What attack? My tech blabla? LMFAO Xpubs, tor and a node is not advanced. Aren't you the one tech blabla about reproducing a wallet? You guys never want to listen. All replies go in one ear and out the other.
The above is the same same as it always goes. Attack the messenger. Bamboozle the noobs with your tech blabla to imply a smart person would understand you (of course not that noob follower of yours), so if the other side doesn't "get it", it's on them.
Yeah, xpub. If you connect to your own node but still use the Samourai coordinator and send it your xpub over TOR, you still negate all mixing if Samourai is evil, which they are.
"In their telegram" is not where I would engage. In fact they kick me when I do and I have no receipt of their rudeness and scamming. Come out of your hiding place and discuss in the open. Same with their GitHub ... they moved to their own GitLab where I can't even create an account. Or well, I can but they delete it. But others asked for more security and transparency here for example: https://code.samourai.io/wallet/samourai-wallet-android/-/issues/440 and neither got a reply in two years.
And yes, to reproduce you need the same environment but they would not care to document and the diff can tell you it's not only about the environment. They don't tag their releases and don't always publish the code with the binary. They don't want to be verified and they definitely do not share the code that goes into most of their releases. Of some 15 versions I tested, only one was reproducible. All the others could be collecting private keys for all I know.
Discussion
No replies yet.