It has been a long time since i last ran vmware player (at work, we have power partitions, at home i switched to openVZ for my virtualisation needs a long time ago), but after some quick googling around, you should be able to go to "VM > Settings, click the Options tab, and select Guest Isolation", then disable "drag and drop" and "copy and paste". To disable the network, you should probably go to your network adapters on your local machine and disable the "VMware Virtual Ethernet Adapter". For the local folders: IIRC, the default options would be not to share any local folders, so if you use the default settings the folder sharing should be disabled already.

These are the  things that immediately come to mind... Maybe somebody else will weigh in on this topic and give some more tips and tricks?

Good luck!

In the past, there were vulnerability's in virtualbox that could have been exploited, but the odds of running a virus in a very recent virtualbox vm that's built to exploit any unpatched vulnerability's is very low. You do have to make sure you isolate the VM properly... If your network isn't disabled, a virus could spread over the network, same with shared drives and maybe those drag and drop options...

That being said, malware *could* exhause the host's resources, so it's possible your PC will freeze because of a virus running in a VM container, but this should be harmless...

Running in a VM is better than running in sandboxy afaik... the level of isolation would be a lot better in a virtual environment vs a sandbox on your system.

I wanted to add a sidenode to your pruning setting: you do have to realise that when you run a pruned node, a reindex will force you to re-download the complete blockchain again.... So, eventough running a pruned node is fine, it does limit some of the functionality.

You can always install vmware player on your local machine, just make sure the network is disabled, nothing is shared, drag and drop is disabled,...

source: http://Https://utwentebs.eu.qualtrics.com/jfe/form/SV_bDCu7uXoh38A8l

I've tested the code, and it seems to work fine (didn't finish the purchase tough)... I'm actually tempted to buy one, eventough i already have a Ledger HW.1, a nano S, a trezor model T and a trezor one (just because i like to spread the risk by using different HW wallets instead of keeping all my funds one one device).

My main problem is that the device will be sent from the US, and the 60% promo code + S&H still comes down to ~$54, so if the customs stop the package it will be taxed quite heavily... The import duty for a $54 package is ~€22,88, bringing the total to ~€75...

Still a very nice code tough ....

Well... I've noticed the ebay market being full of ripoffs... These sellers try to sell those old block erruptors to unknowing "victims" giving them false hope of free money.
In the future, their price might rise due to the collector's value tough... But that's about all they can be used for: a conversation piece or a piece of bitcoin history, but not for actual mining (well, in theory, they *can* be used to mine, in the same way as you can use your cpu or gpu... Burn a lot of electricity and get nothing in return)...

It's kind of hard to follow what you're saying, but if you try to send funds to an address managed by the same wallet, you'll only see the fee being deducted from your balance.

A transaction is being generated and broadcasted, the transaction has a fee, but since you're spending unspent outputs funding an address in same wallet , the only balance difference is the fee being payed.

Like i said: ethos gives you an image... You can write it to an SSD, HDD, USB, SAN, floppy (not really :p, a floppy wouldn't have enough space to hold the image).
But in case you don't want to use ethos, you can still try to answer some of my initial questions and we can see what went wrong on your first trial

You were talking about running the OS from your SSD, not an USB... And even then, you can always put the image on a new usbstick anyways, it's not like the stick will store your actual wallet, so if it is fried, nothing is lost but one or two hours of your time (offcourse, you shouldn't put important data on the same stick you run your mining os from)...

AFAIK, ethOS comes as a disk image, so you should be able to write it to your SSD... Untested by me tough, just based on what i've read about this OS in the past

This topic actually belongs in the altcoin mining subforum.

That being said, your initial description of the problem isn't really informative:


Could you at least tell me/us:

• Which mining software you're using (you already told us you're mining ravencoin)
• Which distro you're running and how you set everything up
• If there are error messages being shown
• If there's anything in the syslog/debug log
• Wether or not you were running in daemon mode, or maybe using screen over an ssh connection... Or were you working straight from the console.
• Did you OS freeze, or just the miner
• Which steps you already took in order to debug the problem
• Maybe even some profit calculations... I don't know if it's worth a lot of time to investigate if you estimate to make a couple cents a year vs several thousand $?

