Bitcoin Forum
May 30, 2024, 08:59:23 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: « 1 ... 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 [89] 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 ... 248 »
1761  Bitcoin / Bitcoin Discussion / Re: MtGox database leak: why you should always mix your coins. on: March 12, 2014, 04:37:17 AM
Remember what I was writing about CoinJoin upthread:

And here is our friendly Bitcoin csore developer...

...

Well I got another reply from CORE BITCOIN DEVELOPER gmaxell and here is my rebuttal...posting here in case he deletes my post there as he has threatened me in a private message (which I also publish below)...

https://bitcointalk.org/index.php?topic=279249.msg5653238#msg5653238

I see those (other than gmaxwell who is not very ad hominem in his response, other than the slight "over and over" which is irrelevant to the technical response) who posted while I was sleeping have relished in their boastful snobbery.

Now let's deal with the humbling facts.

And my post to which you are replying is in fact explaining the DOS (denial-of-service) is insoluble if you can't identify the participants in order to rate-limit them.

And again in that post you admit there is a DOS problem. You didn't solve it. And you can't solve it in a decentralized setting unless you have non-ephemeral identification of the participants. Which is precisely the point of my prior post to which you are replying

You are asserting it, (over and over again) but it doesn't make it true. It was explained in adequate detail previously enough for other people to understand it and implement tools that address it.

Quote
Incorrect. What I wrote is functionally equivalent to what you described. The point is the transaction can be jammed in the final round.

It's actually not, since it's not actually possible in the Bitcoin protocol to do what (it sounds like) you're describing, but more importantly performing the operation in that order defeats the anti-dos. If you lead with the inputs they provide a trivial anti-dos mechanism.

And precisely how do you identify which input is the adversary when the correlation of the inputs and the outputs is necessarily cryptographically blinded?

As far as I can see, you can't.

I am confident that now you see the functionally w.r.t. to anti-DOS of what I described and what you described are equivalent, i.e. any one who is the least bit mathematical can see that the salient mathematical foundation of CoinJoin is that the correlation between the inputs and outputs must be cryptographically blinded, thus it makes no difference mathematically for anti-DOS whether the inputs or outputs are specified in the first round of the protocol.

As for whether my proposed protocol of putting the outputs in the first round is implementable on the Bitcoin blockchain, it is irrelevant since we are talking about a general protocol here and an altcoin could be designed to allow a transaction where outputs and inputs can be signed to point to the transaction nonce (a hash of any number) plus the addresses of the inputs OR outputs. I didn't bother to check how Bitcoin signs the transactions, because it is conceptually irrelevant to our discussion. Perhaps in Bitcoin the signature of the transaction must include all the inputs AND outputs. The reason I presented my formulation (in fact I mentioned the ring signatures idea from Adam Back in the Zerocoin thread months ago in this thread) is because it is more powerful conceptually than one gmaxell described. I thought gmaxell would appreciate that since I think he is a math guy.

Quote
And exactly how do you propose to identify that adversary in a decentralized setting?  Wink My point is you can't, at least not without breaking anonymity, and anonymity was the entire point of mixing.

Because they fail to sign. There is no need to identify them beyond identifying their input coins to achieve rate limiting, and no need to identify the input/output correspondence.

I'll repeat it, since maybe other people are having problems following the link:

I will quote from your more detailed description upthread.

This is an extremely interesting idea.  Could you elaborate on how the Zerocoin transaction stages map to the stages of CoinJoin transaction creation?

For non-decenteralized coincoin, you simply pass around a transaction and sign it. It's a single sequence and an atomic transaction, you'd make two loops through the users, one to discover the inputs and outputs, and another to sign them. There really aren't stages to it.

Making a decenteralized CoinJoin secure, private, and resistant to DOS attack (people refusing to sign in order to make it fail) is trickier... for the privacy and dos attack resistance you can use ZC:

Presume the participants for a transaction are sharing some multicast medium and can all communicate.  They need to accomplish the task of offering up inputs (txid:vout) for inclusion in the transaction and then, in an unlinkable way, providing outputs to receive their coins.

Each participant connects and names bitcoin input(s), an address for change (if needed), and the result of performing a ZC mint transaction to add to the ZC accumulator. They sign all this with the keys for the corresponding inputs proving its theirs to spend.

Then all the parties connect again anonymously and provide ZC redeem transactions which specify where the resulting bitcoins should go.

Zerocoin (ZC) requires a trusted party to generate the parameters, thus it is the antithesis of decentralized, so you have a logical error above.

https://github.com/Zerocoin/libzerocoin/wiki/Generating-Zerocoin-parameters

This isn't the only way to do this in a decentralized manner, the way to do it with blind signatures is fairly similar:

Each participant connects, names Bitcoin input(s), an address for change (if needed), a key for blind signing, and a blinded hash of the address they want paid. They sign all this with the keys for the corresponding inputs proving its theirs to spend.

Each participant then blind signs the blinded hashes of all participants (including themselves).

And so how can you correlate which input is the one who didn't blind sign all?

As far as I can see, you can't.

I've dug very deep (into cryptography research papers) lately into trying to find a way to delink inputs from outputs without a trusted party, and I have realized that mathematically it can't be done. It is a fundamental conceptualization.

The only way to delink without anti-DOS is to use an accumulator commitment scheme with common NP-hard parameters that can be presented in an NIZKP (non-interactive zero knowledge proof) which will always require a trusted party to generate the common parameters for the trapdoor math.

This is just one example of a way to address this. There are several other ones possible— and discussed early on in this thread.  Other ones include publishing commitments and then if the process fails having everyone reveal their intended outputs (which they then discard and never use) in order to avoid being banned, or using an anonymous accumulator instead of blind signing to control access.

That isn't anti-DOS.

Each spender commits a hash of his intended output. Then everyone does the blinded protocol. If the blinded protocol fails, everyone including the adversary reveals the link between inputs and outputs, because by definition the output key must be an abundant resource so that it is not costly to reveal it and generate a new one to try again.

, or using an anonymous accumulator instead of blind signing to control access.

A ZKP + accumulator isn't decentralized as I explained above.

Tada!  Tongue


Here is the private message he sent me and my response to him... (bold emphasis is mine)

Go read my post in his thread from yesterday. It wasn't belligerent. It was a discussion of the technical issues and asked for technical comments. How is discussing technical facts belligerent?

Looks to me like below he is trying to justify an imminent abuse his authority...

Note about the veracity and quality of my technical arguments, perhaps this one by me about the quantum computing threat qualifies.

Eat humble pie. See my reply in the CoinJoin thread.

You are an ego maniac.

AnonMint, Every post you've made here has been error and confusion.
Keep your ad hominem attacks out of it please. I asked kindly for technical comments.

It wasn't an ad hominem— I'm not expressing any opinion about your character. I can only assume that if you treat other people like you do people on the forum that you'd be starving in the streets or incarcerated, so presumably you're actually a nice person when you're not hiding behind a pseudonym on a Bitcoin forum...

