rights...
I'll give you a bad review in a venue where your reputation is more valuable than the trade or I wouldn't trade with you to begin with. Or I would insist on an escrowed bond.

There's many other ways than inserting a monopoly on violence dispensing political authority into the loop and still ensuring that transactions are suitably reliable.

Big sticks just aren't a very efficient solution.

That only strengthens the article's author's point. Cyber currency just serves as a vessel for a fringe political group's beliefs, which, however strong, are not popular.
Is the author's point that the political views in question are not popular? I thought he was attempting to make the point that the economic system personified in the execution of those political beliefs is not efficient.

Which if the last decade plus of cryptocurrency has taught us anything, we ought to be able to thoroughly discard by this point in time.

I am aware that the political orthodoxy of the time is popular and the view that it should be discarded is unpopular, aside from observing that this would be true of basically any time and place, I have no further comment on that. My point is that the alternative simply flat out works better. I have zero care or interest in what is popular.

This is why I always have thought that election voting would be a perfect use case for a blockchain.

Imagine a way that you could look up the blockchain with your key (SSN?) that is somehow one-way-hashed to show you the result of your vote. The value param would be plain-text. Someone else wouldn't be able to see your vote without your key, but you could confirm yours was recorded properly. Anyone could tally the values to get the final value.

Because the blockchain is trustless and distributed, you wouldn't have to worry about an election machine flipping your vote.

Apart from currency, this seems like a great use-case! Are there any flaws in this basic structure?

First of all, what you're talking about more resembles a Merkle Tree rather than a blockchain, because the "chaining" property is really useless in this scenario. Each election can publish the Merkle Tree of its results and you can be sure that your vote was properly registered. Or frankly, just publish the list of one-way hashes and their vote, and you can dispense with all the Merkle-ing.

But what about a Sybil attack? How do you ensure "one person == one or zero votes"? I could submit a jillion votes for Donald Duck and how would you ever know that those votes were all cast by the same person? Any sort of election scheme has to deal with messy real-world identity, and there's no cryptographic solution to that, only various weak social network approaches that are pretty much the norm.

A Sybil attack in this case is just a reveal (once again) of the oracle problem - a blockchain doesn’t provide proof that you are you. Therefore, it cannot provide proof that you cast only one (or no) vote.

Verifying your identity is outside the blockchain. Thus it can provide no value for voting.

As to your first point, I'm not familiar with Merkle Tree's, so I'll learn about that before I respond. Thank you for the insight.

To the second point--I would imagine you would vote in the same way we do today for MVP, in-person / mailing, etc. So the main function would be to verify that your vote was properly recorded and counted.

Voting is intentionally designed for it to be impossible to verify what your final vote is so that it's impossible for someone to use that to hold you to a particular vote. A classic example being a household all being forced to vote one way by the head of that household. With no verification possible you can freely vote without influence from others who would use that verification for their own ends.

This is also why taking a picture of your ballot will nullify it if you're caught doing so. Not as punishment, but so you can vote again with potentially different choices and a valid excuse for having no verification.

This is interesting and something I hadn't thought of. Thank you.
https://www.youtube.com/watch?v=w3_0x6oaDmI elaborates on that point, and has some other useful points against electronic voting
> This is also why taking a picture of your ballot will nullify it

In what jurisdiction is this the case? I have never heard of it.

It generally won't, because the systems are designed to make it difficult to nullify a specific person's ballot after the fact. In some jurisdictions, though, there are specified criminal penalties for doing this.
You can do a search, but a minority of states in the U. S. outlaw it.
> This is why I always have thought that election voting would be a perfect use case for a blockchain.

You mean, other than trusting elected representatives to oversee the election you'd rather trust miners?

Of all the things you could do with a blockchain, it's probably the worst.

The legitimacy of voting outcomes depends critically on everyone understanding and in principle being able to verify how it works, and it being resistant to tampering at scale.

Very few people would understand a blockchain based voting mechanism well enough to really verify, and any implementation error could give an attacker complete and untraceable control over the results.

Relevant XKCD: https://xkcd.com/2030/

You telling me everyone understands computerized voting machines? Because I don't think there's that much of a gap between people who know about those vs people who know about block chains
No, those are a bad idea as well.
You also need a way to use your key to show a false result, or someone can use rubber-hose cryptanalysis to see your vote.
Is rubber-hose cryptanalysis the concept of extracting info by torture? I guess... I mean, if you're willing to beat someone to get their SSN, you could probably do a lot more harm already just using that info to apply for CCs and loans in their name.

Maybe I'm mistaken or confused here, but in that specific case you could just give any random 9-digit sequence and it would suffice? A non-SSN voter ID would work just as well for a key.

Are people threatening others based on their votes these days?

EDIT: /u/ninjanomnom brought up a good point regarding heads-of-households, which I hadn't thought of before. I suppose some sort of method would be necessary to obfuscate your vote in some situations.

Right so the problem is that you want to be able to verify your vote, but you don't want anyone else to be able to verify your vote. Your SSN is semi-public and lots of people likely already know it (e.g. employer, who is also a prime candidate to try to buy/coerce your vote). But even with a private key, you have to assume you can be coerced into giving it up.

So any system that allows you to verify a vote needs to come not only with a way for you to validate it, but also with deniability built in. Because if it's not then you can a) sell your vote or b) be intimidated into showing how you voted (which may result in a firing/beating if you did it wrong).

There are, I think, one or two ways to achieve this, but it's a non-trivial problem.

There are a number of attempts to accomplish this goal by using homomorphic encryption, without needing blockchain. For example, https://en.wikipedia.org/wiki/Helios_Voting
Exactly -- "except crime".

Practically speaking these can just be anything from conflicting jurisdictions (buying weed in a state where it's legal but the Federal government is skeptical), to "crimes" like circumventing KYC or AML -- things that look like structuring (like sending > $10k) even if they are not in furtherance of criminal activity.