Have seen this one and many like it. He's giving a precise scenario in which sender can glean some info in monero, vs comparable lightning scenario where you cannot.

In that limited scenario, which isn't all that niche a use case, tracking is possible by sender. Call it what you will, but thats his only point as far as I can tell.

The counter, imo, should be to focus on the trade offs lightning gives up for such to be the car vs a layer 1 pow chain. And maybe to offer scenarios where they are equal or monero does better.

Reply to this note

Please Login to reply.

Discussion

How is that a use case, let alone a non-niche one?

Is this where the confusion is? Is his shtick here able to trick people who understand the difference between sending and tracing by making it sound like there is some time where you need to not know where you're sending money?

It's early and I'm a but tired still, not to mention way out of my depth on the technicals.

The use case I'm referring to is a sender following what goes on with a receiver. That framing, perspective, or whatever you wanna call it, is not that contrived is my point.

Just stating what I'm interpreting from exchanges. There's prob some nuance I'm missing, but I follow well enough and am learning some things :)

I don't think it's nuanced at all dude

I don't think you ever need people sending you money to be unsure if it got to your wallet address or not

If you ever do need that, I can't imagine why, but surely it can't be a common use case

Where is the nuance supposed to be?

Elaborate on what you mean by:

I don't think you ever need people sending you money to be unsure if it got to your wallet address or not

It's typical vaguery, and not a rebuttal to his claims, but apparently pointing to a trade off I'm possibly ignoring.

No need to reply, think I got it from STNs replies to you

> How is that a use case, let alone a non-niche one?

It is a use case because many people get in trouble due to the sender disclosing info about the recipient to the police. E.g. read this case about tracing a monero user from Finland: https://www.reddit.com/r/Monero/comments/19emsfe/finlands_national_bureau_of_investigation_claims/

The Finnish police "made an information request to the [monero user's] exchange." It was an anonymous exchange, so they did not have his identity, but they did have his monero public address and his on-chain pubkeys, because he withdrew from the exchange to his self-custodial wallet. The exchange gave that info to the police, who watched the blockchain to see where the money went next, and traced it to Binance, a KYC'd exchange, where they got his identity info and arrested him.

The first step in this case was asking the sender (a no-KYC exchange) for whatever info they had about the recipient. Since they knew what pubkey they sent the money to, they were able to give this info to the police, and it was very useful to them. So it's not "niche" -- it's a verhy common thing for the sender to log info about the recipient, and among exchanges, it's very common to share that info with law enforcement officers.

Not letting exchanges have that info in the first place is very good for your privacy, and lightning makes this easy: you can give the exchange an invoice with a decoy pubkey in it, so that it doesn't even belong to you, but even if you *do* give them a pubkey that belongs to you, your future transactions don't show up on a blockchain, so there's far less info for them to track.

> is [there] some time where you need to not know where you're sending money?

Yes, the above example is precisely that kind of scenario: the non-KYC exchange in the Finnish case did not need to know what pubkey received their money. Lightning gives us a way to get the money to the right guy without revealing his pubkey to the sender. So why not do that? Why not adopt this superior privacy technology when the alternative is to keep using monero and keep going to jail?

First of all, you should be embarrassed to post a direct reddit link on nostr in a privacy discussion with me when many people on nostr use clients that will automatically connect to reddit's servers to load a preview card as soon as they scroll to your post.

You made me replace the reddit part of the URL myself, because like many nostr users, I am blocked from reddit. I'll attach a screenshot of what your link looks like for me.

For anyone else reading this, I'll also attach screenshots of the redlib version.

Anyway, tracing someone using KYC isn't tracing them using the Monero blockchain. Your mental gymnastics here are insane. Knowing what wallet address I've sent money to doesn't make me a KYC exchange

What you're saying is true. The only problem is, because of it's complexity in using it this particular way, the vast majority of Lightning users aren't using it in a way you are describing. That actually hides the receiver from the sender without simply shifting trust in their privacy to a third party (custodians, LSPs, and proxies) similar to the privacy of a traditional bank. You can look at custodial LN wallet downloads, popular larger LSPs like Acinq, Nostr LN addresses, etc for a few metrics on this.

Also, nostr:npub1lxzaxzge0jq9u9cecucctdt5lslwgp7hcxmp2l0wn8r2ecjenwasu6svxa always brings up a good point imo that LN network privacy guarantees aren't quantifiable to the public (but is to larger custodians and nodes - nice centralizing honeypots for malicious operators, criminals, and state actors who potentially have insight to a vast swath of the network) while Monero privacy guarantees are quantifiable.

TLDR Room for improvement for the default privacy of both.

Thanks, that makes sense.

>tracking is possible by sender

*knowing where the payment goes* is possible by the sender.

the sender doesn't know what happens afterwards, therefore tracking isnt possible.

*knowing where the payment goes* is possible by the sender.

the sender doesn't know what happens afterwards, therefore tracking isnt possible.

> the sender doesn't know what happens afterwards, therefore trackign isnt possible

Chainalysis managed to do it multiple times in the attached video, starting at 26:55.

They start with the easy "first step" where Morphtoken told them they sent the money to the perp. From there, they trace it forward four times. At 30:43 they identify a payment from the perp to either ChangeNow or Liquid Exchange; at 32:49 they identify a payment from the perp to Exodus Wallet, though they say even their advanced tracing software was not able to generate high confidence for this particular trace, and they aren't sure where he sent it, nor which output was his change output.

The trail runs cold for that particular txo, so at 34:55 they go back to the drawing board and identify a different "first step" where Morphtoken told them they sent money to the perp. At 35:08 they conclude that he sent this txo to one of two places: Exodus Wallet or a mining pool.

From there, they successfully identify his change output (at 36:36) so they continue tracing the perp's money, where they learn -- at 36:51 -- that sent his money to a centralized exchange or a merchant's point-of-sale website. One of those confirmed that he sent his money to them and that they had his identity info, which is how they nabbed him.

So yeah, saying it "isn't possible" is completely false -- Chainalysis sometimes manages to do it and there is a video explainer of how they do it with plenty of screenshots so you can follow what's going on.

https://v.nostr.build/D4Nzp22vRF35IRnz.mp4

stop fucking lying

i said "the sender doesn't know what happens afterwards"

so show me where morphtoken (the sender) knows what happens afterwards.

they dont.

chainanalysis TRACKED the movement of funds by combining multiple sources of information.

that is tracking.

the sender knowing the destination of their spend is NOT "tracking".

you are deliberately deceiving people by conflating ACTUAL chainanalysis with simple spends.