Author

Topic: [XMR] Monero - A secure, private, untraceable cryptocurrency - page 1543. (Read 4670622 times)

legendary
Activity: 1428
Merit: 1001
getmonero.org
3 FUD topics at the same time. hahah
hero member
Activity: 532
Merit: 500
This will never be secure if not every Bitcoin user is forced to use it for every transaction and that will never happen. like kbm already mentioned "This implies a smaller anonymity set, as it requires interested users."
Also i can´t see how an active protocol which needs time for mixing could outperform a totally passive system like ring signatures which are simply instant.

Quote
Someone I respect told me that after recently learning about CoinShuffle, he no longer believes that Monero or any other privacy coins can have substantial long-term prospects.  CoinShuffle is discussed here:

Anonymity is just the base of what Monero will offer.
member
Activity: 82
Merit: 10
Big difference, Ring Signatures is embedded in Monero, Coinshuffle is not in bitcoin(it's a 3rd party mixer). Also, there isn't even a prototype for it.

Bryan Vu from Google is working on an implementation of CoinShuffle and has developed a simulator:

https://github.com/bryanvu/coinshuffle-sim
https://github.com/bryanvu/coinshuffle-server
http://simulator.devbtc.com
http://shuffle.devbtc.com
kbm
member
Activity: 84
Merit: 10
Someone I respect told me that after recently learning about CoinShuffle, he no longer believes that Monero or any other privacy coins can have substantial long-term prospects.  CoinShuffle is discussed here:

https://bitcointalksearch.org/topic/coinshuffle-practical-decentralized-coin-mixing-for-bitcoin-567625

I'd appreciate any comments from Monero experts about CoinShuffle (or other better Bitcoin-based privacy protocols, if any) and the impact on the expected long-term viability of Monero.

Quote
We present CoinShuffle, a completely decentralized protocol
that allows users to mix their coins with those of other interested users.
This implies a smaller anonymity set, as it requires interested users.

Quote
The unlinkability of transactions is protected as
long as at least any two participants in a run of the protocol are honest.
Less resources will be required to sybil attack, because of the smaller anonymity set. Also, sybil attacks will decrease the anonymization chances. If two out of 4 are sybils, then instead of a 25% random chance of being identified .. you now have a 50% chance .. and so on.

Quote
To the best of our knowledge, no fully anonymous and efficient solution has
been proposed to the best of our knowledge.
quoted for lols

Quote
Bitcoin users who wish to participate in a mixing protocol need a bootstrapping
mechanism to find each other, e.g., through a public bulletin board acting as
facilitator or through a peer-to-peer protocol specifically crafted for this purpose.
...
 the participants must additionally agree on a channel for
further communication during bootstrapping. We consider bootstrapping to be
orthogonal to our work and assume that it is available to all Bitcoin users.
Weak link here. I almost thought they were joking .. but they weren't Sad

This is where cryptonote would dominate .. this type of 'bootstrapping' is not necessary .. as the solution presented is inherent to the protocol. No effort on your end is required to perform an anonymous tx. The reason they don't consider this a goal is because they're trying to put the costs of performing it on you and your transactee .. while cryptonote does this for the standard tx fee that you also have to pay in BTC.

Quote
If after the mixing, a user
would like to spend the mixed coins associated with the output address while
maintaining her anonymity, she has to ensure that network metadata, e.g., her IP
address, does not reveal her identity or make the spending transaction linkable
to a run of the mixing protocol.
Monero will have i2p inherent to the protocol. While not perfect, this will block all but the strongest of adversaries from knowing your identity.

Quote
The shuffling provides robustness in the sense that attacks that aim to disrupt
the protocol can be detected by honest users and at least one misbehaving
participant can be identified and excluded.
The other participants can then run
the protocol again without the misbehaving participant.
I think it would be tough to identify a dishonest user and set up black/white lists using tor/i2p .. which without you would most likely be be able to identify the 'shufflers' outside of the protocol anyways .. making sybil attacks 100% effective no matter how many were sybil/real? Actually I think this is where masternodes have an edge over shuffling - because you can impose a fee on a sybil attacker. Again though, Monero offers transaction fees to prevent sybil attacks. Also, your transaction can't be linked because RS's, and soon to be unidentifiable through protocol i2p. Either way .. Monero doesn't have this problem (of failed transactions) because it's not using multisig to perform these mixes.

Quote
Hash Function.
CoinShuffle require a collision-resistant hash function H.
It looks like they've added ddos protection. Yay.

Quote
We further assume that every participant already knows the
verification keys of all other participants. All participants have already agreed
upon a fresh session identifier  and an amount B  of coins that they would
like to mix.
This isn't handled within shuffle protocol? This is seeming to sound pretty outdated ..