Regardless, Your behavior in the technical subform is not very productive.  I have warned you previously.  Your responses come across as universally belligerent which is particularly aggravating to people because they are often confused in the technical details. Whatever approach you are using is not effectively communicating to people and not getting you useful answers because many people have you on ignore.

Your posts have been cited as an example by technical experts as to why they no longer participate in the forum... and I've certainly experienced it myself.

If you do not adopt a style which is less aggressive or up your level of technical mastery to the nearly flawless state which would be required to justify your aggressiveness I will exclude you from the technical subforum.

Cheers.  
1762  Bitcoin / Development & Technical Discussion / Re: CoinJoin: Bitcoin privacy for the real world on: March 12, 2014, 04:12:26 AM
And my post to which you are replying is in fact explaining the DOS (denial-of-service) is insoluble if you can't identify the participants in order to rate-limit them.

And again in that post you admit there is a DOS problem. You didn't solve it. And you can't solve it in a decentralized setting unless you have non-ephemeral identification of the participants. Which is precisely the point of my prior post to which you are replying

You are asserting it, (over and over again) but it doesn't make it true. It was explained in adequate detail previously enough for other people to understand it and implement tools that address it.

Quote
Incorrect. What I wrote is functionally equivalent to what you described. The point is the transaction can be jammed in the final round.

It's actually not, since it's not actually possible in the Bitcoin protocol to do what (it sounds like) you're describing, but more importantly performing the operation in that order defeats the anti-dos. If you lead with the inputs they provide a trivial anti-dos mechanism.

And precisely how do you identify which input is the adversary when the correlation of the inputs and the outputs is necessarily cryptographically blinded?

As far as I can see, you can't.

I am confident that now you see the functionally w.r.t. to anti-DOS of what I described and what you described are equivalent, i.e. any one who is the least bit mathematical can see that the salient mathematical foundation of CoinJoin is that the correlation between the inputs and outputs must be cryptographically blinded, thus it makes no difference mathematically for anti-DOS whether the inputs or outputs are specified in the first round of the protocol.

As for whether my proposed protocol of putting the outputs in the first round is implementable on the Bitcoin blockchain, it is irrelevant since we are talking about a general protocol here and an altcoin could be designed to allow a transaction where outputs and inputs can be signed to point to the transaction nonce (a hash of any number) plus the addresses of the inputs OR outputs. I didn't bother to check how Bitcoin signs the transactions, because it is conceptually irrelevant to our discussion. Perhaps in Bitcoin the signature of the transaction must include all the inputs AND outputs. The reason I presented my formulation (in fact I mentioned the ring signatures idea from Adam Back in the Zerocoin thread months ago in this thread) is because it is more powerful conceptually than one gmaxell described. I thought gmaxell would appreciate that since I think he is a math guy.

Quote
And exactly how do you propose to identify that adversary in a decentralized setting?  Wink My point is you can't, at least not without breaking anonymity, and anonymity was the entire point of mixing.

Because they fail to sign. There is no need to identify them beyond identifying their input coins to achieve rate limiting, and no need to identify the input/output correspondence.

I'll repeat it, since maybe other people are having problems following the link:

I will quote from your more detailed description upthread.

This is an extremely interesting idea.  Could you elaborate on how the Zerocoin transaction stages map to the stages of CoinJoin transaction creation?

For non-decenteralized coincoin, you simply pass around a transaction and sign it. It's a single sequence and an atomic transaction, you'd make two loops through the users, one to discover the inputs and outputs, and another to sign them. There really aren't stages to it.

Making a decenteralized CoinJoin secure, private, and resistant to DOS attack (people refusing to sign in order to make it fail) is trickier... for the privacy and dos attack resistance you can use ZC:

Presume the participants for a transaction are sharing some multicast medium and can all communicate.  They need to accomplish the task of offering up inputs (txid:vout) for inclusion in the transaction and then, in an unlinkable way, providing outputs to receive their coins.

Each participant connects and names bitcoin input(s), an address for change (if needed), and the result of performing a ZC mint transaction to add to the ZC accumulator. They sign all this with the keys for the corresponding inputs proving its theirs to spend.

Then all the parties connect again anonymously and provide ZC redeem transactions which specify where the resulting bitcoins should go.

Zerocoin (ZC) requires a trusted party to generate the parameters, thus it is the antithesis of decentralized, so you have a logical error above.

https://github.com/Zerocoin/libzerocoin/wiki/Generating-Zerocoin-parameters

This isn't the only way to do this in a decentralized manner, the way to do it with blind signatures is fairly similar:

Each participant connects, names Bitcoin input(s), an address for change (if needed), a key for blind signing, and a blinded hash of the address they want paid. They sign all this with the keys for the corresponding inputs proving its theirs to spend.

Each participant then blind signs the blinded hashes of all participants (including themselves).

And so how can you correlate which input is the one who didn't blind sign all?

As far as I can see, you can't.

I've dug very deep (into cryptography research papers) lately into trying to find a way to delink inputs from outputs without a trusted party, and I have realized that mathematically it can't be done. It is a fundamental conceptualization.

The only way to delink without anti-DOS is to use an accumulator commitment scheme with common NP-hard parameters that can be presented in an NIZKP (non-interactive zero knowledge proof) which will always require a trusted party to generate the common parameters for the trapdoor math.

This is just one example of a way to address this. There are several other ones possible— and discussed early on in this thread.  Other ones include publishing commitments and then if the process fails having everyone reveal their intended outputs (which they then discard and never use) in order to avoid being banned, or using an anonymous accumulator instead of blind signing to control access.

That isn't anti-DOS.

Each spender commits a hash of his intended output. Then everyone does the blinded protocol. If the blinded protocol fails, everyone including the adversary reveals the link between inputs and outputs, because by definition the output key must be an abundant resource so that it is not costly to reveal it and generate a new one to try again.

, or using an anonymous accumulator instead of blind signing to control access.

A ZKP + accumulator isn't decentralized as I explained above.
1763  Bitcoin / Bitcoin Discussion / Re: MtGox database leak: why you should always mix your coins. on: March 11, 2014, 04:41:20 PM
...
Also using the centralized (VPN, mixer, tumbler, laundry) identifies you as someone that deserves extra monitoring by the authorities.
...

NSA views encryption as evidence of suspicion and will target those who use it:

https://bitcointalk.org/index.php?topic=511198.0
1764  Bitcoin / Bitcoin Discussion / Re: MtGox database leak: why you should always mix your coins. on: March 11, 2014, 04:38:17 PM
LOL, yeah but, didn't those same users just lose their ass and are now broke?

