3 ms·

Since you can make new wallets at any time to spend from, the key is paying your btc into a wallet that others are paying into, and then extracting multiple dif

Since you can make new wallets at any time to spend from, the key is paying your btc into a wallet that others are paying into, and then extracting multiple different amounts to new, different wallets (and then using those for spending). If I have two accounts, one with 0.5 btc (newly created, never tracked by authorities, purchased with a relatively disposable account from somewhere like virwox) and one with 1.5 btc (potentially tracked, need to launder it), I'd pay both into a tumbler and then extract into 3-5 different accounts (like 0.2, 0.45, 0.9, 0.18, and 0.27). How do you prove, as a tracker, that those 5 accounts paid out to, involve btc from the original 1.5 tracked account? Especially when you consider the hundreds of other accounts being paid out to at the same time. Still paranoid? Rinse and repeat.

guylhem 13y ago
Zenocoin argument stands. If you have access to the full bitcoin chain, can you write a mathematical proof that allows one account to transfer anonymously to another account, without using a "tumbler" mixed account? IMHO, you can't. That's the flow in anonymity, because, how do you ensure the tumbler properly operates? There is an incentive to try and "steal" from the tumbler pool. Even if it works, the tumbler could be marked as "tainted" - or any undeclared BTC account by default could be declared tainted, and taxation imposed on any incoming bitcoin, unless then come from an untainted account to another untainted account. The same logic currently applies in the real world - ie if you receive say 500k wired to your account from an account in the cayman islands, the taxman will want to have a word with you. Do you see the logic there? It was previously discussed in the thread reference in the original message.
- jfim 13y ago
  There's also the fact that there is zero incentive to use a tumbler unless you're doing something that you don't want being tracked, since using the tumbler has a non-zero cost.
  - chii 13y ago
    wanting anonymity does not imply guilt. it s not the case that if you have not done anything wrong, then you have nothing to hide.
    - endgame 13y ago
      But guilt does imply wanting anonymity, and because actually setting up secure anything is hard, J. Random User isn't going to really do it. Look at how hard it is to get many people to set up a password manager, or encrypted email. You can't hide in the crowd if the crowd isn't there.
    - jfim 13y ago
      Indeed, it does not. However, there does not seem to be much of an incentive to pay the tumbler's fee if someone has nothing to hide, so it's likely that only people who do have something to hide that will use such a service.
    - wfunction 13y ago
      Correlation doesn't have to imply causation in order to give you an accurate prediction.
- comex 13y ago
  > Zenocoin argument stands. If you have access to the full bitcoin chain, can you write a mathematical proof that allows one account to transfer anonymously to another account, without using a "tumbler" mixed account? Surprisingly, yes: that's exactly the accomplishment of Zerocoin, though it's currently too inefficient to be practical. (It still requires many participants, but the "tumbling" is global and does not require any trusted pool.)
dwhly 13y ago
> Since you can make new wallets at any time to spend from, the key is paying your btc into a wallet that others are paying into, and then extracting multiple different amounts to new, different wallets (and then using those for spending). 1mdc was a similar service to this that I used as did many others about 10 years ago for the purpose of obfuscating and anonymizing e-gold transactions between various accounts. http://en.wikipedia.org/wiki/1mdc http://en.wikipedia.org/wiki/1mdc One interesting comment from the wiki page: "1mdc's e-gold was held in unallocated (pooled) storage (in several e-gold user accounts) which allowed for extra privacy from e-gold's administrators. However, this increased storage risk, as the client had no precedence on the e-gold they entrusted 1mdc to hold, and there was virtually no way for a user to ensure that 1mdc is maintaining full reserves of their e-gold."

guylhem 13y ago

Zenocoin argument stands. If you have access to the full bitcoin chain, can you write a mathematical proof that allows one account to transfer anonymously to another account, without using a "tumbler" mixed account? IMHO, you can't. That's the flow in anonymity, because, how do you ensure the tumbler properly operates? There is an incentive to try and "steal" from the tumbler pool. Even if it works, the tumbler could be marked as "tainted" - or any undeclared BTC account by default could be declared tainted, and taxation imposed on any incoming bitcoin, unless then come from an untainted account to another untainted account. The same logic currently applies in the real world - ie if you receive say 500k wired to your account from an account in the cayman islands, the taxman will want to have a word with you. Do you see the logic there? It was previously discussed in the thread reference in the original message.

jfim 13y ago
There's also the fact that there is zero incentive to use a tumbler unless you're doing something that you don't want being tracked, since using the tumbler has a non-zero cost.
- chii 13y ago
  wanting anonymity does not imply guilt. it s not the case that if you have not done anything wrong, then you have nothing to hide.
  - endgame 13y ago
    But guilt does imply wanting anonymity, and because actually setting up secure anything is hard, J. Random User isn't going to really do it. Look at how hard it is to get many people to set up a password manager, or encrypted email. You can't hide in the crowd if the crowd isn't there.
  - jfim 13y ago
    Indeed, it does not. However, there does not seem to be much of an incentive to pay the tumbler's fee if someone has nothing to hide, so it's likely that only people who do have something to hide that will use such a service.
  - wfunction 13y ago
    Correlation doesn't have to imply causation in order to give you an accurate prediction.
comex 13y ago
> Zenocoin argument stands. If you have access to the full bitcoin chain, can you write a mathematical proof that allows one account to transfer anonymously to another account, without using a "tumbler" mixed account? Surprisingly, yes: that's exactly the accomplishment of Zerocoin, though it's currently too inefficient to be practical. (It still requires many participants, but the "tumbling" is global and does not require any trusted pool.)

dwhly 13y ago

> Since you can make new wallets at any time to spend from, the key is paying your btc into a wallet that others are paying into, and then extracting multiple different amounts to new, different wallets (and then using those for spending). 1mdc was a similar service to this that I used as did many others about 10 years ago for the purpose of obfuscating and anonymizing e-gold transactions between various accounts. http://en.wikipedia.org/wiki/1mdc http://en.wikipedia.org/wiki/1mdc One interesting comment from the wiki page: "1mdc's e-gold was held in unallocated (pooled) storage (in several e-gold user accounts) which allowed for extra privacy from e-gold's administrators. However, this increased storage risk, as the client had no precedence on the e-gold they entrusted 1mdc to hold, and there was virtually no way for a user to ensure that 1mdc is maintaining full reserves of their e-gold."