Quote
At the end of the blame phase, at least one misbehaving participant is identified
and excluded from the protocol.
...
It is worth noting that, whenever the blame phase is reached, the participants do
not construct a transaction that is accepted by the Bitcoin network.
reduces anonymity set by 1. Sybil concern - this is done for free.

Quote
If the malicious transaction is accepted, honest
parties do not lose their coins, but the mixing will have failed. Then, it might be
the case that a restart of the protocol is not possible because the participants
have already gone offline, in the belief that the protocol has been successful.
Basically ruins the DDOS protection. Just make a successful transaction, send out a double spend and then these people have transactions that don't go through ie: blocked transactions, unless people are okay with waiting for the network to reject the transaction .. but then they'd still have to do it all over again .. wastes time .. which can be wasted cheaply for BTC tx fee.




additional: the mixing type presented here does not allow proof of transactions on the blockchain. Cryptonote offers a view key, which can be used to verify permanently (without the wallet itself) the previous transactions of the wallet. Anyways, it mostly seems that they've offered a transaction method that 'works' in the sense that it can be done .. but also has attack vectors that are not shared by CryptoNote/Monero. Seems like an okay idea, but is outdated with the introduction of CryptoNote.
sr. member
Activity: 294
Merit: 250
Someone I respect told me that after recently learning about CoinShuffle, he no longer believes that Monero or any other privacy coins can have substantial long-term prospects.  CoinShuffle is discussed here:

https://bitcointalksearch.org/topic/coinshuffle-practical-decentralized-coin-mixing-for-bitcoin-567625

I'd appreciate any comments from Monero experts about CoinShuffle (or other better Bitcoin-based privacy protocols, if any) and the impact on the expected long-term viability of Monero.


I could argue that coin shuffle has no long term prospects because of already anonymous currencies which are anon at the protocol level.
hero member
Activity: 504
Merit: 500
eidoo wallet
Someone I respect told me that after recently learning about CoinShuffle, he no longer believes that Monero or any other privacy coins can have substantial long-term prospects.  CoinShuffle is discussed here:

https://bitcointalksearch.org/topic/coinshuffle-practical-decentralized-coin-mixing-for-bitcoin-567625

I'd appreciate any comments from Monero experts about CoinShuffle (or other better Bitcoin-based privacy protocols, if any) and the impact on the expected long-term viability of Monero.

Big difference, Ring Signatures is embedded in Monero, Coinshuffle is not in bitcoin(it's a 3rd party mixer). Also, there isn't even a prototype for it.
member
Activity: 82
Merit: 10
Someone I respect told me that after recently learning about CoinShuffle, he no longer believes that Monero or any other privacy coins can have substantial long-term prospects.  CoinShuffle is discussed here:

https://bitcointalksearch.org/topic/coinshuffle-practical-decentralized-coin-mixing-for-bitcoin-567625

I'd appreciate any comments from Monero experts about CoinShuffle (or other better Bitcoin-based privacy protocols, if any) and the impact on the expected long-term viability of Monero.
legendary
Activity: 1596
Merit: 1030
Sine secretum non libertas
Could someone please make a thread for bounties and link it in the OP?  It's too hard to find them.  It is importantly useful to interest more developers in taking on bounties - and more patrons in offering them.

We've had the bounties discussion before (in this thread if I recall correctly) and decided against them. By and large it leads to extremely poor code being rushed out just to claim a bounty. More often than not we end up ruffling feathers of those writing good code, but not having it ready fast enough to "win" the bounty. And, most importantly, we are the ones that end up maintaining the poorly thought out code.

As mentioned previously, we are putting together a system that will allow for more direct funding of specific efforts/features, but in the interim bounties are not going to attract the right type of developer. Contributors are attracted to the project because of the quality of the architecture we're continually designing and the quality of the code that is being written. Having bounties will only serve to negate that.

You don't want to use bounties, don't use them.  But the community needs them.
sr. member
Activity: 294
Merit: 250
I love making all these fucking idiot trolls look stupid as fuck


I love making people second guess themselves, especially weak people


so easy to pick on. XMR Trolls are like rotting meat, guaranteed to get eaten up

... you are fooling no one here

i'm not trying to fool anyone asshole, I hold xmr and support it, what are you trying to say?
legendary
Activity: 2268
Merit: 1141
Could someone please make a thread for bounties and link it in the OP?  It's too hard to find them.  It is importantly useful to interest more developers in taking on bounties - and more patrons in offering them.

