Bitcoin Forum
June 10, 2024, 03:34:43 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1] 2 »
1  Economy / Gambling discussion / Re: UEFA Champions League 2023/24 Season on: May 29, 2024, 05:22:51 PM
I think the Champions League Final this time will be very fierce for El-Real, considering that Dortmund's defense is difficult to penetrate and has conceded fewer goals than Real Madrid, and it is very likely that there will be extra rounds, or even a penalty shootout to win.
Dortmund is facing an uphill battle against Real Madrid, considering Real Madrid really plays well and if so, Dortmund won't have much of a chance to lift the Trophy.
By scoring an early goal, Dortmund can put some pressure on Real Madrid and make a surprise result happen.
But we all know how difficult it will be for Dortmund to make Real concede an early goal.
2  Other / Beginners & Help / Fighting scam and crime online means supporting privacy on: May 29, 2024, 05:19:27 PM
Especially in crypto, scammers and criminals are crossing our ways frequently, causing losses and damage to victims.

Unfortunately, scammers and criminals are abusing privacy to hide behind, to be protected from getting exposed and caught.
As a result, it’s happening sometimes for privacy to be tied to scammers and criminals, what’s very sad because privacy is also crucial to protect us against scammers and criminals.

Here, we can start to act and try to bust any scammer and criminal. We can do our part to help that privacy doesn't get abused by fraudulent actors.

If all fraudulent actors cannot be sure to still get exposed despite abusing to hide behind privacy, and all criminal activities will be exposed and get held accountable for fraud, we will see much less fraud. In conclusion, our goal should be to expose criminal people and not allow criminal actors to hide behind privacy.

We can start right here in Bitcointalk, to expose scammers or malicious distributors of malware.
Bitcointalk has an own section, where scam gets exposed, called Scam Accusations. Many members are putting in a lot of effort to bust scammers.
Lafu has started his own initiative to expose malware distributors and he’s vocal to warn about such malicious actors.
Forum members can try to support Lafu and his campaign any time to expose malware distribution.
Privately, we can expose scams and fraud on social media as well and we can make aware about it.

Let's fight scammers and criminals and don't let them hide behind privacy!
Privacy is too valuable to get abused by fraudulent actors!


PrivacyOui
3  Other / Beginners & Help / Re: [Merit] Share your best posts/threads with Fillippone to be merit assessed on: May 29, 2024, 05:08:07 PM
Round 1

Check twice before sending transaction if it will impact your privacy negatively
Category: Privacy Advice
Section: Beginners and Help

Honeypot websites are dangerous for our privacy - BEWARE
Category: Privacy Discussion
Section: Beginners and Help

Honeypot websites are dangerous for our privacy - BEWARE
Category: Privacy Discussion
Section: Beginners and Help

Say OUI to privacy!
Category: Privacy Discussion
Section: Beginners and Help

Say OUI to privacy!
Category: Privacy Discussion
Section: Beginners and Help
4  Other / Meta / Bitcoin advertisements are a bit outdated on: May 05, 2024, 12:53:47 PM
Recently, I came over a Bitcoin advertisement from Bitcointalk (theymos has enabled some advertisements for Bitcoin itself) but it seems some statements are a bit outdated.

For example, one advertisement says Bitcoin is still beta software and it looks like more like a statement from a Bitcoin critic:



Personally, I would not expect such a statement in a Bitcoin forum because after 15 years, Bitcoin is very proven and not really beta software anymore.

