Author

Topic: [XMR] Monero - A secure, private, untraceable cryptocurrency - page 883. (Read 4670673 times)

legendary
Activity: 1750
Merit: 1036
Facts are more efficient than fud
X-post TPTB_need_war thought this was being ignored, though I don't think Fluffy had a chance to read it and it got buried in the thread.


He wants to launch his own coin from scratch, that should tell you.

The substance of his concerns is legitimate and it has been passed on to the mathematicians of MRL who are analyzing it. My intuition is that the probability of the saturation traceability occurring in practice is extremely low and it therefore doesn't matter, but that isn't a reason to dismiss the issue outright, it still needs to be analyzed and if necessary addressed.



Thanks Smooth. I will pass this along.
legendary
Activity: 2968
Merit: 1198

Hi,

On monero.crypto-pool.fr we just implemented the mixing in an original but effective way.

Very interesting. I'm curious why you chose the 150 and 200 values for the payment sweeps.

legendary
Activity: 2968
Merit: 1198
X-post TPTB_need_war thought this was being ignored, though I don't think Fluffy had a chance to read it and it got buried in the thread.


He wants to launch his own coin from scratch, that should tell you.

The substance of his concerns is legitimate and it has been passed on to the mathematicians of MRL who are analyzing it. My intuition is that the probability of the saturation traceability occurring in practice is extremely low and it therefore doesn't matter, but that isn't a reason to dismiss the issue outright, it still needs to be analyzed and if necessary addressed.

legendary
Activity: 2968
Merit: 1198
I'm grateful for this new variety: The Inquisitive Troll(TM)

It's not new. There have been several of them by now.

legendary
Activity: 2142
Merit: 1131
 
Hi,

On monero.crypto-pool.fr we just implemented the mixing in an original but effective way.
I believe some of you might be interested.
Here is how we do :



Cheers,

SR
sr. member
Activity: 350
Merit: 250
X-post TPTB_need_war thought this was being ignored, though I don't think Fluffy had a chance to read it and it got buried in the thread.


He wants to launch his own coin from scratch, that should tell you.
legendary
Activity: 1750
Merit: 1036
Facts are more efficient than fud
X-post TPTB_need_war thought this was being ignored, though I don't think Fluffy had a chance to read it and it got buried in the thread.

If the actual input to a transaction (in Monero terminology this is the output of the prior transaction) is not also an input to another transaction's ring signature (and when all the other inputs to the ring are spent) or if it is also the input to a subsequent ring in which all the other inputs were outputs created after the said transaction was created, then the anonymity of the said transaction is entirely unmasked.

This is really what MRL-0004 deals with (the section on Temporal Association attacks).

A lot of this changes with the recommendations MRL4 made, which will come in a hard fork later this year (once we've established a forking strategy, per this forum post).

I don't check this thread, so if you reply and don't hear back from me in a couple of days just send me a PM nudging me:)

The MRL4 imperfect heuristic mitigations notwithstanding, the only absolute solution is to require that sets of outputs be mixed with and only with each other (and the number of inputs per ring must be constant). This also enables pruning the Cryptonote block chain. There I have just given away one of my prior design "secrets" (that I no longer need to keep secret because I stumbled onto a consensus network design which no longer needs pruning and is transaction technology agnostic). Perhaps others already suggested this?

P.S. for those who have already spent their coins to a third party, your hard fork will come too late. Hope you can make necessary improvements sooner.

The following should have been implied, but let me make it more explicit, which may also resolve the issue with exchanges and getting this fix into Monero asap (although I have not studied that issue, only heard about it second hand).

The only sane way my above suggestion can be implemented is that outputs eligible for fixed size mixins must be marked as such by the transaction that created them, otherwise if the fixed size (and outputs) mixins were global then there is no way to merge the leftover change from several transactions into one transaction. I believe BoolBerry had a conceptually similar mechanism to mark outputs with some specific attribute for mixing. So the marked outputs must be mixed with and only with the "next N outputs of same denomination on the block chain" when they are spent.

