so there should be plenty convincing rebukes by now I assume? care to share a link?
Discussion
THIS IS ALL "MUH XPUB" BULLSHIT
THE FIRST STEPS IN THE WALLET IS TO CONNECT OVER TOR AND TO YOUR OWN NODE
ALL WALLETS CONNECT TO A NODE, THIS IS NOT UNIQUE TO SAMOURAI
IT IS DEVELOPED TO BE ABLE TO RUN ON LOW BANDWIDTH EDGE NETWORKS IN DEVELOPING COUNTRIES
SPEND A LITTLE TIME ASKING GENUINE QUESTIONS IN THEIR TELEGRAM CHAT, NOT JUST CALLING THEM SCAMMERS AND THEY WILL EXPLAIN IT TO YOU
TO REPRODUCE A WALLET YOU NEED TO HAVE THE SAME ENVIRONMENT TO DO IT IN
NOT EVER LISTENING TO THE ANSWERS AND SIMPLY REPEATING THE SAME OLD TIRED TROPES WILL GET YOU NOWHERE
What about the source code, which seems to be the main criticism of wallet scrutiny?
Also you need to get your caps lock key checked.
The above is the same same as it always goes. Attack the messenger. Bamboozle the noobs with your tech blabla to imply a smart person would understand you (of course not that noob follower of yours), so if the other side doesn't "get it", it's on them.
Yeah, xpub. If you connect to your own node but still use the Samourai coordinator and send it your xpub over TOR, you still negate all mixing if Samourai is evil, which they are.
"In their telegram" is not where I would engage. In fact they kick me when I do and I have no receipt of their rudeness and scamming. Come out of your hiding place and discuss in the open. Same with their GitHub ... they moved to their own GitLab where I can't even create an account. Or well, I can but they delete it. But others asked for more security and transparency here for example: https://code.samourai.io/wallet/samourai-wallet-android/-/issues/440 and neither got a reply in two years.
And yes, to reproduce you need the same environment but they would not care to document and the diff can tell you it's not only about the environment. They don't tag their releases and don't always publish the code with the binary. They don't want to be verified and they definitely do not share the code that goes into most of their releases. Of some 15 versions I tested, only one was reproducible. All the others could be collecting private keys for all I know.
What attack? My tech blabla? LMFAO Xpubs, tor and a node is not advanced. Aren't you the one tech blabla about reproducing a wallet? You guys never want to listen. All replies go in one ear and out the other.
So you do know you need to be in the same environment? Funny how you left that out initially. Why would they bother telling you anything if you are so against their work? They owe you nothing. Who are you to demand anything from them? Use it or don't bro. They moved to their own gitlab to prevent their code from being take down. You confuse the xpub without your own node and how the whirlpool coordinator works. The coordinator is now decentralized anyway.
Why would they bother to tell me which environment they are building in? I don't know. It's their claim not mine that the giant diff I'm getting was about the environment and not them building from some undisclosed code. If it's not undisclosed code it must be undisclosed environment. Either way they are not telling the full story.
I don't demand anything from them. I only recommend all sane people to not use this shit. And no, I don't confuse node and xpub but that's the kind of claims of yours you only put there to bamboozle your followers.
OMG, bamboozle "my" followers? LMFAO you are the one talking about reproducing the Google Play version of a wallet but somehow I am confusing users with techno babble, ok. SMH Sorry to my followers, I know xpubs and nodes are super confusing, I hope you can figure out these extremely complex ideas.
We can keep offering the nuanced answers but you wasabi shills can never listen. Bye
"This isn't unique to Samourai"
Zeus, Blixt, Breez, Wasabi, etc don't collect the data of their users because they implement BIP157/BIP158 block filters. Samourai has no excuse for collecting the complete financial history of their users.