Maybe it's time to remove some advertisement slogans once getting outdated?
5  Economy / Gambling discussion / Re: Premier League Prediction Thread 2023/2024 on: May 05, 2024, 11:45:55 AM
Manchester City are one point behind Arsenal but it still lacks one more game in addition to the two last rounds so a total of 9 points comparing to gunners which only could collect 6 points.
Manchester City really needs Haaland in his best form. He can achieve some wins for Manchester City, where he can be a deciding factor. His ability to score goals is unprecedented and Manchester City's players are well adviced to search him, to give him scoring attempts and Haaland will likely convert to goals for Manchester City, which Manchester City really needs in such a tight battle.
I believe Haaland will be a deciding factor for Premier League.
6  Alternate cryptocurrencies / Altcoin Discussion / Re: There is too many coins and chains but why need? on: May 05, 2024, 11:36:13 AM
There is too many chains and coins.
Just select an established chain or coin like Bitcoin and Ethereum and you will be probably safe.
Most TOP coins are very established already and you can make a good decision by selecting established coins.
Such coins will be much safer to be still leading in a few years.
7  Alternate cryptocurrencies / Altcoin Discussion / Re: I Got 1 Million $SHIB airdroped in a trading competition! What Should I do? on: May 05, 2024, 11:34:22 AM
A trading competition is happening at a local exchange in my country. The exchange is a trusted and established one and I have zero doubt about the $SHIB tokens I can receive as a reward in my Shiba Inu exchange wallet. I have been using this exchange since 2018 without any major issues, so you can understand the amount of confidence I have in them.

I mostly invest in Bitcoin, and sometimes in important altcoins. However, I don't believe in the concept of meme coins and don't pursue them. I'm interested in knowing whether I should continue holding onto my current tokens until the next bull run, or if I should sell them to buy Bitcoin or other altcoins. I would appreciate a piece of good advice from the community.
Yes, buying Bitcoin is your best move you can make.
Memecoins can lose value pretty quickly while Bitcoin is much more safe to lose value.
No one knows where Shiba Inu will be in a few years but we can be sure about Bitcoin to be a leading coin even in a few years.
8  Alternate cryptocurrencies / Altcoin Discussion / Most "Memecoins" are not even coins, most "Memecoins" are tokens on: May 05, 2024, 11:32:35 AM
When it comes to memecoins, it needs to be mentioned: Most "Memecoins" are not even coins, most "Memecoins" are tokens.

Often, it is just a marketing move to designate a crypto asset as "Coin" but in reality, it's a token.


A coin is based on its own, unique Blockchain, like Bitcoin, Litecoin or Dogecoin
A token is based on an existing Blockchain, like Ethereum tokens (for most ICOs) or based on BNB (for many Memecoins).

And today, most "Memecoins" are not even coins, most "Memecoins" are tokens. Keep in mind when investing.
9  Alternate cryptocurrencies / Altcoin Discussion / Re: Which altcoins have performed the best in terms of price growth in 2024 ? on: May 05, 2024, 11:27:37 AM
Which altcoins have performed the best in terms of price growth in 2024 ?
Dogecoin had big gains recently but it is generally better to avoind Memecoins.
Doge is a special case because it is unique, which we have very seldom from Memecoins.
Dogecoin is an original coin.

Most "Memecoins" are not even coins, most "Memecoins" are tokens
10  Alternate cryptocurrencies / Altcoin Discussion / Re: What did you really think about the future of solana in the next 2years? on: May 05, 2024, 11:25:55 AM
Solana is not very ready to tackle challenges a TOP 5 coin needs to tackle.
For example, it is very centralized and decentralisation will be an important topic to tackle. Even Ethereum is sometimes accused to be too centralized.
11  Other / Beginners & Help / Re: My decision on bitcoin on: April 28, 2024, 03:19:37 PM
I recently created a post asking if I should buy bitcoin now or wait for the dip, and majority of the response I got from the post, advised that I should buy now rather than waiting for the dip due to its volatile nature, and I'm satisfied with this response and I'm willing to bear the risk.
Reason for all these questioning, I have a dream of becoming a long term bitcoin holder but, dreams aren't achieved with words alone, an action is needed for the start up, so I have decided to sell one of my less used phone for the purpose of buying bitcoin.
I'm really eager to purchase my first bitcoin in satoshi.
Technically, Bitcoin gets more expensive every day because it's getting more scarce. Less Bitcoin will be available to be traded every day, especially now due to Bitcoin's halving which only occurs roughly every 4 years.

