Bitcoin Forum
December 08, 2016, 12:19:59 PM *
News: Latest stable version of Bitcoin Core: 0.13.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: « 1 2 3 4 [5] 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 »
  Print  
Author Topic: [ANNOUNCE] Bitcoin Fog: Secure Bitcoin Anonymization  (Read 211397 times)
w8ks6
Jr. Member
*
Offline Offline

Activity: 32


View Profile
November 15, 2012, 07:10:47 PM
 #81

Is this service still working?
Seems to be not working.
1481199599
Hero Member
*
Offline Offline

Posts: 1481199599

View Profile Personal Message (Offline)

Ignore
1481199599
Reply with quote  #2

1481199599
Report to moderator
1481199599
Hero Member
*
Offline Offline

Posts: 1481199599

View Profile Personal Message (Offline)

Ignore
1481199599
Reply with quote  #2

1481199599
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1481199599
Hero Member
*
Offline Offline

Posts: 1481199599

View Profile Personal Message (Offline)

Ignore
1481199599
Reply with quote  #2

1481199599
Report to moderator
hazek
Legendary
*
Offline Offline

Activity: 1078


View Profile
November 15, 2012, 10:07:24 PM
 #82

Is this service still working?
Seems to be not working.

The site opened for me just now, although I don't have an account so I couldn't test if it's actually functional.

My personality type: INTJ - please forgive my weaknesses (Not naturally in tune with others feelings; may be insensitive at times, tend to respond to conflict with logic and reason, tend to believe I'm always right)

If however you enjoyed my post: 15j781DjuJeVsZgYbDVt2NZsGrWKRWFHpp
secure_data
Newbie
*
Offline Offline

Activity: 11


View Profile
November 29, 2012, 05:56:21 PM
 #83

+1 Hazek
It was MY stupid mistake in excel sheet ...  please remove my post from yours(quote) too ... i recommend this service and will use it again for sure
hazek
Legendary
*
Offline Offline

Activity: 1078


View Profile
November 29, 2012, 05:59:54 PM
 #84

+1 Hazek
It was MY stupid mistake in excel sheet ...  please remove my post from yours(quote) too ... i recommend this service and will use it again for sure

I'm glad to hear it! Wink

My personality type: INTJ - please forgive my weaknesses (Not naturally in tune with others feelings; may be insensitive at times, tend to respond to conflict with logic and reason, tend to believe I'm always right)

If however you enjoyed my post: 15j781DjuJeVsZgYbDVt2NZsGrWKRWFHpp
Akemashite Omedetou
Member
**
Offline Offline

Activity: 84



View Profile WWW
December 03, 2012, 09:10:14 AM
 #85

Yes, the service is operational, alive and well!
We have been handling all the support through the secure contact form on the hidden service, so we haven't been checking this thread. It is nice to see that people haven't forgotten about it Smiley

Some news then:
It has come to our attention that user “Jefferson1” (https://en.bitcoin.it/wiki/Special:Contributions/Jefferson1) on the Bitcoin Wiki has changed addresses to both our service and Bitcoin Laundry to supposedly an address of a scamming website. The scammer's link has been there for a little more than a week, we just hope that not many users have sent money there. We are not affiliated with that link in any way, our hidden service address has not changed from the start, you should always use the address http://fogcore5n3ov3tui.onion to access the real Bitcoin Fog.

You can see the malicious modification here:
https://en.bitcoin.it/w/index.php?title=Trade&diff=prev&oldid=32931

We have of course rolled back the changes, both for our address and for Bitcoin Laundry.

Now for some good news: we have launched a Tor gate so that the service can be accessed even without tor: https://gate.bitcoinfog.com

This is less secure than going through tor itself, but all connections are going through SSL so information leaks are minimal (basically, only the fact itself that you are accessing the website could be observed by an adversary). Still, if you have Tor installed you should be going to the hidden service link directly.

If you are using the Tor gate, make sure to keep an eye on the SSL indicator. The real bitcoinfog service should always have a valid certificate for “gate.bitcoinfog.com”, you should not receive any SSL warnings!
The Tor gate is operating in testing mode, and since it is in Clearnet, it could be shutdown at any time, the hidden service is still the primary access point for Bitcoin Fog. But if the site loads and the SSL looks fine, you can use it relatively safely.

