Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

De-anonymization attacks against the privacy coin XMR

monero.forex

Post reply on HN
Print view View original

71–80 of 116 posts

Re: De-anonymization attacks against the privacy coin XMR

#71

Post by woah »

password4321 wrote: post #53

I don't have a link but I vaguely recall some criminal being tracked down because they cashed out the exact same value of Monero they received for their crime in a single transaction. I believe this falls under item 1 in the article but the reference link does not even discuss Monero. I am interested in any references to tracking Monero in criminal court cases. So far it seems to be one of the most effective ways to…

Timing and amount correlation is something that not even the most sophisticated cryptography can stop.

Re: De-anonymization attacks against the privacy coin XMR

#74

Post by beeflet »

mrbluecoat wrote: post #8

DERO could be an alternative with their full encryption of user balances and transactions

Dero privacy got busted about a year ago due to developer incompetence

https://gist.github.com/kayabaNerve/b754e9ed9fa4cc2c607f38a8...

After seeing this and their weak attempts at making a CPU-based PoW, I don't have any confidence in dero or its developers.

Re: De-anonymization attacks against the privacy coin XMR

#75

Post by jijijijij »

ddtaylor wrote: post #63
jijijijij wrote: post #58

Earlier quoted context omitted.

Very cyberpunk and all, but how are AI regulations driving people to the darknet? You think those highly centralized billion dollar compute operations will secretly offer hidden services so people can ... what? Generate fucked up shit without restrictions? Lol, you could probably do traffic analysis with thermal imaging from a satellite.

> Generate fucked up shit without restrictions? No, that already exists and is not relevant IMO. My comment has nothing to do with what kind of content you generate. The USA in specific has had a similar problem before with encryption being classified as a munition making very problematic to import or export encryption. That's actually pretty well documented in various pieces of Java code from Sun if you're curious,…

Good times, when you were able to restrict information export through airport security... Don't forget Paypal and Wikileaks! Oh my bad, that was Bitcoin talk. That's not a currency anymore, but an asset. Like gold.

> Doing inference for many of these models is readily available at modest consumer hardware availability.

Then why exactly do I need a darknet service for that, instead of running it locally?

> Now you either (a) use only AI from the good boy list and get outplayed in the global marketplace where our main export is global technology or (b) start acting like a Chinese citizen and using a VPN to access AI services not available only on the approved good boy list.

Yeah, businesses are totally gonna buy tons of crypto to pay for outlawed services from China to stay competitive. Instead of running models locally as you suggested above. And of course the government will just fold in face of this crypto enabled libertarian hell.. I mean utopia. Can't beat math, amirite? There will be no more taxes, everyone will be free, armed and get as much fentanyl as they want, and we will just build a Dyson sphere around the sun to power this awesome new financial behemoth. It will be so worth it.

Better invest now!

Re: De-anonymization attacks against the privacy coin XMR

#76

Post by tromp »

proxynoproxy wrote: post #60
tromp wrote: post #29

Earlier quoted context omitted.

Yes, it scales much worse: * node resources scale with the size of the UTXO set (unspent outputs), which in Monero's case balloons to the entire TXO set (all outputs, orders of magnitude larger) * a typical 2-input 2-output transaction is 4 times larger * wallets have to track all outputs to choose random decoys for transaction inputs One can argue that this is the price to pay for significantly better privacy, but t…

Don’t forget that opaque blockchains can have invisible inflation. Transparent blockchains will always be worth more, as the user can verify that inflation has not occurred. This applies to grin as much as xmr.

Indeed that is one downside of hiding amounts, as shown in row "Fully auditable supply" in [1]. Finding out just one discrete log (log_G(H)) can collapse the whole system with undetectable inflation.

[1] https://phyro.github.io/grinvestigation/why_grin.html

Re: De-anonymization attacks against the privacy coin XMR

#77

Post by linschn »

woah wrote: post #72
john_alan wrote: post #54

I work in applied cryptography and XMR is my preferred cryptocurrency.

Why not Zcash?

Not the OP, but Zcash's privacy feztures are optional and seldom used in practice, whereas monero is secure by default. It helps with blending in the crowd.