It's important to just HODL because you'll avoind any short-time price speculation by doing so.
12  Bitcoin / Development & Technical Discussion / Re: bech32 addresses vs. bech32m addresses: which ones are cheaper for tx? on: April 28, 2024, 03:14:29 PM
Here's a detailed answer to your question; Taproot (P2TR; pay-to-taproot) addresses are not necessarily cheaper in total but for some cases, it’s recommended to use P2TR:



Quote from: murch.one
All four described output types satisfy single-sig usage, although P2TR can do a lot more under the hood. Generally, the transaction cost is cheaper for newer output types: Legacy > Wrapped Segwit > Native Segwit. While the overall cost of P2TR input and output is slightly higher than that of P2WPKH, P2TR shifts a portion of the cost from the input to the output. When you don’t know at what feerate you’ll need to pay to spend your funds later, you should keep them in P2TR outputs, since they’ll have the smallest input cost. Likewise, you should prefer P2TR when others are paying you: the sender pays the output cost while the recipient pays the input cost. Although, you may still bump into some counter-parties that cannot send to bech32, and many that cannot send to bech32m, yet, the economic incentives are clear. If your preferred wallet or service doesn’t support bech32(m) yet, please do ask them to do so.

If you’re considering your transactions’ data footprint on the blockchain, you should also strictly prefer P2TR as it get you the most bang for the byte (see column “raw B” in table above). The data footprint for the output types is P2SH-P2WPKH > P2PKH > P2WPKH > P2TR.

More information can be found here: https://murch.one/posts/single-sig-output-types/ (scroll down to "Cost considerations")



13  Economy / Service Discussion / We should not rely on centralized privacy providers on: April 26, 2024, 04:56:44 PM
Privacy is a costly good and we really need to consider how to protect our coins by maintaining a good privacy.

As we know from Bitcoin, all address connections are public, possible to track via Blockchain analysis for everyone. Sending a transaction from one of our addresses to another will cause a connection, not limited if it’s our own address or an address from someone else. It is up to us to maintain a good privacy and avoid that our coins to tell too much about us.
Bitcoin is not private but it can be private if we are careful enough to maintain a good privacy.

When trying to maintain a good privacy, we can divide it into 2 major points:

-   Taking steps by ourself to maintain privacy
-   Services to enhance our privacy

I've covered point 1 in my topic "Check twice before sending transaction if it will impact your privacy negatively", so let’s go to point 2 now:


Centralized privacy providers have a single point of failure

We might have heard about it, but centralized services can be seized. Recent examples are several mixers like ChipMixer and Sinbad.io but also privacy enhancing wallets like Samourai Wallet.

As theymos also knows: governments are good at shutting down centralized services if there’s a so called single point of failure, in our case developers which can be arrested and centralized services, which can be seized, online websites, which can be shut down.

And here, we have also to consider to be very careful. Seizing such services will always be a risk to bust our privacy. If privacy services are seized, it'll always be a risk of mixing logs to be leaked and address connections to be revealed.
As it happened to ChipMixer, when several Terabyte of data was collected, among it very likely logs but also private keys (Chips from ChipMixer), where several customers of ChipMixer have reported about coins from such "Chips" being transferred to a different wallet.

We also have to fully trust centralized mixer operators to be honest and to delete logs, which is a big security risk.
Centralized services are somehow against Bitcoin's nature of a decentralized system as we have to trust a middleman, while Bitcoin is fully P2P.


Centralized privacy providers can be honeypots

A honeypot website is a website which is set up and operated to collect certain confidential information on purpose. When people are visiting a honeypot site, various confidential information will be scraped and stored, like your IP address or your entered information but not limited to.

Such data is very valuable for any investigation of crime or business purposes like identifying which wallet belongs to an individual, a company or which interactions an Bitcoin address reveals.
For some cases it might be helpful to catch scammers and hackers but for our privacy, a honeypot website should be avoided, of course.

Honeypots are posing a serious danger to our privacy. We might believe it's quite a normal website and our information is treated confidently, while in reality, any of our data will be stored.
In addition to our IP address etc., entered Bitcoin addresses will be scraped, stored and forwarded to any entity. Addresses will get reviewed and address connections will get revealed.

For privacy enhancing services, we might even pay a fee and not only get nothing in return but also have a privacy risk of believing our Bitcoins are mixed but in reality, logs are kept.

In case of a deliberate honeypot website, deem any privacy assurances as disposable.

I've written more about Honeypot websites here: "Honeypot websites are dangerous for our privacy - BEWARE"



Conclusion: we should not try to maintain our privacy by relying on centralized services as such centralized services are likely to be shut down and such services are full of risks and red flags due to requiring a middle man, when it comes to maintain a good privacy, while Bitcoin is fully P2P.


PrivacyOui
14  Other / Beginners & Help / Check twice before sending transaction if it will impact your privacy negatively on: April 26, 2024, 04:27:02 PM
Simple task, crucial for maintaining privacy:

Certain transactions from one of our addresses to another of our addresses might reveal address connections, possible to track via Blockchain analysis for everyone. As we know, Bitcoin's Blockchain is a public ledger.
Sending a transaction from one of our addresses to another will cause a connection, not limited if it’s our own address or an address from someone else.
It’s inevitable.

Check twice, if your address, where you are planning to send BTC to, was used previously and if you can afford to have an additional connection to certain addresses.

Such connections might affect your privacy negatively for following cases but not limited to:


Used addresses for previous business

Your address where you are planning to send coins to has been used for previous business, where your business partner can track all additional transactions. Always check twice, if your address has been used for previous business and for what business exactly. To keep your privacy, never use and mix addresses from previous business


Address has been public

Your address where you are planning to send coins to has been posted publicly on an internet site. If your address where you are planning to send coins to has been posted publicly on an internet site, you need to consider your privacy to be somehow compromised and affected negatively, as more conclusions about your transactions can be drawn publicly, for example tied to a social media account or your Bitcointalk account.


Don’t mix KYCed and private coins

You are going to mix KYCed coins, possible compromising your privacy. Every time, your private coins and your KYCed coins are mixed, more can be found out what you have done before for your private coins as such coins are now also tied to your real information. Always be careful when mixing your private and your KYCed coins.


For every additional transaction on one address, more conclusions about you, as owner, can be drawn. Always consider to have a new address instead of address re-use.


Keep in mind: Bitcoin transactions are not reversible. Never. Once you've done a transaction and it’s included in a block, transactions are not reversible anymore.
Afterwards, you might regret doing a transaction because you might notice it's compromising your privacy.
Check twice before sending a transaction if it’s going to impact your privacy negatively!
If in doubt, better take measure to prevent unwanted linking of your addresses and coins to maintain your privacy!


PrivacyOui
15  Economy / Service Discussion / Re: Collection of proven honeypot sites – BEWARE to protect your privacy on: February 03, 2024, 08:03:43 PM
It's working for me, maybe try later again and see if it's still an issue?  
In case more people can't access it, I'll do a new archive.

It seems that it's cached in your browser but it also doesn't work to me I already tried it on some checker and this is the result:
Interesting, because I've just checked from a different device and it's working.
archive.fo / archive.is is still available for me as well.
And also VPN...


I suggest put all archives in archive.org instead.
It seems archive.fo, archive.is and archive.today all of them do not work and according to the check its a week down.
Good suggestion. I've added an archive.org version as well now.
16  Economy / Service Discussion / Re: Collection of proven honeypot sites – BEWARE to protect your privacy on: February 03, 2024, 05:13:35 PM
Proof 2 (own website): https://archive.fo/DaY5x
I don't know if it's just me or if there is a general problem, but I can't access this achieve you posted. I am getting a 'site can't be reached error' every time.
It's working for me, maybe try later again and see if it's still an issue? 
In case more people can't access it, I'll do a new archive.

Speaking of VPNs, they are the perfect honeypots that government agencies can use to catch bad actors thinking they are protected. Maybe you could focus your research on them and see what you come up with.
Good point, VPN can be a big honeypot because everyone will expect it provides a safe privacy. Similar to a centralized mixer operated as a honeypot site.
I don't know about any proven VPN honeypot but maybe someone else knows and can share his knowledge.
17  Other / Beginners & Help / Re: Honeypot websites are dangerous for our privacy - BEWARE on: February 03, 2024, 02:03:51 PM
Except being closed-sources, do you have some examples of "red flags" I can spot easily? Do you have some clues to be sure that a service is probably not good?
I'm not a coder and I can't review code, even if it's open source. In general, honeypot websites are hard to detect because honeypot websites will try to stay undiscovered to get as much data as possible. No honeypot website will push, how it is a honeypot website.
Best red flags are community fedback or proof, where someone has review website code, it got leaked how a site is a honeypot website, like a media report, coder review or a forum post. 

That's indeed a big problem. And you're indeed raising a good warning. But what's the way forward then? I guess that should be the more interesting part. Otherwise, we end up just talking about a problem we don't have a solution to. How can everybody then beware of such sites?
It's a very difficult queston because honeypot websites are extremely difficult to spot.
Of course, a honeypot website will stay undiscovered to be a honeypot website.
For normal people, only publicly proven websites might be entirely possible to avoid.


It's not possible to spot as a normal person, even experts might not know it because it's a sophisticated honeypot.

Because for most sites, it's not possible for normal people to spot if it's a known honeypot website or not.

Isn't it troubling? So, should we just avoid the internet as much as possible? Or should we use VPN all the time? Or should we all shift to the use of TOR browsers?

What would your advice be to minimize or perhaps to completely avoid exposure to these dangerous websites?
It is troubling because honeypot websites are cleary set up to be a honeypot for a long time and stay undetected.
VPN and general privacy advice is a very good point and in addition, we should always do a good research about proven honeypot websites. Because like Walletexplorer, it's containing a fine print, possibly because of EU or US data protection law, where it is mandatory to make any such practice public. So, it is available for us to know it's a honeypot website and we just need knowledge about it.
We can also help to spread knowledge when we know about it.
And we need good coders to review open source code and to report if it's a honeypot website.
In addition, open source code should be our selection over closed source code.

To share knowledge about proven honeypot websites, I've set up a new topic where we can collect proven honeypot websites:

Collection of proven honeypot sites – BEWARE to protect your privacy
18  Economy / Service Discussion / Re: Collection of proven honeypot sites – BEWARE to protect your privacy on: February 03, 2024, 01:53:15 PM

Crystalblockchain.com Bitcoin block explorer

Crystalblockchain.com is a Bitcoin block explorer. On its website, Crystalblockchain.com clearly states to be cooperating with financial institutions and government agencies like law enforcement and investigations.
Proof (own website): https://archive.fo/gOs3K#selection-929.0-929.16 / https://web.archive.org/web/20240110115451/https://crystalblockchain.com/ (https://crystalblockchain.com/)




Walletexplorer.com

Walletexplorer.com is a Bitcoin block explorer owned by Chainalysis, a Blockchain tracing company.
IP addresses of visitors are scraped, collected and forwarded.
Proof 1: Leaked Slides Show How Chainalysis Flags Crypto Suspects for Cops (CoiDesk article)
Proof 2 (own website): https://archive.fo/DaY5x / https://web.archive.org/web/20240102131350/https://www.walletexplorer.com/privacy (https://www.walletexplorer.com/privacy)




CipherTrace.com Bitcoin block explorer

CipherTrace.com.com is a Bitcoin block explorer owned by Mastercard, a credit card payment provider.
IP addresses of visitors are scraped, collected and forwarded.
Proof: https://www.coindesk.com/layer2/2022/01/28/mastercards-ciphertrace-used-honeypots-to-gather-crypto-wallet-intel/

This claim is partially contested:

Quote
CoinDesk asked CipherTrace: “Does your firm collect IP address data for the purposes of linking them to wallet addresses?”

A CipherTrace representative responded: “As a privacy-focused company, CipherTrace does not map IP data to private individuals.”

She did not answer CoinDesk’s question of whether CipherTrace maps IPs to wallets.
CoinDesk asked a second time if CipherTrace maps IP addresses to wallet addresses. CipherTrace did not respond.


19  Economy / Service Discussion / Re: Collection of proven honeypot sites – BEWARE to protect your privacy on: February 03, 2024, 01:46:32 PM
Proven honeypot websites – BEWARE!


Crystalblockchain.com Bitcoin block explorer  |  proof
Walletexplorer.com  |  proof
CipherTrace.com Bitcoin block explorer  |  proof



Contested claims
20  Economy / Service Discussion / Collection of proven honeypot sites – BEWARE to protect your privacy on: February 03, 2024, 01:40:17 PM
After considering what to do, how we can spot honeypot websites, a really difficult task, I believe a community collection of known honeypot websites is a good idea. When many people share knowledge because we might have seen a honeypot website already or know about it, we can share it here, make our knowledge available to protect more community members from getting victim of proven honeypot websites.
General privacy practices, like VPN for example, are also important but here, we will focus to collect proven honeypot websites.

To protect your privacy it's advisable to avoid any proven honeypot website. I've compiled a list of known honeypot websites, what I'm aware of so far, to make aware of it and I’ll expand my list from community feedback.



What's a honeypot website?

A honeypot website is a website which is set up and operated to collect certain confidential information on purpose. When people are visiting a honeypot site, various confidential information will be scraped and stored, like your IP address or your entered information but not limited to.

Such data is very valuable for any investigation of crime or business purposes like identifying which wallet belongs to an individual, a company or which interactions an Bitcoin address reveals.
For some cases it might be helpful to catch scammers and hackers but for our privacy, a honeypot website should be avoided.



Examples for honeypot websites can be:

  • A block explorer website, where IP information is collected from visitors entering Bitcoin address(es), tying IP address and Bitcoin address. Your IP and Bitcoin address(es) will be collected, stored and possibly forwarded, where such data is getting tied and analyzed.
  • A Bitcoin mixer, where logs are kept to de-anonymize transactions later again. Once your mix is finished and you are believing your incoming and outgoing transactions are separated, the honeypot operator will still be able to know which coins are yours by connect ingoing and outgoing transaction.
  • A software or hardware wallets (closed source), where personal information like IP addresses and Bitcoin address(es) for example are collected, stored and possibly forwarded, where such data is getting tied and analyzed.
    In any case, a honeypot software or hardware wallet is always closed source because if it's open source, any experienced coder could find out about it by reviewing code.



Why are honeypot websites dangerous for our privacy?

Honeypots are posing a serious danger to our privacy. We might believe it's quite a normal website and our information is treated confidently, while in reality, any of our data will be stored.
In addition to our IP address etc., entered Bitcoin addresses will be scraped, stored and forwarded to any entity. Addresses will get reviewed and address connections will get revealed.

For privacy enhancing services, we might even pay a fee and not only get nothing in return but also have a privacy risk of believing our Bitcoins are mixed but in reality, logs are kept.

In case of a deliberate honeypot website, deem any privacy assurances as disposable.

To avoid getting victim of honeypot websites, we'll create a collection of such websites.



How to contribute to our collection of known honeypot websites?

To participate here, you need to give a sufficient proof about any honeypot website. Like an official statement, exposed code or verified insider information.
Any unproven speculations, especially from competing projects are not enough proof to list a website as "proven honeypot website". Such websites might get listed under "contested claims".
Only websites allowed, where visitors are misled and / or are facing an unexpected and deliberate danger of privacy risks compared to competitors.

My collection only covers honeypots related to Bitcoin.
Please note: any website can be a honeypot.

Pages: [1] 2 »
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!