The OP is also about people who cashed out before the Mt.Gox problems, yet their data may still have been leaked after the cash out event.
1765  Other / Politics & Society / Re: Is a Madmax outcome coming before 2020? Thus do we need anonymity? on: March 11, 2014, 04:12:05 PM
Exactly as Armstrong's model predicted...

http://www.mb.com.ph/asian-bond-issuers-return-to-new-york-as-demand-surges/

And he predicted Russia would invade Ukraine months ago before there was any trouble there...

http://armstrongeconomics.com/2014/03/11/crimea-was-the-origin-of-the-black-death-that-killed-50-of-europe/
1766  Bitcoin / Bitcoin Discussion / Re: MtGox database leak: why you should always mix your coins. on: March 11, 2014, 03:54:50 PM
And here is our friendly Bitcoin csore developer...

AnonMint, Every post you've made here has been error and confusion.

Keep your ad hominem attacks out of it please. I asked kindly for technical comments.

The very first post in the thread points out that decentralized versions take more work because of the anti-DOS proofing.

And my post to which you are replying is in fact explaining the DOS (denial-of-service) is insoluble if you can't identify the participants in order to rate-limit them.

[A couple posts down](https://bitcointalk.org/index.php?topic=279249.msg2984051#msg2984051) I give some examples of how it can be done.

And again in that post you admit there is a DOS problem. You didn't solve it. And you can't solve it in a decentralized setting unless you have non-ephemeral identification of the participants. Which is precisely the point of my prior post to which you are replying

You're presuming a broken model that I don't believe anyone here has ever suggested.

Incorrect. What I wrote is functionally equivalent to what you described. The point is the transaction can be jammed in the final round.

Since you didn't see the equivalence let me explain it. I thought you were smart enough to deduce such things. I chose to let the signatures of inputs go in the second and final round and point to a transaction because I envisioned using ring signatures. And the transaction won't be valid (blockchain will reject it) if the inputs are less than the outputs, so my version is just as safe as yours. And the DOS problem is equivalent. Come on you are a math guy, you can surely see that without me needing to explain it you.

And if you think about it a while you will realize, by inverting the operations and using a ring signature, mine has advantages suchas that not all have to sign in the first round before proceeding to the second round (they get excluded from second round too). Yet the DOS issue remains in the final.

You'd always being the protocol by specifying the inputs in which you intend to sign. Signature authority over inputs is the principle scarcity that allows you to may the system dos-attack resistant. After the inputs are signed, outputs can be specified in a cheat proof way, and then the only avenue for disruption is refusing to sign which can be addressed by blacklisting your inputs (and other rate limiting tokens) and restarting.

Well now you see your error. You can reread my post again, and admit I was correct.

From your upthread post:

If a party fails to sign, everyone else is convinced that its because they are jamming the process (intentionally or maliciously) and then can all ban (ignore in the future) whatever costly identity they used to enter the mix, or — if there is no other mechanism— that particular txin which they used.

And exactly how do you propose to identify that adversary in a decentralized setting?  Wink My point is you can't, at least not without breaking anonymity, and anonymity was the entire point of mixing.
1767  Bitcoin / Development & Technical Discussion / Re: CoinJoin: Bitcoin privacy for the real world on: March 11, 2014, 03:41:59 PM
AnonMint, Every post you've made here has been error and confusion.

Keep your ad hominem attacks out of it please. I asked kindly for technical comments.

The very first post in the thread points out that decentralized versions take more work because of the anti-DOS proofing.

And my post to which you are replying is in fact explaining the DOS (denial-of-service) is insoluble if you can't identify the participants in order to rate-limit them.

[A couple posts down](https://bitcointalk.org/index.php?topic=279249.msg2984051#msg2984051) I give some examples of how it can be done.

And again in that post you admit there is a DOS problem. You didn't solve it. And you can't solve it in a decentralized setting unless you have non-ephemeral identification of the participants. Which is precisely the point of my prior post to which you are replying

You're presuming a broken model that I don't believe anyone here has ever suggested.

Incorrect. What I wrote is functionally equivalent to what you described. The point is the transaction can be jammed in the final round.

Since you didn't see the equivalence let me explain it. I thought you were smart enough to deduce such things. I chose to let the signatures of inputs go in the second and final round and point to a transaction because I envisioned using ring signatures. And the transaction won't be valid (blockchain will reject it) if the inputs are less than the outputs, so my version is just as safe as yours. And the DOS problem is equivalent. Come on you are a math guy, you can surely see that without me needing to explain it you.

And if you think about it a while you will realize, by inverting the operations and using a ring signature, mine has advantages suchas that not all have to sign in the first round before proceeding to the second round (they get excluded from second round too). Yet the DOS issue remains in the final.

You'd always being the protocol by specifying the inputs in which you intend to sign. Signature authority over inputs is the principle scarcity that allows you to may the system dos-attack resistant. After the inputs are signed, outputs can be specified in a cheat proof way, and then the only avenue for disruption is refusing to sign which can be addressed by blacklisting your inputs (and other rate limiting tokens) and restarting.

Well now you see your error. You can reread my post again, and admit I was correct.

From your upthread post:

If a party fails to sign, everyone else is convinced that its because they are jamming the process (intentionally or maliciously) and then can all ban (ignore in the future) whatever costly identity they used to enter the mix, or — if there is no other mechanism— that particular txin which they used.

And exactly how do you propose to identify that adversary in a decentralized setting?  Wink My point is you can't, at least not without breaking anonymity, and anonymity was the entire point of mixing.
1768  Bitcoin / Bitcoin Discussion / Re: "Failure to Understand Bitcoin Could Cost Investors Billions" (Bitcoin's flaws) on: March 11, 2014, 12:32:11 PM
F8ck the coming apocalypse is worse than I previously estimated...

Soooooooooo, I read today that the world's debt amount to $100 trillion.
Wikipedia says that in 2012, the GDP was ~72 trillion. Let's suppose that it's $80 trillion now.

Debt to GDP = 125%

Incorrect. Total debt is $157 trillion in developed countries plus $66 trillion in emerging markets, because is 313% of GDP and the GDP is $72 trillion:

http://www.gfmag.com/tools/global-database/economic-data/11855-total-debt-to-gdp.html#axzz2iu5C4Y4Z

http://blogs.wsj.com/economics/2013/05/11/number-of-the-week-total-world-debt-load-at-313-of-gdp/

Chinese corporate debt is the highest in the world as a percentage of GDP:

https://bitcointalk.org/index.php?topic=365141.msg4337574#msg4337574

Don't forget to add on $1000 trillion of sovereign bond derivatives, and $1000 trillion of unfunded social liabilities.

http://www.indexq.org/economy/gdp.php
1769  Economy / Economics / Re: World DEBT/GDP on: March 11, 2014, 12:29:23 PM
Soooooooooo, I read today that the world's debt amount to $100 trillion.
Wikipedia says that in 2012, the GDP was ~72 trillion. Let's suppose that it's $80 trillion now.

