The thread's opening post is reasonable but I didn't have time to check all the detailed points for absolute correctness. You will need to add my
Delegated Transaction Consensus algorithm once it is published.
DPoS - Delegated Proof of Stake (Bitshares)
...
H) Anonymity functions in progress: http://bitsharestalk.org/index.php/topic,17687.30.html
The first few seconds of this interview with bytemaster (Daniel Larimer) explains they hide both the values and whom you are sending to (i.e. the payee):
https://beyondbitcoin.org/bitshares-dev-hangout-bytemaster-stealth-confidential-transactions/In other words in the terminology of the Cryptonote white paper, they have unlinkability but not untraceability.
He admits this at 13:45 mins point and
(in his non-analytical summary) he highly understates the block chain analysis that can be done with traceability because they have not hidden the payer. For another thing he completely discounts the possibility that the adversary is gaining access to some of the hidden values because the payer and payee both know the transferred value, which then rapidly breaks down his other assumptions. The merging of balancing he is suggesting at 21:00 will break untraceability.
They accomplished the easy part. It is combining that with untraceability that seemed nearly impossible to achieve without Zerocash's flaws. But finally after many days of brain stumping I did figure out how to do it.
Well I have them beat. In July I wrote a white paper where I can hide the values, the payee,
and the payer. Thus I also have untraceability. And I don't have any of the setup issues that plague Zerocash! I invented the holy grail of on chain anonymity.
My white paper is entitled
Zero Knowledge Transactions.
P.S. About the 9 min point, bytemaster is explaining that payees can't anonymously scan for their Stealth (unlinkable) transactions, which means they even break the unlinkability. Very sloppy. Yes he is correct that it breaks scalability which is one of Monero's issues. I have solved this issue also!