Bitcoin Fog: Secure Bitcoin Anonymization

---
Creedy: Die! Die! Why won't you die?... Why won't you die?
V: Beneath this mask there is more than flesh. Beneath this mask there is an idea, Mr. Creedy, and ideas are bulletproof.
tvbcof
Legendary
*
Offline Offline

Activity: 1988


View Profile
December 06, 2012, 07:52:19 AM
 #86


Yes, the service is operational, alive and well!

your persistence and attention to detail (snipped) is causing increased credibility in my mind.  Had I a need I would certainly be making partial use of your services by this time.  (I would always select multiple services and a carefully chosen scheme since as long as one of them were not a honeypot it would make the washing much more reliable.)

Some news then:
It has come to our attention that user “Jefferson1” (https://en.bitcoin.it/wiki/Special:Contributions/Jefferson1) on the Bitcoin Wiki has changed addresses to both our service and Bitcoin Laundry to supposedly an address of a scamming website. The scammer's link has been there for a little more than a week, we just hope that not many users have sent money there. We are not affiliated with that link in any way, our hidden service address has not changed from the start, you should always use the address http://fogcore5n3ov3tui.onion to access the real Bitcoin Fog.

What a dirtbag.  In this circumstance and very few others, I think it would be kind of amusing if whoever had any info (ip addresses and such) about this guy to 'accidentally' make it public so if anyone had the time and interest he might be able to be identified and shamed, or at least tied to any other ventures that would best be avoided.


In a cursor glance, it looks to me like the link should be to his only other mod.


Akemashite Omedetou
Member
**
Offline Offline

Activity: 84



View Profile WWW
December 08, 2012, 02:33:15 PM
 #87

Correct!
The actual link to the modification should be
https://en.bitcoin.it/w/index.php?title=Trade&diff=prev&oldid=32931

Sorry, it's kind of funny that we make this kind of mistakes when you've just noticed our "attention to detail"  Smiley

Bitcoin Fog: Secure Bitcoin Anonymization

---
Creedy: Die! Die! Why won't you die?... Why won't you die?
V: Beneath this mask there is more than flesh. Beneath this mask there is an idea, Mr. Creedy, and ideas are bulletproof.
damd
Newbie
*
Offline Offline

Activity: 8



View Profile
April 08, 2013, 12:53:25 AM
 #88

Is the website functioning well right now?  Undecided

Bitcoin: 191SCcae1h7KS12ttHQ28ZjJ2wgnDjPJvC
Bytecoin: 8cV97gynzRcxLqXZs3Hd2gqiFAdKc6uhpo
bitdroid
Newbie
*
Offline Offline

Activity: 14


View Profile
April 20, 2013, 12:00:21 PM
 #89

Website down. Another failed bitbiz. Mods any way to flag these it would be nice to only have active businesses on the threads. Otherwise I'll let people know so they don't waste their time clicking on dead links.
Akemashite Omedetou
Member
**
Offline Offline

Activity: 84



View Profile WWW
April 20, 2013, 09:32:08 PM
 #90

The service is in no way down. We have had some software problems today which resulted in some deposits being delayed, but that's about it; we have warned about this on the deposit page. It should be working fast now again.

If the website is not opening for you, you might want to try use "get new identity" Tor function, which will relay you through a different node, or try the clearnet gate: http://gate.bitcoinfog.com

Also please be aware of the copycats, of which there are now a number of: http://idg2wioimyjaekih.onion/, http://ecf5dppffhim3faw.onion/, http://kfdrua2bjbz7h243.onion, etc. (That's only the ones we could find.)
We are NOT AFFILIATED WITH THEM IN ANY WAY, use them on your own risk!
The only real link is http://fogcore5n3ov3tui.onion/

Bitcoin Fog: Secure Bitcoin Anonymization

---
Creedy: Die! Die! Why won't you die?... Why won't you die?
V: Beneath this mask there is more than flesh. Beneath this mask there is an idea, Mr. Creedy, and ideas are bulletproof.
bluejj44
Newbie
*
Offline Offline

Activity: 3


View Profile
July 03, 2013, 06:23:03 PM
 #91

I'd advise you not to use this service right now.

