[SDC] ShadowCash | Welcome to the UMBRA

[illodin]

-Perhaps enable the use of multiple currencies like Dash & Vert alongside ShadowCash in the market.

This would be an interesting twist. Add support to multiple other coins as well but leave Monero out. Could you imagine the amount of popcorn consumed?

[rutherford]

code: Actually the price is holding pretty well, and that's because even without the ring sigs the anonymity is pretty good.. We're also here for the market lol

[smooth]

yes but

They deanon'd the whole chain

And by doing so saved larger calamity

It is time to b humble

You and every else is blowing the severity of the bug out of proportion, for your own malicious agenda. They only thing this does is reveal which public key in the ring signature is the actually sending coins.

The required use of stealth addresses still protects the recipient of each transaction. I believe the token system also offers some protection.

Complete de-anon? Blowing outta proportion?

Pass the pipe

It wasn't completely de-anonned. Only a very limited amount of stealth transactions got unstealthed.

No stealths got 'unstealthed'. All rings got 'unringed'. That makes the chain fully traceable but multiple payments to the same address are still not linkable, unless they are spent together, which is common. So this is quite fragile on its own as a privacy method, arguably useless.

Stealth addresses are 100% equivalent to not reusing Bitcoin addresses.

Unless you think it is possible to provide real privacy on Bitcoin without adding any form of mixing (rings, coinjoin, whatever) just by not reusing addresses, then killing rings makes it a full deanon.

[StealthCoin1]

stealthcoin anyone?  
it is the only way to recoup your money back. coming soon, stealthsend is solid!
hondo is not picking a fight with you guys for a reason.

[X1235]

stealthcoin anyone?  
it is the only way to recoup your money back. coming soon, stealthsend is solid!
hondo is not picking a fight with you guys for a reason.

You've read https://blog.shadowproject.io/2016/02/14/all-is-not-lost. Good for you. Now GTFOH.

[AlexGR]

"We would like to say thank you to @ShenNoether for finding the flaw, and the bounty will be paid in SDC at the SDC price before the flaw was revealed to the public. This is the reason we set up the bounty program in the first place, to improve shadow's privacy, usability, etc."

So if the price was 0.00025 and is now 0.00014, then he gets paid like 20.000 SDC @ 0.00025 = 5 BTC which if dumped now, cost 20k SDC x 0.00014 (which it might go down to 0.00010 due to the dumping) = 2.8 to 2 BTC actual reward.

Thats minus -2.2 to -3 BTC for the reward.

Now, I understand that some level of responsibility must be demonstrated in these things, but on the other hand if such information is first received by a core team which may also be SDC holders then this could result in SDC dumps by the core-team holders first to preempt the public investor dumping. In a sense the bounty, in that case, is the cost of an inside info on when to dump.

Plus if a bug finder has to lose money if he reports a bug, then that's a disincentive to report it and more incentive to sell it in a black market... "hey, SDC deanonymization key only 10 BTC for the whole chain". That should not be the first option of a bug finder.

[rutherford]

code: The incentive of selling bugs to the blackmarket is always bigger and I know that because I've seen the markets for 0day exploits. You're a fool for trying to make the "insider trade" case. Even if it is publicly disclosed, the developers are often the first ones to analyze and debug the case and would still have that "insider trade" edge you're speaking of. Developing a coin needs an incentive, that is often owning an amount of coins themselves. It's a double-edged blade, but if anyone out of this whole project should not end up in-debt it are the developers in my opinion, they deserve a certain degree of risk-free investment because they are the ones actually putting their time into creating it.

I'd also like to say that we feel like we're on good grounds with Shen, and we're not going to combat trolls trying to find yet another thing to fud on. The bounty negotiation is between the team and Shen and answering these crazy accusations of your people is not worth our time. If Shen doesn't agree with our payout then he can speak up for himself.

[boltz]

stealthcoin anyone?  
it is the only way to recoup your money back. coming soon, stealthsend is solid!
hondo is not picking a fight with you guys for a reason.

