Greetings,
we recently started looking into the send-shared code of
blockchain.info. Apparently, it has transfered more than
4,163,520,532.06 dollars so its security should be quite important in
the bitcoin universe.
As stated in
https://blockchain.info/wallet/send-sharedit's open source and its code lies in
https://github.com/blockchain/.
However, when we tried to find its code, we only found the JS code of
the website, but not the server-side code that actually does the
mixing. Where is that code? How can blockchain.info claim that it's
open source when the code cannot be found?
What's the code that is evaluated when you send a HTTP POST request to
this address
https://blockchain.info/forwarder ?
Thanks!
(we are aware that blockchain.info can screw you up in such a system,
but if the mixing is insecure then anyone can screw you up.)
(BTW, the JS code can be found at:
https://github.com/blockchain/My-Wallet/blob/master/send-shared.jshttps://github.com/blockchain/My-Wallet/blob/master/shared-addresses.jshttps://github.com/blockchain/My-Wallet/blob/master/shared.jsbut it's useless if you want to evaluate the security of the system.)
