Topic: MyMonero.com - Security Issues - page 4. (Read 8226 times)

Asking if you are a dev seems like a pretty simple question...and the BCT search is disabled so not that easy to investigate right now...but trust me if I decided to investigate this properly you will know about it...

Within the last 24hrs you have 3 users on the XMR thread complaining that they can't use the official wallet:




Then when we go to the 'choose a wallet page' we are pushed to MyMonero:



And lots of quotes on the XMR thread of people with wallet problems being told to use MyMonero.

So the questions are:

1. Why did the Monero devs decide to setup a web-wallet that enables them to deanonimize users / be the only group to access blockchain / distribution / fund movements information, on a coin they are marketing as untraceable / anonymous?

2. Why, after 1 year, are users still having to turn to MyMonero.com because the official wallet has so many usability problems / no GUI?

3. Why has no progress been made to get the 95% of volume off Poloniex and spread across different markets?

4. Why the privacy surrounding MyMonero.com?  Where is the source code?  Where are the stats on users (if the answer is privacy, then it's not because the devs can see it, not sharing it privileges them)

Proof this.
Most users seem to run SimpleWallet from my observations. Clowns like you can´t be taken seriously :-)

The Website clearly says: "If you are able to spare the bandwidth and disk space required to run a full node, doing so helps keep the network stable and robust, and also affords you the maximum privacy Monero has to offer."


C´mon, you are the investigator here. Just shows us you know fuck nothing about XMR.


It´s a website man, get used to it. You run your own node if you want privacy, thats how it works. And that is mentioned 100x times. MyMonero is just for people who don´t care. It´s an easy solution to use XMR, which is currently only used for investments and speculation anyway.



You still don´t get how Monero works - cute




There is nothing to dismiss, we already found out you don´t know how Monero works :-)

Othe...again...are you a Monero dev? (or can someone else confirm this or not please?)

EDIT: Othe - saying 'anyone can choose a wallet' is disingenuous.  We both know nearly all users get funnelled to MyMonero, that is even the first option on the 'choose a wallet' page - again, extremely suspicious that you are acting 100% dismisive like this.  I suggest you take this more seriously..

EDIT2: Again saying that its no problem that Google Analytics is used on MyMonero - you are either clueless about web development / security or lying....

I'm highlighting a structural setup in Monero that *enables* the dev, who is selling a coin as untraceable & anonymous, to be the only one to effectively see the XMR blockchain/distribution/movements, via MyMonero.com.

And the fact that most people have to use MyMonero because the official wallet doesn't work properly, after 1 year, again *enables* an exploit like this to take place..

My suspicion is that Fluffy is in fact a large force on Poloniex (and I saw yesterday people discussing that he was there)

So reasonable to think something fishy might be going on here and I am just sharing my thoughts....

Slightly alarming to have you and Othe here trying to flatly dismiss this actually...(because I would have expected a simple explanation and not vitriol / diversion)

1. The important stuff is done clientside...I am not going to explain you how JAVASCRIPT works, take some basic pc learning course for that or ask Mr. Duff.
You posted the code yourself, ga('send', 'pageview'); - it just sends pageviews.

2. Theres nothing to justify, MyMonero is a third party project from Fluffypony that the community wanted to have. They can decide to use it or not, its that easy but that doesn´t get into your little narrowminded braincells. Unlike DASH - Monero isn´t a company and everyone can do what he wants.
We even have decentralized Wallets:
- MoneroX
- LiteWallet
- Antantst Wallet
- MyMonero
- Simplewallet

everyone can use what he wants, unlike with Dash were everyone is forced to use the BitcoinQT copy/pasted Wallet.

3. It´s so fucking dumb to compare a webservice with monero itself.

You are always wrong, but too narrowminded to accept it, why should we even explain it again after already doing it?


You know sooo much about Monero, awesome investigation.


It´s just your brain that doesn´t make much sense.


I hereby allow Busoni to post my trading statistics for Monero on Poloniex, when Evan Duffield allows the same for Cryptsy and Bitfinex in the case of Dash.

Please don't take this thread too seriously. It's obviously an attempt to troll the community.
BlockaFett argument's would be taken seriously only IF he was addressing all these "problems" to Monero's devs and trying to find solutions.


Of course it is a bad habit to use only one exchange.
Of course it is a bad habit to use a wallet that you didn't compile from the source code but instead trust a dev that made a wallet for you.
But hey... let people take responsibility for their acts.

Othe you keep saying Bitcoin has Bitcoin.info...Bitcoin *is not* claiming to be untraceable and anonymous like you are.

If it was, trying to get all users to type their transactions into a webform on the Dev's personal server, would obviously *undermine the untraceability* 100%.

(and all the info Bitcoin.info can access is *publically available* on the BTC blockchain anyway, info that MyMonero has access to is not so they have a big advantage in a Cryptonote coin)

I don't understand, how can you justify making a web wallet for a coin you claim is "anonymous and untraceable" when the site owner can then access and *break* all the untraceability (and potentially then use this info to their advantage as everyone else in the market is in the dark).

For example looking at the page source on MyMonero, it's running Google Analytics (a service designed to let site owners and Google learn the most information possible about the site's visitors)



Why has all this been done, it doesn't make any sense.  And if the core team are infact major players on Poloniex instead of poor hardworking devs who need donations, with the above situation, red flags are going up for me.

If I'm wrong, please explain it...

EDIT: BTW are you a Monero dev?

You are just pissed that its not possible to make a good working Webwallet for Dash - because of the broken by design coinjoin crap which needs premixes and which needs you to be online the whole time.
We did it, because we can and because most users wanted a simple to use Webwallet like Blockchain.info for BTC.
No one uses BitcoinQT, 90% or so of users choose SPV Wallets. It is how it is.

