Avatar
atori
d4246aa932bb256fcceca9cf70701017db0a13f5a5782b3fdd5e7b3425dd0769

Why rely on extensions and all that trust if you can just use Brave?

Replying to Avatar .

Is that postmix?

One thing I don't like about Dojo is that you xpub is just there. If somebody seizes your Dojo they have everything. With an electrum server there is no record so you can use it with hidden wallets (passphrase).

An inflation bug in a shielded pool will only impact those that choose to shield their coins. Keep savings on chain and spending money shielded?

I thought the IMEI was only broadcast when using the cell network? Graphene randomizes the Bluetooth MAC address.

Replying to Avatar Final

Regarding the recent situation with Proton Mail, I have nothing to comment that I haven't said countless times already. I would need to understand more context about what the users they suspended did, which is in the clouds of social media conflict right now. It is abnormal to suspend a researcher, so I personally would like to see a more formal response from Proton on their justifications -- especially since accounts were reinstated after the matter went public.

In the meantime, let us go through a refresher your need-to-know on encrypted email providers. If you are aware already on how Proton Mail works technically and as a business, it should be of no surprise to know the following:

- Email is not end-to-end encrypted. Proton Mail encrypts received emails from external domains when they arrive unencrypted. The only encryption is in the transit between the two email providers, NOT the individual users. In theory, a service provider could be legally compelled to intercept email traffic and keep the readable copy as they arrive. Only Proton to Proton emails are end-to-end encrypted.

- "Zero-access encryption" is NOT "end-to-end encryption".

- Providers suspend accounts on their own due diligence. Should be no surprise companies suspend accounts from reporting from sources like CERTs, ISACs, anti-spam registries etc. If an email provider can't read the mailbox, then this or email contents being reported is the most information they get. Don't act shocked when they aren't on your side.

- Don't think irrationally: Removal of service is not at all related to information disclosure.

Certain information you provide to the service cannot be encrypted in a way that is unreadable to the service, for example, email account recovery information. It wouldn't be possible to restore accounts using information they don't know. Understand what information you provide to a service provider.

Overall: Don't use email for personal highly sensitive communications you believe could be disrupted by a service provider. If there is no way around this, encrypt the email contents and attachments yourself and leave a generic non-sensitive subject line so neither providers can read it. The same applies to self-hosting your own email. Use end-to-end encrypted messaging apps for communication. Keep emails for accounts.

Mail providers with mailbox encryption like Proton and Tuta provide encryption as a protection mechanism against data breaches. Using such services are a reasonable choice for someone who needs an email provider with a focus on account security and requiring only the minimum amount of information required to function. But, they are not an opsec silver bullet.

Fair and balanced take.

Having your private keys hot on hardware you don't control... I don't know man.

So if you want to transact in monero you buy some and then spend? I'm holding 1-2% in monero but am considering going just all in bitcoin.

Replying to Avatar Juraj

Yes, you can do swap, with the problems I quoted above.

It is as private because of two things:

- you can have as much privacy as you want and you can want same privacy as Monero. No public record of transaction anywhere. And that is regardless of sending and receiving counterparty's choices

- you can actually use it in many more cases, making your financial life more private. I remember at one point a Monero meetup where people were sitting at the bar without drinks. I came to ask if they're ok and they reluctantly said they can't buy drinks because the bar only accepts Bitcoin. So I got them drinks. Many Monero maxis would not do a swap (not very private even, the provider sees the details of the tx, even though they can't identify either party), and especially online, the choice is Monero or credit card. If Monero is not accepted, they pay with credit card. My choice of practical private online transaction is just bigger. I'm not a Bitcoin maxi, I'd gladly pay in Monero and I actually like to do it, but I simply don't have the chance that much. The shop I use most for online purchases (Alza) takes lightning, shitcoins like usdt, but no xmr. I can do swap, but I pay additional fees, I have to wait and hope the swap goes through before the invoice expires (not lightning invoice, just the general payment code expiration due to exchange rate). So for my practical purchases, Lightning is just so widely accepted that it does not make any sense for me to look for other merchants that accept xmr. There's no sender information in lightning transaction, so I just pay and it's private and instant.

So practically, lightning is what gives me financial privacy. Monero is just too niche to work in practice.

BTW: for swaps, I started using Zcash, thanks for your howto, it works pretty well.

I've also done the anypay.today project for this. You scan a QR code, it gets converted through trocador, the source is always lightning because I don't want to wait for miners in order for the payment to go through. One click, instant confirmation and whatever shitcoin the recipient wants they get. With Monero swaps, it's often 10 or more minutes until the recipient sees the tx.

But then your have to hold Zcash... At least monero has some potential of price appreciation.

Fulcrum is an electrum server interpretation.