Sorry, but I'm deleting all the offtopic happened here and temporarily locking the topic to avoid any further heat.

Bringing trust concerns is unnecessary as I only wanted to help to save this sinking ship and now just to be clear - I am not interested in maintaining this project for any long time.

As I said, it was an overnight project and only only a proof of concept, so if the community likes and finds it useful, it can keep it. I would be glad to give it out to any reputable member along with all the domains, paid servers and a source code in case someone wants to run it later.

Well, it seems to be definitive then in case there will be no more changes to the proposed draft.

Because the mixer's admin logged in here on 30th made a post promising an update, but then theymos banned them and locked the topic. Some people said their channel was active after 30th and there is a new .onion link, however, since I don't use Telegram I couldn't confirm that. I've set the state to 'SEIZED' while there is no information on a new .onion.

theymos,

could you tell me whether my service's thread that ony lists and discusses mixers will be allowed here or I should wipe it before January? The thread in question: https://bitcointalk.org/index.php?topic=5476445

The thread itself doesn't link any mixers, only the site that does.

Since I am not a native english speaker, I've used the 'arrest' term to describe infrastructure arrest as this term is often used in the international criminal law to designate good confiscation ("arrest of goods"), so it doesn't necessarily always means arrest of a person. And since their infra was arrested and never got back, I've just assumed the overall operation is "arrested".
Anyway, to avoid any confusion, I have changed this status to "SEIZED".

I've added information on mixers you mentioned, except Bestmixer, which was already added.


Not sure whether it's a good idea to add all of them but I've added ones you mentioned. I would be more interested in focusing on actual mixers and maybe only these that still have some relevance after exit/exit scam/arrest/etc.


Maybe the operators intentions weren't to exit scam, but there is the fact that an actual scam happened:

the user `decodx` didn't get their deposited money back from the service, which means the service has scammed its user. This is independently of the fact the user got their funds from an escrow - which was only a matter of luck, since in the absence of an escrow fund the user wouldn't get compensated at all.

https://bitcointalk.org/index.php?topic=5463280.0
https://bitcointalk.org/index.php?topic=5463280.msg62707696#msg62707696
https://bitcointalk.org/index.php?topic=5463280.msg62771449#msg62771449

But if there is some proof that would confirm their arrest and a supposed relation to Tornado, I will change the status.


Since you are a developer too, maybe you (or anyone else) can create a bot that would record and periodically check a checksum of the site's main page html daily, then alert on Telegram/Twitter/Forum on changes?

I would be glad to mention such a bot at the site's main page and advise users on how to use it. The key point of its usefulness would be it being provided by someone else, not me, just to avoid trusting a single party.

There won't be frequent changes of the list I believe, unless some mixer wants to change their domains/contact information or a new mixer is added.

Features implemented:

• Discussion thread for each mixer
• Automatic Bitcointalk profile linking by custom code verification added to a profile
• [Security] Bitcointalk link revocation in 1 click in case you don't want to keep your account associated with a token after you left a comment (since you can relink it anytime later)
• Admin access for mixer representatives
• Support ticketing system for feedback and data suggestions

Some mixer admins already onboarded. Will add a badge for each mixer that has present reps in the next update.

I have launched a mixer directory site: mixhub.to / yroltzbszl45er3ii2fhwt4grrcy3mqhsyovveufuhtyqi5oswpu2uid.onion

Thread: https://bitcointalk.org/index.php?topic=5476445.0

It has the following features:

• Registering and commenting as a Bitcointalk user (in fact the only way to post comments)
• Mixer admin access
• Support ticketing system for data suggestions

The platform already got 3 mixer reps registered and verified today and I expect almost all the listed mixers have their reps onboarded by the end of this month.

This is an overnight project just to keep a backup of all active mixers in one place for now. It may estabilish and be developed in case there is some interest from the community.

Clearnet: mixhub.to

Onion: yroltzbszl45er3ii2fhwt4grrcy3mqhsyovveufuhtyqi5oswpu2uid.onion

I may eventually add the following features:

- Site status checker for each domain (both clearweb and onion)

- DNS and HTTPS certificate fingerprint change notifications and log for clearnet domains

- Publish source code

- Tokenized Bitcointalk accounts on the site in order to comment (no personal data, only the token generated by the site and associated bitcointalk UID after completing an automatic verification)
- Tokenized service admin accounts (verification via official email, DNS TXT record or a .txt file on site)

- Comments section for each service:
-- Commenting as a registered Bitcointalk user
-- Commenting as a service admin

- Delegate management of the list to 2-3 reputable Bitcointalk members assigned by a community vote. Management access exclusively via Tor.

- Your suggestions

This topic is self-moderated in order to be wiped out completely on December 31th due to ban prevention reasons before a mixer blackout on the forum.

There are some mixers that currently provide access to their platforms via Telegram bots.

If you plan to use one, you should be aware that Telegram bots don't use end-to-end encryption and store all the chat log data in plaintext on Telegram servers available for extraction by the Telegram team. The company can hand over your personal info and mixing data anytime to authorities upon a simple request.
Authorities will be able to deanonymize your mixed transactions by simply looking up an output address you provided to the bot and subsequently looking up for the corresponding input address provided in the bot's responses.

