Topic: BitMaximum.io - More privacy during Bitcoin exchange / Coin mixer - page 14. (Read 21229 times)

Then the team's programmers should use the blockchain system. Because without it, it will not be possible to create a cryptographic signature.

The Letter of Guarantee. A cryptographic signature that can't be manipulated or faked. (minor copy-paste from Loyce)

For example, what can this irrefutable evidence be?

Here we are not talking about guarantees, but about the possibility of obtaining irrefutable evidence. Perhaps this is the only tool for managing such services.

I agree that the principle of this mixer is fundamentally different from the work of similar companies. But at the same time, it turns out that everything will be based solely on trust between the clients and the project team, but confidenciality and anonimius are very important..

Exactly. ChipMixer doesn't offer a LoG because it's incompatible with how you guys work

AFAIK, BitMaximum works exactly as the other mixers. Send to X address, receive in Y address. So I don't think the "I don't want to copy the other mixers" excuse is valid when this would benefit their users.

Being different than other mixers is valid excuse not to offer Letter of Guarantee. For example ChipMixer does not offer LoG because it is incompatible with chip withdrawal idea. It would be nice to have an additional security measure but sometimes you just cannot do that.

It is clear that your box is better not to Shine, as craftsmen can calculate your identity if you are a public person on the network.

Sign using a unfunded BTC address, maybe something like 1BitMax... Or better yet, generate a PGP key and sign the message using that. Don't email it to the user, instead, provide it to them in a text file once their deposit address is shown. Delete it after the user confirms they have downloaded it from the server. That way, users could just choose to now download, and state that they did, to avoid getting the signed message if they wish to not have the file touch any of their devices. Those who worry about being scammed can download it and delete it securely after they receive coins.

Don't Trust. Verify.

No money lost this way, and if someone were to hack into your server, they'd be able to see transaction info anyway.

What a shit excuse. So, are you saying that you won't add an extra security measure that benefits your users because "you are not like the other mixers/you don't want to be like the other mixers"?

No one here is talking about Javascript. Everybody agrees that requiring Js is a bad thing. But what does this have to do with giving your users a proof that they used your mixer? What does this have to do with js functions and animated buttons?

Adding extra details also have nothing to do with js. You can't just print all the static information without any js.

A lot of questions was sent to our  mail and in private messages, acking us why we will not make a letter of guarantee, why we do not add information about the percentage and self-selection of % of commission, why we do not state time and other things....

Why we do not like other services.

Let me summarize for you. We're not a copy of the other mixers. We are not analogous of other mixers. The classic mixing you're all used with
convenient buttons and functions especially with the work on JS!!! is past age. I'm sorry if that sounds gruff, but  bitter truth is better than
sweet lie.

We have compiled the answers why we have so as we have!

Mixing strength meter from Bitmixer is also good, but the trouble is in js.
Checkboxes of agreement at Bitmixer is also OK, but the trouble is in js.

Theses:
- do not use js. Be sure that there is no google Analytics, fingerprinting tools, xss. Use our site in a mode without js!

- do not use the withdraw by transferring private keys from pre-prepared addresses with the same amounts - it is easily to track and if your session is compromised, you may lose your funds!

- do not use coupons! Using the coupon you are linking all your addresses, otherwise no one can find it out!

- do not use sessions!

- we do not show the mixing status either on the basis of sessions or on the basis of any other indentifiers. If these data will compromised, your translation will be de-anonymized!

- do not use letters of guarantee. Generating a letter of guarantee requires location a private key from the wallet that creates the signature on the server of mixer. In case the mixer is compromised, its customers will be able to give out fake addresses and fake warranty letters. We sign the addresses that we give to clients on computers that are not connected to the Internet, then we unload the signatures together with the wallets
at our server. This ensures that addresses given to customers can in no way be compromised by a third party (intelligence agency or hackers), under the  term that the client will verify the signature.

- use every time random commission (within the tariff), charged for the services of our system. This makes it difficult to link incoming and
outcoming transactions

- use every time randomly commission, charge miner over the entire transaction in a block. This makes it difficult to link  incoming and
outcoming transactions

- use TOR for push transactions in the blockchain network. This does not allow you to track the source that generates the transactions and link them together by IP

- do not use external services to check the balance of incoming addresses!!!

Recommendations:

- do not use 1:1 translations! It negates all your mixing efforts

- do not use fast translations! The greater is  the delay between incoming and outcoming transactions, the greater is the privacy

- do not use previously used addresses as a receiving addresses! It weaks the privacy of translation

- always use TOR!

The matter is nobody trust each other. People want guarantee.

We didn't plan this in the interface. only in the API.


No. to do this, at the front we need to keep the private from the address that sign the transaction, so the attacker can us very seriously
fuck. It is the easiest way to withdraw all the money and destroy the image of the project.

The system architecture for host and client security does not provide the technical ability to use keys on the server (not to be hacked).

No. I don't think asking for your user's email is a good idea.

It should just show up in the mixing screen along with the details (address to send the coins, maximum and minimum, etc...)

That is, at the time of work with this service, a confirmation letter will be automatically generated and sent to the client by e-mail?

Thank you for your feedback and comment. Correct display and work on smartphones will be fixed by Tuesday. We apologize for the inconvenience.

Letter of guarantee may not come to e-mail. Another thing is e-mail is usualy connected with mobile phone and a concrete  person. It becomes clear who mix the money. At least the mixer will know such information.

Anonymity and convenience are mutually exclusive concepts. We've done some deep research. Yes and not only we, in literature and in networks there are a lot of studies on the blockchain. Any information of this kind about the commissions, accurate time of transfer, etc. is a direct path to the absence of anonymity. We are not endanger our client. We made a special random % commission not to be 'burned" by to the exact %.

The tariffs specify the maximum percentage, they can not be above. We hope that other services of mixers will take this to the note and will use our rich experience and stop to give to users the information that simplifies the work of research companies and destroy all anonymity. We eliminate any possibility of deanonymity!

We can only provide you with such information. This is a random percentage of the Commission "from" and " to " for each tariff.

1)
     rate: { from: 0.005, to: 0.012 },
2)
     rate: { from: 0.01, to: 0.015 },
3)
     rate: { from: 0.02, to: 0.03 },
4)
     rate: { from: 0.045, to: 0.06 },

This may not help. Small payments will be processed. When they see a series of large payments, the irreparable can happen. If you use small amounts, then no Letters of Guarantee are needed.

The point of having a Letter of Guarantee for every time someone uses your service is that you can guarantee the user that he has evidence of using your service. So, if you scam him, he can just post the Letter and prove that he really used your service and that he didn't receive any coins. That's why it's a good idea to put every detail in the Letter (deposit address, receiver address, amount, fees, delay set, etc...).

Here is a real example:

BitMixCoin exit scammed and stole at least 16 BTC from just one user. They claimed that it was a lie. But he had the Letter of Guarantee which proved he was saying the truth.
Thread: BITMIXCOIN.IO scam confirmed: 16+ Bitcoin stolen