Live data from Hacker News

80% of Monero Transactions Trivially De-Anonymized

ipfs.io

61–70 of 88 posts

Re: 80% of Monero Transactions Trivially De-Anonymized

#61

Also see the complementary block explorer associated with the paper: http://monerolink.com/ We found tens of thousands of transactions that included ten or more mixins but could still be traced.

Note: the code to extract this data has not been released to the public alongside the paper.

Re: 80% of Monero Transactions Trivially De-Anonymized

#62
post #45
post #20

Earlier quoted context omitted.

> ZCash is pretty explicit about the difference between shielded and transparent addresses.... This is an important point. Having two very distinct addresses (different lengths, different prefixes, different RPC APIs) makes it very obvious to users when they have the benefits of shielded transactions, and when they don't. Thus users make an explicit choice to forgo privacy when they use transparent addresses. The pro…

Sorry if I'm looking at the data wrong, but this chart suggests less than 5% are shielded https://explorer.zcha.in/statistics/value Is the chart wrong?

Perhaps it could have something to do with termonology (%value vs %transactions).

For value I get: 42588 / (891015+222753) = 3.8% Shielded Value / (Cumulative Miner's Reward + Cumulative Founder's Reward)

Perhaps it is 28% of transactions are shielded worth only 4% of zec value?

Re: 80% of Monero Transactions Trivially De-Anonymized

#63

Earlier quoted context omitted.

Any chance i could get that as a static document? It seems chrome on linux and microsoft office online don't get along

Though I'm not disputing the preference for static documents, which Linux and Chrome version are you using? On CentOS 7.3 with Chrome 52 the document looks fine, as it does on the same system with Firefox 52. Note that the document is unformatted plain text, divided into six pages.

Chrome 57 on Arch, I couldnt scroll or otherwise move past the first page. Its like the scrollbar was disabled for some reason...

Re: 80% of Monero Transactions Trivially De-Anonymized

#64
post #43

Earlier quoted context omitted.

Any chance i could get that as a static document? It seems chrome on linux and microsoft office online don't get along

I wrote this. How would you prefer for it to be uploaded? Another link: https://1drv.ms/w/s!AjOt8D-0YjBHgYg_onISH13gCSfKng

That one worked better, thanks!

Re: 80% of Monero Transactions Trivially De-Anonymized

#65
post #45
post #20

Earlier quoted context omitted.

> ZCash is pretty explicit about the difference between shielded and transparent addresses.... This is an important point. Having two very distinct addresses (different lengths, different prefixes, different RPC APIs) makes it very obvious to users when they have the benefits of shielded transactions, and when they don't. Thus users make an explicit choice to forgo privacy when they use transparent addresses. The pro…

Sorry if I'm looking at the data wrong, but this chart suggests less than 5% are shielded https://explorer.zcha.in/statistics/value Is the chart wrong?

Perhaps it could have something to do with termonology (%value vs %transactions).

For value I get: 42588 / (891015+222753) = 3.8% Shielded Value / (Cumulative Miner's Reward + Cumulative Founder's Reward)

Perhaps it is 28% of transactions are shielded worth only 4% of zec value?

Re: 80% of Monero Transactions Trivially De-Anonymized

#66
post #19

Earlier quoted context omitted.

> Are you talking about the fact that Zcash has, as a feature, the ability to make non-anonymous payments as well? Last I checked virtually none of Zcash's transaction used the anonymous payment feature (presumably because the performance of it is very poor). So it's plausible that monero transactions could practically end up with a larger anonymity set in absolute terms than zcash (especially for current monero, whi…

In the next version we'll clarify zcash shielded transactions are optional. Fwiw it's used by 28% of tx according to https://explorer.zcha.in/statistics/network and comments above, not "rarely used"

I'm not certain the source of these shielded transactions but the vast majority of value seems to be in unshielded transactions. Transparent value (unspent TX + unspent block rewards) = 1,070,918 while shielded value = 42,588 or around 4% of all value. That sounds like rarely used for transactions of any value to me.

Re: 80% of Monero Transactions Trivially De-Anonymized

#67
post #45
post #20

Earlier quoted context omitted.

> ZCash is pretty explicit about the difference between shielded and transparent addresses.... This is an important point. Having two very distinct addresses (different lengths, different prefixes, different RPC APIs) makes it very obvious to users when they have the benefits of shielded transactions, and when they don't. Thus users make an explicit choice to forgo privacy when they use transparent addresses. The pro…

Sorry if I'm looking at the data wrong, but this chart suggests less than 5% are shielded https://explorer.zcha.in/statistics/value Is the chart wrong?

The chart isn't wrong. It's just measuring something different than the metric str4d is referring to.

