[ANNOUNCE] TORwallet - anonymous mixing wallet service - page 5.

ErebusBat

hero member

Activity: 560

Merit: 500

I am the one who knocks

Quote from: marcus_of_augustus on July 13, 2012, 04:48:40 PM

Quote from: TORwallet on July 12, 2012, 11:31:33 AM

We are experiencing some issues with our tor server at the moment. Its not responding to its public IP address. There has been some rough weather in the area and a power outage. We believe that the UPS on the server may have ran dead before the power came back. One of us has to physically drive out to where the server is located and check on/reset it. Please give us a couple hours to get this resolved. Do not worry about your funds, we will be back.

Probably not the best idea publishing time and cause of outage on a public forum. You just narrowed down the possible physical locations of your "hidden" server somewhat.

Depending on who is searching i would say ALOT.

Compared with other data or other side-channel attacks it might even be possible to find the IP.

marcus_of_augustus

legendary

Activity: 3920

Merit: 2349

Eadem mutata resurgo

Quote from: TORwallet on July 12, 2012, 11:31:33 AM

We are experiencing some issues with our tor server at the moment. Its not responding to its public IP address. There has been some rough weather in the area and a power outage. We believe that the UPS on the server may have ran dead before the power came back. One of us has to physically drive out to where the server is located and check on/reset it. Please give us a couple hours to get this resolved. Do not worry about your funds, we will be back.

Probably not the best idea publishing time and cause of outage on a public forum. You just narrowed down the possible physical locations of your "hidden" server somewhat.

rjk

sr. member

Activity: 448

Merit: 250

1ngldh

Quote from: TORwallet on July 12, 2012, 02:09:29 PM

We are back online. The server was off and did not turn itself back on after the UPS battery drained.

Need moar generator

TORwallet

newbie

Activity: 41

Merit: 0

We are back online. The server was off and did not turn itself back on after the UPS battery drained.

TORwallet

newbie

Activity: 41

Merit: 0

We are experiencing some issues with our tor server at the moment. Its not responding to its public IP address. There has been some rough weather in the area and a power outage. We believe that the UPS on the server may have ran dead before the power came back. One of us has to physically drive out to where the server is located and check on/reset it. Please give us a couple hours to get this resolved. Do not worry about your funds, we will be back.

Gladamas

sr. member

Activity: 294

Merit: 250

Bitcoin today is what the internet was in 1998.

Is Torwallet down? I can connect to torwallet.net (a different server), but I can't connect to the onion site, and https://torwallet.net/ returns a SSL error (not a "certificate untrusted" error.)

byronbb

legendary

Activity: 1414

Merit: 1000

HODL OR DIE

Quote from: TORwallet on July 05, 2012, 07:30:05 PM

Quote from: byronbb on July 03, 2012, 05:23:09 PM

You should consider an invoicing system akin to the one mtgox has developed with ability to charge in fiat.

What?

We can display the USD value, but I don't see the point. Are you using torwallet as a receiving address for customer deposits?

Pretty much yes.

TORwallet

newbie

Activity: 41

Merit: 0

Quote from: byronbb on July 03, 2012, 05:23:09 PM

You should consider an invoicing system akin to the one mtgox has developed with ability to charge in fiat.

What?

We can display the USD value, but I don't see the point. Are you using torwallet as a receiving address for customer deposits?

Quote from: naima53 on July 04, 2012, 01:06:54 PM

Quote from: byronbb on July 03, 2012, 05:23:09 PM

You should consider an invoicing system akin to the one mtgox has developed with ability to charge in fiat.

+1000 Make the exchange please B <-> LR and become a winner in this race exchanges!

This is an interesting idea, however an exchange is significantly more complex than our service, and we do not feel that we can deal with the multitude of possible security threats that one experiences.

If anyone does implement this and needs assistance please do contact us.

naima53

hero member

Activity: 616

Merit: 502

Quote from: byronbb on July 03, 2012, 05:23:09 PM

You should consider an invoicing system akin to the one mtgox has developed with ability to charge in fiat.

+1000 Make the exchange please B <-> LR and become a winner in this race exchanges!

kangasbros

hero member

Activity: 812

Merit: 1006

Quote from: levino on July 04, 2012, 08:08:53 AM

3% is much too expensive. How about 0.01% per mix + the transaction costs? This will still be very profitable.

If it is still very profitable, create your own competing service...

levino

sr. member

Activity: 362

Merit: 252

3% is much too expensive. How about 0.01% per mix + the transaction costs? This will still be very profitable.

BadBear

legendary

Activity: 1652

Merit: 1128

Quote from: Gladamas on July 04, 2012, 12:43:43 AM

Quote from: byronbb on July 04, 2012, 12:07:40 AM

You mean like how Silk Road got shut down?