Debt to GDP = 125%

Incorrect. Total debt is $157 trillion in developed countries plus $66 trillion in emerging markets, because is 313% of GDP and the GDP is $72 trillion:

http://www.gfmag.com/tools/global-database/economic-data/11855-total-debt-to-gdp.html#axzz2iu5C4Y4Z

http://blogs.wsj.com/economics/2013/05/11/number-of-the-week-total-world-debt-load-at-313-of-gdp/

Chinese corporate debt is the highest in the world as a percentage of GDP:

https://bitcointalk.org/index.php?topic=365141.msg4337574#msg4337574

Don't forget to add on $1000 trillion of sovereign bond derivatives, and $1000 trillion of unfunded social liabilities.

http://www.indexq.org/economy/gdp.php
1770  Bitcoin / Bitcoin Discussion / Re: "Failure to Understand Bitcoin Could Cost Investors Billions" (Bitcoin's flaws) on: March 11, 2014, 11:10:45 AM
At the end of my prior post, there is a link to an insightful Adam Back presentation. Skip also to the 113:00 min point in the video to hear him describe how potentially Ethereum could be infected with a virus!
1771  Bitcoin / Bitcoin Discussion / Re: Fungibility, Privacy & Identity - Adam Back (February 2014) on: March 11, 2014, 10:22:59 AM
Thanks Meni for sharing that.

On the historical technical level (not applicable to be implemented in Bitcoin), Adam Back did not mention the double-spending solution where the person who double-spends would expose their identity.

Hal Finney summarized it.
1772  Bitcoin / Bitcoin Discussion / Re: "Failure to Understand Bitcoin Could Cost Investors Billions" (Bitcoin's flaws) on: March 11, 2014, 09:49:04 AM
https://bitcointalk.org/index.php?topic=509144.msg5636651#msg5636651

Listen up please to learn some new technical information...

Got any good suggestions for trustless and low-fee mixers?  I think all the P2P mixer projects are not yet fully ready, as far as I know.

...

Tumblers like bitcoinfog provide better obfuscation, but the (huge) trade-off is that you should trust an unknown third party. I'd never risk more than 1% of my holdings to such services, but I think the service they provide is necessary and should be used, albeit with care and with just a very minor portion of ones funds at a time.

Problem is there is no way to know if a centralized service (VPN, exchange, mixer, tumbler, laundry) is hacked, under NSA gag order, dishonest, buggy, etc..

Also using the centralized (VPN, mixer, tumbler, laundry) identifies you as someone that deserves extra monitoring by the authorities.

A decentralized solution is always best, as it should look like regular transactions.

Yes, I think CoinJoin should be a very good start.  But do any really decentralised and fully working implementations of CoinJoin exist already?  I don't think so and would be interested to know if they are.

I'm not aware of any either but don't let that deter you from using one of the already existing solutions even if they aren't perfect.

A decentralized CoinJoin will have difficulty forming transactions (including unequal or equal transaction amounts) that look like this if anyone can join:

https://blockchain.info/tx/e4abb15310348edc606e597effc81697bfce4b6de7598347f17c2befd4febf3b?show_adv=true

A sharedcoin transaction will look something like this: https://blockchain.info/tx/e4abb15310348edc606e597effc81697bfce4b6de7598347f17c2befd4febf3b (picked at random). As you can see multiple inputs and outputs make the determining the actual sender and receiver more difficult.

The server does not need to keep any logs and transactions are only kept in memory for a short time. However If the server was compromised or under subpoena it could be force...

Because the way it must work is the users sign the transaction first with their requested outputs, then in the second round they sign their payments as inputs to the transaction. If the payment inputs are less than the total, then the transaction is invalid. There is no way to determine who cheated and rate limit them. Thus the saboteur can stomp on every attempt to create a CoinJoin transaction and destroy the decentralized system.

DarkCoin says they can solve this by charging a fee, but you will see I originally proposed that idea in the CoinJoin thread and the requirement is all the participants must be permanently identified and then must use divide-and-conquer to whittle down to who was the saboteur. But identification defeats the mixing!

Thus I have not yet seen a workable decentralized CoinJoin that can scale. And I don't expect one.

I posted this to the CoinJoin thread to get their technical peer-review of my statement.

Now, if the zerocoin concept would be implemented in bitcoin, it would be cool.

Just forget zerocoin even in an altcoin it won't work. Because it requires a trusted person to hold the private key that can unlock everything including taking all the zerocoins. This can't be fixed (contrary to ruminations otherwise), it is a fundamental mathematical property of the way zero knowledge proofs work when combined with an accumulator.

Also zerocoin has to be dedicated to preset transactions amounts (e.g. 1 BTC) else the anonymity set can be trivially collapsed by comparing input and output transaction amounts.

Never recommend noobs to use Tor, it's a honeypot where they are worse off than not using Tor at all.
Noobs should use a trustworthy VPN instead.
The optimal solution is VPN + Tor.

Not if you stay in-network. Unfortunately, my services (bitcoin node) are not tor-enabled yet. Namecoin has the potential to facilitate this with human-readable addresses as well.

Not true. Tor is always subject to timing analysis by an entity such as the NSA (which is recording ans storing nearly all global encrypted traffic in Utah) which can see the encrypted packets running between Tor nodes.

Popular VPNs are also very likely all honeypots and unpopular ones give only a small anonymity set.

Currently the only known way to be reliably anonymous is use a connection to the internet that can't be traced to you, e.g. netcafe without cameras any where and don't drive your car as that has secret tracking built-in according to CEO of Ford, a throw-away mobile device and simm that doesn't have your id registered and used for no other activity, etc.



Anonymint: we are not discussing being safe against a global adversary such as the NSA, we all know that mixers + Tor is probably not enough to defeat them because of honeypots, timing attacks, deep packet inspection, etc...

We are discussing using basic security procedures in order not to be "the low hanging fruit" and thus being reasonably safe against the casual hacker/criminal doing trivial blockchain and network analysis to easily link identities to BTC balances. For that purpose running your wallet through Tor and using a decentralized and trustless mixer such as coinjoin should be enough.

The government and the criminals are sometimes one in the same.

But (uninformed) trust is all that is holding up the $150 trillion in fractional reserves, so you won't find too many people that subscribe to my view (yet). They will learn by 2020.

And you did not address my technical point about CoinJoin, which has nothing to do with the NSA.

In short, we are pretty well f8cked approaching the 2016ish global conflagrapocalpyse.


Adam Back (the creator of Hashcash which Bitcoin is based on) explains the anonymity problem (jump to 24:25 mins into the video).

1773  Bitcoin / Bitcoin Discussion / Re: MtGox database leak: why you should always mix your coins. on: March 11, 2014, 09:39:41 AM
Anonymint: we are not discussing being safe against a global adversary such as the NSA, we all know that mixers + Tor is probably not enough to defeat them because of honeypots, timing attacks, deep packet inspection, etc...

We are discussing using basic security procedures in order not to be "the low hanging fruit" and thus being reasonably safe against the casual hacker/criminal doing trivial blockchain and network analysis to easily link identities to BTC balances. For that purpose running your wallet through Tor and using a decentralized and trustless mixer such as coinjoin should be enough.

