Quote from: Febo on July 28, 2018, 07:58:22 PM

Quote from: cryptokwuk on July 28, 2018, 03:43:34 PM

Quote from: Febo on July 28, 2018, 02:59:33 PM

Quote from: cryptokwuk on July 27, 2018, 08:39:29 PM

Quote from: Febo on July 27, 2018, 06:19:58 PM

Quote from: cryptokwuk on July 27, 2018, 03:07:28 PM

Quote from: Hueristic on July 24, 2018, 07:50:28 PM

Optional Fungability will never keep you safe.

I hear this a lot but it's an absolutely unsubstantiated claim.

We have several other strong privacy coins which, unlike Monero, have never been severely broken.
Remember that before the last network update most transactions are able to be linked and traced. The issues may have been fixed for new transactions but it leaves a big fat scar on the reputation of Monero and it's users over the past years are still at risk from their past transactions. Or as Spagni likes to say to discredit privacy altcoins "lives could be at stake here."

Take ZCash, Dash or Pivx. They may not be private by default, but none of their private transactions have ever been linked or or traced.
It would seem mandatory fungibility didn't help Monero one bit in the past.

There are many papers claiming that optional private transactions cant make coin fungible.

I do not believe there was anyone that broke Monero privacy. If you know anyone I can make an transaction that he will unveil and made it transparent for everyone to see. I do believe this is impossible since theory says so.

On other hand theory and researches claim the opposite for the other coins you mention and main reason is their optional privacy. You need to understand that blockchain analysis will improve with huge leaps and soon many will be able to prove this theory with a click. Monero also had optional privacy until 2016. Luckily blockchain analysis was not so advanced back then to worry anyone.

That's a good joke... https://arxiv.org/pdf/1704.04299/
I recommend you read it thoroughly, because the implications are quite serious. Much of it has recently been improved upon, but the issues are not completely resolved and implications of transactions up to 2017 will haunt users for a long time i suspect...

Until 2017 Monero had optional privacy, since you could use Ring size 0. So you could basically chose to use private transactions or transparent. That is how Monero was from launch in 2014. And this paper you posted is just one of the papers that explain us in theory how optional privacy dont work. There are many such papers. Some were made in Monero Research Lab in 2014. Optional privacy is not real privacy and already is or will be broken in practice.

Nothing will hunt any user unless ignorant. Everyone that used Monero in 2014-2016 and read those Monero research papers, or read this forum, should know that optional privacy Monero had dont give him 100% privacy. Same as anyone that used DASH from 2014 till now should know this fact. That his transaction ( although he chose to be private) can be right now or will with advanced block chain analysis made totally transparent.
But also anyone that used Monero in 2014-2016 should knew that using Monero gives him best chances to have private transaction.

Nice twisting of the facts.
The 0-mixin transactions compromised the transactions that had to be private as they were selected as mixin outputs for the ring. Meaning that all default private transactions were not private at all because people were using 0-mixin. This is a vulnerability no matter how you twist it.
0-mixin should never have been allowed to be selected as mixin in the first place. How development could have missed that simple logic eludes me completely.

Hello. You can read that in 2014 MRL papers and in this thread from 2014. All transactions has to be private to have good anonymity. Using ring size 0 was not perfect but was how Monero was build in 2014 and released by thakful for today. This was a feature not an bug or vulnerability from 2014-2016 and such feature is still in DASH and ZCash.

Exactly. Development didn't "miss" it. Development (if by which he means Monero development, and not the original Bytecoin scammers, who BTW share with Zcash the record of having pushed out an unsafe and not-ready-for-prime-time system as a money grab) were the ones who discovered it, characterized it mathematically, published it, and immediately put a minimum mix hard fork on the roadmap.