Bitcoin Forum

Greetings,

we recently started looking into the send-shared code of
blockchain.info. Apparently, it has transfered more than
4,163,520,532.06 dollars so its security should be quite important in
the bitcoin universe.

As stated in
https://blockchain.info/wallet/send-shared
it's open source and its code lies in https://github.com/blockchain/.

However, when we tried to find its code, we only found the JS code of
the website, but not the server-side code that actually does the
mixing. Where is that code? How can blockchain.info claim that it's
open source when the code cannot be found?

What's the code that is evaluated when you send a HTTP POST request to
this address https://blockchain.info/forwarder ?

Thanks!

(we are aware that blockchain.info can screw you up in such a system,
but if the mixing is insecure then anyone can screw you up.)

(BTW, the JS code can be found at:
https://github.com/blockchain/My-Wallet/blob/master/send-shared.js
https://github.com/blockchain/My-Wallet/blob/master/shared-addresses.js
https://github.com/blockchain/My-Wallet/blob/master/shared.js
but it's useless if you want to evaluate the security of the system.)

Blockchain.info might be referring to simply the license of the javascript from their MyWallet (web-based) application so that you are permitted to use that source, change it, etc.

They've never shared the source for their back-end.