The government and the criminals are sometimes one in the same.

But (uninformed) trust is all that is holding up the $150 trillion in fractional reserves, so you won't find too many people that subscribe to my view (yet). They will learn by 2020.

And you did not address my technical point about CoinJoin, which has nothing to do with the NSA.

In short, we are pretty well f8cked approaching the 2016ish global conflagrapocalpyse.


Adam Back (the creator of Hashcash which Bitcoin is based on) explains the anonymity problem (jump to 24:25 mins into the video).
1774  Economy / Economics / Re: Economic Devastation on: March 11, 2014, 09:36:07 AM
Cross-posting this...

Soooooooooo, I read today that the world's debt amount to $100 trillion.
Wikipedia says that in 2012, the GDP was ~72 trillion. Let's suppose that it's $80 trillion now.

Debt to GDP = 125%

Incorrect. Total debt is $157 trillion in developed countries plus $66 trillion in emerging markets, because is 313% of GDP and the GDP is $72 trillion:

http://www.gfmag.com/tools/global-database/economic-data/11855-total-debt-to-gdp.html#axzz2iu5C4Y4Z

http://blogs.wsj.com/economics/2013/05/11/number-of-the-week-total-world-debt-load-at-313-of-gdp/

Chinese corporate debt is the highest in the world as a percentage of GDP:

https://bitcointalk.org/index.php?topic=365141.msg4337574#msg4337574

Don't forget to add on $1000 trillion of sovereign bond derivatives, and $1000 trillion of unfunded social liabilities.

http://www.indexq.org/economy/gdp.php

About the imminent conflagrapocalpyse...

What does that have to do with whether the technology exists to improve nuclear?

I hope you realize energy is regulated and taxed such that it is controlled by cartels. Getting rid of that doesn't imply a Dark Age, rather it frees us to realize innovations which were suppressed because they are paradigm shifts which compete with the cartels.
AnonyMint, I realize you are a very intelligent man and I enjoy reading your posts because they address many glaring problems others might realize but either subconciously or deliberately ignore to protect their investments or agendas.
My question to you though is because I have read your prediction about the burst of a $ 150 trillion debt bubble multiple times in your posts how you think such an event will unfold.

To whom is the world in debt exactly and how does this creditor force the government(s) to act as his debt collector(s)? From my understanding of your scenario it will lead to a widespread pauperization of the world respectively the majority of the people. Do you predict a simultaneous increase in the creditor's wealth or is this a scenario where basically everybody gets poorer?

As I explained in an upthread post (which I am too rushed to go find the link to at the moment), the ledger of who owes whom is less important consideration than the fact that it represents $150 trillion of human capital that was misdirected in its activities since mid-1980s and especially since 1994 or so when the debt-based economy accelerated (1994 is when Clinton had the equations for official statistics changed so they can unleash the surge).



(note we have inflation of fractional reserve digits which is why official stats lie about inflation to hide its relevance, but simultaneously we have a deflation of M0 which official stats also lie about by including bank deposits held Federal Reserve (which should be monetary base MB not M0), thus MB is hockey stick but the Fed doesn't show us the true M0. The Fed is trying to hide from us the deflation that is really there. We can get a proxy for what is happening with M0 by looking velocity of MB which falling like rock! Go to this link then change the "a/b" to "b/a", click the "Redraw Graph" button, so that you get GDP / MB, then you will see velocity is falling off a cliff since 2008.)

So this is why technological employment is going to be so severe and massive overcapacity in manufacturing, fixed capital infrastructure, and conspicuous consumption, because all during the 1970s, 80s, 90s, and 2000s, while a few of us hackers were becoming 100000X more productive with our new found toy (the personal computer), the bulk of the population was able to stay in the old industrial economy thanks to increasing debt.

So what you are going to see when the $150 trillion debt bomb explodes 2016ish is that anyone who is not very technically relevant in the new Knowledge Economy will find themselves unemployable. The governments will try to appease this majority by taxation and confiscating everything, because they fundamentally don't understand the cause of the problem.

With both scenarios (further concentration of wealth/obliteration of wealth) I see several problems that make this scenario seem unlikely.

Those ledger IOUs are worthless to both lender and borrower. The capital now is all in the brains of hackers such as myself. We take over now. Checkmate. While we were busy sleeping under our desks for the past 3 decades, the rest of you were out enjoying yourself. Now the payback comes. Oxford U. admits 47% of the existing jobs will be replaced with robots over next 19 years (was 20 last year when study was published).

1) The widespread confiscation of wealth would inevitably weaken or even nearly eradicate consumerism which is one of the strongest motors to our society and one of the most effective measures for the elite to concentrate wealth at the same time by concentrating the production to satisfy consumerism.  What would the elite gain by basically wiping out most people's spending capacity?

The government isn't run rationally. The vested interests want to suck as much blood out of a turnip as they can. They have no foresight on outcomes, especially they don't even understand.

However, I am one of those who do believe the Bilderbergs understand they must first collapse the economy in order to create the chaos from which they can get their one world government. They want to weaken local and national structures so they can get the economy-of-scale of control to compete with the technology which is rewarding bottom-up hackers.

It is really a defensive move for them and they while getting their world outcome are actually in retreat and losing the way ultimately.


This would in either case harm the creditor by either obliterating his own wealth or at least a lot of possibilities to spend his own wealth.
2) Do all relevant governments work on this collectively? From my current observations of international politics it seems as this is not the case most of the time. Why would it be the case in this event and wouldn't it create opportunities for backstabbing and breaking of the agreement to confiscate all wealth?

The nation-state is being destroyed by this. The national institutions will be completely discredited and untrusted within a decade.

Out of the ashes the Phoenix will rise. The world will see massive new productivity once the youth take political control away from the boomers and we move to a high tech Knowledge Age where there are no more severe national barriers. You will be able to freely travel and invest in all countries, we will be headed towards a Jetsons level of lifestyle...


3) What boundaries are set for the governments in this scenario? Are concepts like democratic elections or consistency with the constitution still applicable in this case? If not what changes and what keeps governments from doing now what you predict for 2016?

The constitutions aren't followed any more any way.

Government is reactionary. The owners of the government (the vested interests) only do what they need to maintain their position of privilege. They are preparing (e.g. the 2714 tank-like vehicles and 10 billion rounds of hollow point bullets for the Homelove Security dept in the USA, the 9/11 pretext to track everything we do, etc..) but just like in Ukraine and other places where there have been unrest, they will only act as necessary.

The peripheral economies blow up first. We see already Ukraine, Greece, Spain, Thailand, India, Indonesia, Egypt, even China has -18% drop in exports just this month over last year.

Then core of Europe 2015ish or so.

Then the USA will be last to fall 2016ish.

We are getting very close now. We might see a dead-cat bounce in 2017, and the severe SHTF hard down phase maybe 2018.


