[XMR] Monero - A secure, private, untraceable cryptocurrency

[garytheasshole]

Anonymous No More? Monero Exploit Reveals User Identities to Hackers

The researcher, Anthony Russell, says that he can actually locate Monero users through transaction broadcasts.

When users open up their Monero wallets, they connect to the peer-to-peer network, which allows users to then connect to individual wallets.

According to Russell, If the users of those wallets aren’t using TOR or I2P, you can easily determine their IPs.

One potential problem with this method is that it doesn’t necessarily differentiate between server nodes and peers. However, Russell says that this can be overcome by doing a simple whois search............

https://bitsonline.com/monero-exploit-threatens-privacy/

LOL! Collecting IPs from netstat output reveals identities. This is so fucking retarded.

[1714898733]

1714898733

[1714898733]

1714898733

[1714898733]

1714898733

[FloppyPurpleGherkin]

Anonymous No More? Monero Exploit Reveals User Identities to Hackers

The researcher, Anthony Russell, says that he can actually locate Monero users through transaction broadcasts.

When users open up their Monero wallets, they connect to the peer-to-peer network, which allows users to then connect to individual wallets.

According to Russell, If the users of those wallets aren’t using TOR or I2P, you can easily determine their IPs.

One potential problem with this method is that it doesn’t necessarily differentiate between server nodes and peers. However, Russell says that this can be overcome by doing a simple whois search............

https://bitsonline.com/monero-exploit-threatens-privacy/

Bad news tbh.

[garytheasshole]

Anonymous No More? Monero Exploit Reveals User Identities to Hackers

The researcher, Anthony Russell, says that he can actually locate Monero users through transaction broadcasts.

When users open up their Monero wallets, they connect to the peer-to-peer network, which allows users to then connect to individual wallets.

According to Russell, If the users of those wallets aren’t using TOR or I2P, you can easily determine their IPs.

One potential problem with this method is that it doesn’t necessarily differentiate between server nodes and peers. However, Russell says that this can be overcome by doing a simple whois search............

https://bitsonline.com/monero-exploit-threatens-privacy/

Bad news tbh.

It's not even news. Anthony Russell is not the sharpest knife in the drawer. No shit you need to connect on nodes to get your chain in sync and transmit transactions. But you can't pin identities or wallet addresses based on IPs you've collected from your own node. Use your head people. How do you think we got this https://monerohash.com/nodes-distribution.html

Anthony needs to work a lot harder if he wants his 5 minutes internet fame, reminding us of the bare basic of p2p cryptocurrencies wont do.

[Temik2704]

Judging by the schedule in the near future we will see the growth of the coin. Well, if they add COIN  to the Bitfly exchange, I think we'll see x2.

[notbatman]

Anonymous No More? Monero Exploit Reveals User Identities to Hackers

The researcher, Anthony Russell, says that he can actually locate Monero users through transaction broadcasts.

When users open up their Monero wallets, they connect to the peer-to-peer network, which allows users to then connect to individual wallets.

According to Russell, If the users of those wallets aren’t using TOR or I2P, you can easily determine their IPs.

One potential problem with this method is that it doesn’t necessarily differentiate between server nodes and peers. However, Russell says that this can be overcome by doing a simple whois search............

https://bitsonline.com/monero-exploit-threatens-privacy/

LOL! Collecting IPs from netstat output reveals identities. This is so fucking retarded.

You've been targeted with FUD! How do you feel about that?

[explorer]

Anonymous No More? Monero Exploit Reveals User Identities to Hackers

The researcher, Anthony Russell, says that he can actually locate Monero users through transaction broadcasts.

When users open up their Monero wallets, they connect to the peer-to-peer network, which allows users to then connect to individual wallets.

According to Russell, If the users of those wallets aren’t using TOR or I2P, you can easily determine their IPs.

