Pages:
Author

Topic: [Guide] Decent mixing methods - page 2. (Read 1631 times)

sr. member
Activity: 518
Merit: 250
May 23, 2019, 09:31:18 AM
#5
Most "tumblers", like the now-defunct bestmixer.io or even ChipMixer, aren't great because they are needlessly expensive, you're trusting the service not to run away with your coins, and you're trusting the service not to keep logs. Maybe they're the best current solution for small amounts where lasting anonymity isn't mission-critical, but in most cases you shouldn't use them.

Anonymity is very difficult, especially with blockchain-based systems where so much data has to be public, but also in other areas (eg. there are several known weaknesses with Tor). You should always operate with the expectation that any anonymity system you use will eventually fail you. If you're ever confident in your anonymity, then you're wrong.

That said, there are two halfway-decent mixing methods currently:

#1 - Wasabi wallet

The Wasabi wallet uses CoinJoin in order to anonymize BTC.

 - Pros: Easy to use; fairly cheap ~0.15% fee; pretty good privacy; automatically uses Tor
 - Cons: ~0.1BTC minimum; with a great deal of effort and investigation, transaction analysis may still be possible, especially if you leave other traces; the coordinator could possibly do an active sybil attack against specific coins

#2 - Monero

Monero is not a magic black box which provides perfect anonymity! If you use eg. flyp.me to buy XMR and then quickly sell this XMR on flyp.me again, it is blatantly obvious to flyp.me what you've done (if they keep logs), both due to the amounts and the specific Monero inputs used. In order to get decent privacy, you have to do something like this:
 1. Convert BTC to XMR (using your own Monero wallet, not a hosted wallet).
 2. In two or more transactions of random amounts, move XMR from that wallet to a different wallet/account.
 3. Optionally, you can repeat the above step with additional wallets/accounts for greater anonymity.
 4. Preferably in two or more transactions of random amounts, convert the XMR in your last wallet in the chain to BTC.
 
Ideally, all of the above should be performed over as long a period of time as you can tolerate.

 - Pros: Possibly the best anonymity, especially if you're able to stay within the XMR ecosystem to some extent
 - Cons: You should use Tor with Monero, but you have to set this up manually; it's all more difficult; you're exposed to exchange rate risk; transaction fees may be significant

Anonymity comparison between the two

Both Wasabi and Monero can be thought of in terms of "anonymity sets". If you're spending some BTC with an anonymity set of 50, this means that an observer can see that the sender is one of 50 people, but they can't tell which. So someone investigating a particular transaction you sent would have you "in their sights" to a certain extent from the start since you're among the 50, but in order to prove that you sent it, they'd have to either eliminate 49 other people from consideration or find some other evidence linking you to it.

Wasabi always aims for an anonymity set of 50 when mixing. Monero has an anonymity set of 11 per transaction. If you cascade transactions as I suggest above, then this multiplies, so after two transactions you have an anonymity set of 11*11=121, and after a cascade of three you'd have an anonymity set of 1331.

The quality of each member in the anonymity set isn't quite comparable, though. Monero is able to hide transaction amounts, which is helpful, but I tend to consider the quality of Monero anonymity-set-members to be lower on average, since many are probably owned by hosted wallets or other possible global adversaries.

See also

https://en.bitcoin.it/wiki/Privacy

P.S.
If services like ChipMixer operated based on blinded bearer certificates, then they'd be in many ways superior to both of the above mixing methods. Someone should work on this.

Chipmixer isnt expensive. Well BitMixer has just been shutdown, so no need to discuss about it.
ChipMixer follows a completely different approach which isnt bad at all.
Tumble with Monero isn't for beginners and it requires sometimes or I would say most time to go through some exchanges a.ka. "centralized exchanges". But with some effort, you can achieve it.
I would say, cascade your transactions by not trusting just 1 "person".
And it's possible to achieve some degree of anonymity with your habits and without using a single mixer.
full member
Activity: 168
Merit: 214
WhoTookMyCrypto.com
May 23, 2019, 09:14:35 AM
#4
1. Convert BTC to XMR (using your own Monero wallet, not a hosted wallet).

Any guides on how to do this?
copper member
Activity: 1652
Merit: 1901
Amazon Prime Member #7
May 23, 2019, 02:19:17 AM
#3
If you are using XMR, if you can, you should not convert back into bitcoin. This will expose you to greater exchange rate risk, but will increase your privacy. There are a limited number of services that can exchange btc <--> xmr anonymously, and a small number of additional services that will exchange this pair after verifying your KYC. An adversary could look at btc transaction flows to/from the various xmr/btc sites and draw some conclusions based on transaction sizes.

