52
The short answer is no. The long answer is split into three parts, each headed by a bold word.
I will talk about the existing privacy tools in Bitcoin.
I will talk about some pie-in-the-sky theoretical crypto which would achieve full anonymity (but which can't be done feasibly today).
I will talk about CryptoNote, its limitations, and feasible ways around ...
41
As I understand it, the "stealth address" is intended to address a very specific problem. If you wish to solicit payments from the public, say by posting a donation address on your website, then everyone can see on the block chain that all those payments went to you, and perhaps try to track how you spend them.
With a stealth address, you ask payers to ...
20
I'm curious as to why Bitcoin has not perused a similar path to privacy.
I want to start by commenting on the phrasing of this question. Bitcoin is defined by the consensus of its users, and isn't a central entity that can set a development goal or priority of what to work on. Individual people - including developers like me - have priorities on what to ...
19
Short answer: yes, it will be anonymous
Long answer:
The following applies to all Cryptonote based coins, unless stated otherwise:
On the blockchain, all addresses are one time addresses. In Bitcoin, you are exhorted to not reuse addresses, but Monero enforces this. Every new transaction causes a new one time address to be generated, in such a way that ...
17
If your business partner knows your address, they can learn the transaction history and balance of that address. Often it is possible to guess or deduce that other addresses also belong to you, but this requires a bit more effort and is less reliable. However, this certainly doesn't translate to your complete wallet's balance and activity to be known.
This ...
15
If I'm sending someone my wallet-address, am I making my account balance visible to him?
Yes.
all transactions are public, means if I know the wallet address, I
can reconstruct the current account balance
Yes. All transactions of that address are in the blockchain, so they're public.
Owners of bitcoin addresses are not explicitly identified, but all ...
14
Alice wants to transfer 1 BTC from address A to address B
Bob wants to transfer 1 BTC from address C to address D
CoinJoin gives them a way to combine their transfers into a single transaction that has two inputs (A and C) and two outputs (B and D). Someone observing the blockchain no longer knows which one of the outputs is Alice's and which one is Bob's. ...
11
This page on the bitcoin wiki explains the exact procedure for generating and using a stealth address. It's not very user friendly at this point in time and is considered experimental.
Simply:
Receiver generates a an address and a private secret and then sends
this address to someone who he wants payment from.
Sender uses the address and a "nonce" ...
11
First of, I am a Monero core developer. I'll try to remain as factual and objective as possible, though.
Now, for the simple answer: use Monero
And for the longer answer: read Andrew Poelstra's very informative reply.
I would also add the following:
Zero-Knowledge Proof has several of fundamental issues that may not even be fixable (from the less ...
11
When Bitcoin was invented, Blockchain analysis was not as advanced as it was today and pseudonymous transactions were believed to be closer to anonymous than they are with Bitcoin today. Under the current Bitcoin system, privacy can be greatly improved by avoiding fiat entry/exit ramps connected to your identity and by avoiding reusing BTC addresses.
Yes ...
10
Let's assume you're the outside observer. You see 1 BTC go from aaa to bbb, then from bbb to ccc, then from ccc to ddd, and them from ddd to zzz (zzz being associated with service Z). Can you see how easy it is to figure out that addresses aaa, bbb, ccc, and ddd belong to the same person?
It doesn't even get much better if you split the money to different ...
10
TCP and other stream based protocols do not have a 1-to-1 correlation of application level messages and IP packets. If you call send() 3 times, it might result in sending a single IP packet over the wire (eg, due to Nagle's algorithm which is enabled by default), it might get sent individually as 3 packets, as you would expect from a packet oriented protocol ...
9
As a peer:
You can derive the approximate location (GeoIP for IPv4, latencies and allocations for IPv6) unless the node is operating as a hidden service.
You can query the node for it's version number.
You can query the node for current date and time.
You can query some of the nodes recent connections with the addr host discovery mechanism, giving you ...
9
The term "Tainted Coins" is often misinterpreted as a measure of provenance. That's understandable considering the traditional definition of the word "tainted" coupled with the reality that many Bitcoins actually have been used for what would be considered nefarious purposes by standard societal norms. In fact, it is a common occurrence to be holding or ...
9
One private key maps onto two addresses - one that uses an uncompressed public key, and one that uses a compressed public key.
