Users who spread false/fake/unhelpful information on technical board

[LoyceV]

Can't the attacker just derive the exact Bitcoin address from the raw public key?

Yes, but there's no need: usually the address is broadcasted (when it gets funded) before the public key is shared (when sending a transaction).

[ABCbits]

--snip--
To perform dust attack, you only need to know the Bitcoin address. public key doesn't matter here.

Can't the attacker just derive the exact Bitcoin address from the raw public key?

Yes, attacker (or anyone else) could generate Bitcoin address from the public key. But in almost all cases, the Bitcoin address is known first before the public key. Bitcoin address become known after it receive Bitcoin or the owner share it to other people. But public key become known after you spend Bitcoin from the associated address, the owner share signed message to other people or the owner share the public key directly to other people.

[eternalgloom]

Yes, attacker (or anyone else) could generate Bitcoin address from the public key. But in almost all cases, the Bitcoin address is known first before the public key. Bitcoin address become known after it receive Bitcoin or the owner share it to other people. But public key become known after you spend Bitcoin from the associated address, the owner share signed message to other people or the owner share the public key directly to other people.

So I would say that according to the question, his answer is correct in this case.

But the other two posts that you mentioned are really unhelpful wrong information, especially what he wrote about wallet entropy is completely wrong.

[LoyceV]

So I would say that according to the question, his answer is correct in this case.

Correct or not, it's unhelpful. Exposed public keys don't cause dust attacks.

[ABCbits]

So I would say that according to the question, his answer is correct in this case.

Correct or not, it's unhelpful. Exposed public keys don't cause dust attacks.

And it could mislead people, because people could falsely assume dust attack only works on Bitcoin address that already spend it's Bitcoin.