I hope you can answer some of these potential problems/questions as the theory seems pretty far-fetched in my opinion. I would rather fear a global nuclear war at the moment.

Looking forward to hearing from you.    

Well yeah that is why I've been screaming this in the Mad Max thread in the Politics forum. Check it out for more details. See also the Economic Devastation thread in the Economics forum.

There is no chance I am wrong. Zero. The only variability is in the timing. By 2020, I assure you we are in a shithole outcome.
1775  Other / Politics & Society / Re: Is a Madmax outcome coming before 2020? Thus do we need anonymity? on: March 11, 2014, 09:33:11 AM
http://armstrongeconomics.com/2014/03/10/france-leading-the-way-to-the-demise-of-the-west-the-first-to-fall/

http://armstrongeconomics.com/2014/03/10/deflation-still-in-europe/

http://armstrongeconomics.com/2014/03/09/research-shocking-there-is-order-in-the-chaos/

http://armstrongeconomics.com/2014/03/09/vladimir-putin-the-restorer-or-russia/


Cross-posting this...

Soooooooooo, I read today that the world's debt amount to $100 trillion.
Wikipedia says that in 2012, the GDP was ~72 trillion. Let's suppose that it's $80 trillion now.

Debt to GDP = 125%

Incorrect. Total debt is $157 trillion in developed countries plus $66 trillion in emerging markets, because is 313% of GDP and the GDP is $72 trillion:

http://www.gfmag.com/tools/global-database/economic-data/11855-total-debt-to-gdp.html#axzz2iu5C4Y4Z

http://blogs.wsj.com/economics/2013/05/11/number-of-the-week-total-world-debt-load-at-313-of-gdp/

Chinese corporate debt is the highest in the world as a percentage of GDP:

https://bitcointalk.org/index.php?topic=365141.msg4337574#msg4337574

Don't forget to add on $1000 trillion of sovereign bond derivatives, and $1000 trillion of unfunded social liabilities.

http://www.indexq.org/economy/gdp.php

About the imminent conflagrapocalpyse...

What does that have to do with whether the technology exists to improve nuclear?

I hope you realize energy is regulated and taxed such that it is controlled by cartels. Getting rid of that doesn't imply a Dark Age, rather it frees us to realize innovations which were suppressed because they are paradigm shifts which compete with the cartels.
AnonyMint, I realize you are a very intelligent man and I enjoy reading your posts because they address many glaring problems others might realize but either subconciously or deliberately ignore to protect their investments or agendas.
My question to you though is because I have read your prediction about the burst of a $ 150 trillion debt bubble multiple times in your posts how you think such an event will unfold.

To whom is the world in debt exactly and how does this creditor force the government(s) to act as his debt collector(s)? From my understanding of your scenario it will lead to a widespread pauperization of the world respectively the majority of the people. Do you predict a simultaneous increase in the creditor's wealth or is this a scenario where basically everybody gets poorer?

As I explained in an upthread post (which I am too rushed to go find the link to at the moment), the ledger of who owes whom is less important consideration than the fact that it represents $150 trillion of human capital that was misdirected in its activities since mid-1980s and especially since 1994 or so when the debt-based economy accelerated (1994 is when Clinton had the equations for official statistics changed so they can unleash the surge).



(note we have inflation of fractional reserve digits which is why official stats lie about inflation to hide its relevance, but simultaneously we have a deflation of M0 which official stats also lie about by including bank deposits held Federal Reserve (which should be monetary base MB not M0), thus MB is hockey stick but the Fed doesn't show us the true M0. The Fed is trying to hide from us the deflation that is really there. We can get a proxy for what is happening with M0 by looking velocity of MB which falling like rock! Go to this link then change the "a/b" to "b/a", click the "Redraw Graph" button, so that you get GDP / MB, then you will see velocity is falling off a cliff since 2008.)

So this is why technological employment is going to be so severe and massive overcapacity in manufacturing, fixed capital infrastructure, and conspicuous consumption, because all during the 1970s, 80s, 90s, and 2000s, while a few of us hackers were becoming 100000X more productive with our new found toy (the personal computer), the bulk of the population was able to stay in the old industrial economy thanks to increasing debt.

So what you are going to see when the $150 trillion debt bomb explodes 2016ish is that anyone who is not very technically relevant in the new Knowledge Economy will find themselves unemployable. The governments will try to appease this majority by taxation and confiscating everything, because they fundamentally don't understand the cause of the problem.

With both scenarios (further concentration of wealth/obliteration of wealth) I see several problems that make this scenario seem unlikely.

Those ledger IOUs are worthless to both lender and borrower. The capital now is all in the brains of hackers such as myself. We take over now. Checkmate. While we were busy sleeping under our desks for the past 3 decades, the rest of you were out enjoying yourself. Now the payback comes. Oxford U. admits 47% of the existing jobs will be replaced with robots over next 19 years (was 20 last year when study was published).

1) The widespread confiscation of wealth would inevitably weaken or even nearly eradicate consumerism which is one of the strongest motors to our society and one of the most effective measures for the elite to concentrate wealth at the same time by concentrating the production to satisfy consumerism.  What would the elite gain by basically wiping out most people's spending capacity?

The government isn't run rationally. The vested interests want to suck as much blood out of a turnip as they can. They have no foresight on outcomes, especially they don't even understand.

However, I am one of those who do believe the Bilderbergs understand they must first collapse the economy in order to create the chaos from which they can get their one world government. They want to weaken local and national structures so they can get the economy-of-scale of control to compete with the technology which is rewarding bottom-up hackers.

It is really a defensive move for them and they while getting their world outcome are actually in retreat and losing the way ultimately.


This would in either case harm the creditor by either obliterating his own wealth or at least a lot of possibilities to spend his own wealth.
2) Do all relevant governments work on this collectively? From my current observations of international politics it seems as this is not the case most of the time. Why would it be the case in this event and wouldn't it create opportunities for backstabbing and breaking of the agreement to confiscate all wealth?

The nation-state is being destroyed by this. The national institutions will be completely discredited and untrusted within a decade.

Out of the ashes the Phoenix will rise. The world will see massive new productivity once the youth take political control away from the boomers and we move to a high tech Knowledge Age where there are no more severe national barriers. You will be able to freely travel and invest in all countries, we will be headed towards a Jetsons level of lifestyle...


3) What boundaries are set for the governments in this scenario? Are concepts like democratic elections or consistency with the constitution still applicable in this case? If not what changes and what keeps governments from doing now what you predict for 2016?

The constitutions aren't followed any more any way.

Government is reactionary. The owners of the government (the vested interests) only do what they need to maintain their position of privilege. They are preparing (e.g. the 2714 tank-like vehicles and 10 billion rounds of hollow point bullets for the Homelove Security dept in the USA, the 9/11 pretext to track everything we do, etc..) but just like in Ukraine and other places where there have been unrest, they will only act as necessary.