Thus when you want to mix your outputs with assurance against unmasking due to Combinatorial Cascade and Temporal Association, then you mark the output for fixed size mixing.

In my opinion, this is an emergency fix because afaics the anonymity is broken as it is now, but I can't say that I've done any deep analysis on how likely the unmasking is on existing patterns in the Monero block chain.

Hope this helps, displays my gratitude to those who rewarded me for my effort during the BCX incident, and most importantly hope Monero can implement it asap because I would like to make my best attempt to create a use case gift to XMR HODLers soon and this fix may be required. Perhaps someone else had already suggested this idea, I don't know.

The pruning comes from the fact that if the mixes are fixed size then after N transactions of the same ring have been seen, those outputs (that are inputs to those N rings) can be pruned from the UXTO.
hero member
Activity: 795
Merit: 514
If (and that's a big IF) different mining groups have mined BCN from the beginning and IF over 100+ individuals hold large amounts of BCN (and not <10) then maybe the origin story doesnt matter.

It is poetic that the anon nature of this beast prevents us from verifying this one way or the other.

Which part of "faked blockchain" are you incapable of understanding? Either your onion-peeling skills suck (along with your reading comprehension), or you're a big fat troll.

The BCN devs hold all of the money. Ring signatures are pretty useless if a single party controls all the outputs. BCN is neither anon nor decentralized for reasons I already commented on, yet you conveniently skipped over.

I also think you're a troll because you're posting all this here (XMR thread). BCN is off topic, so please be respectful take your "inquisitions" to a BCN-specific thread.
full member
Activity: 225
Merit: 100
I'm grateful for this new variety: The Inquisitive Troll(TM)

Creating a new account for the sole purpose of portraying interest and curiosity, gracefully wording each question such that it introduces the very subtle possibility that: contrary to what all the quacking might have us think, it is not a duck. Seriously, well done. At least it is a step up from The Concerned Troll(TM), that one has gotten boring...  Cool
Carry on.

PS: It is a duck alright.


Ahhhh.... the Troll evolution.

Casting aspersions on those who come in here with legitimate lines of inquiry hardly impresses me. If asking pertinent questions borne of an inquisitive mind is trolling then we might all fall prey to such fallacies. pretty funny tho: The Inquisitive Troll(TM) (patent pending)  Smiley




...
thx for the replies smooth, much obliged.


*Andrey N. Sabelnikov
OK, lets see some proof of this sig.

...that's not a sig, it's an asterisk.

quite, if u see the full quote the asterisk relates to the mention of "NSA*" above.
Quote
Therefor the likely 3 groups named above. btw some russian hacker is mentioned in "opening the lid of BCN". Noted his name's initials also spell NSA*
legendary
Activity: 1105
Merit: 1000
...
thx for the replies smooth, much obliged.


*Andrey N. Sabelnikov
OK, lets see some proof of this sig.

...that's not a sig, it's an asterisk.
legendary
Activity: 3836
Merit: 4969
Doomed to see the future and unable to prevent it
...
thx for the replies smooth, much obliged.


*Andrey N. Sabelnikov

OK, lets see some proof of this sig.


....

I'm just peeling the onion (trying to).  ...

And why would you want to do that? Part of some backdoor agreement maybe?
legendary
Activity: 1456
Merit: 1000
I'm grateful for this new variety: The Inquisitive Troll(TM)

Creating a new account for the sole purpose of portraying interest and curiosity, gracefully wording each question such that it introduces the very subtle possibility that: contrary to what all the quacking might have us think, it is not a duck. Seriously, well done. At least it is a step up from The Concerned Troll(TM), that one has gotten boring...  Cool
Carry on.

PS: It is a duck alright.


Ahhhh.... the Troll evolution.
legendary
Activity: 1428
Merit: 1001
getmonero.org
IF (and that's a big IF) all this posting about BCN had not a (not-so-well) hidden agenda...

My agenda isn't hidden. I just want to learn more about the history here. I had been vaguely aware of the controversy regrading BCN's beginnings but didnt take an interest until recently when I saw their new wallets and roadmap. tbh my initial reaction on seeing this was "WTF?!, wasnt this supposed to be… dead?". Apparently not. So Im looking into it.

