Should we be concerned about JoinMarket?
275 sats \ 13 comments \ @0xIlmari 26 Apr bitcoin
In light of the recent action against Samourai, should we be concerned about the future of JoinMarket or the livelihood of its developers?
I know that JoinMarket is much more decentralized than Samourai and there probably isn't a single-point-of-failure piece of infrastructure to target, but I haven't studied the code so don't know the details. But it'll probably be fine?
But the "law enforcement" are targetting developers specifically, and that's just one call to Microsoft and GitHub will hand over all it knows about the contributors.
write
preview
related posts
120 sats \ 0 replies \ @kristapsk 26 Apr
A lot of JoinMarket lead devs, including me, are already public persons, we have spoken about it in conferences on stage etc, so it's too late anyway, nobody will need to call Microsoft or somebody. I hope it will be ok, so no point to worry, can't do anything about that anyway.
But code is open, anybody under nym could fork it and development will continue.
reply
31 sats \ 0 replies \ @byzantine 26 Apr
it will probably be the last coinjoin implementation standing.
reply
22 sats \ 7 replies \ @jgbtc 26 Apr
Devs need to be nyms only. I'm amazed that isn't the norm yet.
reply
31 sats \ 6 replies \ @0xIlmari OP 26 Apr
Nyms are not enough. GitHub can still log your IP, which they will then take to your ISP and snatch you.
Means you should only use GitHub over Tor. And, as someone who does exactly that, I can attest that it's a pain.
Plus, you better use Tor for every service where you use that nym (SN, Nostr, Shitter), because you can be sure they will check them all fishing for your real IP.
reply
20 sats \ 0 replies \ @fiatbad 26 Apr
This is why Jack has been pushing so hard for a Nostr implementation of Github.
We need an open source, relay-based system for hosting open source repositories.
reply
0 sats \ 0 replies \ @kristapsk 26 Apr
There was issue about GitHub over Tor for JoinMarket in the past actually. https://github.com/JoinMarket-Org/joinmarket-clientserver/issues/1302
reply
0 sats \ 2 replies \ @jgbtc 26 Apr
Good points. Do VPNs like Mullvad solve this? It seems like decentralized git alternatives are also necessary now.
reply
31 sats \ 1 reply \ @0xIlmari OP 26 Apr
No, they don't. Your privacy rests at the behest of the VPN company. Even Mullvad, who don't collect personal info from you, could be tracing your entry IP and hand over that information to the authorities.
Don't use VPNs for identity privacy!
VPNs are for:
  • working around Netflix's region-locked content
  • securing communication from eavesdroppers (content privacy)
And I don't get that one about Git alternatives. Git is perfectly decentralized, perhaps you meant GitHub?
reply
0 sats \ 0 replies \ @jgbtc 26 Apr
Thanks! Yeah, I meant GitHub.
I guess Satoshi is the ultimate example to aspire to. Whatever he did to remain pseudonymous seems to have worked.
reply
0 sats \ 0 replies \ @nikotsla 26 Apr
And, as someone who does exactly that, I can attest that it's a pain.
Using Tor for almost everything... I agree, it's a pain and it's a way to understand how fuck up is "the internet" today. Be safe out there!
reply
0 sats \ 2 replies \ @harrr 26 Apr
Code is free speech and protected under the US constitution. Writing code is not running a service.
reply
0 sats \ 0 replies \ @bellabaxter 26 Apr
Code is free speech but you still have to fight and prove your innocence in court... in the meantime you can stay in jail.
reply
0 sats \ 0 replies \ @0xIlmari OP 26 Apr
Tell that to the Tornado Cash guys.
reply