The peripheral economies blow up first. We see already Ukraine, Greece, Spain, Thailand, India, Indonesia, Egypt, even China has -18% drop in exports just this month over last year.

Then core of Europe 2015ish or so.

Then the USA will be last to fall 2016ish.

We are getting very close now. We might see a dead-cat bounce in 2017, and the severe SHTF hard down phase maybe 2018.


I hope you can answer some of these potential problems/questions as the theory seems pretty far-fetched in my opinion. I would rather fear a global nuclear war at the moment.

Looking forward to hearing from you.    

Well yeah that is why I've been screaming this in the Mad Max thread in the Politics forum. Check it out for more details. See also the Economic Devastation thread in the Economics forum.

There is no chance I am wrong. Zero. The only variability is in the timing. By 2020, I assure you we are in a shithole outcome.
1776  Bitcoin / Bitcoin Discussion / Re: "Failure to Understand Bitcoin Could Cost Investors Billions" (Bitcoin's flaws) on: March 11, 2014, 09:28:37 AM
About the imminent conflagrapocalpyse...

What does that have to do with whether the technology exists to improve nuclear?

I hope you realize energy is regulated and taxed such that it is controlled by cartels. Getting rid of that doesn't imply a Dark Age, rather it frees us to realize innovations which were suppressed because they are paradigm shifts which compete with the cartels.
AnonyMint, I realize you are a very intelligent man and I enjoy reading your posts because they address many glaring problems others might realize but either subconciously or deliberately ignore to protect their investments or agendas.
My question to you though is because I have read your prediction about the burst of a $ 150 trillion debt bubble multiple times in your posts how you think such an event will unfold.

To whom is the world in debt exactly and how does this creditor force the government(s) to act as his debt collector(s)? From my understanding of your scenario it will lead to a widespread pauperization of the world respectively the majority of the people. Do you predict a simultaneous increase in the creditor's wealth or is this a scenario where basically everybody gets poorer?

As I explained in an upthread post (which I am too rushed to go find the link to at the moment), the ledger of who owes whom is less important consideration than the fact that it represents $150 trillion of human capital that was misdirected in its activities since mid-1980s and especially since 1994 or so when the debt-based economy accelerated (1994 is when Clinton had the equations for official statistics changed so they can unleash the surge).



(note we have inflation of fractional reserve digits which is why official stats lie about inflation to hide its relevance, but simultaneously we have a deflation of M0 which official stats also lie about by including bank deposits held Federal Reserve (which should be monetary base MB not M0), thus MB is hockey stick but the Fed doesn't show us the true M0. The Fed is trying to hide from us the deflation that is really there. We can get a proxy for what is happening with M0 by looking velocity of MB which falling like rock! Go to this link then change the "a/b" to "b/a", click the "Redraw Graph" button, so that you get GDP / MB, then you will see velocity is falling off a cliff since 2008.)

So this is why technological employment is going to be so severe and massive overcapacity in manufacturing, fixed capital infrastructure, and conspicuous consumption, because all during the 1970s, 80s, 90s, and 2000s, while a few of us hackers were becoming 100000X more productive with our new found toy (the personal computer), the bulk of the population was able to stay in the old industrial economy thanks to increasing debt.

So what you are going to see when the $150 trillion debt bomb explodes 2016ish is that anyone who is not very technically relevant in the new Knowledge Economy will find themselves unemployable. The governments will try to appease this majority by taxation and confiscating everything, because they fundamentally don't understand the cause of the problem.

With both scenarios (further concentration of wealth/obliteration of wealth) I see several problems that make this scenario seem unlikely.

Those ledger IOUs are worthless to both lender and borrower. The capital now is all in the brains of hackers such as myself. We take over now. Checkmate. While we were busy sleeping under our desks for the past 3 decades, the rest of you were out enjoying yourself. Now the payback comes. Oxford U. admits 47% of the existing jobs will be replaced with robots over next 19 years (was 20 last year when study was published).

1) The widespread confiscation of wealth would inevitably weaken or even nearly eradicate consumerism which is one of the strongest motors to our society and one of the most effective measures for the elite to concentrate wealth at the same time by concentrating the production to satisfy consumerism.  What would the elite gain by basically wiping out most people's spending capacity?

The government isn't run rationally. The vested interests want to suck as much blood out of a turnip as they can. They have no foresight on outcomes, especially they don't even understand.

However, I am one of those who do believe the Bilderbergs understand they must first collapse the economy in order to create the chaos from which they can get their one world government. They want to weaken local and national structures so they can get the economy-of-scale of control to compete with the technology which is rewarding bottom-up hackers.

It is really a defensive move for them and they while getting their world outcome are actually in retreat and losing the way ultimately.


This would in either case harm the creditor by either obliterating his own wealth or at least a lot of possibilities to spend his own wealth.
2) Do all relevant governments work on this collectively? From my current observations of international politics it seems as this is not the case most of the time. Why would it be the case in this event and wouldn't it create opportunities for backstabbing and breaking of the agreement to confiscate all wealth?

The nation-state is being destroyed by this. The national institutions will be completely discredited and untrusted within a decade.

Out of the ashes the Phoenix will rise. The world will see massive new productivity once the youth take political control away from the boomers and we move to a high tech Knowledge Age where there are no more severe national barriers. You will be able to freely travel and invest in all countries, we will be headed towards a Jetsons level of lifestyle...


3) What boundaries are set for the governments in this scenario? Are concepts like democratic elections or consistency with the constitution still applicable in this case? If not what changes and what keeps governments from doing now what you predict for 2016?

The constitutions aren't followed any more any way.

Government is reactionary. The owners of the government (the vested interests) only do what they need to maintain their position of privilege. They are preparing (e.g. the 2714 tank-like vehicles and 10 billion rounds of hollow point bullets for the Homelove Security dept in the USA, the 9/11 pretext to track everything we do, etc..) but just like in Ukraine and other places where there have been unrest, they will only act as necessary.

The peripheral economies blow up first. We see already Ukraine, Greece, Spain, Thailand, India, Indonesia, Egypt, even China has -18% drop in exports just this month over last year.

Then core of Europe 2015ish or so.

Then the USA will be last to fall 2016ish.

We are getting very close now. We might see a dead-cat bounce in 2017, and the severe SHTF hard down phase maybe 2018.


I hope you can answer some of these potential problems/questions as the theory seems pretty far-fetched in my opinion. I would rather fear a global nuclear war at the moment.

Looking forward to hearing from you.    

Well yeah that is why I've been screaming this in the Mad Max thread in the Politics forum. Check it out for more details. See also the Economic Devastation thread in the Economics forum.

There is no chance I am wrong. Zero. The only variability is in the timing. By 2020, I assure you we are in a shithole outcome.
1777  Bitcoin / Development & Technical Discussion / Re: CoinJoin: Bitcoin privacy for the real world on: March 11, 2014, 08:55:57 AM
Comments please on my technical statement herein?