Silk road got shut down? Shocked

No, that was his point Wink

.

Gladamas

sr. member

Activity: 294

Merit: 250

Bitcoin today is what the internet was in 1998.

Quote from: byronbb on July 04, 2012, 12:07:40 AM

You mean like how Silk Road got shut down?

Silk road got shut down? Shocked

byronbb

legendary

Activity: 1414

Merit: 1000

HODL OR DIE

Quote from: ErebusBat on July 03, 2012, 11:07:15 PM

Quote from: byronbb on July 03, 2012, 05:23:09 PM

You should consider an invoicing system akin to the one mtgox has developed with ability to charge in fiat.

Cuz that won't get them shutdown at all.

? You mean like how Silk Road got shut down?

ErebusBat

hero member

Activity: 560

Merit: 500

I am the one who knocks

Quote from: byronbb on July 03, 2012, 05:23:09 PM

You should consider an invoicing system akin to the one mtgox has developed with ability to charge in fiat.

Cuz that won't get them shutdown at all.

byronbb

legendary

Activity: 1414

Merit: 1000

HODL OR DIE

You should consider an invoicing system akin to the one mtgox has developed with ability to charge in fiat.

TORwallet

newbie

Activity: 41

Merit: 0

For all those who are concerned about leaking your TORwallet URL, we have now implemented an optional password feature. Once set the password will be required to send coins from the wallet.

rjk

sr. member

Activity: 448

Merit: 250

1ngldh

I made a helpful diagram just to be sure. Socat is capable of the same things that "stunnel" is, but is also capable of so much more. Whereas with Stunnel you would need to perform encryption and decryption on the public-facing server, as well as the internal server, you don't have to do that with Socat. (However you still have the option to.) Socat allows you to pass arbitrary binary data (read: SSL data) via a socket, which is important when you are dealing with encrypted data.

Code:

Client --> Socat --> Tor Software --> Cloud of onions --> Tor Software --> apache/nginx/whatever --
             ^Still encrypted here                                         ^de/encryption is here |
                                     v Still encrypted here                                       |
                        Client <-- Socat <-- Tor Software <-- Cloud of onions <-- Tor Software <--|

And I thank torwallet.net for bringing this invaluable tool to my attention, because I had used stunnel in the past and this is just taking it to the next level.

TORwallet

newbie

Activity: 41

Merit: 0

Quote from: rjk on June 27, 2012, 12:16:33 PM

Quote from: jl2012 on June 27, 2012, 12:14:18 PM

Quote from: rjk on June 27, 2012, 12:09:14 PM

I know you meant that, and you are incorrect. The private key of the SSL certificate is stored on the .onion site, not on the torwallet.net server. Perhaps you should look closer at how socat works: it has the option to serve up its own certificate, but that is not in use here. It is simply concatenating data between ports 443 and 9050, in both directions.

I mean the private key of the SSL certificate of torwallet.net, not the SSL certificate of the .onion site ......

The SSL private key for torwallet.net is stored on the .onion server, and the .onion server does all the encryption and decryption. That's why it's a little slow; all the traffic must pass through tor first to get to and from the remote .onion server

torwallet.net does not have a private key of its own stored on it or in use for it.

This is exactly correct. We actually posted the incorrect socat command earlier so that may have led to some confusion. This is what we are actually using, pasted straight from the torwallet.net server.

socat TCP4-LISTEN:443,fork,su=nobody,reuseaddr SOCKS4A:127.0.0.1:nci2szjrwjqw2zbi.onion:443,socksport=9050

The torwallet.net server does not decrypt the SSL session, it only forwards encrypted data between the .onion and the client.

jl2012

legendary

Activity: 1792

Merit: 1111

Quote from: rjk on June 27, 2012, 12:16:33 PM

Quote from: jl2012 on June 27, 2012, 12:14:18 PM

Quote from: rjk on June 27, 2012, 12:09:14 PM

I know you meant that, and you are incorrect. The private key of the SSL certificate is stored on the .onion site, not on the torwallet.net server. Perhaps you should look closer at how socat works: it has the option to serve up its own certificate, but that is not in use here. It is simply concatenating data between ports 443 and 9050, in both directions.

I mean the private key of the SSL certificate of torwallet.net, not the SSL certificate of the .onion site ......

The SSL private key for torwallet.net is stored on the .onion server, and the .onion server does all the encryption and decryption. That's why it's a little slow; all the traffic must pass through tor first to get to and from the remote .onion server

torwallet.net does not have a private key of its own stored on it or in use for it.

oh sorry, I don't know this is possible! Thank you!

Topic: [ANNOUNCE] TORwallet - anonymous mixing wallet service - page 5. (Read 29609 times)