It can always take some more money from gullible people. All they have to do is periodically create new accounts and post about it in other threads. Have fun with it.

legendary
Activity: 1154
Merit: 1001
I'm grateful for this new variety: The Inquisitive Troll(TM)

Creating a new account for the sole purpose of portraying interest and curiosity, gracefully wording each question such that it introduces the very subtle possibility that: contrary to what all the quacking might have us think, it is not a duck. Seriously, well done. At least it is a step up from The Concerned Troll(TM), that one has gotten boring...  Cool
Carry on.

PS: It is a duck alright.
full member
Activity: 225
Merit: 100
IF (and that's a big IF) all this posting about BCN had not a (not-so-well) hidden agenda...

My agenda isn't hidden. I just want to learn more about the history here. I had been vaguely aware of the controversy regrading BCN's beginnings but didnt take an interest until recently when I saw their new wallets and roadmap. tbh my initial reaction on seeing this was "WTF?!, wasnt this supposed to be… dead?". Apparently not. So Im looking into it.
legendary
Activity: 1154
Merit: 1001
IF (and that's a big IF) all this posting about BCN had not a (not-so-well) hidden agenda...
full member
Activity: 225
Merit: 100

CN author Nicolas van Saberhagen. I dont suppose the N in Andrey N. Sabelnikov stands for Nikolai? He may have legally changed name's at some point or have multiple ID's. A guy like that sure might be able to.

Mu understanding is that CN is a cryptographic tour de force which likely required some brilliant minds to create. Do you agree?

Sure

Quote
If so how could such great minds be such lousy scammers? They would have forged the whitepapers dates correctly (assuming they were deliberately forged to deceive)

Smart people do dumb things all the time. Here's a nice list for a start: http://science.howstuffworks.com/life/inside-the-mind/human-brain/10-smart-people-dumb-things.htm

Quote
All the Princeton stuff might have been "for fun", teasing the crypto-community yet more (obv that was never gonna hold water). It's all very odd.

If the "just kidding" defense worked, it would be a get-out-of-jail-free card for every fraudster in history. There was no "for fun" involved there. It was part of a list of credential-heavy bios (the others likely embellished or completely made up as well) obviously intended to boost the reputation of the team and the coin. Unfortunately it did the opposite.



If only the "smart people do dumb things" argument satisfied me. This Harry Ullo chap from BCN is very clear that all members of the Team value their privacy and remain anonymous. Having a team bio page at all is presumably a joke for those who are supposedly cypherpunk anarchists at heart.

BCN

what is your point? Just go use Bytecoin then and be part of their community, I'm sure they will welcome you with open arms.

I'm just peeling the onion (trying to).  No offence meant.

If (and that's a big IF) different mining groups have mined BCN from the beginning and IF over 100+ individuals hold large amounts of BCN (and not <10) then maybe the origin story doesnt matter.

It is poetic that the anon nature of this beast prevents us from verifying this one way or the other.
sr. member
Activity: 350
Merit: 250
BCN

what is your point? Just go use Bytecoin then and be part of their community, I'm sure they will welcome you with open arms.
legendary
Activity: 2968
Merit: 1198
Mu understanding is that CN is a cryptographic tour de force which likely required some brilliant minds to create. Do you agree?

Sure

Quote
If so how could such great minds be such lousy scammers? They would have forged the whitepapers dates correctly (assuming they were deliberately forged to deceive)

Smart people do dumb things all the time. Here's a nice list for a start: http://science.howstuffworks.com/life/inside-the-mind/human-brain/10-smart-people-dumb-things.htm

Quote
All the Princeton stuff might have been "for fun", teasing the crypto-community yet more (obv that was never gonna hold water). It's all very odd.

If the "just kidding" defense worked, it would be a get-out-of-jail-free card for every fraudster in history. There was no "for fun" involved there. It was part of a list of credential-heavy bios (the others likely embellished or completely made up as well) obviously intended to boost the reputation of the team and the coin. Unfortunately it did the opposite.

Jump to: