<basses:matrix.org> discuss.privacyguides.net/t/coin-wallet-monero-crypto-wallet/31101

<ravfx:xmr.mx> wtf is that scamwallet

<ravfx:xmr.mx> fee : monero netork + 0.5% whutwhat?

<ravfx:xmr.mx> And it know the real spend yay

<barthman132:matrix.org> @syntheticbird: Proton is a interpol honeypot.

<ravfx:xmr.mx> What a surprise lol

i tried the program out

it sent 3 requests containing unknown base64-encoded data

once i made a monero wallet

also it sends a "wallet ID" which i think is the seed of the wallet, and a device ID and hash of the 4-digit pin

4-digit btw, it can be easily bruteforcable

<ofrnxmr:xmr.mx> @ravfx:xmr.mx: The fee is set server-aide

<ofrnxmr:xmr.mx> Weve rejected them for getmonero listing probably 3 times

<ofrnxmr:xmr.mx> This last time, they tried to act like they werent scum, snd tried to spin it like i was being unfair

<ofrnxmr:xmr.mx> monero-project/monero-site #2162#issuecomment-3160400222

the site phones home a little too much for a wallet

<ofrnxmr:xmr.mx> its not even a wallet

<ofrnxmr:xmr.mx> Its a scam*

<ofrnxmr:xmr.mx> You spelled it wrong

also btw, i find it laughable that the only form of protection is a 4-digit PIN

<ofrnxmr:xmr.mx> "do u still charge fees?"

<ofrnxmr:xmr.mx> "All wallets except GUI and CLI have features that monetize users (buying, selling, swapping, gift card purchases etc.). Since last week buying xmr inside the wallet has become nearly impossible but this option had been available for many years"

that, given a hash (that the script gives to the site servers), can easily be bruteforced with a GPU in 5 minutes

<ofrnxmr:xmr.mx> Completely dances around the question

maybe less

who tf uses a 4-digit PIN

<ofrnxmr:xmr.mx> "Why leave such a comment without actually checking?" - coinwallet

<ofrnxmr:xmr.mx> "Last i checked, ya'll charged fees for withdrawal, so why would deposit $ there?" - ofrn

<ofrnxmr:xmr.mx> Cindy: ther arent that many combinations if 4 digits

<ofrnxmr:xmr.mx> U sure it woukd take that long?

yeah i'm not sure

it'd probably take like

30 seconds

<ofrnxmr:xmr.mx> 10000 total combinations

for a "local" wallet

it literally does not let you make a wallet without letting it phone home

<ofrnxmr:xmr.mx> Chatgot says it will take a fraction of a second

<ofrnxmr:xmr.mx> Cindy: Edge too 😂

<ofrnxmr:xmr.mx> For a local wallet, you have to tell it your txid, else it doesnt know abour your balance

holy shit, their webapp is so poorly designed

it cant even phone home to give the servers a pin hash, wallet id or whatever the fuck

<ofrnxmr:xmr.mx> And you have to include an output to them everytime you transact - so they always know which outgoing txs are yours AND how much_ since their is a % of yours

because they didn't implement proper CORS policy

<ofrnxmr:xmr.mx> Sir, why are you spreading fud

oh i get why

<ofrnxmr:xmr.mx> We deserve to be listed in getmonero.org

their servers...... block tor

no joke

i requested the shit myself, and got a 403 forbidden page

YOU SAID YOU SUPPORT TOR!!

<ofrnxmr:xmr.mx> "we don’t share the private view key and we have no way of seeing future user transactions (a good point that was brought up earlier)"

<ofrnxmr:xmr.mx> "we are the only wallet that supports Monero without any sync (no local or remote node involved)"

i gave it a random tx ID from blocks.p2pool.observer and guess what

IT GAVE THE SERVERS THE TX ID

<ofrnxmr:xmr.mx> stop gaslighting!

<ofrnxmr:xmr.mx> "we don’t share the private view key and we have no way of seeing future user transactions (a good point that was brought up earlier)"

and then the servers responded back with the transaction details

<ofrnxmr:xmr.mx> " Entering a single txid checks one specific transaction, locally."

<ofrnxmr:xmr.mx> LOCALLY

locally my ass

<ofrnxmr:xmr.mx> HELLO, CANT YOUR READ

<ofrnxmr:xmr.mx> NOW LIST PKZ

<ofrnxmr:xmr.mx> STOP BEING RACIST

it literally contacted a server to get transaction details lol

<ofrnxmr:xmr.mx> L O C A L L Y

<ofrnxmr:xmr.mx> We dont know anything about your tx

<ofrnxmr:xmr.mx> There is no server

<ofrnxmr:xmr.mx> "It runs entirely on the user’s device, with their keys."

<ofrnxmr:xmr.mx> gawd

<ofrnxmr:xmr.mx> You monero people are irrational and antisemitic

wtf is the base64 data that the program likes to send

<ofrnxmr:xmr.mx> defamation, slander!

Just host your own fucking wallet for fucks sake it's not that hard

<ofrnxmr:xmr.mx> "coinwallet is a locally, self hosted, serverless wallet

throw it on an encrypted usb drive or something or keep the keyfile there. And put it all in a veracrypt volume

yeah good

<ofrnxmr:xmr.mx> please try it before you comment on it

<ofrnxmr:xmr.mx> Its the best wallet in the space

<ofrnxmr:xmr.mx> Why? Because we steal your money

had me in the first half :3

>tries to buy monero

>"select your country!"

>afghanistan: "There are currently no providers available."

>united states: "There are currently no providers available."

>literally any country: "There are currently no providers available."

buy another crypto and exchange that crypto for monero p2p

that'd be what i do if i had money yet

Buy BTC from atms

trade it for USDT

trade USDT for monero

usually an easy way to bypass most tracking

just remember you need trx or something for gas and don't be an idiot like that

Base64 encryption with Rot13 key derivation

You wish the wallet is even PIN encrypted at best it has the pin saved in clear text as a client side check

lol

and the pin is checked with the server :P

<letscage.com:matrix.org> BoBeR182: USDT-XMR pool is very risky. I wouldn't suggest

how so?

can you elaborate?

<letscage.com:matrix.org> USDT is a centralized contract

<letscage.com:matrix.org> easy to freeze the pool

aka. tightly controlled in order to keep its peg to the USD

has there ever been a case of the pool freezing to prevent a XMR swap from happening?

<letscage.com:matrix.org> could blacklist the pool

then I guess I recommend BTC > some non-scamcoin > XMR

<letscage.com:matrix.org> there's some swaps doing BTC -> XMR vs

<ofrnxmr> BoBeR182: Btc > xmr

<ofrnxmr> Ltc > xmr

<ofrnxmr> Why would you need a coin in the middle

<torir:matrix.org> To hide the fact that you are buying XMR from the blockchain?

<elongated:matrix.org> @torir:matrix.org: There is no btc to xmr blockchain

<torir:matrix.org> Depends on how you buy the XMR.

BTC > LTC > ETH > BTC > ZCASH > DOGE > SCAM > XMR is the only way

<elongated:matrix.org> @torir:matrix.org: Once you are in xmr, it doesn’t matter

<torir:matrix.org> It depends on your threat model. But if your threat model is, "the EU just banned privacy coins and I need to buy XMR anyway", it would be really bad if the government could follow the coins to an exchange and try to compel the exchange to say what its customers bought.

<torir:matrix.org> I mean, let me rephrase that.

<torir:matrix.org> If a government bans XMR but evidence exists on the blockchain linking your purchase of Bitcoin to some swap service or exchange where you bought Monero, and the government finds that out, they are going to restrict you from buying Bitcoin at the very least, if they don't try to jail you.

<torir:matrix.org> .... thinking about it though, most swap services you'll be fine. You can't usually tell on the blockchain what coin was purchased.

<torir:matrix.org> It's only a threat if the government can compel the swap service to share information on its customer's trades.

You should always bounce to a phone wallet or two

CASH > EXCHANGE BTC > PHONE BTC > DESKTOP BTC > SWAP XMR > PHONE XMR > DESKTOP XMR > Actual private transactions start here

BoBeR182 don't forget to bounce it through a custodied wallet because companies can are better at you than your own pricacy or something

that's what the exchange is for

Actually nah it should be

there is some aspect to leaving coins on an exchange as a "way" to mix

since your actual coins might end up in the cold storage

so internet tracing by private companies gets stopped

but governments can request via courts

it's a trade off

DESKTOP XMR > Gift Cards > Italian Restraunt front > Gold > Palladium > ZCASH > US Govt Bonds > Euros > Swiss Franks > XMR wallet running on Xbox one processor > (Private transactions start here)

<elongated:matrix.org> If you are in EU, you have bigger problems than XMR > <@torir:matrix.org> It depends on your threat model. But if your threat model is, "the EU just banned privacy coins and I need to buy XMR anyway", it would be really bad if the government could follow the coins to an exchange and try to compel the exchange to say what its customers bought.

What's the EU gonna do ban PGP :3

Counterargument:

-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEaMjqEhYJKwYBBAHaRw8BAQdAedN9ICCf1NKSrAZJ/V5dDvY9auI90VB8kz57

W7deAea0JENvbG9uaXpvcjQ4IDxjb2xvbjQ4QHByb3Rvbm1haWwuY29tPoiWBBMW

CgA+FiEEFsdDchfYKpnWVnb64/ebAIP6dH0FAmjI6hICGwMFCQWjmoAFCwkIBwIG

FQoJCAsCBBYCAwECHgECF4AACgkQ4/ebAIP6dH2UHgEAuN7Ljda17uwoadfhpAox

NP89Q48nVXFx+O6cPgXHjH4A/i6m7zLt4jXkUJrWX+94zccnyR2sQ9GvvDocgam0

E50IuDgEaMjqEhIKKwYBBAGXVQEFAQEHQPFsXHaeb7T0yBk1FLPtSuMf+Tq1n9VS

MMPHpIeoUx4GAwEIB4h+BBgWCgAmFiEEFsdDchfYKpnWVnb64/ebAIP6dH0FAmjI

6hICGwwFCQWjmoAACgkQ4/ebAIP6dH1QwQD/ffaZcSOWh/iUjcyZkKmI6gmUkWjk

iQp0S4zNFIB0Ma0BAInwQxVAJ+QbZs6SCUKufuuOKiwluP0Ik8nNbQsj8LUG

=wnrf

-----END PGP PUBLIC KEY BLOCK-----