One potential problem with this method is that it doesn’t necessarily differentiate between server nodes and peers. However, Russell says that this can be overcome by doing a simple whois search............

https://bitsonline.com/monero-exploit-threatens-privacy/

LOL! Collecting IPs from netstat output reveals identities. This is so fucking retarded.

You've been targeted with FUD! How do you feel about that?

So who does this one work for?  

[kellrobinson]

Anonymous No More? Monero Exploit Reveals User Identities to Hackers

The researcher, Anthony Russell, says that he can actually locate Monero users through transaction broadcasts.

When users open up their Monero wallets, they connect to the peer-to-peer network, which allows users to then connect to individual wallets.

According to Russell, If the users of those wallets aren’t using TOR or I2P, you can easily determine their IPs.

One potential problem with this method is that it doesn’t necessarily differentiate between server nodes and peers. However, Russell says that this can be overcome by doing a simple whois search............

https://bitsonline.com/monero-exploit-threatens-privacy/

LOL! Collecting IPs from netstat output reveals identities. This is so fucking retarded.

You've been targeted with FUD! How do you feel about that?

So who does this one work for?  

https://www.youtube.com/watch?v=nmJKY59NX8o

[Hueristic]

Anonymous No More? Monero Exploit Reveals User Identities to Hackers

The researcher, Anthony Russell, says that he can actually locate Monero users through transaction broadcasts.

When users open up their Monero wallets, they connect to the peer-to-peer network, which allows users to then connect to individual wallets.

According to Russell, If the users of those wallets aren’t using TOR or I2P, you can easily determine their IPs.

One potential problem with this method is that it doesn’t necessarily differentiate between server nodes and peers. However, Russell says that this can be overcome by doing a simple whois search............

https://bitsonline.com/monero-exploit-threatens-privacy/

Bad news tbh.

Anonymous No More? Monero Exploit Reveals User Identities to Hackers

The researcher, Anthony Russell, says that he can actually locate Monero users through transaction broadcasts.

When users open up their Monero wallets, they connect to the peer-to-peer network, which allows users to then connect to individual wallets.

According to Russell, If the users of those wallets aren’t using TOR or I2P, you can easily determine their IPs.

One potential problem with this method is that it doesn’t necessarily differentiate between server nodes and peers. However, Russell says that this can be overcome by doing a simple whois search............

https://bitsonline.com/monero-exploit-threatens-privacy/

Yay the trolls are back!!! Looks like the bottom is here. I grabbed another long at 0.01446773, couldn't get any lower with those fucking Bots. Funny the bots were at a stalemate at 0.01448000   for 0.10077572   Xmr and I grabbed that and they started buying but then backed off. I'm all in now.

[BossBee]

Monero trolls allocated countless hours and most of their brain power to FUD Dash, a coin that isn't even targeting the same market needs as them, to end up getting their faces REKT out of know where by zen cash. . . What a classic tale for the history books. 

[Skuffone]

Hi there XMR community, i really like the https://forum.getmonero.org/ website.

Can anyone point me to who developed it or if the code is opened sourced anywhere?

Thnx

[Charles T.]

Purism’s Smartphone Librem 5 integrates Monero

[GröBkAz]

Judging by the schedule in the near future we will see the growth of the coin. Well, if they add COIN  to the Bitfly exchange, I think we'll see x2.

Never heard the name of Bitfly exchange, how good is that exchange and how will it make impact on pricing

[M5M400]

Monero trolls allocated countless hours and most of their brain power to FUD Dash, a coin that isn't even targeting the same market needs as them, to end up getting their faces REKT out of know where by zen cash. . . What a classic tale for the history books. 

can you point me to said trolling/shilling? I've not seen the monero community FUDing Dash anywhere.