Yes, I think CoinJoin should be a very good start.  But do any really decentralised and fully working implementations of CoinJoin exist already?  I don't think so and would be interested to know if they are.

I'm not aware of any either but don't let that deter you from using one of the already existing solutions even if they aren't perfect.

A decentralized CoinJoin will have difficulty forming transactions (including unequal or equal transaction amounts) that look like this if anyone can join:

https://blockchain.info/tx/e4abb15310348edc606e597effc81697bfce4b6de7598347f17c2befd4febf3b?show_adv=true

A sharedcoin transaction will look something like this: https://blockchain.info/tx/e4abb15310348edc606e597effc81697bfce4b6de7598347f17c2befd4febf3b (picked at random). As you can see multiple inputs and outputs make the determining the actual sender and receiver more difficult.

The server does not need to keep any logs and transactions are only kept in memory for a short time. However If the server was compromised or under subpoena it could be force...

Because the way it must work is the users sign the transaction first with their requested outputs, then in the second round they sign their payments as inputs to the transaction. If the payment inputs are less than the total, then the transaction is invalid. There is no way to determine who cheated and rate limit them. Thus the saboteur can stomp on every attempt to create a CoinJoin transaction and destroy the decentralized system.

DarkCoin says they can solve this by charging a fee, but you will see I originally proposed that idea in the CoinJoin thread and the requirement is all the participants must be permanently identified and then must use divide-and-conquer to whittle down to who was the saboteur. But identification defeats the mixing!

Thus I have not yet seen a workable decentralized CoinJoin that can scale. And I don't expect one.
1778  Bitcoin / Bitcoin Discussion / Re: MtGox database leak: why you should always mix your coins. on: March 11, 2014, 08:09:49 AM
Listen up please to learn some new technical information...

Got any good suggestions for trustless and low-fee mixers?  I think all the P2P mixer projects are not yet fully ready, as far as I know.

...

Tumblers like bitcoinfog provide better obfuscation, but the (huge) trade-off is that you should trust an unknown third party. I'd never risk more than 1% of my holdings to such services, but I think the service they provide is necessary and should be used, albeit with care and with just a very minor portion of ones funds at a time.

Problem is there is no way to know if a centralized service (VPN, exchange, mixer, tumbler, laundry) is hacked, under NSA gag order, dishonest, buggy, etc..

Also using the centralized (VPN, mixer, tumbler, laundry) identifies you as someone that deserves extra monitoring by the authorities.

A decentralized solution is always best, as it should look like regular transactions.

Yes, I think CoinJoin should be a very good start.  But do any really decentralised and fully working implementations of CoinJoin exist already?  I don't think so and would be interested to know if they are.

I'm not aware of any either but don't let that deter you from using one of the already existing solutions even if they aren't perfect.

A decentralized CoinJoin will have difficulty forming transactions (including unequal or equal transaction amounts) that look like this if anyone can join:

https://blockchain.info/tx/e4abb15310348edc606e597effc81697bfce4b6de7598347f17c2befd4febf3b?show_adv=true

A sharedcoin transaction will look something like this: https://blockchain.info/tx/e4abb15310348edc606e597effc81697bfce4b6de7598347f17c2befd4febf3b (picked at random). As you can see multiple inputs and outputs make the determining the actual sender and receiver more difficult.

The server does not need to keep any logs and transactions are only kept in memory for a short time. However If the server was compromised or under subpoena it could be force...

Because the way it must work is the users sign the transaction first with their requested outputs, then in the second round they sign their payments as inputs to the transaction. If the payment inputs are less than the total, then the transaction is invalid. There is no way to determine who cheated and rate limit them. Thus the saboteur can stomp on every attempt to create a CoinJoin transaction and destroy the decentralized system.

DarkCoin says they can solve this by charging a fee, but you will see I originally proposed that idea in the CoinJoin thread and the requirement is all the participants must be permanently identified and then must use divide-and-conquer to whittle down to who was the saboteur. But identification defeats the mixing!

Thus I have not yet seen a workable decentralized CoinJoin that can scale. And I don't expect one.

I posted this to the CoinJoin thread to get their technical peer-review of my statement.

Now, if the zerocoin concept would be implemented in bitcoin, it would be cool.

Just forget zerocoin even in an altcoin it won't work. Because it requires a trusted person to hold the private key that can unlock everything including taking all the zerocoins. This can't be fixed (contrary to ruminations otherwise), it is a fundamental mathematical property of the way zero knowledge proofs work when combined with an accumulator.

Also zerocoin has to be dedicated to preset transactions amounts (e.g. 1 BTC) else the anonymity set can be trivially collapsed by comparing input and output transaction amounts.

Never recommend noobs to use Tor, it's a honeypot where they are worse off than not using Tor at all.
Noobs should use a trustworthy VPN instead.
The optimal solution is VPN + Tor.

Not if you stay in-network. Unfortunately, my services (bitcoin node) are not tor-enabled yet. Namecoin has the potential to facilitate this with human-readable addresses as well.

Not true. Tor is always subject to timing analysis by an entity such as the NSA (which is recording ans storing nearly all global encrypted traffic in Utah) which can see the encrypted packets running between Tor nodes.

Popular VPNs are also very likely all honeypots and unpopular ones give only a small anonymity set.

Currently the only known way to be reliably anonymous is use a connection to the internet that can't be traced to you, e.g. netcafe without cameras any where and don't drive your car as that has secret tracking built-in according to CEO of Ford, a throw-away mobile device and simm that doesn't have your id registered and used for no other activity, etc.
1779  Other / Politics & Society / Re: Dark Enlightenment on: March 11, 2014, 07:26:40 AM
    Many computational biologists would agree that (and I'm sure Anonymint would have to, albeit begrudgingly, concur) , had it not been for lambda calculus, the understanding of spreadsheets might never have occurred. An essential challenge in artificial intelligence is the understanding of probabilistic information.

     On a similar note, given the current status of optimal symmetries, hackers worldwide daringly desire the emulation of object-oriented languages. Nevertheless, context-free grammar alone is able to fulfill the need for the construction of context-free grammar especially with special reference to ECDSA and its existential threat to the farthing.

I'm sure I don't know what you mean, but I'll have a stab at interpreting your riddle. Tongue

Materialist TOEs (theories of everything) cannot account for -- among other things -- a "first cause". If a person writes a new OOP language using another OOP language, where does "object" come from?

And that is precisely the issue my TOE addresses.
1780  Bitcoin / Bitcoin Discussion / Re: "Failure to Understand Bitcoin Could Cost Investors Billions" (Bitcoin's flaws) on: March 09, 2014, 03:13:11 PM
What does that have to do with whether the technology exists to improve nuclear?

I hope you realize energy is regulated and taxed such that it is controlled by cartels. Getting rid of that doesn't imply a Dark Age, rather it frees us to realize innovations which were suppressed because they are paradigm shifts which compete with the cartels.
Pages: « 1 ... 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 [89] 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 ... 248 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!