eXch - instant exchange BTC / LN / XMR / LTC / ETH / ERC20

[LoyceV]

I believe eXch are not dodgy, however the total amount you called is a little too high to believe without verification.

Have you seen their proof of reserves? It's not a far stretch to go from that amount in Bitcoin to a large number of ETH if someone exchanges a large amount.

[Igebotz]

I believe eXch are not dodgy, however the total amount you called is a little too high to believe without verification.

Have you seen their proof of reserves? It's not a far stretch to go from that amount in Bitcoin to a large number of ETH if someone exchanges a large amount.

That's fair enough although it's not half the amount I was told here- if they can implement/improve on some of the things I highlighted here it would do a lot of good to them.

@paid2 you only provided ETH reserves not the entire pocket. 

[LoyceV]

That's fair enough although it's not half the amount I was told here

That makes sense considering most of their funds are currently in ETH.

[examplens]

If I can give one suggestion to the eXch team.
Is there a possibility to add a unique favicon for your site? I usually have a large number of open tabs (I'm pretty sure I'm not the only one) and a site icon would help me a lot in easier recognition of exch site tab in the browser.

[Cricktor]

~~~

Most browsers allow to search for a specific tab which might be faster than scrolling through all your tabs and finding one by icon. Next option is to search in bookmarks or put a favorite on your new tab page, whatever suits your needs.

Could a favicon be a privacy issue, maybe on other pages? (Maybe I confuse a few things; the favicon topic is a bit blurry from the top of my head. I have some sort of vage memory of something I read in the past where a site could exploit somehow the existance of a favicon in the browser's cache to obtain ... whatever...).

I guess I wouldn't mind a nifty favicon either... 

[ABCbits]

Could a favicon be a privacy issue, maybe on other pages? (Maybe I confuse a few things; the favicon topic is a bit blurry from the top of my head. I have some sort of vage memory of something I read in the past where a site could exploit somehow the existance of a favicon in the browser's cache to obtain ... whatever...).

Yes, it's one of less-known privacy issue.

favicon cache

A favicon is an icon that represents a website, typically shown in browser tab and bookmarks menu. If the favicon cache is not partitioned, it can be used to track users across websites.

But favicon addition would be great, since people who take their privacy seriously probably use Tor Browser anyway to visit eXch.

[LoyceV]

But favicon addition would be great, since people who take their privacy seriously probably use Tor Browser anyway to visit eXch.

Easy privacy fix: don't add the favicon icon to the .onion site.

[bitmover]

~~~

Most browsers allow to search for a specific tab which might be faster than scrolling through all your tabs and finding one by icon. Next option is to search in bookmarks or put a favorite on your new tab page, whatever suits your needs.

Could a favicon be a privacy issue, maybe on other pages? (Maybe I confuse a few things; the favicon topic is a bit blurry from the top of my head. I have some sort of vage memory of something I read in the past where a site could exploit somehow the existance of a favicon in the browser's cache to obtain ... whatever...).

I guess I wouldn't mind a nifty favicon either...  

I didn't know about this .

I researched about it, and it is true. Websites can really track users uaing a script under the favicon.

Favicon is basically a supercookie which persists over cleaning browser cache and crosses incognito mode of browsers.
However,  to be used like this, the website must be willing to do it.

A good idea would be just to remove it enterily in privacy oriented projects.


https://www.schneier.com/blog/archives/2021/02/browser-tracking-using-favicons.html

[examplens]

Most browsers allow to search for a specific tab which might be faster than scrolling through all your tabs and finding one by icon. Next option is to search in bookmarks or put a favorite on your new tab page, whatever suits your needs.

Could a favicon be a privacy issue, maybe on other pages? (Maybe I confuse a few things; the favicon topic is a bit blurry from the top of my head. I have some sort of vage memory of something I read in the past where a site could exploit somehow the existance of a favicon in the browser's cache to obtain ... whatever...).

I guess I wouldn't mind a nifty favicon either...  

I didn't know about this .

I researched about it, and it is true. Websites can really track users uaing a script under the favicon.

I honestly didn't even know about this until now. (I never even researched this topic) Although now that I think about it, the favicon often remains for a long time, even if I remove it from a site I manage.

But favicon addition would be great, since people who take their privacy seriously probably use Tor Browser anyway to visit eXch.

Easy privacy fix: don't add the favicon icon to the .onion site.

I would accept this option.

[Lucius]

Honestly, I didn't even know that icon had an official name, much less that it could be used to track users. What is particularly worrying is that it cannot be deleted in the usual way, and I have two questions about that :

1. Where is that supercookie usually found in browsers and how to delete it manually?

2. Does this supercookie have any effect on the Tor browser and does it remain in it after we close the browser?

[BlackHatCoiner]

1. Where is that supercookie usually found in browsers and how to delete it manually?

Not sure what you mean by "where", it is stored in the same way as other cookies. You can delete it by clearing the cache.

