0

I am using blockchain wallet to store some BTCs. Blockchain allows us to create multiple addresses as such:

enter image description here

If I give two different addresses in the same account to someone, will he be able to identify that both of the addresses belong to me?

For example, without the image above, if I tell you the addresses:

  1. 17bbyAreAzGhenHspBCC6uDmUvqpbHWDF7

  2. 12oVDoEA2DFX84LbVPZ3ZXA7U67JLFmWzX

  3. 1GQME6s1AmPPEYWz2KSuKsCsPp5DDZTCRY

  4. 1Ptxf11p5ZgM4UB7kSSZJ2y68gVPsgUHin

  5. 13v5W1QN1uR7ndzvfN3JAnVa8wHJcGHhTQ

  6. 1B9j5KLD1mXRcbDDYRxSXn1SwU1BtCZfZ

Will you know that at least two of the addresses are owned by the same person?

1 Answer 1

1

Edit: I have reorganised this post, but it has mostly the same information.

Leakage falls roughly into the following categories:

  • hacking of the server that stores your data,
  • transfer patterns
  • currency patterns
  • weak random numbers
  • well known addresses
  • voluntary disclosure

If there has never been a transaction on a particular address, and the server has no been hacked, there is no information at all about that address. It is not even possible to verify if someone has that account or not. The only thing you can do is verify is if it is a valid address or not. In fact, it is possible to generate an address on a computer that is not on the internet at all.

Once an address RECEIVES bitcoin, it is possible to see (from the blockchain) where (the address, not physical location) the money came from, directly and indirectly and all other transactions relating to those addresses.

Some addresses are well known, so if you get your money from mtgox, or a gambling site, this will show.

If the transaction is a round number it may be possible to determine the currency with a reasonable amount of confidence. For example if I see a transaction for 350.877193mc right now, I would expect that someone paid US$100 for it at the mtgox exchange rate, rather than Canadian $119.

If the account was generated with weak random numbers, it may be possible (though difficult) to determine information about the computer used to generate it (it would be equally possible to determine the private key and steal the funds).

If money gets moved through several accounts very quickly, then I can deduce with pretty high reliability that all the transactions are under the control of the same person, or that there is an automated system involved.

Usually, if money gets sent in one transaction to more than 2 destination accounts, it's pretty likely that all destination accounts (and probably the source account) are controlled by the same person. The same applies (a little less reliably) if ALL the funds of a particular account are sent to the same place.

Regular "purchase" transactions consist of money from one (or possibly 2) accounts going to exactly 2 destinations - one of the destinations being the "change" (which may or may not go to the account that it came from).

if a third party that keeps your account gets hacked or the like.

voluntary disclosure is just you publish the address on your blog or the like.

2
  • Yes I'm aware of the basic "leakages" like this. I'm wondering is there any more specific leakage pertaining to blockchain.info's implementation?
    – Pacerier
    Feb 17, 2014 at 6:56
  • I have not audited their sourcecode, but their business depends on trust, and keeping private data private. I doubt that they are going to disclose this. Feb 17, 2014 at 20:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.