 I registered an account and transfered BTC into it.  Now i can't access log into my account.  There's no support option at the page.  I'll try to contact Akemashite via pm and keep you updated.
bluejj44
Newbie
*
Offline Offline

Activity: 3


View Profile
July 06, 2013, 07:41:01 PM
 #92

Well, it's been 3 days and no responses. 
Akemashite Omedetou
Member
**
Offline Offline

Activity: 84



View Profile WWW
August 05, 2013, 06:05:16 PM
 #93

We have the support form on the website which we have been using for all customer contacts. We trust that form much more than any other external service, forum or mail server, since that way we don't have another link in the compromization chain that could become the weakest.
To access the form you must be logged in which usually works, since it's very easy to register. (No other way really to know who the messages are from, for a Tor HS...)

About your request about not being able to login, we shall check some things and contact you more and PERHAPS help you get back the money, but generally our policy is to not help users in these cases.
As we warn on the registration page, our service does not do e-mails and so you have to be VERY careful with your password. We have been in operation for more than a year and are in no business of stealing random accounts. Otherwise there would be plenty of reports of this on various forums.
The policy basically makes the assumption that if someone has any money to consider, they will remember their password, it's not very hard, our service uses no JavaScript or any other things that might tangle with the login form, and we provide some extra information about the login to make sure we don't intervene with entering proper data.
Any attempts to help any users with such requests are very shady for us, since we have no actual way to verify or identify the user, since we are an anonymous service. We might just be helping someone trying to get other user's account... This simply does not send any good message about the integrity of our service to other legitimate users, if they would find out that someone who somehow would obtain any piece of information about an account could persuade us to give him/her the account itself.
Our primarty concerns are anonymity, security and integrity, and every one of our users must know this, and that is the reason for this policy.

Bitcoin Fog: Secure Bitcoin Anonymization

---
Creedy: Die! Die! Why won't you die?... Why won't you die?
V: Beneath this mask there is more than flesh. Beneath this mask there is an idea, Mr. Creedy, and ideas are bulletproof.
nostromo429
Newbie
*
Offline Offline

Activity: 14


View Profile
August 28, 2013, 05:56:51 AM
 #94

I find it strange that only casascius is voicing these concerns over your service. I'd like to state some thoughts that came to mind reading this thread.

The last 4 or 5 bytes of every bitcoin address is a checksum, you should be able to check that an address is valid the same way that the client does. Anything less would mean you're lazy. Wink
Fair enough, this goes into the TODO-pile.
Really? Really?
This is such a common and trivial thing to do, any developer who has worked with bitcoin for 3 days will code it as an afterthought to his base58 decode function. It is literally the difference between

Code:
def DecodeAddress(address):
    hex = b58ToHex(address)
    address = hex[0:-4]
    return address
and
Code:
def DecodeAddress(address):
    hex = b58ToHex(address)
    address = hex[0:-4]
    checksum = hex[-4:0]
    if hash(address)[0:4] != checksum:
        error "This is not a valid address"
    return address

I've been a web app developer for years and I've worked at shops at all levels of, uh, evolution in the software development as engineering vs "code it, wrap it, ship it."  This is also what raised the biggest red flag for me.

In any shop/group with a solid software development and quality assurance process, the revelation of the checksum thing would have been met (assuming embarrassment wasn't being concealed) with an "oh shit, I have NO idea how we could've overlooked that, but my partner himself just committed a fix, we all code reviewed it on Skype 30 min ago, and it'll be live by tonight" type response.

I'm not trying to be a pain, and I don't think  casascuius is either, it's that sites like Bitcoin Fog are really important and we want you to get them right.  Thanks for even trying, BTW.

Quote from: BTCurious
Your whole attitude to something that is this trivial to implement, but has such important consequences for your users, is astounding.

Yes.  I think some "veterans" have a few books on software engineering that you all could benefit from reading.


Quote from: BTCurious
Anything else?… Let's see…
as of now, all payouts are mostly done from the same address
That seems strange, for an anonymizing service, but you plan on fixing that, so it should be okay.

"It should be okay."  ...what.  Those are not words you should be saying as a developer on BitcoinFog.

Quote from: BTCurious
There is no hard logic to what you are proposing. If you or anyone else has any hard math on this, please provide it. We couldn't find any. And your answer only suggests that it "feels" secure to you, and you don't have any actual models of this.
I haven't seen you post any hard math, or hard logic. For example, you "feel" 28 addresses is more secure than 3. Maybe this is the case. Maybe it's bullshit. Did you do any calculations?