The Fact is, we have a mobile wallet solution which supports Mixin and DASH has nothing, theres simply no way to darksend coins on a mobile device.
Maybe you should code one, which you can´t, because DASH is over a year old and still has no Mobile wallet with darksend support?? Is it true?


Cryptsy has no reaso to not add it, they are just too lazy and/or stupid. Fact.
Same reason they also take years to add non Btc clones.
Wallet work fine, but theres something in your head which doesnt get that obviously.

PS: Great timing, just in time with the next Otoh PUMP https://bitcointalksearch.org/topic/m.11510173

don't know... I thought the coinbase-debacle was pretty telling... when fungibility disappears I'm looking elsewhere to store value... But that's subjective off course

I think the technological progress is nowehere near significant enough to replace what's been working for years. You could create a coin with all the best features of the top coins and it would still be traded through bitcoin.
There will be better alternatives, but I don't think that coin exists yet.

yeah, technological progress doesn't exist... there will never be better alternatives, bitcoin has no fungibility problem, i shit flowers and ride pink ponies...

I couldn't care less about that instamined nonsense nor do I care about Monero/Nem/NXT I just find it funny when people are convinced that any of these coins have an actual chance at challenging bitcoin when in reality these coins probably won't even stay relevant in a few years.

Viewkeys is one thing but when you run a website you have access to all the data entered in every form, so MyMonero.com is positioned to collect pretty much all the data on the users including what amounts they type in, addresses, who sends to who and how much, what is distribution, plus their IPs, browser / OS type, etc etc, which made me wonder why? because the whole point of Cryptonote is to hide such info, why take Bytecoin which is client-based like all cryptos then dev a single website to route all that through a single server instead.  

So it just seems like an odd choice - take over development of an untraceable coin, then instead of developing the client wallet to be secure / anonymous / usable, you spend that development time making a website delivered from your own server instead.

1 year on and nothing has changed - new users go to MyMonero and the official wallet still not working properly.

Why?  MyMonero.com took development time and $ to build, why spend on that and not on a decent anonymous client wallet for users so they don't have to use a server?

One explanation might be that centralized payment sites are what Fluffy is used to and feels comfortable developing (as he tried Vertpay.com before and also working on Paybee.com now)

Either way, the solution is surely to get rid of MyMonero.com - Monero just can't be untraceable / anonymous with the bulk of it's users doing their transactions through a single server owned by the dev

Plus get volume spread across different exchanges and not just through Poloniex - my understanding is exchanges like Cryptsy didn't add Monero again because of problems with the official wallet client - so same problem, same solution, get the wallet working...

EDIT: Dash supporters thanks for not posting here...if there is any truth to what I am saying it's better for Monero to fix it than have arguments over who's coin is better...thanks.

There are several Monero GUI valets.

When i started with Monero in May 2014 i started on one of first GUI vallet, but latter rather starting using simple vallet, since for me simple is perfect .

I have no ideas where your ignorance come from.  Monero GUI valets are mention in many threads on this forum. Some even have their own thread, where you can monitor how they developed.

There is no innocence there, it was copied for sure, so if they infringed on someone else's code than i bet my 100 moneros that a scam it is

http://www8.gmanews.tv/webpics/v3/2012/02/Admiral-Ackbar_Its-a-scam.jpg

Pathetic little liers, it´s almost funny...

1. There are several working GUI´s linked: http://getmonero.org/getting-started/choose
2. MyMonero doesn´t have your spendkeys, that means only the MyMonero users can spend their own funds.
...
47. https://www.cryptsy.com/coinvotes/ - we voted for it on Cryptsy and it was on #1 for several months, why don´t you ask them why they don´t add it? Did Dash pay them off to not add it?


Not going to answer the rest of your bullshit, has already been answered x times.

make sense
considering the low level of replies and argumentations from moronero shill accounts this can actually be true

it's easy to scream SCAM louder than anybody else just to cover your own tricks and take advantage of your own community (moreno users have been victim of fraud for more than a year now)

I understund your arguments and I am sorry about all the people here attacking DASH vs Monero based on you beeing an DASH holder, I think XMR is for me like DASH is for you, so we are in the same position..
About your concerns I personally believe that fluffyponny is honest, even if he wanted to take advantage from the viewkeys that he have on mymonero i think there is no mutch information that can be used to know if the market is going up or down, he can have only some perseption for the ones who are on XMR for long term... the ones who short keep the coins on exchange...

About poloniex beeing the main exchange i dont like that fact too, but its not devs fault.. They try to contact another exchanges multiple times to add monero, but for some reason (dont know what, the volume is pretty high) they have allways some problem in adding it

There is no official GUI because there is more important things to do before that, and over time i saw that clearly.. there are alot of unofficial guis that can be used and working fine for the current daemon... Finishing the DB version and releasing an propper API for the wallet at this stage its primary, what is the point in having an official gui if there is almost no market for this coin yet ?
Of course that you can say that fluffypony beeing an core dev should had focus his energy on releasing first one official gui before creating and releasing his own, but this is an opensource project and he is doing his work voluntary, I think its better having him working for the cominity and for himself rather than working for himself only

Both monero and dash are a piece of scam junk, both beling in the trash.

I know he said dont intervene but how can i just watch this 

If DASH is scam, then wtf is Monero?? MOTHER OF ALL SCAMS

if DASH is scam, why so many buys in last days

if DASH is scam, how come nobody has break his mixing service amd instantx, and prove that Evan is full of shit?

...