Caveat: perfect privacy doesn't exist 🤙

Reply to this note

Please Login to reply.

Discussion

And also you don't know what modified version of cashu they are using...

The privacy is provable. If you know what code you're running on your own machine.

The keyword is "your own machine".

I guess this is enough if you are uncle jim, you know your code, and other's know you, trust you.

But proving code on other machines would be a cool feature! Like proving websites running a certain service version. But that can also be a good target for osint. Hmm.

No, it's enough if you know what's running on your phone. You don't need to trust uncle Jim to protect your privacy with ecash.

Which docs do you suggest to read to come to this conclusion?

This is how blind signatures work. Check docs.cashu.space > Resources (mobile rn)

Thanks! 💜

online*

I understand the sentiment, but can you please elaborate. What are the different ways a mint runner can glean information about the eCash users? Something I can imagine: tracking ip addresses? monitoring in/out on-chain or lightning payments and connecting then to tokens? what else?