What you might also be interested in is a deterministic wallet - a Bitcoin wallet holding multiple addresses generated from one private key / secret. This will let you secure multiple addresses and store only one key.
9
I'm pretty sure that all crypto payment processors that deal with fiat <-> cryptocurrency exchanges are doing AML/KYC routines including chain analysis. That's not only true for BitPay and Coinbase but Circle et al. too. As soon as you're trying to move value between crypto and fiat you're going to have to deal with different levels of privacy invasions ...
8
It probably doesn't give you more security, and in fact if the mixer service's coin volumes are low, which they likely are, and dependent on whatever their turn around time may be, and dependent on how many coins you are asking them to mix, it is very possible for you to get back some of the same coins you sent to them. Unless they were verifiably in a ...
8
There's a bigger attack surface for someone that wants to doxx you. They only need to link a single transaction to your real life person to know all the transactions you've participated in. A single payment to newegg, for instance, will identify you across all transactions.
Very few transactions are completely anonymous. But yes, if they're all completely ...
8
A deanonymizing dust attack works by sending dust to large amounts of addresses. The assumption is that when people send transactions/perform consolidations in the future, dust from multiple addresses will be grouped into a single transaction, thus revealing many addresses controlled by a single entity, since the dust would be swept in a single tx.
(this ...
8
The site is a joke, or at best a confusing attempt to educate.
It literally lists all private keys, from low to high, as private keys are just numbers. There are of course way more than can be reasonably computed and stored, so the pages are just generated on the fly. If you ask for private keys starting at number N, it on the fly computes the public keys ...
7
More accurately, the pseudonyms most commonly used are addresses, which are derived from public keys (not the longer public keys themselves).
In order for Bitcoin's idea to work, you must have coins that can only be spent by the owner of a given private key. This means that whatever you send to must be tied, in some way, to a public key.
Using arbitrary ...
7
No.
All addresses generated by HD derivation are indistinguishable to someone who does not know the parent's master key (the private one for hardened derivation, the public one for normal derivation).
7
In Confidential Transactions (as used in Blockstream's Elements and Liquid), there are still identifiable UTXOs.
The only change is that instead of the amount, a homomorphic commitment to the amount is stored. While not technically correct, you could see it as a form of encryption that is compatible with addition and subtraction. So if a+b=c+d then E(a)+E(b)...
7
While it is true that Bitcoin can still be physically taken away from you, it is still much harder to do that than it is for a government to confiscate your fiat stored in a bank account (as most fiat is). With fiat in a bank account, the government can simply go to your bank and order them to freeze your account and lock you out of it. There is no need for ...
6
I know it is an old question, but it deserves an updated answer.
Since the introduction of BIP37 (=SPV with bloom filters) a number of serious privacy vulnerabilities have been discovered. By using SPV + address bloom filters you are exposing all the addresses of your wallet with every Blockchain surveillance company.
The reason behind this near ...
6
The gist of the reusable payment code BIP is that you can gain some measure of address privacy by combining BIP32 (hierarchical deterministic wallets) with Diffie-Hellman key exchange. To understand what this means, let's figure out what the current situation of bitcoin wallets is.
Originally, in the reference client, bitcoin wallets simply generated random ...
6
My understanding of confidential transactions is that it only hides the amounts, not the addresses involved (someone please let me know if this is not the case).
Since only the amount is hidden, reusing the same address would still connect your various transactions together, linking them as likely involving the same user.
6
Yes, independently operated nodes help decentralization more than the same number of nodes operated by a single entity. That's basically the definition of "decentralization" in this context. That is not to say that a single organization running multiple full nodes does not add to overall network health, since those nodes still participate in relaying ...
6
The simple answer is no.
A hashing algorithm is ment to be a one-way function. If it is possible to recreate the public key from the hash, this means that the hashing algorithm is broken.
However there is one aspect that you might find useful. For message signatures, bitcoin uses a custom encoding (compared to the DER encoded signature found in ...
6
Does it affect -most importantly- the safety of the funds?
It does not. Funds are not affected by publishing a LN invoice.
Does it negatively affect the privacy or something else?
If a lightning invoice is published, 3rd parties may learn some semi-private information about the payer and payee. First and foremost, they learn the amount that was paid and ...
Only top voted, non community-wiki answers of a minimum length are eligible