[ANN] ChipMixer.com - Bitcoin mixer / Bitcoin tumbler - mixing reinvented

[ChipMixer]

Notification - Kindly fix up your Lets Encrypt SSL Certificate ... it is currently capped to a grade B ...

- https://www.ssllabs.com/ssltest/analyze.html?d=chipmixer.com&hideResults=on

SSL Labs Grade Change for TLS 1.0 and TLS 1.1 Protocols ...
- https://blog.qualys.com/ssllabs/2018/11/19/grade-change-for-tls-1-0-and-tls-1-1-protocols

Has insecure cypher suites ...
- https://en.wikipedia.org/wiki/Cipher_suite

Is therefore vulnerable to the BEAST attack ...
- https://blog.qualys.com/ssllabs/2013/09/10/is-beast-still-a-threat

Please don't jump into conclusions too quickly. We were never vulnerable to BEAST attack. We always had implemented server-side mitigations. Otherwise our rating on SSL Labs would be at least "F". It's really old attack and it's hard to find website that doesn't mitigate it.

SSL Labs graded our SSL as "B" because we supported TLS 1.1 version, not insecure cypher suites. Various browsers have provided approximate deadlines for disabling TLS 1.0/1.1 protocols to first half of 2020. It was better to wait until then. Currently TLS 1.1 have been disabled and SSL Labs grade is "A". Thank you for reminder.

Your also using an RSA 2048 bits publickey certificate despite Lets Encrypt supporting RSA 4096 bits publickey certificates, out-of-the box ...

You should be aware that RSA-4096 looks cool but it's not really much better than RSA-2048. It gives almost nothing while costing us a lot. RSA being asymettric don't double in strength when you add a single bit. RSA-4096 improvement over 2048 is around 28 bits which is marginal. Using 4096 bit certificate would make our site slower (around 3 times slower SSL handshake) and more CPU intensive (we mitigate a lot of attacks) with no benefit for our users.

[1714180391]

1714180391

[1714180391]

1714180391

[1714180391]

1714180391

[1714180391]

1714180391

[1714180391]

1714180391

[1714180391]

1714180391

[netherfikk]

Got "502 Bad Gateway" error. Is it an error on my side or yours?

[TryNinja]

Got "502 Bad Gateway" error. Is it an error on my side or yours?
https://talkimg.com/images/2023/05/14/blobd931aac00c945895.png

It's working fine for me.

I went through Step 1 without any issues. Try again?

[BitcoinFX]

Notification - Kindly fix up your Lets Encrypt SSL Certificate ... it is currently capped to a grade B ...

- https://www.ssllabs.com/ssltest/analyze.html?d=chipmixer.com&hideResults=on

SSL Labs Grade Change for TLS 1.0 and TLS 1.1 Protocols ...
- https://blog.qualys.com/ssllabs/2018/11/19/grade-change-for-tls-1-0-and-tls-1-1-protocols

Has insecure cypher suites ...
- https://en.wikipedia.org/wiki/Cipher_suite

Is therefore vulnerable to the BEAST attack ...
- https://blog.qualys.com/ssllabs/2013/09/10/is-beast-still-a-threat

Please don't jump into conclusions too quickly. We were never vulnerable to BEAST attack. We always had implemented server-side mitigations. Otherwise our rating on SSL Labs would be at least "F". It's really old attack and it's hard to find website that doesn't mitigate it.

SSL Labs graded our SSL as "B" because we supported TLS 1.1 version, not insecure cypher suites. Various browsers have provided approximate deadlines for disabling TLS 1.0/1.1 protocols to first half of 2020. It was better to wait until then. Currently TLS 1.1 have been disabled and SSL Labs grade is "A". Thank you for reminder.

Your also using an RSA 2048 bits publickey certificate despite Lets Encrypt supporting RSA 4096 bits publickey certificates, out-of-the box ...

You should be aware that RSA-4096 looks cool but it's not really much better than RSA-2048. It gives almost nothing while costing us a lot. RSA being asymettric don't double in strength when you add a single bit. RSA-4096 improvement over 2048 is around 28 bits which is marginal. Using 4096 bit certificate would make our site slower (around 3 times slower SSL handshake) and more CPU intensive (we mitigate a lot of attacks) with no benefit for our users.

Props for fixing this up.

However, the BEAST attack was a vulnerability 'server-side' as TLS 1.0 presented ... i.e. "Not mitigated server-side (more info)   TLS 1.0: 0xc013"

...

RSA-3072 then ? 

...

Interesting to note that forum MERITS are given to the service operator, not to the messenger ...

Onward.

[jackg]

Got "502 Bad Gateway" error. Is it an error on my side or yours?

I've got through to step 0 too, did the main site and captchha load fine and did you fill in the captchha first time? I think I've had a 502 before.