[revelacaogr]

DevMeeting 2017-10-22

Highlights[ ]

Recent code merges
Lightweight Wallet API support
Sub-addresses
Bugfix release(0.11.0.1) may be as early as October 23, 2017 (Monday). (This will *not* enable the features above.)
Discussions involving dotnetrussel's (Verge) twitter bot.
It's really not worth rebuttal as there's no vulnerability.
It's just watching for connections on a port via "netstat". Not indicative of a Monero user or transaction.
dEBRUYNE may write something official up.
Discussions of the Monero Hardware wallet will likely migrate to the Monero Community meetings.
redfish and hyc are working through some database sync and corruption issues.

https://monerobase.com/wiki/DevMeeting_2017-10-22

[pönde]

This is decentralized exchange.
nvo.io

The wallet will available at the beginning of the November and exhanchange at Q1 2018.

Project is completely open source and each coins devs can make their own plugin for the wallet. I do not know does the nvo team do the plug in for monero, but anyway monero devs can do it. Monero logo is anyway at nvo demo video in youtube.

Are monero devs aware of this project?

[Hueristic]

This is decentralized exchange.
nvo.io

The wallet will available at the beginning of the November and exhanchange at Q1 2018.

Project is completely open source and each coins devs can make their own plugin for the wallet. I do not know does the nvo team do the plug in for monero, but anyway monero devs can do it. Monero logo is anyway at nvo demo video in youtube.

Are monero devs aware of this project?

I hope our devs will vett the code for this.

Transactions
are
processed
simultaneously
through
an
order
matching
engine
from
one
wallet
to
another.
The
validator
on
the
Safenetwork
will
check
if
the
transactions
are
valid
prior
to
being
exchanged.
The
orders
are
then
matched
and
transactions
broadcasted
in
their
respective
networks.
The
validator
process
raw
transactions
and
doesn’t
hold
any
private
keys
or
assets
nor
can
it
sign
transactions resulting in a trustless decentralized exchange using the Safenetwork to validate orders

Nice formatting in the white paper (that quote was a copy paste from it) lol

https://nvo.io/assets/whitepaper.pdf


I'm wondering if the "Validator" can be tricked on one side of the transaction with a modified wallet to just not send the agreed upon amount or use some other workaround like a hard codded wallet balance that doesn't really exist to trick the validator into thinking it sent funds.

This looks like it has the potential to get hacked pretty quickly.

[Anon136]

Anonymous No More? Monero Exploit Reveals User Identities to Hackers

The researcher, Anthony Russell, says that he can actually locate Monero users through transaction broadcasts.

When users open up their Monero wallets, they connect to the peer-to-peer network, which allows users to then connect to individual wallets.

According to Russell, If the users of those wallets aren’t using TOR or I2P, you can easily determine their IPs.

One potential problem with this method is that it doesn’t necessarily differentiate between server nodes and peers. However, Russell says that this can be overcome by doing a simple whois search............

https://bitsonline.com/monero-exploit-threatens-privacy/

No shit. This is why kovi is under development... Until kovi development is complete, if you really care about privacy, than you need to broadcast your transactions from behind a vpn or tor. This shouldn't be "news" to anyone who knows anything about this project.  Something that everyone always knew or should have known spun as news. Smells like someone with an agenda spreading fud. Wankalone should take notes I guess. This is how it is done.

[Hueristic]

Anonymous No More? Monero Exploit Reveals User Identities to Hackers

The researcher, Anthony Russell, says that he can actually locate Monero users through transaction broadcasts.

When users open up their Monero wallets, they connect to the peer-to-peer network, which allows users to then connect to individual wallets.

According to Russell, If the users of those wallets aren’t using TOR or I2P, you can easily determine their IPs.

One potential problem with this method is that it doesn’t necessarily differentiate between server nodes and peers. However, Russell says that this can be overcome by doing a simple whois search............

https://bitsonline.com/monero-exploit-threatens-privacy/

No shit. This is why kovi is under development... Until kovi development is complete, if you really care about privacy, than you need to broadcast your transactions from behind a vpn or tor. This shouldn't be "news" to anyone who knows anything about this project.  Something that everyone always knew or should have known spun as news. Smells like someone with an agenda spreading fud. Wankalone should take notes I guess. This is how it is done.