Re: De-anonymization attacks against the privacy coin XMR

#78

Post by ddtaylor »

hoppp wrote: post #68
ddtaylor wrote: post #63

Earlier quoted context omitted.

> Generate fucked up shit without restrictions? No, that already exists and is not relevant IMO. My comment has nothing to do with what kind of content you generate. The USA in specific has had a similar problem before with encryption being classified as a munition making very problematic to import or export encryption. That's actually pretty well documented in various pieces of Java code from Sun if you're curious,…

There is no point in hosting Ai endpoint on a .onion domain. The point of Tor is privacy so if you want private Ai prompts just run a local model. The philosophy behind Tor is maximum privacy, the most private way to do AI is locally.

There is a large market for people who need/use AI inference that have no interest in maintaining any of the infrastructure associated with it.

Re: De-anonymization attacks against the privacy coin XMR

#79

Post by ddtaylor »

jijijijij wrote: post #75
ddtaylor wrote: post #63

Earlier quoted context omitted.

> Generate fucked up shit without restrictions? No, that already exists and is not relevant IMO. My comment has nothing to do with what kind of content you generate. The USA in specific has had a similar problem before with encryption being classified as a munition making very problematic to import or export encryption. That's actually pretty well documented in various pieces of Java code from Sun if you're curious,…

Good times, when you were able to restrict information export through airport security... Don't forget Paypal and Wikileaks! Oh my bad, that was Bitcoin talk. That's not a currency anymore, but an asset. Like gold. > Doing inference for many of these models is readily available at modest consumer hardware availability. Then why exactly do I need a darknet service for that, instead of running it locally? > Now you eit…

> Good times, when you were able to restrict information export through airport security... Don't forget Paypal and Wikileaks! Oh my bad, that was Bitcoin talk. That's not a currency anymore, but an asset. Like gold.

All of that is irrelevant to the context at hand. How good, trade-worthy, or the value of a cryptocurrency is not directly tied to the amount of computation work done to mine the coin. All different combinations exist.

> Then why exactly do I need a darknet service for that, instead of running it locally?

For the same reason most people are completely capable of running a modest PostgreSQL server with Nginx or a few docker containers on their hardware, yet they pay for the service of other people doing it. The same is true for backup, storage, and a plethora of other services they gladly fork over a few dollars for.

It being over the darknet is not a techncial requirement, it's an economic / market requirement.

> Yeah, businesses are totally gonna buy tons of crypto to pay for outlawed services from China to stay competitive

They already gladly look the other way and do shady things to procure data.

> Instead of running models locally as you suggested above.

Weird, when they tried to do that the DNS resolution for the domain name failed. Guess they'll fire up their VPN to start grabbing the model, etc. Maybe just by AICoin and move on?

> And of course the government will just fold in face of this crypto enabled libertarian hell.

For about 15 years you have been able to go into a .onion and grab whatever you what on a DNM. Many have been taken down. You can currently go on a .onion domain and grab whatever you want.

> I mean utopia. Can't beat math, amirite?

They seem able to catch a DNM every once in a while, but there are always a dozen or so viable and active alternatives.

> There will be no more taxes, everyone will be free, armed and get as much fentanyl as they want

I'm fairly certain the United States is getting as much fentanyl as it wants already. You can walk to some place in any city and get it in pill form quickly and cheaply. How much involvement the DNMs have in that right now I don't know. In the past some DNMs have policed that and some provided "quality testing" to verify the lack of presence of fentanyl in other substances.

Re: De-anonymization attacks against the privacy coin XMR

#80

Post by asdff »

hoppp wrote: post #68
ddtaylor wrote: post #63

Earlier quoted context omitted.

> Generate fucked up shit without restrictions? No, that already exists and is not relevant IMO. My comment has nothing to do with what kind of content you generate. The USA in specific has had a similar problem before with encryption being classified as a munition making very problematic to import or export encryption. That's actually pretty well documented in various pieces of Java code from Sun if you're curious,…

There is no point in hosting Ai endpoint on a .onion domain. The point of Tor is privacy so if you want private Ai prompts just run a local model. The philosophy behind Tor is maximum privacy, the most private way to do AI is locally.

I thought Tor was already a honeypot?
Post reply on HN