Oddbean new post about | logout
▲ ▼
Kanzan | 5 days ago (raw) | root | parent | reply | flag +2 
 This all started because you were saying that there's no reason anyone should want to jump from LN to XMR

I think we've thoroughly answered that question at this point

Monero provides good privacy guarantees for anyone right out of the box with good ux. Noobs included.

As opposed to the Rube Goldberg machines you're proposing and the Coming Soon™️ privacy features I've been hearing about since I came into Bitcoin like 8 years ago

So yeah there's plenty of good reasons somebody might want use XMR. It's good money that protects users. I suggest you accept that fact.
▲ ▼
OT | 5 days ago (raw) | root | parent | reply | flag 
 Right out of the box? Not running a node? Straight from the exchange?
▲ ▼
Kanzan | 5 days ago (raw) | root | parent | reply | flag +3 
 Obviously buying kyc from an exchange exposes you to the exchange.
However unlike Bitcoin they have no idea where you send the XMR afterwards.

Connecting to 3rd party node does NOT expose your transaction history or anything about your wallet.
Your wallet *will tell the node the last time it synced, ie from what block it wants information. not really a big deal.

The biggest issue can be that if you broadcast a tx to a malicious (customized for chain surveillance) node it can know the true input(s) to that tx.
Which could be a problem if you *did buy KYC from a CEX and turned right around and spent using that malicious node and the node runners were coordinating with that CEX.
They wouldn't know where the transaction went, but they would be able to see that it was you that sent it.
If that makes sense
And it wouldn't work if you had moved the coins between the CeX and spending them with the adversary's node.

So yeah there are edge cases where its possible to screw up your privacy if do very specific things and happen to be unlucky 

nothing is completely drool-proof
▲ ▼
Kanzan | 4 days ago (raw) | root | parent | reply | flag +2 
 Realizing that I screwed up this explanation

The Eve-> Alice -> Eve attack I describe is always possible and has nothing to do with a malicious node>
That is to say
if the person you receive the Monero from and the person you send it to are colluding
they can eliminate the decoys in the ring signatures and see the true outputs

The danger with a malicious node is just that if you connect to broadcast a tx without hiding your IP somehow they can see that IP sent that transaction.
Which is usually true with other chains anyway
but Monero uses dandelion which prevents knowing what node broadcasted what transaction in most cases

🙇