You've read https://blog.shadowproject.io/2016/02/14/all-is-not-lost. Good for you. Now GTFOH.

You should think again mate , he was just trying to give you a good advice so please be chill .

[ffmad]

stealthcoin anyone? 
it is the only way to recoup your money back. coming soon, stealthsend is solid!
hondo is not picking a fight with you guys for a reason.

You've read https://blog.shadowproject.io/2016/02/14/all-is-not-lost. Good for you. Now GTFOH.

You should think again mate , he was just trying to give you a good advice so please be chill .

oh please, not stealthcoin ... -_-'. I recognize that Monero doing some advertisement here make sense, it's a real project (even if it's not a good way of doing things), but that XST coin, seriously nobody could be THAT panicked to buy that thing ...

nb : The next puppet account that post on stealth will be added to the delete bot.

[tedbaong]

I 'll be waiting at the price of 5000

[StealthCoin1]

stealthcoin anyone?  
it is the only way to recoup your money back. coming soon, stealthsend is solid!
hondo is not picking a fight with you guys for a reason.

You've read https://blog.shadowproject.io/2016/02/14/all-is-not-lost. Good for you. Now GTFOH.

You should think again mate , he was just trying to give you a good advice so please be chill .

oh please, not stealthcoin ... -_-'. I recognize that Monero doing some advertisement here make sense, it's a real project (even if it's not a good way of doing things), but that XST coin, seriously nobody could be THAT panicked to buy that thing ...

nb : The next puppet account that post on stealth will be added to the delete bot.

are you using that stealthcoin delete bot? good for you.

[coins101]

@smooth : Is a quote from 2 years ago still worth something now ?

@coins101 : To answer coins101 on zerocash implementation, it looks the good way to go yes.

From start it has been announced that shadow would prefer a zerocoin implementation over ring signs when that tech will be ready.

I'll accept that as an official bounty award. I'm happy to wait until formal confirmation of the swtich before expecting to collect  

Not that I need the bounty award within the next few days; but, you know     My drug dealer is hassling me to pay my bills, so can I tell him he can expect a bunch of SDC from my bounty award, say next Thursday?

[nond17]

"We would like to say thank you to @ShenNoether for finding the flaw, and the bounty will be paid in SDC at the SDC price before the flaw was revealed to the public.

So if the price was 0.00025 and is now 0.00014, then he gets paid like 20.000 SDC @ 0.00025 = 5 BTC

That's great, well done.

You've read https://blog.shadowproject.io/2016/02/14/all-is-not-lost. Good for you. Now GTFOH.

This is great too.

Onwards & upwards

[LongAndShort]

@smooth : Is a quote from 2 years ago still worth something now ?

@coins101 : To answer coins101 on zerocash implementation, it looks the good way to go yes.

From start it has been announced that shadow would prefer a zerocoin implementation over ring signs when that tech will be ready.

I'll accept that as an official bounty award. I'm happy to wait until formal confirmation of the swtich before expecting to collect  

Not that I need the bounty award within the next few days; but, you know     My drug dealer is hassling me to pay my bills, so can I tell him he can expect a bunch of SDC from my bounty award, say next Thursday?

Quite a few of us beat you to that one bud. 

So is it true that there is a shadow marketplace coming? I have heard a few things here and there and wanted to know if its true Or just heresay/rumors

Its certainly on the cards and would make a lot of sense but its a MASSIVE undertaking and its down the priority list thats for sure. Its certainly not something you will see before the end of the first quarter of 2016. But you just never know.

We need a full zk release, voice file and video support, a code cleanup, an update to the mobile range, updated pos system ect ect the list goes on.

[coins101]

....We need a full zk release, voice file and video support, a code cleanup, an update to the mobile range, updated pos system ect ect the list goes on.

You went back and faked that. I'm not having it.

And don't bother with mirrors. I can get a guy in India to fake those for a weeks supply of rice.

[iCEBREAKER]

"We would like to say thank you to @ShenNoether for finding the flaw, and the bounty will be paid in SDC at the SDC price before the flaw was revealed to the public. This is the reason we set up the bounty program in the first place, to improve shadow's privacy, usability, etc."