I don't mean to nitpick, but this solution wouldn't change a thing... Even if i only entered one receiving address, the address would still be funded with 2 new unspent outputs. If i wanted to spend those 2 unspent outputs, fee-wise, it wouldn't matter if they were funding 2 distinct addresses or one address, the transaction size would be roughly the same for both situations...

The transaction size is based on the number and type (P2PKH, P2SH,...) of inputs the number and type of outputs... Not on the address that was funded

EDIT: after re-reading my post, i realise i sound a bit harsh... But the way i see it: you payed me a couple bucks to get a review you can actually use to improve your service... Sure i could have said: "everything looks find, your mixer is perfect", but if i did such a thing, you would have payed me to kiss your *ss . Instead, i decided to give a review focussing on the things you NEED to fix, so that the couple bucks you spend on my review will allow you to improve your system... There are many positive points about your mixer, but since everybody can see those, i didn't feel a need to repeat them once again...

On friday, i received some test funds, but since i payed a suboptimal fee (slightly less than the recommanded fee), it took the transaction a while to confirm. Today (monday), i noticed i had received the mixed coins...

I have discussed my security concerns in a previous post, especially the MITM by using cloudflare's ssl certificates and the includes of google tracking codes worried me...
That being said, i found the testuse of your mixer pretty straightforeward, i could easily navigate your menu's and i was pleasantly supprised by getting a letter of guarantee signed by you (and not [banned mixer]).

The one thing i noticed:
Including fees, i have spent 0.001962 to make a 0.0015 BTC transaction.
Your exact value and fee calculator told me that a 0.0015 BTC deposit would result in a 0.00128 withdrawal.
When i combine the output values of the two transactions funding my withdrawal address, i get 0.0012795... I know, it's only 0.0000005 BTC (50 satoshi's) less than you promised, but since you already take quite a hefty fee, i think that you should make sure the calculated output value matches the actual output value.... On top of this, splitting the output into two unspent outputs increases the fee i'll have to use to spend both by about 0.0001 BTC compared to spending a single unspent output (at current feerate).
This means that, after spending 0.001962, i'll get the equivalent of 0.0011795 BTC in clean, spendable funds... Thats ~40% less... Offcourse, the main reason for this fee is the fact that you use a percentage based AND fixed fee, and the mining fee is currently pretty high compared to a low input value (and i used 3 inputs for my deposit tx, to it was a tiny bit larger than a "default" tx)... I'm sure the fee is a lot less if you mix bigger values at a time the network fees are more reasonable... But still, ~40%...

I know why you don't allow people to chose the output timeframe, nor the number of outputs, nor the size of the outputs, nor the exact fee... However, i like to feel in controll... Personally i'd like to have some kind of "expert - i know what i'm doing" menu that allowed to to chose the size and number of outputs, the feesize and the delay.

Ending on a (very) positive note: i traced the outputs funding my withdrawal addresses and ended up on a poloniex wallet for one of the outputs, and an unknown wallet holding ~80 BTC after  +1000 transactions... This means that your system is telling the truth and the funds are coming from a clean source.
This being said, it does look like you get a big unspent output from a "clean" source, and you keep re-using this unspent output to fund all mixing sessions...
It's like:

unspent output of 3 BTC from a clean source funding your address
unspent output of 3 BTC used to pay first client => 3 BTC in, 2.9 BTC to your change address, 0.1 BTC to your first client
unspent output of 2.9 BTC used to pay second client => 2.9 BTC in, 2.7 BTC to your change address, 0.2 BTC to your second client
unspent output of 2.7 BTC used to pay thirth client => 2.7 BTC in, 2.6 BTC to your change address, 0.1 BTC to your thirth client
unspent output of 2.6 BTC used to pay fourth client => 2.6 BTC in, 2.3 BTC to your change address, 0.3 BTC to your fourth client

The thing is: it will allow me to find other people that used your mixer, since i only have to follow the trace after my own mixing session. This is not a problem, as a matter of fact, it's pretty common to see this kind of behaviour amongst mixers, as a matter of fact, it's the same with chipmixer (if i initiate a mixing session and get my chips, i can now follow other people that used chipmixer).

As for now, i will not use [banned mixer] untill the security flaws have been fixed and you think about the exact fee calculation, but all in all, i'm impressed

Good luck!

