Mixin Safe (Decentralized Multisig+MPC+Timelock solution) review preperation

[logfiles]

Not sure if the question belongs here or not, but is it just me or others are experiencing this...if you log into Mixin Safe via the web platform , I have noticed that mixin doesn't log you out automatically even after hours of you not being near you PC! Is this suppose to work this way, thought after X minutes it need should to sign I  with Mornin key 🔑 or something 

If you believe it's a useful security feature, then I suggest you should add it in your review post if you are part of the selected reviewers. This is the main reason they decided to spend some money on the review campaign… Right?

[1714577063]

1714577063

[1714577063]

1714577063

[Woodie]

Not sure if the question belongs here or not, but is it just me or others are experiencing this...if you log into Mixin Safe via the web platform , I have noticed that mixin doesn't log you out automatically even after hours of you not being near you PC! Is this suppose to work this way, thought after X minutes it need should to sign I  with Mornin key 🔑 or something  

If you believe it's a useful security feature, then I suggest you should add it in your review post if you are part of the selected reviewers. This is the main reason they decided to spend some money on the review campaign… Right?

Only noticed this when I reloaded the mixin dashboard, after several hours of doing my review , anyway a simple edit will fix it ,cheers  

[yhiaali3]

Hi Royse777
Sorry to tell you that I would like to withdraw my application
During the past days I downloaded the necessary applications for my review and activated Mixin Safe with a virtual phone number successfully, but when I try to create a PIN to create a wallet I get the error in the picture:

                                     

I tried many times changing the number as well as changing the VPN but I get the same error every time, I contacted support via Mixin Safe chat and they tried to help me but unfortunately they could not find out the cause of the problem and my problem was not solved.

So I hope you will accept my apology and withdraw my application and give the opportunity to another participant.

[AB de Royse777]

So I hope you will accept my apology and withdraw my application and give the opportunity to another participant.

Sorry to hear that.
I am removing you from the list (temp). Currently the campaign is CFNP, before making a new opening if you are able to sort it out then let me know, I will add you back without making an opening.

Cheers,

[yhiaali3]

So I hope you will accept my apology and withdraw my application and give the opportunity to another participant.

Sorry to hear that.
I am removing you from the list (temp). Currently the campaign is CFNP, before making a new opening if you are able to sort it out then let me know, I will add you back without making an opening.

Cheers,

Thanks Royse777 for your understanding
I'll make a few more tries, if it works I'll let you know
Greetings to you

[Woodie]

I'll make a few more tries, if it works

Any success with this?

If you can change numbers, can offer my help with an alternative number no strings attached. Let me know via PM. GL.

[NotATether]

Here is a screnshot of me approving the tx with the almost-lost second signer, in a Windows 7 computer that I found in my hotel.

@TryNinja

Maybe it is better if Mixin Safe had a UI (within both the desktop/web and the mobile apps) for you to revoke unsafe computers? It's very easy for a public computer (particularly Windows) to get loaded with malware that steals auth tokens and approves an unauthorized transfer.

@cedricfung what do you think? It would be a welcome addition to already asking the other devices for authorization of another device that's about to log in.

[cedricfung]

Here is a screnshot of me approving the tx with the almost-lost second signer, in a Windows 7 computer that I found in my hotel.

@TryNinja

Maybe it is better if Mixin Safe had a UI (within both the desktop/web and the mobile apps) for you to revoke unsafe computers? It's very easy for a public computer (particularly Windows) to get loaded with malware that steals auth tokens and approves an unauthorized transfer.

@cedricfung what do you think? It would be a welcome addition to already asking the other devices for authorization of another device that's about to log in.

Agree, for now you can revoke all authorizations from Mixin Messenger -> Settings -> Account -> Security -> Authorizations.

And whenever you sign in to Mixin Safe from a different browser, the old one will also be logged out.

Now adding the feature to logout of the service when inactive for some time.

[AB de Royse777]

Remainder to remaining 4 members from Batch#1.

Code:

Rockstarguy
examplens
Potato Chips
logfiles

Please submit your review before 23:59 UTC today.

[examplens]

Remainder to remaining 4 members from Batch#1.

Code:

Rockstarguy
examplens
Potato Chips
logfiles

Please submit your review before 23:59 UTC today.

I am in the process of writing. Here we had strong storms that caused serious damage to the internet and electrical network infrastructure, so I have been in very difficult conditions for the last few days. If there are additional outages today, I will post this so far written, around 70%.

I definitely wanted to ask, is adding screenshots mandatory or necessary? repeating the screenshot from the application probably only serves as proof that we really went through the process.
tx

[AB de Royse777]

Remainder to remaining 4 members from Batch#1.

Code:

Rockstarguy
examplens
Potato Chips
logfiles

Please submit your review before 23:59 UTC today.

I am in the process of writing. Here we had strong storms that caused serious damage to the internet and electrical network infrastructure, so I have been in very difficult conditions for the last few days. If there are additional outages today, I will post this so far written, around 70%.

I definitely wanted to ask, is adding screenshots mandatory or necessary? repeating the screenshot from the application probably only serves as proof that we really went through the process.
tx

Considering the circumstance, I will allow you to submit your review with batch#2 which means you can have the same deadline as they have. No worries.

