 Show Posts
|
|
Pages: [1] 2 »
|
Your site seems to be broken by the intermediary called "Cloudflare":  It won't let me use it even if I click the "Verify you are human" checkbox. Please consider a proper configuration of that third-party reverse-proxy you are currently using. My IP address belongs to a Tor exit node, just in case it helps you to resolve this accessibility issue on your site. This is mainly because I don't wish to reveal my real IP address to you, your server and the intermediary data-collection network you are using (Cloudflare). Also, is there any way to use your site anonymously or your plan is to collect all the users IP addresses and metadata in order to collaborate with the law enforcement in the future? I didn't find any .onion or I2P link in your announcement. |
|
|
|
Please... This is nothing more like an announcement of the OFAC listing and by it's no means detailed. By detailed I mean something like this: https://www.justice.gov/opa/press-release/file/1574581/downloadThe only difference with Chipmixer though is that the authorities are very quick to take action against Sinbad.io. Chipmixer was able to be under the radar for many years, maybe 5-6 years before it was seized.
Because of bad security practices, probably even worse than Chipmixer's operator had. Having some basic security considerations like proxying your end server via clearnet reverse-proxies over Tor to avoid the whole operation seized is something that even a beginner .onion site operator would know to do. There is no excuse for someone operating a mixer to have their core (backend) server seized as there are many ways to hide it from cybercrime investigations even without recurring to offshore hosting. Having a few servers and basic network routing skills would be enough to prevent this. Being sanctioned by OFAC shouldn't mean end of world to some serious project like a mixer, especially when it was already expected if you are aware of recent mixer criminalization announced in USA and aware of historical timeline related to other mixers. Such events just show how some mixer operators neglect security of their users and operations, that's all. If they cared enough, they wouldn't be seized that easily by the law enforcement. Law enforcement agents who work on cybercrime are not some kind of gods, they are mere humans with knowledge+training in espionage and some extra powers to request information on certain resources on the Internet. They are pretty avoidable by having some certain itsec+opsec expertise, which is required for a mixer operator in my opinion. But now we are at some absurd point where we have some mixers here who offer their service via Telegram bots, which is unbelievable and absolutely ridiculous, considering that someone with expertise in security would know that Telegram bots are not end-to-end encrypted giving permission to anyone who works for Telegram extracting all the chat logs and providing to LE. And what is more ridiculous is that there are reputable members here who trust such services being completely unaware of the consequences. Some of your favorite mixers here are literally feeding you to LE. |
|
|
|
The service's onion is offline, which means police managed to seize the backend server with the core mixing engine and customer data. Also the silence from the team is a possible sign of an arrest. https://bitcointalk.org/index.php?action=profile;u=3509539 Last Active: November 27, 2023, 03:10:52 PM Yet another example proving that an ability to code a mixer doesn't mean an ability to secure operations properly yet. If this service was following good security practices, it wouldn't let LE to find their core server in that easy way. I guess it was 1 hop after Cloudflare... FIODNederland, when press release with the whole operation details? Ideally, something as detailed as it was for Chipmixer and Bestmixer made by your partners in the USA. Thanks. |
|
|
|
Well, I know there's a lot of conspiracy about Intel Management Engine, but let's be realistic:
Even in the event that it is proven that the IME is collecting telemetry and has all these spy capabilities, how do you think it's going get traffic out to the internet?
To be realistic - Intel ME is a separate microcontroller running its own OS independently from CPU that is on the same bus with ethernet, which means it can do anything a normal OS can do once there is uplink. It also has a dedicated MAC address. Particularly if the computer is airgapped then there is nothing to worry about.
But I don't see the IME having the throughput to divert 100Mbps block and transaction traffic from a full node to it's own little MINIX drivers.
Not the OP's case already. They don't plan to have an airgapped computer at all. Note that the OP's objectives for that machine are also "store bitcoin, earn bitcoin, spend bitcoin, Bisq to buy Bitcoin and Lightning network software. ". The HAP bit only tells Intel ME to switch off which won't guarantee it's actually switched off. You must trust Intel to assume it's switched off completely. ...cOnSpIrAcY...
Since when being skeptical about closed-source firmware and software that can't be verified is considered "conspiracy"? Is assuming that some custodial closed-source Bitcoin wallet can steal your funds also a conspiracy theory? By the way, do you mean having a potential ring -3 rootkit produced by an NSA contractor embedded into your system should be trusted and raise no questions? |
|
|
|
/.../
It's either hypocrisy or incompetence.
Maybe OP just thinks there's a different level of sharing classified stuff here? Maybe. But I personally think OP clearly doesn't realize the threat model they will have to face and counter. Given also how long time it took for OP to understand the importance and rationale of LoG, I'd say the OP is relatively new in this industry without significant experience in operational/informational security and probably doesn't understand their threat model's top element is state. I would think twice trusting this service any sensitive information such as UTXO flows since I doubt they can provide a security level required for operating a mixer. A new mixer of course is always welcome, but the problem here is that if the operator isn't experienced enough, significant gaps in security and IT knowledge may cost their users serious problems later, since it usually takes one mistake to have the whole operation compromised when your enemy is state. Note that ability to code a mixer doesn't mean ability to secure operations properly. I would expect something like this after a first subpoena or letter from FBI on their email: Dear all, the current maintainers of %MIXER_NAME% have decided to no longer continue.
Please withdraw your money from the current custodian before %DATE%.
If you have issues, do not email, post them here.
Kind regards,
Or even worse - them being investigated low-profile then suddely having their servers seized with all the customer data compromised. Happened to some of the best in case you are familiar with historical events of services on this forum  |
|
|
|
we also want to note that icopress and LoyceV were informed in order to permanently delete the signed message after checking and making sure of its legitimacy. That seems futile after sending it through Cloudflare, but I've deleted the PM. Note that the PM stays on the forum's server until you delete it from your outbox. Very interesting that OP was loudly opposing to provide the signed proof of reserves highlighting risks of undermining security of mixing operations and their users, but then simply sends the sensitive data over a state-controlled unencrypted communication channel, instead of relying on a more secure alternative offered (email that supports end-to-end encryption). It's either hypocrisy or incompetence. |
|
|
|
I agree with you, I wonder why this service isn't more popular around here: no KYC, no account required, nothing complicated. It's fast, cheap and reliable.
Because they are new to trying marketing here using a signature campaign, I believe if they do it at the same time as launching the website, they will get more new customers as same as today. They may not look so popular here on this forum but apparently outside this forum they indeed are, judging by their volume:  It seems some people in this space remember their service and still trust it, so do I, because I personally remember using this service when they were providing instant Perfect Money to BTC exchanges somewhere back in 2015 and that their Perfect Money trust score was extremely high (something that would require enormous amount of complete deals). Maybe I will find some screenshots on my old drive and post here. I also doubt they were caring about making tons of promotions when relaunching here since it appears they were confident that this kind of service is rare and will have a lot of ask. Congrats and welcome back to you, eXch.cc, since you have apparently made it. Hope the forum admins will help you to rename the account. |
|
|
|
I will try to contact @bestchange to see their opinion.
It may worth a try contacting them but I am somehow confident of what they'll reply. I've been personally tracking all their messages, comments and actions (here, on russian Bits Media and their own platform) in regards to AML/KYC stance since they started to divide Bitcoin and concluded that they're either corrupt or forced to participate in the AML/KYC shitshow. Anyway, let us know about their reply once you have it. |
|
|
|
Bestchange won't help in this specific case. Bestchange's stance is clear regarding AML/KYC disputes between exchangers and customers: if AMLBot (the service they are affiliated with) shows a high risk score, then Bestchange calls customer a criminal/terrorist and quits mediation. There are hundreds of such cases at feedback pages of their listed exchangers marked as "KYC/AML dispute" on their .ru domain and outcome is always same - customers lose funds. There is also a reason why Bestchange is listed as a 'taint proclaiming' service in the thread [Blacklist] of unreliable, 'taint proclaiming' Bitcoin services / exchanges |
|
|
|
...
It seems you are unable to follow up with responses in your own thread. The "scammer address as destination" issue doesn't even belong to OP as they have absolutely different issue related to a stuck transaction due to a low fee set by your service. The "scammer address as destination" issue you are trying to assign to Russtie Beerkan actually belongs to another user named brace the mace with the original reply here: https://bitcointalk.org/index.php?topic=5432724.msg62977921#msg62977921The original issue raised by OP ( Russtie Beerkan) belongs here: https://bitcointalk.org/index.php?topic=5432724.msg62978113#msg62978113 Are you able to recognize the difference in the usernames across the posts in your thread? I am not trying to defend the OP since they haven't provided any evidence yet, however, it's obvious that you are being unfair with your responses and your counter-accusations make me doubt about your competence and ability to run a mixer properly. That's a bold accusation bro, how do you know the addresses they are using belong to Kraken?
By checking them on Arkham Explorer, for example, or any other AML/Chain intelligence provider as there are plenty. |
|
|
|
You are confused. Chaincase ran a ZeroLink coordinator, not a WabiSabi coordinator. Second, you did not have to have an iPhone to connect to the Chaincase coordinator, you could simply connect to their coordinator on your existing Wasabi Wallet.
Not at all, since I was talking about them being a wallet and not a project dedicated to run a community coordinator which lead to no liquidity. You are probably getting confused about the context I am talking on, since what you have replied is irrelevant to the subject. So you've listed 2 community coordinators so far, then arbitrarily declare they are not community coordinators. Here's a third community coordinator, I'm sure you will now dismiss it as well: Yep. Anyone who feels brave enough to copy and paste the coordinator code can do so. Others have already because they actually care about what they are saying: https://t.me/WasabiWallet/70611Not dismissing, but since I didn't find it by a simple search engine search, how one is supposed to find that one? Where is a website? Where is an announcement or information on Bitcointalk? The coordinator you linked is a great example of poor advertisement and management that I am talking about. Low exposure leads to low liquidity. However, great to know there is at least some coordinator running that is supposed to be used by the community, but it's sad that no announcements and exposure within a community was done at all. |
|
|
|
xtests unfortunately it's not an option, as it would display negative motives and potentially erase any good that came from this difficult choice
I obviously would like to know what you mean by "negative motives" and "goods of zkSNACKs AML coordinator". The latter is: Understandable, if you are talking on behalf of zkSNACKs which was pressured by some law enforcement agency to become AML-compliant, which is not surprising and often happens to many projects with non-anonymous persons behind them thinking the system will show mercy to them while having their IDs. Don't worry, not a big deal, since zkSNACKs weren't first and won't be last to fall under such consequences and not having enough money for lawyers to defend themselves from the banking lobby and their servants in LE agencies. Not understandable, if we are talking of Wasabi Wallet as a fully open-source solution where your private company's business interests and policies should not affect the public code at all and it's extremely unethical to talk about an open-source solution within a scope of your personal interests. My question was directed to you as a person who (hopefully) follows FOSS ethics and not as a zkSNACKs employee/affiliate, so I hope you could clarify your answer and stance on this with more details. Actually i can recall 2 WabiSabi coordinator (not run by zkSNACKs) used to be exist. One of them was https://chaincase.app/. By "launching a community coordinator" I meant naming and announcing it explicitely as a Wasabi wallet coordinator and not something like "MyPrivacyWalletApp" by creating a fork and launching an iOS app that would represent no interest to Wasabi users, since privacy and iOS are noninterchangeable, because by using iOS you automatically agree on giving up all your privacy to Apple. By "launching a community coordinator" I also mean at least the following: - Making a proper ANN thread on Bitcointalk for a Wasabi community coordinator and not some forked app - Making a dedicated website, accepting donations and publishing transparency reports - Doing minimal advertisement campaign across Bitcointalk community - Dedicating some time to advertise it on social media with reachability to Wasabi user base (Reddit, Twitter and Telegram at least) - Not doing any forks of Wasabi and focusing only on running and promoting a coordinator These 2 you have mentioned are not Wasabi community coordinators at all, and here is why: - Chaincase - an iOS app that was condemned to fail by its creators since its launch because of its horrible project model and marketing choices, despite of the fact it uses a WabiSabi backend. First of all, their description (from https://github.com/chaincase-app/Chaincase-iOS-Beta) is "The only privacy preserving bitcoin app on iOS" which already filters out 99% of Wasabi users seeking for an alternative coordinator. That project was not launched to be a Wasabi community coordinator at all and it doesnt't appear in Google results searching for "wasabi wallet alternative coordinator". When I am seeking for a community coordinator, I am seeking to modify my Wasabi Wallet config that would take less than 1 minute and go ahead start using a different coordinator, without having to buy an iPhone to install Chaincase.
- Someone who launched a Reddit post announcing their coordinator haven't dedicated time to advertise it properly. No ANN on Bitcointalk, no website. I don't consider "a community coordinator" if someone bought a 10$ VPS, launched a WabiSabi instance and haven't announced it properly through all possible communication channels. Considering a current situation with Wasabi, a "community" coordinator should be a unique peering point and alternative to the official coordinator, because stamping many unknown coordinators won't do a thing.
|
|
|
|
|
Kruw, nopara73, an important question to you guys:
what are chances for a community non-AML wasabi coordinator to be included into official's Wasabi ecosystem?
By including I mean that if someone makes a PR to your main repo with a code to add a UI switch between zkSNACKs and a well-known community coordinators, will it be accepted and its usage encouraged? Alternatively, in case you don't want a UI switch, would it be possible to include information about a community coordinator on Wasabi's official site and provide extensive information on how to switch between zkSNACKs and community coordinators?
I think nobody has launched a community coordinator yet due to fears of being ignored by your official maintainers, which would lead to issues with gaining liquidity.
In case we know that its usage won't be discouraged by official maintainers and key contributors, there won't be any problem launching a non-AML community coordinator. I will be able to organize it personally in collaboration with one of reputable Bitcointalk members who is also interested in this and ensure it's well-promoted.
|
|
|
|
While I understand some concerns of members behind mass-cancelling Wasabi for performing AML screening of submitted UTXO's because I also consider it a bad practice, I am not sure why nobody haven't launched a non-AML community coordinator yet and haven't made a PR at Wasabi's Github adding a switch between zkSNACKs and community coordinators to the UI, since all the stack is fully open-source. All I have found was some other thread https://bitcointalk.org/index.php?topic=5402254.0 with o_e_l_e_o convincing everyone for not doing so with the one and only argument of supposedly not having enough liquidity, where a whole thread followed and agreed with it, which seemed to be a dubious decision after all, based on the continuous popularity of this particular thread here and its current page count of 49. Instead of all that energy spent to blame and cancel Wasabi, someone at least could've tried to launch an alternative coordinator already and promote it in this thread in order to try gaining liquidity. Cancelling a whole open-source solution doesn't seem correct just because a maintainer's backend instance has weird policies. With this same logic, you can go raid BestChange's thread blaming them for widespreading an idea that confiscaing users funds for high risk scores is good, which is actually evil because they punish and exclude exchanges who don't want to make scam-oriented ToS and participate in "dirty bitcoin" propaganda, lead by BestChange and their close (if not directly-related...) partner AMLBot with their outdated databases since Elliptic has dropped them as a customer. Almost on every exchange's review page there are people who lost their funds to scam-oriented ToS among "AML/KYC incidents". Wasabi's private coordinator seamlessly checks submitted UTXO's at Coinfirm's AML API and rejects high-risk ones without asking for identity or confiscating user funds. Rejected UTXO's can't be linked to any identity. This also can be used to check a risk score of your funds for free without recurring to scam services like AMLBot who even freeze their own users funds for purchasing AML checks with high-risk coins. Given that same users who blame and cancel Wasabi in this thread participate in BestChange's thread without blaming and cancelling BestChange for attacking Bitcoin's fungibility and spreading scam services is absolutely ridiculous. Bitcointalk members who cancel Wasabi but use BestChange are hypocrites. If your idea is to cancel all services who attack Bitcoin's fungibility, then please do it properly (like also stopping to use centralized exchanges who do AML screening and practice funds freezing) and not selectively. |
|
|
|
|
Based on the amount of supported cryptocurrencies, there are all indications that this site is a ChangeNOW API reseller,
It's safer to use ChangeNOW via Trocador instead. Anyway, ChangeNOW may freeze your funds and require KYC any time. They are known selective scammers.
|
|
|
|
Topic: 24hr fully automatic cryptocurrency exchange, NO KYC needed on Bitsar!
Man is born free but everywhere is in chains. If you don't want that, the first step is to take full ownership of your property, not your keys, not your coins.
Bitsar respects the anonymity and security of its customers; no KYC is required for the exchange. Bitsar works completely automatically.
2. We weren’t against KYC. We require KYC once it involves legal currency trading.
4. Most of our transactions are completed within a few minutes. If there is fraud, we won’t be able to cover it up.
The amount of hipocrisy coming from a single person just in a single thread is overwhelming. You say you don't need KYC then you say you need KYC. Also, using the "not your keys, not your coins" expression in marketing content writing for a custodial service is a most dishonest marketing ever. Please clean up your thread and rewrite what you actually advertise here. I also suggest to remove the "NO KYC" part from your thread's title, since you have clearly stated you are a "taint proclaiming" service and require KYC. |
|
|
|
|
I have just contacted my ICSP that has internal access to FSA interfaces and asked to check a company name availability giving them your company name, after 30 minutes they have returned to me with a reply that your company's name is available to register and incorporate.
Anyone can confirm this by making a similar inquiry to any Seychelles corporate service provider or ordering a company search directly from Financial Services Authority of Seychelles.
|
|
|
|
The register you are looking at only provides information for local Seychelles businesses - information on IBCs is not published publically.
Nice try, but I have an IBC in Seychelles since around 2019 and it's present in the search results as a "Company" using the above mentioned registry. Actually an IBC is still a locally registered company and the only difference of it from an LLC is that the company body/UBOs is formed by non-residents and they aren't permitted to do business in Seychelles, but they still follow the same limited liability incorporation act and memorandum. No way your company is registered in Seychelles if it isn't listed there. |
|
|
|
|
