Quote from: blajde on April 01, 2014, 01:09:28 AM

Quote from: eduffield on March 31, 2014, 11:53:44 PM

Quote from: TanteStefana on March 31, 2014, 11:23:57 PM

Quote from: jl777 on March 31, 2014, 11:00:44 PM

Quote from: AnonyMint on March 31, 2014, 05:10:42 PM

Quote from: eduffield on March 31, 2014, 04:22:43 PM

Design B: Users provide inputs, outputs and collateral at once. In this case the master node knows who is sending money to who, but later it can tell who didnt sign.

Ive chosen to use design B (users will add inputs and outputs at the same time) because its the only design that cant be attacked in the way youre saying.

Okay he has confirmed that you are not anonymous to the master node, as I wrote upthread would be the case if he associates the collateral transaction with both input and output stages of the CoinJoin.

eduffield I would like to say that is not acceptable because for the same reason I don't want to use mixer or laundry website, I can't know if the master node is an NSA honeypot.

I would like to suggest you think about my divide-and-conquer idea as another electable option for users.

If there is failed stage, then divide the inputs into two groups. Then ask for outputs again. Divide and conquer as necessary, then the join will complete.

Not ideal, but at least you don't break anonymity and require trust of the master node.

Best of luck with it.

Thanks AnonyMint!
You are the real deal in anonymityland

James

What he suggests is unlikely, but even if some nodes are run by the NSA, which is likely, why not?, then they might get info for one transaction. Big deal, they can't always be the master node, there are too many other nodes running. And to "fix" such a minute problem, or possible issue, one would have to complicate the system to such a degree, I am certain you'd create more holes than you can cover up.

sounds good, in practice it's a disaster. KISS, Is the way I think it should go. That Anonymint will never understand, as he keeps going on and on about the same half dozen issues. It's like conspiracy theories. yah, they could have happened, but how likely is it? With other more reasonable explanations and the fact that the government is so dang inept. It's just silly.

It's even more unlikely if we require the master nodes have 1000DRK and it would elect them from the whole network. That way if there's 5000 capable master nodes, it would cost 5000*1000DRK to de-anonymize 50% of the transactions. Seems like a good compromise.

PS. If one user doesn't sign, the whole process needs to restart. Which really just means the master node will ask all users to resubmit their inputs/outputs/signatures and will charge the user.

I think this is really good. It addresses the key points of anonymity in its essence even if it doesn't.

All you really have to do is to make the process more expensive than what they can afford to spend on it.

Say they were after the heavy criminals that would be 0.01% of the people using Darksend. Which give the rest of the users 99.999 % anonymity (in its essence)

Why would they want to spend this much on your information when you are not flagged for anything or something that will result in a 50 fine ticket - or just get info, period.

So one approach is to make it as expensive as possible, in whatever way.

Thoughts?

This is genius - especially when the price rises, so does the cost to obtain any information albeit with a very high chance of it being worthless. Love it!