Underneath that pie chart, there is a caption: "Transparent value (stored in t-addresses) vs shielded value (stored in z-addresses), in ZEC." In other words, that pie chart shows the number of ZEC that are currently residing in transparent vs shielded addresses at the specific point in time that you load that page.

The Advanced Network Stats page - https://explorer.zcha.in/statistics/network - has a box labelled "Shielded Transaction Percentage", which indicates what percentage of transactions involve a shielded value. You can see more details for different amounts of time on https://explorer.zcha.in/statistics/usage

Re: 80% of Monero Transactions Trivially De-Anonymized

#68

Earlier quoted context omitted.

> should show that the overwhelming majority of Zcash transactions have the privacy properties of Bitcoin transactions (or worse). Agreed, this should updated to specify that only transactions between shielded addresses are protected. The point they are trying to make is that the anonymity set between shielded addresses is that of all transactions in the anonymous set. (FWIW, this is a pre-publication draft.) > No? I…

> The point they are trying to make is that the anonymity set between shielded addresses is that of all transactions in the anonymous set. This way of stating is somewhat questionable in light of the claims in the second half of the paper. What is shown in the second half of the paper is that all possible sources are not equally likely and this most probably applies to Zcash (and every other coin) as well. In the Fig…

You're mistaken in saying that it is most likely that the actual note is the most recent one for Zcash. The figure gives a slightly misleading impression because it has to show few enough inputs to fit on the page. The number of possible inputs is the total number of previous shielded notes (before the JoinSplit anchor) that the adversary does not control or know to have been spent. There have been around 129000 JoinSplits so far, each creating two notes; I'll get back to this with a more precise number. In any case, the probability of the actual note being an output from the most recent prior JoinSplit is extremely small, even taking into account recency bias.

Another way of saying this is that in Zcash, the content of a fully shielded transaction does not give an adversary any more information about the possible input distribution than they could guess without seeing the content (i.e. only based on the timestamp and the number of JoinSplits in that transaction). In Monero, the adversary can refine their guess of the distribution based on the inputs that are actually mixed in, and that is what creates the privacy weakness.

Figure 8 does not apply to Zcash, it is specific to Monero, as the caption states.

-- Daira Hopwood (Zcash developer)

Re: 80% of Monero Transactions Trivially De-Anonymized

#69

Earlier quoted context omitted.

>They are willing to grease the wheels to success while Monero grows organically instead. I'm curious about this. How is this at all a virtue? If you're not willing to hustle to ensure the success of your project, why should anyone make a bet on it? We've seen many times how the technically superior product loses out against the better positioned competitor. So what makes this different?

Honesty matters in money. Without it, you pay frictions for graft. Liquidity vehicles abhor frictions. Zcash has been crashing for a long while, and stealing 20% of the economy outright is a large part of the reason. Yes, it motivates the miscreants, but that does not imply success.

Honesty matters very much.

Marketing also matters.

So honest marketing matters very much. The point of marketing should be to attract attention to useful features of Monero and increase its usefulness by promoting its adoption by third parties that add value (such as wallets, exchanges, merchants, etc.)

The seemingly principled idea that focusing only on tech, and not strategic promotion and collaboration, has resulting in the under adoption or stagnation of many promising technologies.

Re: 80% of Monero Transactions Trivially De-Anonymized

#70
post #19
post #7

Earlier quoted context omitted.

Are you talking about the fact that Zcash has, as a feature, the ability to make non-anonymous payments as well? Why would this be of interest to anyone studying the anonymity properties of Monero?

> Are you talking about the fact that Zcash has, as a feature, the ability to make non-anonymous payments as well? Last I checked virtually none of Zcash's transaction used the anonymous payment feature (presumably because the performance of it is very poor). So it's plausible that monero transactions could practically end up with a larger anonymity set in absolute terms than zcash (especially for current monero, whi…

Here are current stats about shielded and unshielded transactions in the last hour/day/week/month:

https://explorer.zcha.in/statistics/usage

And here historical stats about shielded and unshielded transactions in the most recent 100 blocks over the life of the blockchain so far (about 6 months):

https://explorer.zcha.in/statistics/timeseries?supply=false&...

Note that a big part of the shielded transactions is because coinbases are required by the consensus rules to be shielded when first spent. This was in order to provide a guaranteed privacy-set. If you make a shielded Zcash transaction today there is actually a very large privacy-set of possible previous transactions which could be inputs to your transaction.

In the long run we intend to improve the functionality of Zcash shielded addresses and to deprecate Zcash transparent addresses, so that all transactions are shielded and so that the user experience is simpler.

Post reply on HN