Screenshot is not mandatory but use it when it is necessary. Your contents will reflect if a user indeed used the service. You can save screenshot in your device just in case you need to defend yourself if anyone ask question.  

[logfiles]

Remainder to remaining 4 members from Batch#1.

Code:

Rockstarguy

Please submit your review before 23:59 UTC today.

It looks like @Rockstarguy made a review but probably forgot to submit it through the report form. Maybe he missed out that bit of the instructions.
With the deadline coming in fast, try sending him a PM about this if he is not paying attention to the mention bot notifications.

[Rockstarguy]

Remainder to remaining 4 members from Batch#1.

Code:

Rockstarguy

Please submit your review before 23:59 UTC today.

It looks like @Rockstarguy made a review but probably forgot to submit it through the report form. Maybe he missed out that bit of the instructions.
With the deadline coming in fast, try sending him a PM about this if he is not paying attention to the mention bot notifications.

Boss Royse777 have submitted my review before now and also filled the report form and I had to do it again to be sure , my name is reflecting two times on the report list.. This is the link to my review https://bitcointalk.org/index.php?topic=5460259.msg62596593#msg62596593

[NotATether]

@Royse777 I was about to finish to review, but unable to complete last process (sign PBST transaction with Bitcoin Core) use Bitcoin Core and i got locked from recovery process. The details of the problem can be seen on my review post[1]. Anyway, is it acceptable if my review is about "attempt to make transaction and use recovery instead" rather than "make transaction" ?

[1] https://bitcointalk.org/index.php?topic=5460259.msg62626762#msg62626762

Oh damn... you got locked too?

Hopefully it was only a small amount. The Bitcoin Core approval instructions clearly seem to be incorrect.

[AB de Royse777]

@Royse777 I was about to finish to review, but unable to complete last process (sign PBST transaction with Bitcoin Core) use Bitcoin Core and i got locked from recovery process. The details of the problem can be seen on my review post[1]. Anyway, is it acceptable if my review is about "attempt to make transaction and use recovery instead" rather than "make transaction" ?

[1] https://bitcointalk.org/index.php?topic=5460259.msg62626762#msg62626762

I sent a PM to cedricfung to write you a response. Hopefully you will hear soon from him.

Anyway, is it acceptable if my review is about "attempt to make transaction and use recovery instead" rather than "make transaction" ?

The real experience will be appreciated whether it is a recovery attempt or transaction.

[cedricfung]

Coins in Mixin Safe will be secure, no worry if you keep at least one private key. Mixin Messenger or Bitcoin Core.

Now it looks like some instructions issues, the team is trying to make it more clear to use.

[electronicash]

@Royse777 will be posting my review soon. by Aug 3.

i thought this is a mixer. i just installed it on my computer. I got a lot of issues due to the system requirements its giving me headaches. i end up using that flathub version for linux.

[logfiles]

i thought this is a mixer. i just installed it on my computer. I got a lot of issues due to the system requirements its giving me headaches. i end up using that flathub version for linux.

Yeah, the name can be quite confusing. It actually confused a number of members.

If you have a smartphone, just use it instead to install the mixin messenger and mornin key and then use the computer, to visit the mixin safe website for set up and easier QR code scanning using the mobile phone.

I don't think the desktop version of mixin messenger has more futures like the mobile version

[cedricfung]

@Royse777 I was about to finish to review, but unable to complete last process (sign PBST transaction with Bitcoin Core) use Bitcoin Core and i got locked from recovery process. The details of the problem can be seen on my review post[1]. Anyway, is it acceptable if my review is about "attempt to make transaction and use recovery instead" rather than "make transaction" ?

[1] https://bitcointalk.org/index.php?topic=5460259.msg62626762#msg62626762

I sent a PM to cedricfung to write you a response. Hopefully you will hear soon from him.

Anyway, is it acceptable if my review is about "attempt to make transaction and use recovery instead" rather than "make transaction" ?

The real experience will be appreciated whether it is a recovery attempt or transaction.

For the Bitcoin Core signature issue, I thought maybe the Bitcoin Core is not version 25.0+?

[NotATether]

@Royse777 I was about to finish to review, but unable to complete last process (sign PBST transaction with Bitcoin Core) use Bitcoin Core and i got locked from recovery process. The details of the problem can be seen on my review post[1]. Anyway, is it acceptable if my review is about "attempt to make transaction and use recovery instead" rather than "make transaction" ?

[1] https://bitcointalk.org/index.php?topic=5460259.msg62626762#msg62626762

I sent a PM to cedricfung to write you a response. Hopefully you will hear soon from him.

Anyway, is it acceptable if my review is about "attempt to make transaction and use recovery instead" rather than "make transaction" ?

The real experience will be appreciated whether it is a recovery attempt or transaction.

For the Bitcoin Core signature issue, I thought maybe the Bitcoin Core is not version 25.0+?

You should definitely state on the website that version 25.0+ is required for creating the Safe (ideally in the combo-box where you can select the type of Safe you want to create). It was the only way I was able to sign the PSBT.

note: this allows you to sign PSBTs from Safe wallets created in older versions of Core

@ETFBitcoin:

Try creating another script wallet using Bitcoin 25.0 rpcs, make sure it's the only descriptor inside the wallet, and then copy the PSBT from the website and try to sign it again - first with the script wallet so it makes the required fields in the PSBT, then paste the output and sign it to the private key wallet.