Considering the fact that there have been guides around forever to alleviate this it is certainly a non issue and nothing but FUD. Just drop a link to a tutorial on how to get around this wherever you see the fucktard posting this fud. Not to mention using a light wallet or mymonero mitigates this, albeit adding vulnerabilitys in the process.

[smooth]

Anonymous No More? Monero Exploit Reveals User Identities to Hackers

The researcher, Anthony Russell, says that he can actually locate Monero users through transaction broadcasts.

When users open up their Monero wallets, they connect to the peer-to-peer network, which allows users to then connect to individual wallets.

According to Russell, If the users of those wallets aren’t using TOR or I2P, you can easily determine their IPs.

One potential problem with this method is that it doesn’t necessarily differentiate between server nodes and peers. However, Russell says that this can be overcome by doing a simple whois search............

https://bitsonline.com/monero-exploit-threatens-privacy/

No shit. This is why kovi is under development... Until kovi development is complete, if you really care about privacy, than you need to broadcast your transactions from behind a vpn or tor. This shouldn't be "news" to anyone who knows anything about this project.  Something that everyone always knew or should have known spun as news. Smells like someone with an agenda spreading fud. Wankalone should take notes I guess. This is how it is done.

Kovri isn't needed to address what is being reported as an alleged 'vulnerability' (and mostly doesn't). The IP addresses of nodes on a p2p network are public and you can get them explicitly using print_cn or print_pl in the daemon or netstat (or even see geolocated addresses on a node map). These addresses by themselves tell you nothing about users or transactions.

Even if not transmitting your txs over Tor, VPN, i2p, etc. it is still very difficult for anyone other than your ISP or someone spying directly on your network connection to determine that a transaction originated at a particular node. It could possibly be done with a massive sybil attack on the network, and even then would be unreliable.

[Anon136]

Anonymous No More? Monero Exploit Reveals User Identities to Hackers

The researcher, Anthony Russell, says that he can actually locate Monero users through transaction broadcasts.

When users open up their Monero wallets, they connect to the peer-to-peer network, which allows users to then connect to individual wallets.

According to Russell, If the users of those wallets aren’t using TOR or I2P, you can easily determine their IPs.

One potential problem with this method is that it doesn’t necessarily differentiate between server nodes and peers. However, Russell says that this can be overcome by doing a simple whois search............

https://bitsonline.com/monero-exploit-threatens-privacy/

No shit. This is why kovi is under development... Until kovi development is complete, if you really care about privacy, than you need to broadcast your transactions from behind a vpn or tor. This shouldn't be "news" to anyone who knows anything about this project.  Something that everyone always knew or should have known spun as news. Smells like someone with an agenda spreading fud. Wankalone should take notes I guess. This is how it is done.

Kovri isn't needed to address what is being reported as an alleged 'vulnerability' (and mostly doesn't). The IP addresses of nodes on a p2p network are public and you can get them explicitly using print_cn or print_pl in the daemon or netstat (or even see geolocated addresses on a node map). These addresses by themselves tell you nothing about users or transactions.

Even if not transmitting your txs over Tor, VPN, i2p, etc. it is still very difficult for anyone other than your ISP or someone spying directly on your network connection to determine that a transaction originated at a particular node. It could possibly be done with a massive sybil attack on the network, and even then would be unreliable.

I disagree with this a bit. True you cant just look at an ip address and know who it is. But neither can one do this with a bitcoin address. Bitcoin addresses change frequently and are not tied in any way to any geographical data yet attackers use analysis techniques to identify bitcoin users quite trivially. Using similar techniques it should be even easier to uncover real identities using ip addresses than bitcoin addresses. Thus it is reasonable to assume that a compromised ip equals a compromised identity to anyone who cares enough to spend a little time and or money to suss it out.