Nice to see Team ShadowCash is doing the right thing and rewarding Shen for his incredibly valuable, fortuitous insight.

The bug bounty is a pittance compared to the actual value of what Shen discovered, but I see it more as an honorarium than an economically competitive motivation.

If Shen wanted to go black hat, he could have made a lot more than the trivial, borderline insulting ~5 BTC being proffered.

Now let's address the outrageous behavior recently exhibited by a segment of the SDC community.

Rather than graciously accept the bug report, too many of them went into knee jerk spams of hand-waving denial.

The excuses for denying Shen his bounty were especially atrocious, as were the attempts to deflect onto Monero responsibility for the unfortunate disclosure (and predictably negative market reaction).

The rude, ignorant people who denied there is a problem (in stark contrast to consensus reality) and sought to heap opprobrium upon Shen for daring to find the issue need to be made persona non grata, or SDC will never recover from the self-inflicted damage that has been done.

[rutherford]

wheatclove: dude nobody cares what you have to say

[LongAndShort]

....We need a full zk release, voice file and video support, a code cleanup, an update to the mobile range, updated pos system ect ect the list goes on.

You went back and faked that. I'm not having it.

And don't bother with mirrors. I can get a guy in India to fake those for a weeks supply of rice.

For completeness 

I picked up some SDC on the dips    but don't have the time to
follow the thread as I would like to.

Could someone inform me of what the next releases will be
and if there is any time line for them the Dev's mentioned.

Much Thanks!

Sincerely,

MM

next release will be zk-snarks (zero knowledge with ring signatures for now)

right now, zk-snarks release is on public test

Sorry mate but this is the fith time i've tried saying this to you lol Its not snarks! Its a zero knowledge proof with a ring signature commitment scheme. Rings are slightly, bloat like. But nothing more then a cryptonote and it can also be pruned later Untill the snark guys, specifically, the killian, micali theory, when it materialises or ryno, techno put in the hard work to realise it first. The solution/refinement to their scheme to remove trusted setup. Currently snarks is a massive compiler with 896mb+  fixed system parameters, a trusted setup. Zerocash use a merkle tree over coin commitment "cm" and zerocoin unusable! ( Zeroverts  implementation still not working properly https://bitcointalk.org/index.php?topic=846471.msg9628078#msg9628078 Coins going missing!) (Write about that jdebunt!)  As far as i can tell zerovert is pinocchio coin, zerocoin variant using ZK proofs, 344B/spend, but retains other problems. Also spend time grows linearly with number of coins nor will it handle variable denomination, in its current state.

Snarks is nothing short of very very very very very cool. You can search for "pouring" if you can wrap your head around that, you will start to understand just how epic it is. Once the snark or Shadow guys figure out how to set it up without trust it will basically change the way we do a lot of things! And i mean A lot. I MEAN A LOT (mind the dumb and dumber pun)... Depending on what route is taken the chain..ugh.. hard to explain, could be extremely compact only having the coins not spent yet in it. Highly compact wallets. You could even transact off the chain (without having to download it... Once people wrap their head around zk proofs then we will start opening the minds for snarks

Thanks,... in every sense of saying it Sarcastically!
 

I appreciate the primer into the tech and now will be looking for the "Dummies" version.
Wish I had some time but this is going to be a tough 2-weeks.

MM

Basically, when polished, things will be closer to instant, more compact, more secure and with less limitations then anything, currently on the market, in development, in this nich. It is also not restricted by its anonymity, there are ways to work with regulation if someone needs it.

[coins101]

...For completeness 

..

Dude, you completely fucked up my rice joke.

Never make enemies of people on the internet with rice jokes. You're in shit load of hot water now.

[ffmad]

«blablabla»

Please don't post here. You're a known troll (even to moneroers I talked too), and to add to that I still remember well your Front National avatar in november ... you are a disgusting troll

Apart from that, thanks again to Shen for that finding !

I hope the community clashes will stop, and that this event will lead to more cooperation, which is what should prevail in open source communities.