I'm gonna step up and say that I hope to fucking $deity that somebody running some of these services has done some of the shit you see in your discrete math / state machines / logic class in an undergrad CS curriculum, but beyond that: mathematical proofs.  I can't do that, I retook that fucking class twice, but I'd raise BTC and pay somebody who can if I were launching a coin mixer.

It's ironic - all this runs over Tor - have y'all read any of the papers these guys write?  About the holes in their own system?  There's very little "thinking it should be okay."  Again - not to be mean - but be aware of the complexity of the problem you are trying to solve and that you need mathematical assurance that you're selling something other than snake oil, if you give two shits about your users thinking they're anonymous by using your service, and then getting jailed, tortured, or killed because they were not.

[1] http://hal.inria.fr/docs/00/47/15/56/PDF/TorBT.pdf
[2] http://swiki.cc.gatech.edu:8080/ugResearch/uploads/7/ImprovingTor.pdf
[3] http://archives.seul.org/or/dev/Jul-2010/msg00021.html
[4] http://dl.acm.org/citation.cfm?doid=1029179.1029199
[5] http://link.springer.com/chapter/10.1007%2F978-3-642-14527-8_10
[6] http://link.springer.com/chapter/10.1007%2F978-3-642-14527-8_11
[7] https://blog.torproject.org/blog/deterministic-builds-part-one-cyberwar-and-global-compromise (hell, even the blog posts involve a ton of thought about security)

For further light reading, here is a bibliography on the topic of digital anonymity which starts in 1977: http://freehaven.net/anonbib/#DBLP:conf/ccs/EdmanS09

Quote from: BTCurious
In summary: I think your service does some things right (e.g. the having no public IP, only connecting through tor), while other things seem a bit strange. The core though remains, that you've shattered all my trust in your skills at the very beginning, when you didn't implement a core safety mechanism, which is trivial to implement but paramount to prevent mistakes. This mistake, along with your attitude about it the ~5 posts after that, leads me to question a lot of other things about your service, which I might normally assume to be secure/obvious. I can see that casascius's reasoning is similar. (casascius: correct me if I'm wrong)

+1.  Thank you, thank you, thank you for trying.

Now throw it away and write it again, with proofs, and open source the fucker so there are a million coin mixers.
millsdmb
Sr. Member
****
Offline Offline

Activity: 280


View Profile
October 19, 2013, 02:42:08 AM
 #95

I am curious, every deposit I've ever made has never gone anywhere in the last month. Is that normal? Or is it magic?

Hitler Finds out about the Butterfly Labs Monarch http://www.youtube.com/watch?v=4jYNMKdv36w
Get $5 worth of BTC Free when you buy $100 worth at coinbase.com/?r=51dffa8970f85a53bd000034
Akemashite Omedetou
Member
**
Offline Offline

Activity: 84



View Profile WWW
October 28, 2013, 03:54:33 PM
 #96

Quote
I am curious, every deposit I've ever made has never gone anywhere in the last month. Is that normal? Or is it magic?

What do you mean not gone anywhere? Did you withdraw it? Or it didn't get registered to your account?
The system is fully operational, there are around 10 deposits per hour registering without any problems...
Also why didn't you open a ticket on the service itself? We do answer all the tickets, but if you rather discuss your usage of an anonymizing service on a public forum, please Smiley

Bitcoin Fog: Secure Bitcoin Anonymization

---
Creedy: Die! Die! Why won't you die?... Why won't you die?
V: Beneath this mask there is more than flesh. Beneath this mask there is an idea, Mr. Creedy, and ideas are bulletproof.
Wolf0
Legendary
*
Offline Offline

Activity: 1400


Miner Developer


View Profile
November 04, 2013, 07:28:08 PM
 #97

Quote
I am curious, every deposit I've ever made has never gone anywhere in the last month. Is that normal? Or is it magic?

What do you mean not gone anywhere? Did you withdraw it? Or it didn't get registered to your account?
The system is fully operational, there are around 10 deposits per hour registering without any problems...
Also why didn't you open a ticket on the service itself? We do answer all the tickets, but if you rather discuss your usage of an anonymizing service on a public forum, please Smiley

I think he means he checked on a block explorer, and the actual coins he sent haven't moved.

