Avatar
econoalchemist
7ef5f1b156ea5e7e9f9b787f7951b2d101f77806167a8d44b11468a10e0fcd27
#FREESAMOURAI billandkeonne.org Co-founder 256foundation.org

For the time being, Whirlpool has been removed.

Decentralized Whirlpool was nearly ready to activate before the SW devs were arrested. The vision is still there.

My new PayNym in Ashigaru is outrageoushuman41 🤣

https://paynym.rs/+outrageoushuman41

Samourai Wallet has been forked. Some brave souls have picked up where Samourai Wallet left off and the fight for privacy lives on.

Excellent work in reigniting this flame in the darkest hour. Running your own Dojo now required.

https://ashigaru.rs/

http://ashigaruprvm4u263aoj6wxnipc4jrhb2avjll4nnk255jkdmj2obqqd.onion/

GM miners are going to have free & open-source hash boards, control boards, & firmware; complete and fully customizable mining systems that out-perform Bitmain products.

First nostr:npub1p0d256yljvn3pl82gpkmdyfqlxcmu6px63msrpmuauzha8yq4eeqprfpqe being recorded in front of a live audience happening soon.

Tomorrow marks the beginning of the end for the DOJ's campaign against privacy & open-source devs.

All the best to the Samourai Wallet team. Kick the tires and light the fires, guys 👊

Support their legal defense fund: https://p2prights.org/donate.html

Monday Mining Meetup #1 tonight, 9/16 doors open at 16:30, runs until 19:00. nostr:npub1p0d256yljvn3pl82gpkmdyfqlxcmu6px63msrpmuauzha8yq4eeqprfpqe episode #56 will be recorded in front of a live audience with special guest nostr:npub1ql2zzp3g6yndgz05js7wdc4qkr88wkyne5nw2cc7csrtzqs0yeesgwrxya

Join us for special 256 Foundation announcements, Socratic style QnA, food/drinks, & more.

https://www.meetup.com/bitcoinpark/events/302996672/?eventOrigin=group_events_list

I hate to be that guy but Ryan Routh seems a little rude.

First of all, you have failed to demonstrate any Samourai Wallet "address reuse bugs" that can be equivalently compared to the systemic & symmetric address re-use vulnerabilities in Wasabi although you claimed them to be equivalent on Vlad's podcast. Second, I do not claim to be "aware of all", I have merely responded to your shitty and misleading examples.

Doxxic change in Samourai Wallet is not part of the CoinJoin tx, it comes from the setup tx (tx0) and is separated afterwards, never entering a CoinJoin round.

As for Ergo's tweet, when he says "unmixed" change, he's talking about change that comes out of a Wasabi CoinJoin tx, change that doesn't match the mixed like-amount outputs. These change outputs are far from untraceable and have been the downfall of many users. Take for example, this video where Samourai Wallet demonstrates how easy it is to unwind a Wasabi CoinJoin transaction featuring a systemic case of address re-use. Take special note of the keywords "unmixed change" in the video's caption, which sates: "The 25 BTC unmixed change went to the same address as a 0.401 BTC mixed output. User didn't do this address reuse, the client did."

https://m.youtube.com/watch?v=alcLdBsoDDg

Says the guy publishing podcasts about an inactive CoinJoin implementation 🙃

If you could then you would have but you can't because you're out of your depth. None of your examples are the result of address re-use in the CoinJoin. Unlike Wasabi's systemic & symmetric address re-use vulnerabilities which both occur in the CoinJoin transaction.

To clarify further: in your first example above, the coordinator fee is provided during the tx0 transaction while the wallet is setting up for and prior to the CoinJoin transaction. Tx0 transactions have obvious on-chain fingerprints and I fail to see how identifying the address used by the coordinator to collect the fee has any bearing on the anonymity of the user.

In your second example, the re-used address was also re-used in a Wasabi CoinJoin tx so that doesn't help your case but more importantly, when it was re-used by Samourai, it was in the tx0 - not the CoinJoin transaction. Additionally, based on the comments in that thread, the wallet was imported to Samourai and admittedly wasn't fully synced.

Finally in your third example and like the others, this was not a case of address re-use in the CoinJoin transaction (unlike Wasabi) but rather limited occurrences of address re-use in post-mix spending tools like Stowaway, Stonewall, & Stonewallx2. As explained in Samourai Wallet's write up of their investigation into the reported issue: not nearly as many addresses were effected as originally claimed and for good measure Samourai Wallet introduced Strict Mode after this report to mitigate unintentional address re-use by the users when transacting with post-mix spending tools.

Despite your efforts to equate Wasabi's address re-use vulnerabilities to Samourai Wallet, you have come up short yet again.