(as a tip for the Internet, my general rule is less than 400 is a you error, 400+ is a server error (around the 500 mark is a script error or access error due to some sort of "dos"/service error ).

[coboguard]

Here is the list of fake sites that imitate chipmixer

Phishing scam!

https://chipmixxer.com
https://chipmixer.biz
https://chipmixer.co.uk
https://www.chipmixer.is
https://chipmixer.best
https://chippmixer.com
https://chipmixerwzxtzbw.com
https://chipmixerr.com
This uses a point between the E https://chipmixẹr.com

[jackg]

You might want to put a space between the dot and the extension to break the autolinking smf does, a search engine might crawl them and assume they're more notable than they are (thus ranking them higher).

[121425366@qq.com]

Chipmixer ranks first in Chinese list of 2020 currency mixers
https://bitcointalk.org/index.php?topic=5247254.0

[notblox1]

Did anyone had any issues with Bitcoins that you sent to exchanges after mixing coins with ChipMixer,
and do you have any suggestions about this and advice for reducing this (excluding not using centralized exchanges )?

[LeGaulois]

Did anyone had any issues with Bitcoins that you sent to exchanges after mixing coins with ChipMixer,
and do you have any suggestions about this and advice for reducing this (excluding not using centralized exchanges )?

From my experience, never I got trouble and did it more than 1 time.
As for the suggestion: making fake transactions. I mean to send bitcoins to yourself to create transaction history (since they scan the lastest transactions). If you add a dozen of "hops" you can be pretty sure to be fine (from centralized exchanges at least)

[gentlemand]

Did anyone had any issues with Bitcoins that you sent to exchanges after mixing coins with ChipMixer,
and do you have any suggestions about this and advice for reducing this (excluding not using centralized exchanges )?

I occasionally send my earnings from the Chipmixer campaign direct to Kraken and that has an address with Chip in the name. They've never said a word to me about it yet. I'm not sure others will be as relaxed.

[jackg]

Did anyone had any issues with Bitcoins that you sent to exchanges after mixing coins with ChipMixer,
and do you have any suggestions about this and advice for reducing this (excluding not using centralized exchanges )?

I occasionally send my earnings from the Chipmixer campaign direct to Kraken and that has an address with Chip in the name. They've never said a word to me about it yet. I'm not sure others will be as relaxed.

I've probably gone straight to an exchanfe in the past. I normally use other places though - like adding a few extra hops or use gambling sites/offshore exchanges that hide the trace a bit. 777coin and yolodice could work for making an anonymous account to break the chain (if you try to withdraw a different amount too from them then it might make you even less noticeable).

[Husires]

Will ChipMixer.com ban or help in tracking bitcoin obtained due to #twitter_hack?
Will they help them if know they are the hackers and what will happen if a judicial or political ruling is issued in that regard?
All analysis firms will track that address and may end up sending coins to ChipMixer

[LoyceV]

Will ChipMixer.com ban or help in tracking bitcoin obtained due to #twitter_hack?

You should read https://chipmixer.com/faq, under Fungibility? Why would I care? :

Let's hear the expert:

First of all I was going to explain what we mean by fungibility before bitcoin and ecash. It's an old legal concept in fact, about paper currency. It's the idea that a one ten dollar note is the same as any other ten dollar note. If you receive a note that was involved in a theft, 10 transactions ago, and the police investigate the theft, they have no right to remove the ten dollar note from your pocket. It's not your fault that it was involved in a previous crime. And so bank notes actually have serial numbers, so it would be possible for a stolen note to be traced back to you.

This first arose, there was a 17th century court case where a wealthy merchant sent a couple of high-value bank notes to a colleague in the post and they never arrived. Before he sent them, he was quite paranoid that they would get stolen. He wrote down the serial numbers and made a mark on them. Sure enough they didn't arrive, so he put in a complaint with the bank, and evenutally the notes turned up at the bank. He tried to get the bank to return the notes to his ownership. The courts sided with the bank. Their reason was that if notes could be returned to their original owner after a theft, it would damage confidence in currency and it would be bad for business, the currency would become unusable because every time you received the paper note you would have to look in the newspaper whether it was reported stolen, or you would have the risk of it being taken, or you would have to rush to the bank to deposit it so that it was the bank's problem.(...)