Also, I think you guys need a news section or a Twitter account. It would make you seem more professional, and it would keep users in the loop. For example, you could let us know when you lower the minimum withdrawal, or when the site goes down.

Code:
Donations: BTC: 1Jp2R7dF9gYr872FkXiap2MaYaHNEfwWhZ -- XMR: 42QWoLF7pdwMcTXDviJvNkWEHJ4TXnMBh2Cx6HNkVAW57E48Zfw6wLwDUYFDYJAqY7PLJUTz9cHWB5C4wUA7UJPu5wPf4sZ -- GPG Key ID: 0x88CBE71ADD5FB10F
Wolf0
Legendary
*
Offline Offline

Activity: 1400


Miner Developer


View Profile
November 06, 2013, 08:43:10 AM
 #98

As of now, Bitcoin Fog seems to be down. Right after I made a deposit, too.

EDIT: It came back up pretty quickly.

Code:
Donations: BTC: 1Jp2R7dF9gYr872FkXiap2MaYaHNEfwWhZ -- XMR: 42QWoLF7pdwMcTXDviJvNkWEHJ4TXnMBh2Cx6HNkVAW57E48Zfw6wLwDUYFDYJAqY7PLJUTz9cHWB5C4wUA7UJPu5wPf4sZ -- GPG Key ID: 0x88CBE71ADD5FB10F
millsdmb
Sr. Member
****
Offline Offline

Activity: 280


View Profile
November 07, 2013, 03:20:22 AM
 #99

Quote
I am curious, every deposit I've ever made has never gone anywhere in the last month. Is that normal? Or is it magic?

What do you mean not gone anywhere? Did you withdraw it? Or it didn't get registered to your account?
The system is fully operational, there are around 10 deposits per hour registering without any problems...
Also why didn't you open a ticket on the service itself? We do answer all the tickets, but if you rather discuss your usage of an anonymizing service on a public forum, please Smiley

I think he means he checked on a block explorer, and the actual coins he sent haven't moved.

Also, I think you guys need a news section or a Twitter account. It would make you seem more professional, and it would keep users in the loop. For example, you could let us know when you lower the minimum withdrawal, or when the site goes down.
Exactly, i am speaking only of deposits. My withdrawls come out fine,

but why does it matter how long I leave my bitcoins in the fog if they dont move anywhere for weeks to a month after deposit anyway? 0% taint is 0% taint, is it not?

Hitler Finds out about the Butterfly Labs Monarch http://www.youtube.com/watch?v=4jYNMKdv36w
Get $5 worth of BTC Free when you buy $100 worth at coinbase.com/?r=51dffa8970f85a53bd000034
Wolf0
Legendary
*
Offline Offline

Activity: 1400


Miner Developer


View Profile
November 07, 2013, 12:05:55 PM
 #100

Quote
I am curious, every deposit I've ever made has never gone anywhere in the last month. Is that normal? Or is it magic?

What do you mean not gone anywhere? Did you withdraw it? Or it didn't get registered to your account?
The system is fully operational, there are around 10 deposits per hour registering without any problems...
Also why didn't you open a ticket on the service itself? We do answer all the tickets, but if you rather discuss your usage of an anonymizing service on a public forum, please Smiley

I think he means he checked on a block explorer, and the actual coins he sent haven't moved.

Also, I think you guys need a news section or a Twitter account. It would make you seem more professional, and it would keep users in the loop. For example, you could let us know when you lower the minimum withdrawal, or when the site goes down.
Exactly, i am speaking only of deposits. My withdrawls come out fine,

but why does it matter how long I leave my bitcoins in the fog if they dont move anywhere for weeks to a month after deposit anyway? 0% taint is 0% taint, is it not?

It only matters if you have a LARGE amount of BTC to clean. The Fog has enough traffic that you can deposit small amounts and withdraw them immediately, but if you put in like 5,000 BTC and tried that, you'd likely get back some of your own coins.

Code:
Donations: BTC: 1Jp2R7dF9gYr872FkXiap2MaYaHNEfwWhZ -- XMR: 42QWoLF7pdwMcTXDviJvNkWEHJ4TXnMBh2Cx6HNkVAW57E48Zfw6wLwDUYFDYJAqY7PLJUTz9cHWB5C4wUA7UJPu5wPf4sZ -- GPG Key ID: 0x88CBE71ADD5FB10F
Pages: « 1 2 3 4 [5] 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 »
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!