Strange, You did tell me that i would get the 20th spot:



So you should already have my address

Sure... But:
step 1: if your computer is infected with a virus or a keylogger, you lose all your funds
step 1: since you now have a blockchain account, you run the risk falling for a phising scam
step 2: if qr-code-generator saves your query, they have your private key
step 2: if you visit a non-ssl version of the site, dozens of people will be able to capture your private key
step 3: downloading on itself isn't even safe... Nor is printing using a network printer

Do not generate a paper wallet from an online machine, do not generate a paper wallet using a web wallet.

Use an offline tool, stay offline, use bip38 encryption, never let your private key touch an online machine (don't even go offine directly after creating your key, reboot first) like the walktrough i initially posted on this very topic.
If you can't follow these logic steps, your paper wallet will LESS secure as the online wallet you used to generate your key in the first place... It would defeat the purpose of a paper wallet.

If you're afraid you'll lose your funds, make a paper wallet for the testnet first, fund it with testnet coins, sweep it with a testnet wallet...

One of the bitcoin slogans is "be your own bank"...
YOU should controll your OWN private keys... If you fall for a scam there is NO central bank you can complain to, there should be nobody controlling your keys but yourself.
There are a couple online wallets, but if you use them you are trusting them instead of yourself.

In your case, the only one you can actually blame is the scammer who took your money... You can (and should) go to the police, but you should realise they cannot give your money back and they can not force anybody to give you your money back... No central authority and confirmed transactions are virtually irreplaceable (unless you own billions of dollars worth of asic's)

Hi,

I haven't received the testing fee (yet), but i was a bit anxious, so i decided to analyse the site before actually using it. In order not to be influenced by previous posters, i decided not to read other reviews before making my own, as a result i might say things that have been said before.

All in all, i like the way it's designed, but i'd like to see several issues being fixed before i would even consider using the service for actual mixing:

• You're using cloudflare's SSL certificates... That's a big no-no for me (cloudflare acts as a man in the middle)
• You're importing scripts from google tag manager. This means google can log who's using your site
• A lot of javascript is being used... I haven't tested your tor mirror, but i like to disable javascript when using my tor browser
• 4 cookies are being set...
• HSTS is not enabled
• CSP header was not set
• The referer policy was not set
• X-Frame-Options header was not set
• X-XSS-Protection header was not set
• I see a _gat_UA-124028682-1 cookie... Google analytics? Really?

The issues on this list result in a companie (an US based one!!!) being able to see all unencrypted data that's being sent between your enduser and yourself, and a second company won't be able to see the actual data, but will still have access to all your customer's ip's, browser fingerprint, times, referrers, exit pages,...
Next to this, i'll need to enable javascript, so it'll be easyer to fingerprint my browser and there were no precautions for (amongst others) XSS.

Next to this, i personally think 4-5% fee is on the high side, and i see you're linking to the public key of [banned mixer], does this mean i'll get a letter of guarantee signed with [banned mixer]'s private key? This isn't a real problem, but me (a customer) would like to get a letter of guarantee signed by you ([banned mixer]), NOT by [banned mixer]

The rest of the review will follow once my slot has come up and i received the testing fee

BTW: don't take this list the wrong way, there's a lot on the list, but nothing that can't be fixed... I'd rather see you succeed that fail, so i'd rather see you fix the issues and do a lot of businnes

In 3.3.6, under preferences, under the tab "fees" there should be an option "edit fees manually". If you enable this option, you should be able to go as low as 1 sat/byte... However, you do have to realise electrum does not guarantee your tx will find it's way into a block within 240 blocks if you pay a x sat/byte fee. It's only an estimation based on the last couple of blocks, the fee (in sat/vbyte) and the size of the mempool.
If, by the time 240 more blocks have been found, the mempool gets flooded with loads of transactions paying higher fees (in sat/vbyte) than you, you'll have to wait longer... The shorter the estimated time, the higher the odds of your tx getting into a block within the estimated timeframe.

One last tip: if you start messing with the fees, it might be wise to enable rbf by default...

I don't have ledger live installed on my workpc, so i cannot give you a walktrough...

However, if you connect your ledger to electrum and enable the address-tab you should see all addresses (funded, previously funded and unfunded up to the gap limit).

This being said, as a normal user, there is hardly any usecase for this... There are only a very little amount of circumstances where you (as an enduser) would need to find out how to find the list of change addresses. As long as your balance is ok, and you don't see outgoing transactions you didn't make, everything should be fine