Then we arrive at this problem of taint tracing. Because it's not very private, some people took an interest in tracing coins and I think the motivation was that there's a number of high-profile thefts of coins from exchanges and other businesses, and that's a problem for those businesses and they went out of businss because of it. Some people would like to put distance between themselves and coins that were used in illicit use. There is a law that says that currency is fungible, but because you can somewhat tell where a coin was used before, people started to care. Coin validation proposed to offer as a service to trace coins and try to give you a rating about how the history of the coin from your point of view and to offer that as a service to businesses. I think this could be quite dangerous because it goes back to that 17th century court case where now you could receive a coin that is perfectly valid at the time that you receive it, but a few weeks later a crime is uncovered and now your coin is tainted. So if this coin validation service is advicing many of the merchants where you would want to spend your coin at, it's tainted and now the merchant would refuse to accept your coin. That's a strange experience for you; you're holding a coin that you might have to sell at a discount to get rid of it. The aggregate effect of this might create a run on the bitcoin price. So it reopens this long-set legal principle that currency or currency units are all equal.

http://diyhpl.us/wiki/transcripts/bitcoin-adam3us-fungibility-privacy/

Will they help them if know they are the hackers and what will happen if a judicial or political ruling is issued in that regard?
All analysis firms will track that address and may end up sending coins to ChipMixer[/quote]

[jackg]

Will ChipMixer.com ban or help in tracking bitcoin obtained due to #twitter_hack?
Will they help them if know they are the hackers and what will happen if a judicial or political ruling is issued in that regard?
All analysis firms will track that address and may end up sending coins to ChipMixer

They probably shouldn't... I originally thought at first it'd make sense for them to try to freeze the funds or something but now I don't.

What sort of a sign would this send out to people in the crypto space and beyond if a company aren't delivering on their promises... Also how do you know some of the funds didn't belong to the scammer before they were put through the mixer - contrary to what governments would want you to believe it's not exactly reasonable to take the whole of someone's money just because 10% was involved in illegality).

Most people sent small amounts too to test the waters...

[HeRetiK]

Will ChipMixer.com ban or help in tracking bitcoin obtained due to #twitter_hack?
Will they help them if know they are the hackers and what will happen if a judicial or political ruling is issued in that regard?
All analysis firms will track that address and may end up sending coins to ChipMixer

They probably shouldn't... I originally thought at first it'd make sense for them to try to freeze the funds or something but now I don't.

What sort of a sign would this send out to people in the crypto space and beyond if a company aren't delivering on their promises... Also how do you know some of the funds didn't belong to the scammer before they were put through the mixer - contrary to what governments would want you to believe it's not exactly reasonable to take the whole of someone's money just because 10% was involved in illegality).

Most people sent small amounts too to test the waters...

Also, how would you know for certain that the coins in question still belong to the scammer at the point they reach ChipMixer?

If they sent it directly from their scam address to ChipMixer -- maybe. But once the coins start moving, split up across several addresses etc. they might as well already have been sold to some poor unwitting soul in a p2p trade, tunnelled through a crypto casino or similar smallish establishment or maybe even been used to buy goods and services. Blockchain analysis may show you how the coins flow, but it doesn't tell anything about ownership.

[Husires]

Also, how would you know for certain that the coins in question still belong to the scammer at the point they reach ChipMixer?

FBI is investigating and all blockchain data analysis have been called in.
if something deserves to be tracked, those currencies will be.
Justin Sun and Binance rewarded 1 Million Bounty On Bitcoin Scammers.
I don’t assume they will use CoinJoin or central mixing services Breaking Mixing Services.
bitcoin is pseudonymous so chipmixer.com will be one of the places that will be used.

this remember me to The lagest Bitcoin mixer is about to stop working

[121425366@qq.com]

Algorithms for bitcoin hybrid services are developing. First generation hybrid service (bitcoin fog (fraud), dark Wallet， blockchain.info ）, second generation hybrid services（ bitmixer.io , coinmixer.se ）At present, the first generation of hybrid technology and the second generation of mixed currency technology can not resist the taint analysis, and it is easy to identify the source. At present, the third generation hybrid service is unique chipmixer.com With the development of stain analysis technology, one day chipmixer.com Anonymity may be broken!

[121425366@qq.com]

Did anyone had any issues with Bitcoins that you sent to exchanges after mixing coins with ChipMixer,
and do you have any suggestions about this and advice for reducing this (excluding not using centralized exchanges )?

By mixing currency chipmixer.com , and then come out through the gambling website!

[LoyceV]

With the development of stain analysis technology, one day chipmixer.com Anonymity may be broken!

Let's count (potential) chips, which is all addresses funded with a specific amount. From List of all Bitcoin addresses with a balance:
1 mBTC: 265288 addresses
2 mBTC: 67005 addresses
4 mBTC: 30375 addresses
8 mBTC: 15431 addresses
16 mBTC: 7897 addresses
32 mBTC: 3878 addresses
64 mBTC: 1678 addresses
128 mBTC: 1155 addresses
256 mBTC: 597 addresses
500 mBTC: 37896 addresses
512 mBTC: 347 addresses
1000 mBTC: 88063 addresses
1024 mBTC: 338 addresses
2048 mBTC: 114 addresses
4096 mBTC: 145 addresses
8192 mBTC: 57 addresses
I made a similar list 12 days ago.
Disclaimer: this counts the total remaining balance, so addresses with more than 1 input or even outputs are also included.