This is also known that Telegram collaborate with the law enforcement and doesn't provide end-to-end encryption for their standard and bot chats in order to have chat logs accessible for the extraction upon law enforcement requests:

https://www.spiegel.de/netzwelt/apps/telegram-gibt-nutzerdaten-an-das-bundeskriminalamt-a-0e4d3fcb-8081-4b87-b062-db412bbc294b
Translated: https://www.bitdefender.com/blog/hotforsecurity/der-spiegel-says-telegram-gave-user-data-to-german-police-in-fight-against-terrorism-child-abuse/

The only way to encrypt Telegram communications is by using Secret Chats, that are not available for chatting with bots nor used by default for "normal" chats, that are also prone to server-side logging in the plain text.

If a mixer provides an interface in a Telegram bot, (a) its operators are either unaware of security implications for its users, which means the service shouldn't be trusted overall or (b) that mixer is providing a service via an unencrypted channel with a purpose to undermine users privacy/anonymity.

The following data will be available upon a request originating from a LE agency to provide chat logs from a Telegram bot for each user who interacted with it: username (if defined); phone number; IP address; Telegram client details; OS; chat logs revealing all the input/output address information and UTXOs involved; subsequently if they start investigating a specific user: all user's contacts; the chat logs from all other normal Telegram chats and bots may be revealed, unless the user have used "secret chats" (E2E).

This concern also addresses using any other services via Telegram bots, such as exchanges or any other services that process personal/sensitive data.

It seems you have misread something and got it wrong, since my OP doesn't contain any question. This is just an informative discussion thread. Skip on to memecoin threads if you are not interested in this subject, otherwise, please stay on topic.

Monero's official Community Crowdfunding System (CCS) wallet was drained of 2675.73 XMR and their team still is still unable to find a root cause.

There is an ongoing discussion in their official Github repository:

https://github.com/monero-project/meta/issues/916 [CCS Wallet Incident #916]

The community suggests it happened due to bad operational and informational security practices of the team that had access to the wallet.

Hey guys I am wondering are there any more sites for anonymous public file sharing, that also support uploading via command-line? Here is the list i am currently using

https://transfer.sh
https://uguu.se
https://oshi.at
https://tempfile.cloud
https://file.io
https://0x0.st

Please share more if you know some, they are always super useful!

Since AOSP comes without Google Apps by default, it means it has no Play store. https://f-droid.org is a great alternative as an app store for fully open source software. It includes applications such as
Shelter to isolate untrusted apps from your personal data
Firefox Klar for privacy browsing
K-9 mail client
Linphone for SIP communications
OpenVPN client
Revolution IRC client
ownCloud,Nextcloud clients
NewPipe a YouTube client
Yalp store, Aurora store for downloading apps from Play Store without Google account
MaterialFBook for accessing Facebook without its official app, Tinfoil for Twitter
Telegram FOSS build,
Silence for encrypted SMS chats
Delta Chat for encrypted secure instant messaging over email (has a Telegram-like interface and group chats)
orBot as a Tor client ( thanks to https://guardianproject.info )
among a big variety of other privacy-oriented apps.

Open GApps is a fully open source Google Apps alternative.

I disagree with all the above posters except ts.


Quite a common myth, please look at the amount of cryptomarket breaches for the past years including 2018. Exchanges care so much about 2FA just because most of them are not ready to take responsibility once their resources are hacked and 2FA minimizes the risk of unauthorized withdrawals. Most code base of crypto exchanges is acquired on Indian and Russian cheap outsource market, which is very well known for bad security, thus, forcing 2FA is more an excuse for bad security than some reasonable thing.
There is a well known fact there are 2 category of Internet users, these who care about their online security and these who don't. Unfortunately second party is bigger, but these who deal with online valuable assets and not only use facebook should be aware of security and they are responsible for their credentials in the first place.

To summarize, exchanges that force 2FA admit the possibility of being hacked which means they are not confident with security of their sites. An ability to create the exchange should not be enough requirement for launching it, the ability to secure it should be most priority.

You are using Google captcha, so no, I will not register on your site or use it.
One quest per day that requires me to identify cars just to login on bitcointalk is quite enough for me.

This is a highly recommended hoster if you value privacy. No bullshit.

Every single existing government is: conspiracy, lies, crime, corruption, misrepresentation, bribery, freemasonry, embezzlement and so on...
So, no.

I used it once in my life and glad i quit instantly once tried.
It starts to make you headaches once you access your account using Tor. Privacy? Forget about it. My dislike level for FB is same as for google captcha (hey bitcointalk)

I like using your bot, it's pretty convenient

OP: No you aren't stupid, but bitpay staff is: lacking documentation, no description with manuals on how to make payments with new protocol, no warning on invoice pages, and the most important part:

I wasted a whole day on understanding why Electrum 3.0.4 is not recognizing the new bitpay URL, giving me the following error:
"payment URL not pointing to a valid server"

Turned out that their payment protocol server uses some kind of CDN that deny Tor Exit Nodes. My Electrum is communicating via Tor, because my goal is staying fully anonymous on the Internet, which I am successful at. (don't tell me some bs such as "it's impossible". i don't use social networks)
So I bought a linux VPS (from a provider that doesn't use bitpay of course) to make an anonymous payment using Electrum headless for a Bitpay invoice of another VPS provider.
First of all, I am now migrating away from every service that now use Bitpay for accepting Bitcoins, demonstrating my own protest.

Yes, I am very disappointed with Bitpay not permitting to use Tor with payment protocol. Bitpay definitely doesn't want you to stay private on the Internet.