Quote from: Kruw on December 11, 2024, 01:32:25 PM

Quote from: JollyGood on December 11, 2024, 12:50:16 PM

I would like to get a better understanding of the issue that was affecting Wasabi Wallet versions 2.2.1.0 and below and could be relevant to subsequent releases. Without reading posts about detailed specifics related to why it can or cannot happen, theoretically is it possible for Wasabi Wallet to log non-anonymous data from their users?

I also want to get a better understanding of the issue. "Tagging" is mentioned in the WabiSabi whitepaper in section 6.2, but it's very math heavy and I wouldn't know where to begin in regards to comparing it with the code implementation. The attack would involve a malicious coordinator, the report from TheRage mentioned the researcher tested 3 coordinators which did not reveal any were exploiting it.

Quote from: JollyGood on December 11, 2024, 12:50:16 PM

Kruw did make a comment about this when I asked earlier but is the answer still valid?

I suppose I should say for the record that I have not exploited any tagging vulnerabilities with my coordinator. As always, I want to remind people that they should run their own coordinators as well to help decentralization, market competition, and privacy self-education.

Ideally and on paper, that's the very perfect situation. But practically, it's not easy to boot-strap enough liquidity. But I do believe that the more trustworthy and influential members of the BitcoinTalk community should organize us plebs and run a coordinator.

Plus the community should probably run more than one in my opinion. Some of the services that are advertising in the forum should probably be involved as well.