2. Does this supercookie have any effect on the Tor browser and does it remain in it after we close the browser?

Unless specified otherwise, nothing related to your previous browsing remains in Tor, after you've closed it. It clears cache on closure.

[bitmover]

1. Where is that supercookie usually found in browsers and how to delete it manually?

Not sure what you mean by "where", it is stored in the same way as other cookies. You can delete it by clearing the cache.

It doesn`t work.

As a web developer I have seen favicon remains in the cache even if you change the file, use Ctrl F5, browser cache, etc....

There many discussions in the web about it

https://stackoverflow.com/questions/37997070/why-are-favicons-cached-longer
https://superuser.com/questions/375321/how-to-refresh-bookmark-favicons-in-chrome
https://stackoverflow.com/questions/2208933/how-do-i-force-a-favicon-refresh
https://www.stirtingale.com/guides/2018/01/how-to-favicon-flush-2/

I think something like this is the best anwser:

Close Chrome
Open your User Data folder
Delete the Favicons file
Run Chrome
Visit sites to force the icons to be re-downloaded

[examplens]

It doesn`t work.

As a web developer I have seen favicon remains in the cache even if you change the file, use Ctrl F5, browser cache, etc....

There many discussions in the web about it

I found some other solutions, on the server side, which might be a solution for eXch in this case.

Something like this should be in the .htaccess file

Code:

<Files "favicon.ico">
    Header set Cache-Control "no-cache, no-store, must-revalidate"
    Header set Pragma "no-cache"
    Header set Expires 0
</Files>

[BlackHatCoiner]

There many discussions in the web about it

My Mullvad browser, which is a fork of Tor, deletes favicons after closure. I just tried it on a private window in Firefox, and it also clears them. (Network tab displays transferred bytes, as opposed to "cached".) Could you verify in non-private Firefox (if you have it), as well? At the moment, I cannot clear my browser's cache, because I'm working.

Edit: It also clears favicon cache in Tor.

I think something like this is the best anwser

The best answer is to not use spyware browser Chrome.

[bitmover]

There many discussions in the web about it

My Mullvad browser, which is a fork of Tor, deletes favicons after closure. I just tried it on a private window in Firefox, and it also clears them. (Network tab displays transferred bytes, as opposed to "cached".) Could you verify in non-private Firefox (if you have it), as well? At the moment, I cannot clear my browser's cache, because I'm working.

You are using a very privacy oriented browser which is not nearly common...

Firefox,  Chrome, edge,  safari, etc all those keep favicon and 99% of the users use them.

[BlackHatCoiner]

Firefox,  Chrome, edge,  safari, etc all those keep favicon and 99% of the users use them.

I presume that the problem is designated towards individuals who are concerned about their privacy. If someone's using closed-source Chrome or Edge to access eXch, then their last concern should be the cached favicon.

To put it this way: if you're not using Firefox, or a fork of Firefox, then you're short on privacy. Users accessing eXch via Chrome or Edge should already assume their in-browser activities are being tracked. Removing the favicon would do nothing essential to enhance their privacy.

[bitmover]

To put it this way: if you're not using Firefox, or a fork of Firefox, then you're short on privacy. Users accessing eXch via Chrome or Edge should already assume their in-browser activities are being tracked. Removing the favicon would do anything essential to enhance their privacy.

Firefox also has this special cache features for favicons. This is what I use. But you are using a customized version of it, like Tor Browser, which doesnt.

[SFR10]

I just found two more phishing websites... One of them is new while the other one is a few months old and a victim of "another phishing website" briefly mentioned their domain name before editing his/her post ^{[unedited version]}:

Code:

cxch.xyz

Creation Date: 2024-11-08
Registrar Abuse Contact Email: abuse@namesilo.com
Registrar Abuse Contact Phone: +1.4805240066

Code:

exch.cy

Domain Name : exch.cy
sri.ns.cloudflare.com   
millie.ns.cloudflare.com

There's an empty website that I hope it'd never go live due to who their registrar is ^{[Name...cough...Cheap...cough (incompetent support staff)]}:

Registrar URL: http://www.namecheap.com
Creation Date: 2024-11-03T17:56:53.88Z

[Lucius]

I just found two more phishing websites...
~snip~

I've reported both to Google Safe Browsing, so I hope they'll be blacklisted and blocked in most browsers as soon as possible.

[caroasi]

This eXch.cx exchange is flawless in every way I have noticed. It is extremely low cost, extremely reliable, and fast. It is respectful of privacy, and extremely easy to use. I really don't understand why it isn't the #1 exchange platform by a wide margin.

Complaints I have include that it isn't easy to find on the internet by searching for exchanges. Ranking pages in top search results don't include this website in their exchange rankings. I hope this website never sells out at any price because it is run so well. Please train your children how to run the website.

If you don't have an Onion site please PM me to have me try to find a consultant or programmer for you.