We've had the bounties discussion before (in this thread if I recall correctly) and decided against them. By and large it leads to extremely poor code being rushed out just to claim a bounty. More often than not we end up ruffling feathers of those writing good code, but not having it ready fast enough to "win" the bounty. And, most importantly, we are the ones that end up maintaining the poorly thought out code.

As mentioned previously, we are putting together a system that will allow for more direct funding of specific efforts/features, but in the interim bounties are not going to attract the right type of developer. Contributors are attracted to the project because of the quality of the architecture we're continually designing and the quality of the code that is being written. Having bounties will only serve to negate that.

I can attest to this, every time I have seen a bounty my first thoughts are "what is the bare minimum I could code to win such a bounty?", this is shortly followed by "I really don't have time to code crap when someone else out there probably is unemployed and able to beat me to the punch".

This thought process concludes the fact that I have not entered into any bounties, however I can easily imagine the type of code being wrote to win one.

Maybe it's better to set up bounties for promoting, translating etc.. than coding? I think monero would benefit more with that kind of bounties and to let the original dev's work on the code.
legendary
Activity: 1176
Merit: 1015
Could someone please make a thread for bounties and link it in the OP?  It's too hard to find them.  It is importantly useful to interest more developers in taking on bounties - and more patrons in offering them.

We've had the bounties discussion before (in this thread if I recall correctly) and decided against them. By and large it leads to extremely poor code being rushed out just to claim a bounty. More often than not we end up ruffling feathers of those writing good code, but not having it ready fast enough to "win" the bounty. And, most importantly, we are the ones that end up maintaining the poorly thought out code.

As mentioned previously, we are putting together a system that will allow for more direct funding of specific efforts/features, but in the interim bounties are not going to attract the right type of developer. Contributors are attracted to the project because of the quality of the architecture we're continually designing and the quality of the code that is being written. Having bounties will only serve to negate that.

I can attest to this, every time I have seen a bounty my first thoughts are "what is the bare minimum I could code to win such a bounty?", this is shortly followed by "I really don't have time to code crap when someone else out there probably is unemployed and able to beat me to the punch".

This thought process concludes the fact that I have not entered into any bounties, however I can easily imagine the type of code being wrote to win one.
donator
Activity: 1274
Merit: 1060
GetMonero.org / MyMonero.com
Didn't you want to provide an early build which runs on Windows without qt hassle? Wink

Yes - I'm busy fighting with building static Qt on Windows, managed to get the Mac one done quite easily. I'll see if I can't get it sorted this evening:)
donator
Activity: 1274
Merit: 1060
GetMonero.org / MyMonero.com
Could someone please make a thread for bounties and link it in the OP?  It's too hard to find them.  It is importantly useful to interest more developers in taking on bounties - and more patrons in offering them.

We've had the bounties discussion before (in this thread if I recall correctly) and decided against them. By and large it leads to extremely poor code being rushed out just to claim a bounty. More often than not we end up ruffling feathers of those writing good code, but not having it ready fast enough to "win" the bounty. And, most importantly, we are the ones that end up maintaining the poorly thought out code.

As mentioned previously, we are putting together a system that will allow for more direct funding of specific efforts/features, but in the interim bounties are not going to attract the right type of developer. Contributors are attracted to the project because of the quality of the architecture we're continually designing and the quality of the code that is being written. Having bounties will only serve to negate that.
legendary
Activity: 1596
Merit: 1030
Sine secretum non libertas
Could someone please make a thread for bounties and link it in the OP?  It's too hard to find them.  It is importantly useful to interest more developers in taking on bounties - and more patrons in offering them.
member
Activity: 65
Merit: 10
Didn't you want to provide an early build which runs on Windows without qt hassle? Wink
donator
Activity: 1274
Merit: 1060
GetMonero.org / MyMonero.com
any eta for the gui?
looks damn nice! simple wallet is not that easy to use for most people i think its a entry barrier..

Per the tenth Monero Missive:

"There is still a lot of work to be done, so we are unable to provide a release timeline, but we are working on it as hard as possible"

Smiley
sr. member
Activity: 475
Merit: 500
any eta for the gui?
looks damn nice! simple wallet is not that easy to use for most people i think its a entry barrier..
legendary
Activity: 2674
Merit: 2053
Free spirit
What floor is women's lingerie on?

My floor.

Your own underwear doesnt count  Smiley

Quote
1 BTC = 1 XMR Wink
Wooop
hero member
Activity: 697
Merit: 500
bcn trolls, go troll in bcn topic  Roll Eyes
sr. member
Activity: 294
Merit: 250
*passes Parker928 the bowl*


<3

*parker928 tops bowl with some full melt and calms down*
Jump to: