 Show Posts
|
|
Pages: « 1 2 [3]
|
Since this thread poped up again, may I ask what's the utility of "mycryptocode" again? I provided a random 10 char string and it got accepted?!
The same applies to smartmixer!
When mixing coins for the first time, you will receive a "MyCryptoCode" - a randomly generated unique string which will allow you to get coins only from pools that have no connection to your other transactions. Make sure to enter it before every mix to ensure the highest level of anonymity. While MyCryptoCode associates your inputs together, we use one way hash function bcrypt, industry standard for hashing passwords, to store the connection. Once a new order is created, we compare provided MyCryptoCode against all stored hashes to determine which inputs can be used. What this means, is that we can only determine the connection knowing the MyCryptoCode in the first place. For technical reasons we had to use reasonably low cost parameter for bcrypt function, it is still very unlikely someone would be able to brute force enough of the associated codes to make any connections in sensible time with current technology. You can enter anything You want there but it won't do anything as there are no hashes like that. |
|
|
|
Because of multiple requests we have now published a tutorial on how to use MyCryptoMixer - We also have an animated video tutorial that is work in progress. The tutorial will also be visible on the main page with the next update. https://mycryptomixer.com/blog/getting-started-with-mycryptomixer/Changing the mixing time isn't very intuitive: I can't click where it says "After 2 hrs", which is what I expected to do.
Noted, input fields will be added. The maximum is quite low, is that because you're still testing?
Yes, this is just for testing purposes, we have multiple pools ready to send into the site. |
|
|
|
We break the connection between coins you input and ones you get back
You will get coins that have no connection to your inputs on up to 5 output addresses that can be delayed up to 24 hours each.
It is the point that I would like to point out, setting a limit such as 24 hours will greatly facilitate the tasks of tracking, as the currencies will enter the mixing platform and will exit from it within 24 hours, so it is easy to track it down to link them. The solution is to increase the delay time for longer periods, but will the user trust you? During the delay period, where will the money be and who will have access to it? You say that the support team is available 24 hours, which means that more than one person has access to the private keys? Is this true? How do you solve the issue of trust? Hello, Thanks for the suggestion, we will think about increasing the delay to up to 72 hours. The money is being held in our wallet reserves, similar to any other mixing. Our support team does not have direct access to all of the funds. We do not want to disclose any information about private keys access because of privacy reasons, we use multisig solutions to keep everything in place. |
|
|
|
According to what I understand from the site, the maximum delay is 24 hours, how can this transaction break the link between the sender’s address and the recipient? Is there a time lock as the site is new and I don't think someone will guarantee the site will hold his coins for a long period of time?
The idea of mixing is very similar to BestMixer. Have you hired their developed team?
Why do not you publish an email address to communicate with you? How customers can find you if the site stops.
We break the connection between coins you input and ones you get back You will get coins that have no connection to your inputs on up to 5 output addresses that can be delayed up to 24 hours each. We are not affiliated with BestMixer/SmartMixer although we took some inspiration from their website design. Thanks for pointing it out, we have forgot to put the email address in footer, it can also be found in this topic - MyCryptoMixer@protonmail.com |
|
|
|
- You are loading external javascript from googletagmanager.com, they'll be able to inject js on your page, and they'll be able to track your visitors. Google is a US based company... Same as cloudflare
- You are loading external javascript from google-analytics.com, they'll be able to inject js on your page, and they'll be able to track your visitors. Google is a US based company... Same as cloudflare
Oh well, our GTM is ultra important because our SEO guys can not live without it. You can avoid this by using the TOR mirror of the site. We did research and many other sites are also using this. You use cloudflare's SSL... Cloudflare acts as a MITM... They DECRYPT every package between the browser and their servers, then POTENTIALLY re-encrypt this data using your server's ssl cert. Cloudflare is a US based company, if a 3 letter agency requests data, they'll give all unencrypted data (no doubt in my mind). The sollution is as easy as ditching them and moving to a letsencrypt x3 certificate... They even have a certbot to make life easy for you
The issue here is not the cretificate, it is the ease of putting load on our service through clearnet. We're present on tor network and you are advised to use it when accessing the service with highest privacy in mind. We're exploring the possibilities of making the service available without CloudFlare (or other public content delivery network), but since this takes time, for now we find it sufficient to offer tor alternative. I'm not pointing fingers here, but please note many other mixers also use CloudFlare or other doubtful provider for their clearnet service. - Your server support TLS 1.0 and TLS 1.1., miminum is 1.2
The CloudFlare is set to support old TLS standards, on our end we accept 1.2 and 1.3 only. We'll consider disabling these on CloudFlare too. - You are not enabling DNSSEC
- Your domain does not have clientUpdateProhibited set
We're going to investigate these options, though I can not guarantee either will be implemented due to the nature of our service. - You are not enforcing HSTS
- Your CSP header is not set
- X-Content-Type-Options header was not set
- XFO header was not set
- X-XSS-Protection header was not set
- X-Frame-Options header was not set
- Referrer-Policy header was not set
- Feature-Policy header was not set
- Access-Control-Allow-Origin header was not set
We're going to investigate and put approperiate headers in place - You have a robots.txt file set, this is often used to crawl your site and find vulnerable scripts
Our robots.txt is generic, there's absolutelly no restricted content on MyCryptoMixer.com website - mymixerxtukle6mo.onion is a V2 address... It's as easy as setting HiddenServiceVersion 3 in your torrc. You can even run V2 next to V3 if you really want
We opted in to use V2 address as our default address for recognizability. We'll consider adding v3 address in the future. - HPKP is not enabled
- Public-Key-Pins header was not set
- Public-Key-Pins-Report-Only header was not set
This is no longer a recommended practice. No other mixers are using it. - What's with all these methods to either contact you or get push notifications... You're a mixer, don't offer to send sms's or phone calls, don't have so many contact options...Your presence on bitcointalk and an email address suffices
Last time I checked we didn't offer sending SMS, making phone calls nor push notifications. Our contact options are restricted to contact form, email and bitcointalk topics. - Limit your attack vectors... Why would you run a blog on the same tld? Why such a big help center? The more scripting, the more potential attack vectors. If you want a blog and a ticketing system: fine... Rent two extra dedicated servers from a different provider, add an a-record for blog.mycryptomixer.com and for tickets.mycryptomixer.com, link to these subdomains instead of your main domain. If your blog contains a vulerability, the hackers will only learn info about those visitors that visited your blog... If there is a sql injection, they only mess up your blog's db, if they succeed in elevating permissions they now have access to a completely isolated server running only your blog...
As with the previous point. we do not have a big help center nor ticketing system. Our blog has no connection with the rest of the site. - Why wouldn't you go with a native segwit wallet? It makes you likeable in the community... Don't overload the first mb of those blocks if it's not necessary
Sending to native segwit addresses (P2WPKH) is still not supported by many wallets out there, we had to opt for P2WPKH-in-P2SH for the best support across available wallets and services. - Don't use any techology that won't work on Lynx or w3m... To start: no javascript... Not all browsers support this, and (as noted above) you'll be tempted to link to external librarys
We are considering opening an API for advanced users in the future. We are also working on a visuals stripped no js version of the service which will work on TOR strict security mode. The first thing I noticed is that setting a precise value using "Funds distribution" and "Transfer delay" sliders is very hard. It gets harder whenever you add a new receiving address.
Setting precise value is not advised. Using random values is highly encouraged. According to your FAQ, the mixing order is vald for 24 hours only. What will happen if the depositing transaction doesn't confirm within those 24 hours
Unfortunately you have to send us your LoG in this case. It is not possible to get around this without compromising security. Really appreciate the feedback Mocacinno. Please message me your bitcoin address so you can start testing the mixing process! |
|
|
|
"First 50 users are eligible for reward of 0.002 BTC!"
But where does it say only the first 13 will receive the funds first?
On top of the 50 rewards we will also provide additional 10 reputable forum users with 0.003 BTC for testing - sent by us upfront.
Please message me your bitcoin address if You would like to take part
Here, 4th reply in this thread  |
|
|
|
From now on only the regular review terms will work
What does that mean? Do you mean that people need to mix with their own funds first or something like this? If not: 1NinjabXd5znM5zgTcmxDVzH4w3nbaY16L Correct, Terms of participation- Your account rank must be “Full member” or higher! - You can’t participate if your account has negative trust - Your review needs to be constructive and have at least 250 characters Rewards- First 50 users are eligible for reward of 0.002 BTC! - Only 1 reward for each unique user! - After all reviews have been posted our team will choose the best one which is eligible for 0.01 BTC reward! How to start?- Hop on https://MyCryptoMixer.com- Test our BTC Mixer - Post your review and help us improve! - Message us on Bitcointalk with your Order ID and BTC Address to receive reward! - After receiving reward edit your post here and confirm it! |
|
|
|
There are a couple other disturbing points on the blog, but this one in which you actively state that you are helping people evade the law is the most disturbing one...
Quote
Crypto Trading in Countries With Legality Issues
Vladislav is an active Russian crypto trader. Although his country is looking to implement blockchain technology into applications across various industries, cryptocurrencies are completely banned in Russia. However, he remained strongly affirm to the prospect of Bitcoin and other cryptocurrencies and thereby utilised privacy tools (such as VPNs) to continue trading cryptocurrencies. Meanwhile, MyCryptoMixer has helped him greatly in allowing him to trade while keeping his activity anonymous from the government.
When Vladislav cashes out his Bitcoin profits to a decentralised P2P trading platform, he ensures that his activity will not be easily tracked through multiple buyers around the world. MyCryptoMixer allows him to send to multiple wallets from his wallet, while preventing anyone from tracing the bitcoins back to his wallet.
We strive to avoid political discussion but in this case we will comment that privacy and freedom are basic human rights.
- I was curious enough to check the address you sent the testing coins from, I've been able to get the addresses of so far 5 tester. It's not really realted to the review itself, but may leave the door open to some privacy concerns about a mixing not mixing their coins.... (or maybe it's just me being paranoid)
This is part of the task... now try to find them after the testers have mixed 
Reading the following on the Letter of Guarantee some questions arose
Quote
when you are facing problems with your mixing order. The Letter of Guarantee is only available during the active mixing operation
I understand you can make some mistakes that should be corrected before the mixing ends; I can think of people putting a wrong output address.... and not many more things (which I'm sure there are).
But the real question here is: if the letter of guarantee is only valid during mixing, and after mixing "all" logs are destroyed, what would happen in the event of someone not receiving the coins because of a mistake on the sites end? Or any similar incident that could not be foreseen until after the mixing takes place.
The Letter of Guarantee is signed via PGP and we delete it from our server after a successful mix. We don't need to have it on our server as we only need to verify the PGP signature to be sure that it's real. In case a problem arises: 1. You post the LoG publicly and all users can see that it was signed by us 2. You can track the bitcoin addresses in there and see if the coins arrived The LoG obliges us to send coins to selected outputs when you input coins. If we do not comply You can show it to the community and end our reputation.
Technical details about MyCryptoCodeWhile MyCryptoCode associates your inputs together, we use one way hash function bcrypt, industry standard for hashing passwords, to store the connection. Once a new order is created, we compare provided MyCryptoCode against all stored hashes to determine which inputs can be used. What this means, is that we can only determine the connection knowing the MyCryptoCode in the first place. For technical reasons we had to use reasonably low cost parameter for bcrypt function, it is still very unlikely someone would be able to brute force enough of the associated codes to make any connections in sensible time with current technology.
Our current changelogMixing calculator Create an detailed explanatory video and dedicated page on how the mixing process works There was a small text mistake with MyCryptoCode / MyMixerCode - It’s the same thing Note about transaction fees added to every address on Creating mix screen Later onMore precise, manual input for delay and percentage distribution |
|
|
|
will my CryptoCode A now ensure I don't receive coins from either address A and/or B when next I decide to mix ?
Correct, It will ensure You won't receive coins from neither A nor B in future mixes. While MyCryptoCode associates your inputs together, we use one way hash function bcrypt, industry standard for hashing passwords, to store the connection. Once a new order is created, we compare provided MyCryptoCode against all stored hashes to determine which inputs can be used. What this means, is that we can only determine the connection knowing the MyCryptoCode in the first place. For technical reasons we had to use reasonably low cost parameter for bcrypt function, it is still very unlikely someone would be able to brute force enough of the associated codes to make any connections in sensible time with current technology. We have now ended the campaign for reputable members with coins sent upfront. We have sent coins to:@efialtis @Harkorede @Danslip @Dalmar @mrdeposit @seleme @PuertoLibre @khaled0111 @Csmiami @Xardasim @STT @Continuous @asu Looking forward to hearing the reviews! From now on only the regular review terms will work |
|
|
|
--snip--
We were thinking to go Senior member and up, but send me Your BTC address and we'll do it.
---
Here you go! 1FmXgj3nqZjq6R6S3KGprum6anHYpFdZPa I may publish it tomorrow, since it's already late and I want to try the delayed times I've already seen you have Please send another address in a private message. I'm willing to try this mixer. Why not, everyone deserves a chance. this would be a very cheap way of trying to scam and I don't think that's the case here.
is there any requirement here for the minimum mixing amount? Is it okay to mix "only" 0.002 BTC?
We have set the minimum amount at 0.003. Reason is that it's just not good economically with around 0.25mBTC fee per address to mix less than that. Splitting Your order into 5 outputs will kill you with on-chain fees. Please message me your address and let's get mixing In your website, you claim that you remove all logs after the mixing process is completed.
However, the "MyCryptoCode” utility, according to your website again, is to prevent sending the user his own coins in later transactions/mixing. Doesn't that mean you save all deposit transaction inputs in your databases and link them to the user's id/MyCryptoCode!?
Am I missing something?
By the way, am interested in testing your mixer and leave an honnest review.
The "MyCryptoCode" is a random, unique identifier, we associate with the coins you send us. We do not associate the code with transactions you receive from us, so even if you were to use it, the trace is lost the moment your coins enter our mixer. While MyCryptoCode associates your inputs together, we use one way hash function bcrypt, industry standard for hashing passwords, to store the connection. Once a new order is created, we compare provided MyCryptoCode against all stored hashes to determine which inputs can be used. What this means, is that we can only determine the connection knowing the MyCryptoCode in the first place. For technical reasons we had to use reasonably low cost parameter for bcrypt function, it is still very unlikely someone would be able to brute force enough of the associated codes to make any connections in sensible time with current technology. Please send us your BTC address |
|
|
|
I have some experience with mixer, so if funds are provided by the mixer, I'd have no trouble doing some testing. Altough, you'll have to keep in mind that I'm not an IT guy, so my review wouldn't be focused on the technical aspects of the mixer
We were thinking to go Senior member and up, but send me Your BTC address and we'll do it. I respect the fact you guys are doing the best to make your service popular but i dont see any reason why myself and others will leave long-existing bitcoin tumbler like Blender.io that offer service fee from 0.5% to 2.5% and make use of a mixer company created last year and offer see ice fee of 0.5% to 5%.
But for the review i also recommended loyce and Darkstar
The fact that You are wearing a Blender.io avatar and signature doesn't make it sound objectively at all. You never know, and in my opinion it's better to have enough options with these types of services in as much as their long-term goal is to provide better security and remain in service, we've had multiple long-existing bitcoin mixers either getting seized by some Agencies or Exit scamming, which led to some thinking mixing might eventually go extinct.
Exactly We have already sent out the first BTC for testing to @efialtis @Harkorede @Danslip @Dalmar |
|
|
|
Negative trust members are not allowed. They can have a lot of experience and can give honest reviews if they are using this kind of service and have worked before.
Need to know a specific reason, I think I can give a good review, worked with a lot of mixing sites before but still cannot review here.
Regards
Our service is based on trust and we believe the same should happen on happen on Bitcointalk. As far as a couple points could be just some people not liking your thing, more than that just doesn't put you in a good light. None of the experienced members around will go ahead and „risk“ their funds - even if it’s not a lot - in order to do this. You may reconsider, choose trusted members and send them the „bounty“ upfront so they can test and review. That’s just my two cents though.
This has happened before, and I can assure that no experienced member will risk their BTC to try out the platform, If OP indeed needs honest reviews from reputable users, he would have to send them the rewards first or at least make use of an escrow. That's a fair point. Thanks for the suggestion as we are pretty new on Bitcointalk and are always looking to improve. On top of the 50 rewards we will also provide additional 10 reputable forum users with 0.003 BTC for testing - sent by us upfront.Please message me your bitcoin address if You would like to take part @efialtis @Harkorede |
|
|
|
Ladies and gentlemen, Recently we have started our cryptocurrency mixing service - https://bitcointalk.org/index.php?topic=5235190.msg54089921Our website - https://MyCryptoMixer.com, also available on TOR - http://mymixerxtukle6mo.onion/We are here to bring privacy back to all cryptocurrency users by making coins mixing as easy as possible! To get some more opinions we have launched a Review Program to reward every user that gives us a review of the service! Terms of participation- Your account rank must be “Full member” or higher! - You can’t participate if your account has negative trust - Your review needs to be constructive and have at least 250 characters Rewards- First 50 users are eligible for reward of 0.002 BTC! - Only 1 reward for each unique user! - After all reviews have been posted our team will choose the best one which is eligible for 0.01 BTC reward! How to start?- Hop on https://MyCryptoMixer.com- Test our BTC Mixer - Post your review and help us improve! - Message us on Bitcointalk with your Order ID and BTC Address to receive reward! - After receiving reward edit your post here and confirm it! We are keen on hearing all of your reviews so we can improve our service! Best regards, MyCryptoMixer
On top of the 50 rewards we will also provide additional 10 reputable forum users with 0.003 BTC for testing - sent by us upfront.
We have sent coins to:@efialtis @Harkorede @Danslip @Dalmar @mrdeposit @seleme @PuertoLibre @khaled0111 @Csmiami @Xardasim @STT @Continuous @asu Looking forward to hearing the reviews! From now on only the regular review terms will work |
|
|
|
Hello! We are in no way affiliated with SmartMixer aka BestMixer. And yes... We are developing ETH Mixing which Alpha should be available on our site this summer. Pretty much all mixers are working on this as there no clear leaders in this market. 1. The blue color is part of our branding which You can see on our site! 2. Which button? We took some UI inspiration from them but improved the UX, also Mixing calculator is coming soon 3. SoonTM 4. Similar but ours is actually signed in PGP, their... not really, it's useless in this form because the community cannot verify it. 5. You can use the site without Cloudflare by connecting via TOR. Unfortunately Cloudflare is required for DDOS protection and most mixers are using some kind of 3rd party for this - Cloudflare too. Thank You for giving us early feedback as we are looking to become a leading mixer, one that actually gives privacy... |
|
|
|
Clearnet: https://MyCryptoMixer.comTOR: http://mymixerxtukle6mo.onionBlog: https://MyCryptoMixer.com/blog/Contact: MyCryptoMixer@protonmail.com
IntroductionLadies and gentlemen, We are very pleased to be able to present our new mixer to the BitcoinTalk community! We believe that making cryptocurrency more anonymous is one of the first foundations of the bitcoin project and we’re here to help - Making mixing simple! Bitcoin is one of the most efficient and awesome ways to make transactions online. Like almost everything in the world, doing so has its own disadvantages. Bitcoin is pseudonymous, and this exposes your privacy and security to plenty of risks. However, through bitcoin mixing, you can prevent people from snooping around your business, and you can avoid being victimized by threat actors because it hides your real-life identity from them. It is important that you protect your identity, and you can start doing that by mixing your coins today! How does it work?Step 1. Choose the coin you want to mix Step 2. Enter the destination address to receive the clean coins Step 3. Set the percentage fee Step 4. Set the delay duration Step 5. Download the Letter of Guarantee Step 6. Send your coins to the generated address Step 7. Receive clean coins We are privacy focused1. Our server architecture makes it almost impossible to trace back coins to your old wallet. 2. All logs are deleted 24 hours after creating your order. 3. You can use our service via TOR - http://mymixerxtukle6mo.onion/4. You do not need to create an account or leave any other information to mix coins 5. Unlike other mixers we do not even store transactions statistics which could be later used to deanonymize users. Why should I mix coins?Bitcoin is not private and bitcoins are not fungible. Bitcoin blockchain is open and permissionless. As long as anyone can connect any bitcoin address with you as a person (or company) you are not safe and your bitcoin transactions are not anonymous, not even pseudonymous. Literally everybody who knows one of your bitcoin addresses can track your previous or even future transactions. As a matter of fact bitcoin is a perfect financial tracking tool. You can read more about this as an article on our blog - https://mycryptomixer.com/blog/why-mix-coins/FAQ▶️ How does your system work?When there are KYC (Know Your Customer) procedures, anonymity ends. Unfortunately, almost all exchanges require users to verify their identity for security and anti money laundering purposes. This means, that your exchange address is directly connected to all your personal information. Tracing incoming transactions back, can lead to your wallets, holdings, other accounts and transactions.
To override this problem, you can use our mixer.
Instead sending specific amount of crypto to destination address, you send them to us. Our service „mixes” all the transactions between users, making funds impossible to trace and connect with original owner. In the end, your destination address will receive transaction from one or more addresses, that can’t be related with any of your wallets or exchange accounts.
Here are some examples why you should mix your crypto and how not-anonymous bitcoin is:
https://news.bitcoin.com/chainalysis-ransomware-arrests-coming/
https://bravenewcoin.com/insights/blockchain-analysis-leads-to-darknet-takedown
https://thenextweb.com/eu/2017/02/21/danish-police-hunt-down-criminals-using-bitcoin/▶️ Do you store any logs?Our mixer main mission is to protect anonymity of cryptocurrencies users . You can be sure that no logs or any other personal information are stored in our databases longer, than the time needed to fully process mixing transactions. 24 hours after successful mixing, all logs are automatically and permanently deleted from our databases. Unlike some mixers we don’t even track our transactions statistics which could lead to deanonymization - https://cointelegraph.com/news/europol-shuts-down-200-million-crypto-mixing-service-bestmixer▶️ How can you avoid a return of same coins when no data is saved?One of the main doubts when using cryptocurrency mixers regularly, is the possibility of receiving coins, that were previously yours, and „have your fingerprints” on them. To avoid situations like that we designed a mechanism which provides untraceability by fully eliminating risk of getting previously owned coins.
When mixing coins for the first time, you will receive a "MyCryptoCode" - A randomly generated unique string which will allow you to get coins only from pools that have no connection to your other transactions. Make sure to enter it before every mix to ensure the highest level of anonymity.▶️ Do you support SegWit addresses?Yes, you can freely use SegWit addresses with our service.▶️ What are the fees for using your service?The minimum mixing fee starts at 0.5% and ends at 5%. Irregular fee makes it harder to correlate coins your receive with coins you input. The fee also allows us our service to operate and pays the fee for getting fresh coins.
Please also note that like with any other on-chain transaction, miners fee is also subtracted. This is a flat fee of 0.25 mBTC per each destination address, which we will periodically update the fee to roughly reflect actual miners' fees.▶️ Can I trust you large amounts of bitcoins?Please check our max deposit amount beforehand as we not always hold enough coins for bigger mixes. If you do not trust us you can always split your order into multiple smaller mixes, remember to use your MyCryptoCode to avoid getting the same coins back!▶️ I have accidentally closed the browser's window, what should I do now?If you have already sent coins your order will be executed normally, you can also get back on the page by using the order id from your Letter of Guarantee. Your mixing page is valid for 24 hours.▶️ How long does the deposit address stays actual?The mixing order is valid for 24 hours, starting from the time you have created the order.▶️ How many confirmations is it required to consider coins arrived?We require 1 blockchain confirmation for all orders below 1 BTC, everything above you will need to wait for 3 confirmations.▶️ Can I work or advertise with you?Yes! Any help with developing our service is welcome. For users who want to actively spread the word about our mixer we got special affiliate program! Participating in it will let you earn, by taking commision, which comes from fees paid by users that you invited.If you have any business inquiries or special offers for us, please contact us on MyCryptoMixer@protonmail.com
Contact InformationClearnet: https://MyCryptoMixer.comTOR: http://mymixerxtukle6mo.onionBlog: https://MyCryptoMixer.com/blog/Contact: MyCryptoMixer@protonmail.comWe are looking forward to your opinion on how we can improve and provide an even better service! Best regards, MyCryptoMixer |
|
|
|
|
