Nostr Web Client

Reiterating centralized coinjoin (Wasabi & Samourai) deanonymization attacks

https://groups.google.com/g/bitcoindev/c/CbfbEGozG7c/m/w2B-RRdUCQAJ

In the case of Samourai, Tor's circuit management is so flawed that we don't even have to take advantage of the vulnerability in the signatures.

Wasabi also has problems in the management of Tor circuits, although not as evident as Samourai.

In short, don't use centralized coordinators, I understand that you don't like them, but they have always been a problem.

https://gist.github.com/nothingmuch/74d0b0bd63a2d663efce5e8a82d32bca

nostr:note1dzn5jk57pwa8jj44gyrgw5attl0h75wl4efdfzwly0svuvtlyjqsqx27d3

Reply to this note

Please Login to reply.

Discussion

TheBitcoinManual 1y ago

Well no one wants to jam market or joinstr so what are we to do?

Papa Figos 1y ago

Just use Monero.

Bitcoin L1 privacy&anonymity will always be a problem unless those attributes are baked in like in Monero, which they probably will never be.

BTC for hodling, XMR for spending. Makes sense to me.

Hanshan 1y ago

just don't flip from one to the other when paying

if its actually a sensitive transaction

Ape Mithrandir 1y ago

I don't recall anyone on Samourai's side claiming users had perfect privacy from the coordinator.

The main claim was to have provably zero-link on-chain privacy from the outside observer, also having a UI/UX that even novices could use to achieve this.

I wish I still had access to Samourai's Whirlpool Coordinator, it was great for what I wanted it for, which was on-chain privacy from an outside observer.

Cyph3rp9nk 1y ago

That is false, the zerolink protocol implies that the coordinator is blind and the coordinator has never been blind, first because of privacy leaks at the network level as I demonstrated a few months ago in the bad implementation of Tor circuits, and now as nothingmuch has demonstrated with the signature problem affecting both Whirpool and Wasabi.

You can look up all the discussions on the subject I've had with the Samourai boys, it's always been stupid to use centralized coordinators because it means “trust”.

lontivero 11mo ago

> Wasabi also has problems in the management of Tor circuits, although not as evident as Samourai.

Which are those problems?