If you do not trade your XMR back to btc, you will also have much fewer payment options because much fewer merchants accept xmr. If need be, you can also only convert your XMR back to btc as you need to spend the btc.   
full member
Activity: 428
Merit: 172
chenille!
May 22, 2019, 07:13:01 PM
#2
you're trusting the service not to run away with your coins, and you're trusting the service not to keep logs.
A very important advice. That's always at risk if we give our coins to a third party = use a centralized service, not matter if it's a mixer, a gambling site or an exchange. Technically, the NSA can set up a mixing service and all of us would be mixing our coins by the NSA.  Cheesy
And if someone wants to protect his privacy but the BTC are stolen by the mixer he won't have to worry much about it if the BTC are tainted or not because they are gone.

I may recommend to continue also reading here (Breaking Mixing Services), the user tried to break a mixing-service (coinmixer.se) and it was successful. ChipMixer is also a centralized mixing service but using a new, different method to protect the privacy (chips (private keys) and they are funded before you make your deposit there). So, the method of breaking the service like it was performed to break coinmixer.se won't work. However, it could still be possible to break it otherwise like if logs are kept.

Some more links to add:
Wasabi wallet: https://bitcointalksearch.org/topic/wasabi-wallet-making-bitcoin-transactions-untraceable-5037094
Monero (ANN): https://bitcointalksearch.org/topic/xmr-monero-a-secure-private-untraceable-cryptocurrency-583449
ChipMixer: https://bitcointalksearch.org/topic/ann-chipmixercom-bitcoin-mixer-bitcoin-tumbler-mixing-reinvented-1935098

The best measure is to protect your personal data by yourself. The number of sites fishing for it is amazing and avoiding unnecessary KYC or submitting other details like a phone number should be rule number one to protect our privacy.
administrator
Activity: 5222
Merit: 13032
May 22, 2019, 05:18:50 PM
#1
Most "tumblers", like the now-defunct bestmixer.io or even ChipMixer, aren't great because they are needlessly expensive, you're trusting the service not to run away with your coins, and you're trusting the service not to keep logs. Maybe they're the best current solution for small amounts where lasting anonymity isn't mission-critical, but in most cases you shouldn't use them.

Anonymity is very difficult, especially with blockchain-based systems where so much data has to be public, but also in other areas (eg. there are several known weaknesses with Tor). You should always operate with the expectation that any anonymity system you use will eventually fail you. If you're ever confident in your anonymity, then you're wrong.

That said, there are two halfway-decent mixing methods currently:

#1 - Wasabi wallet

The Wasabi wallet uses CoinJoin in order to anonymize BTC.

 - Pros: Easy to use; fairly cheap ~0.15% fee; pretty good privacy; automatically uses Tor
 - Cons: ~0.1BTC minimum; with a great deal of effort and investigation, transaction analysis may still be possible, especially if you leave other traces; the coordinator could possibly do an active sybil attack against specific coins

#2 - Monero

Monero is not a magic black box which provides perfect anonymity! If you use eg. flyp.me to buy XMR and then quickly sell this XMR on flyp.me again, it is blatantly obvious to flyp.me what you've done (if they keep logs), both due to the amounts and the specific Monero inputs used. In order to get decent privacy, you have to do something like this:
 1. Convert BTC to XMR (using your own Monero wallet, not a hosted wallet).
 2. In two or more transactions of random amounts, move XMR from that wallet to a different wallet/account.
 3. Optionally, you can repeat the above step with additional wallets/accounts for greater anonymity.
 4. Preferably in two or more transactions of random amounts, convert the XMR in your last wallet in the chain to BTC.
 
Ideally, all of the above should be performed over as long a period of time as you can tolerate.

 - Pros: Possibly the best anonymity, especially if you're able to stay within the XMR ecosystem to some extent
 - Cons: You should use Tor with Monero, but you have to set this up manually; it's all more difficult; you're exposed to exchange rate risk; transaction fees may be significant

Anonymity comparison between the two

Both Wasabi and Monero can be thought of in terms of "anonymity sets". If you're spending some BTC with an anonymity set of 50, this means that an observer can see that the sender is one of 50 people, but they can't tell which. So someone investigating a particular transaction you sent would have you "in their sights" to a certain extent from the start since you're among the 50, but in order to prove that you sent it, they'd have to either eliminate 49 other people from consideration or find some other evidence linking you to it.

Wasabi always aims for an anonymity set of 50 when mixing. Monero has an anonymity set of 11 per transaction. If you cascade transactions as I suggest above, then this multiplies, so after two transactions you have an anonymity set of 11*11=121, and after a cascade of three you'd have an anonymity set of 1331.

The quality of each member in the anonymity set isn't quite comparable, though. Monero is able to hide transaction amounts, which is helpful, but I tend to consider the quality of Monero anonymity-set-members to be lower on average, since many are probably owned by hosted wallets or other possible global adversaries.

See also

https://en.bitcoin.it/wiki/Privacy

P.S.
If services like ChipMixer operated based on blinded bearer certificates, then they'd be in many ways superior to both of the above mixing methods. Someone should work on this.
Pages:
Jump to: