@Simcom, let me to explain you with the below abstract example:
I want to create a new key/lock for my safe and I ask Gnosis to manage that project.
Then Gnosis ask 20 persons to create 1/20 of this key (we can compare to the RSA UFO clients).
When all the parts have been created, Gnosis will collect and assemble them to create the final key (we can compare to RSA UFO server).

In this abstract example, you don't have to trust all the 20 persons that created 1/20 of the key. Indeed, even if one of them is not honest, the key can not be compromised because the person need the others 19 parts to recreate the final key.
But you must to trust Gnosis that collected and assembled all the parts to create the final key. If Gnosis is not honest, he can keep for him all the 20 parts to create infinite keys.
Now I take the case, you have a blind trust to Gnosis, what if someone hacked him during the collection and assembly of these parts (RSA UFO clients and servers)? The hacker will have the possibility to create infinite keys.

In conclusion, until today, there is no way to setup the accumulators of zerocoin in a trustless manner. The trustless manner is an illusion used for marketing purposes. The danger is that someone could have the power to issue Anoncoins from nothing.

I am just going off of what they have stated on Twitter. Along with the following statements, they have mentioned the ability to generate the parameters by using multi party computations.. which is basically what the rsa ufo project is doing with ZeroCoin. If you look through their statements on Twitter it doesn't sound much different than they way Anoncoin is computing the ZeroCoin accumulator.

Just to play Devils advocate...

I believe the trust issue has to do with unlimited minting of coins, and if someone were to have the initial parameters they will not be able to anonymity.. that is what Ian from the Zerocoin/Zerocash project stated on Twitter.

Also, it seems that the Zerocash parameters can be generated in the same way you guys have implemented the tea ufo project by the use of multi party computations.

I also read that it is not a case of having to trust everyone involved in the creation of the initial parameters was honest, but you only need to trust that one of them was honest. If 20 people had a part in creating the initial parameters, then you would only need to trust that at least 1 out of those 20 people were honest.

These are almost direct quotes from Ian and Matthew from the ZeroCoin/Zerocash projects.

Further proof that you know nothing about Zerocoin/cash. RSA UFO idea is from the original zerocoin whitepaper:
http://spar.isi.jhu.edu/~mgreen/ZerocoinOakland.pdf

Ian Miers and his team abandoned Zerocoin to do an improved project called Zerocash.
Zerocash improves on an earlier protocol, Zerocoin, developed by some of the same authors, both in functionality (Zerocoin only hides a payment's origin, but not its destination or amount) and in efficiency (Zerocash transactions are less than 1KB and take less than 6ms to verify).

and they will do that in a REAL trustless manner:
In contrast to Bitcoin's transactions, payment transactions using the Zerocash protocol do not contain any public information about the payment's origin, destination, or amount; instead, the correctness of the transaction is demonstrated via the use of a zero-knowledge proof.

Source: http://zerocash-project.org/

As I promised two weeks ago, here is an estimate for completion of Zerocoin-in-Anoncoin that I feel has a very high chance of being met (a "hard deadline").

By October 15, I'll have Zerocoin integration in "alpha" state, and on a testnet for anybody to try.

By November 1, I'll have Zerocoin in mainnet, which means you can use the ANC you have now to mint and spend zerocoins. It will still be in "beta", meaning you should pay attention to our website, IRC, and our bitcointalk.org thread for security updates to the wallet and anoncoind; this is especially important if you are a miner or running a relay node.

I realized that I have made deadlines in the past that were not met. I put a lot of thought into the above deadlines and I know that they can be met. Just as a reminder, I'm working full-time on Zerocoin until at least October 1, and possibly after depending on funding.

Other upcoming dates:

September 15: the RSA UFO project ends, participants are rewarded, and the server source is released to our Github.

September 17: the first Zerocoin commits get pushed to our Github (Anoncoin/anoncoin, "zc" branch). As I said before, the public Github will lag 2 weeks behind active development in our private repository; this is to make things more difficult for copycat coins.

Previous updates:
https://bitcointalk.org/index.php?topic=227287.msg8750399#msg8750399
https://bitcointalk.org/index.php?topic=227287.msg8599297#msg8599297

Yes, apparently:

https://cex.io/#ANC-BTC

Their trade history for ANC-BTC starts at September 14.

24hr Volume on CEX.io today is @16029anc, or ~22.43btc based on the 0.0014 price.

5th place on Cryptsy right now out of 195 Active Markets, with 8.19btc volume in trade.

I do not trust it. I do not trust the pushy people trying to confuse others with big words. It looks like a tag team wrestling show. A lot of fake arguments to sell tickets.

Some expert needs to look into this and find out what is going on. And by expert I don't mean the bs experts on this thread.

Recently, I received 250 ANC from yoyo and a matching 250 ANC from TheKoziTwo, so this lets me work full time through October 18.  Since I am scheduled to start the testnet with Zerocoin on October 15 at the latest, this means I can work full time until the testnet launch and for 3 days after, to fix any problems that may appear. Thanks!!!

Anyway, I just wanted to clear up some confusion here about the RSA UFOs: users will be able to know that I do not have the complete factorization because the UFOs were produced by hashing with a cryptographically secure hash function (SHA-256, which is used everywhere in Bitcoin, Litecoin, Anoncoin, etc.). Small factors were found and removed in the UFO project. So the procedure to generate the complete RSA UFOs is 1) create the 13 "raw" UFOs by hashing, and 2) divide out the small factors found in the UFO project. This is performed not only by the UFO clients and server, but also will be performed on startup by all Anoncoin wallet software. The code is already there to do this.

Also, there is not one UFO, but 13 UFOs; to be valid, a coin must be accumulated in all of them. Using Monte Carlo simulations, I have found that there is a ~20% chance that any one of them can be factored by an extremely powerful attacker. This means that the probability of all 13 UFOs being factored by an extremely powerful attacker is about 1 in a billion -- and note that it would take factoring all of them to be able to forge zerocoins. My definition of "extremely powerful attacker" is one that can remove factors by the Elliptic Curve Method (ECM) up to 768 bits and can factor numbers up to 2048 bits using the Generalized Number Field Sieve (GNFS). This is far beyond what anybody is likely to be able to do for many decades.

I agree fixing this issue with anc should be a priority. Nothing else needs to be done on cryptsys end. The issue seems to be getting sidelined.... Ill continue to merge inputs to reduce tx sizes until they get it resolved

hi all, just to inform that I've setup this wiki page:
https://wiki.anoncoin.net/Anonymity_of_cryptocurrencies

It needs a lot of editing and improving but we can do that and have a proper reference page about the anonymous coins jungle I hope...

For those who don't have an account on the wiki, or cant ask for one, feel free to post corrections or additionnal info here, I'll add that to the wiki later.

Also english is not my mother language so there's bad grammar and spelling mistakes, and I have to give credit to user entertheabyss from which I stole some words to fill the second part of the wiki page.  

One has (had) to pay 1000 DarkCoin cost to set up a MasterNode (1 darkcoin was nearly 10 USD when Darkcoin was most popular). Developpers' philosophy is to literally sell the abality to run Masternodes at high price, so they're more difficult to compromise...

toxic fart dog? seriously?


If someone disagrees with your position why is it trolling? Is that how to win an argument? Call the other a troll?

You can ask someone outside the issue to review it and decide whether everything looks tidy with zerocoin. There are 6 or so people who are faithful supporters of any decision. And probably many dozens who are doubtful but have either been selling or are holding and do not want to push the price down.

Here is a quick timeline.

February 2014. zerocoin will be released in May. https://bitcointalk.org/index.php?topic=309716.msg5104472#msg5104472

April 2014. zerocoin is a month or two from release. https://bitcointalk.org/index.php?topic=344911.msg6359224#msg6359224

 April 2014. A donor throws $5k into the donation pot. https://bitcointalk.org/index.php?topic=227287.msg6366123#msg6366123

May 2014. The irony of this post. https://bitcointalk.org/index.php?topic=607919.msg6862028#msg6862028

and on and on.

Now more donations are needed for the project to be finished in, you guessed, one or two months.

zerocoin itself is not a practical solution to anonymity. And rsa ufo is not a patch for the flaws that exist.

And now? You disagree so again you will whine about how I am a troll. What are the facts?

Anoncoin Mining

Guys do you know good cloud mining services on which I can get some mining power on the Anoncoin network?
Remember this is scrypt.

Wrong, that doesn't change the next halving estimation. Only the total ANC emission.
I'm not sure if this is a great news or a bad news. We need whales to absorb 316,500 ANC in four months. In all cases, you done a good job to find and solve this rookie mistake. Congrats
Meeh must to reward you

Actually the correct total number of ANC is neither 3.492 million nor 4.2 million; it is about 3.1 million (to be exact, it will be 3103954.760142 ANC after about 50 years). The reason it differs from what you calculated is because the block reward halves whenever the block height is a multiple of 306600.

I know 4.2 million was quoted in various places, but that was a mistake made early on and happened to not be caught until recently. All Anoncoin clients are setup to max out at 3.1 million ANC.

Your posts are all approved; I reduced the spam filter sensitivity, so this should not happen much in the future. I also added /r/DarknetMarkets to the sidebar.

Do you know much about CSS styles for Reddit, and how to add our new logo where the reddit alien is at the top-left?