Topic: [EDU] BITCOIN MIXING SERVICE (Read 1722 times)

-snip-
2. BitMix.Biz
Tujuan utama dari BitMix adalah mengamankan privasi dari semua pelanggannya dan transfaransi setiap coin yang dimiliki oleh pelanggannya. Untuk saat ini agan juga bisa menggunakan litecoin. Untuk lebih lanjutkan silahkan di cek,

Name: BitMix.Biz
Clearnet link: https://bitmix.biz
Tor link: bitmixbizymuphkc.onion
Bitcointalk thread link: Here
Fees:  from 0.4% to 4% (+ Network fees 0.001)
-snip-

Hello! Tell me  litecoin mixer?

Important announcement

There has been successful attack on ChipMixer communication integrity. Small part of traffic to/from ChipMixer.com website has been compromised. Please read on to decide what to do next.

If you are using Tor and .onion to access ChipMixer - you are not affected.

If you are not using Tor and visit .com to access ChipMixer - there is a chance you have been affected. Sweep all chips you have received in last 7 days and treat them as linked with your deposit.

If you are using Tor and .com to access ChipMixer - please stop it and start using Tor with .onion. This is very bad for your privacy and your funds safety. Please read second part of this message.

Details of attack

Over last few days IP address of .com server have been switched to another server for about 30 minutes about 3 times per day. Attacker used it to create valid SSL certificate and then served their own version of service with minor cosmetic changes.
There were four effects:
1. If your session already started - your browser sent your cookies (session token) to attacker and they withdrawn and sweeped your chips.
2. If you created new session - attacker displayed their deposit address and you have never received your chips.
3. If you accessed .com only to get .onion address - attacker displayed their .onion address.
4. If you tried to redeem voucher - it was not redeemed instantly - you should redeem it as soon as possible.
This affected small part of customers and we assume it was motivated to steal Bitcoins not privacy - if you were using .com and were not affected - you should still assume your privacy has been affected.

None of the servers were compromised. Mitigations are in place.

---

If you are using Tor to access .com - you may be affected by different attack made with Tor Exit Node. At least one of them proxies .com using forged SSL certificate and replaces all bitcoin addresses to theirs.

-snip-

Letter of Guarantee

-snip-

Akan saya usahakan, mudah mudah bulan depan sudah saya post di forum ini.

Name: SmartMixer
Clearnet link: https://smartmixer.io/

..we are already working on developing mixing methods for Ethereum. Mixing Ethereum is not easy, ..

Mungkin agan bisa melanjut wacana tentang ini:

-snip-
Kasarnya mungkin, metamask memberikan sebuah penilaian tanpa adanya sebuah bukti.

-snip- Kedepannya mudah mudahan saya bisa membuat/menambahkan cara kerja mixing service.

Ada lagi sebenarnya layanan mixing yang masih tergolong baru dan saya lihat belum masuk di OP, kalau mau menambahkan agan bisa cek informasinya pada link berikut:
https://bitcointalksearch.org/topic/hold-blenderio-signature-campaign-srherolegendary-members-5197049

Note: Ketika saya mencoba membuka link dari PrivCoin diatas, metamask mendeteksi Ethereum Phishing Detection.

A copy of the email sent to MetaMask for full transparency from our official support email:

OP telah saya edit, menambahkan beberapa Mixing Service -snip-

6. PrivCoin
-snip-
Clearnet link: https://privcoin.io

barusan liat thread ann bestmixer, agak ironi setelah ngeliat judul awal thread mereka waktu pertama kali di buat Truly Anonymous Bitcoin Mixer!
-snip-
Padahal kalo berdasarkan informasi yang ada di ANN, best mixer menjanjikan bahwa pengguna tetap akan berstatus anonim dan rekam jejak 'order' bakal dihapus setelah 24 jam

...
The most important conclusion of my work is, that even though a mixing service/a mixing algorithm might seem to be reliable at the moment, through a single leak/implementation fault, an attacker could be able to deanonymize any past transaction which has been processed by the mixing services. Even though the leak/implementation fault gets fixed by the service, every transaction which has been processed prior to the fix is irreversible vulnerable.

bitmixer.io & coinmixer.se are offline now, however its still possible to use the bugs I describe in my thesis to reverse nearly all transactions which have ever been processed by these services.
In my thesis, I attacked coinmixer.se (at the time of writing it was the biggest centralized mixing service), however - except chipmixer.com¹ - every other centralized mixing service I checked could be broken in a similar fashion.
...
¹ Chipmixer was the only centralized mixing service which I did not break fully. However, I did not put much work into checking this mixing service.

Setelah melihat beberapa kejadian yang menimpa bitblender dan bestmixer, menurut saya hal tersebut lebih cenderung kepada perijinan owner aja, bukan dikarenakan anonimitas/privacy service yang dilakukan keduanya.

Jika mengacu kepada privacy service, maka semua fitur yang diposting oleh om Husna QA juga akan disegel/diblokir

Menilik dari penjelasan om ETFbitcoin, apakah Closed-source dan Open-source juga mempengaruhi tentang perijinan service di suatu wilayah tertentu?