by vazertuche
Privacy-heuristic tools have gotten a lot of attention lately. am-i.exposed lets you paste an xpub or an address and get a read on how much your wallet’s history leaks. More recently supertestnet opened a WIP wallet-fingerprinting panel for btc-rpc-explorer that gives a heuristic “which wallet likely created this transaction” verdict from on-chain signals alone. (nVersion, nLockTime / anti-fee-sniping, RBF signaling, input script types, low-R grinding, BIP-69 ordering, change-type matching, and so on.) People are clearly interested in finding out what their transactions reveal, which is good for the ecosystem.
What stood out to me was how many of them pasted their xpub into a public website to get that read, instead of running the analysis privately against their own node. An xpub handed to a third party is the entire wallet.
This is a writeup of a system that addresses that. It lets anyone, including people who don’t run their own node, run these privacy heuristics over their own wallet without revealing to any server which transactions, or which wallet, they are asking about. The heuristic verdicts are precomputed per transaction and published as encrypted per-block filters. A wallet can only decrypt the verdict for an outpoint it is actually interested in, and the server never learns which outpoints those are.
...read more at delvingbitcoin.org
pull down to refresh
related posts
This made good sense to me:
It sounds like he's using bloom filters with some extra fancy cryptography stuff to make it so that the server cannot tell which outputs you are querying for.
This thing jogged something in my memory and I thought I may have posted about it before, but apparently not. But it is part of a product he is designing called BTC Medusa:
And perhaps like whirlpool/wasabi, it may point to a revenue stream for open source wallets (although, I'm not convinced that it is very big):
Here is an example of how their are pricing it at the moment (in his delving post he mentions tokens, and this seems to be a price to download the plugin, so maybe there is also an additional charge for use):
Run own UXTO is not for beginners.