<tuw:matrix.org> posted this on reddit/r/monero the other day and it was deleted by a moderator within 5 minutes

<tuw:matrix.org> monero.forum/thread/save-xmr-wagyu-buy-cex-sell-dex

<tuw:matrix.org> X seems the most active

<dopper01:matrix.org> Hi, I'm a cybersecurity student working on an OPSEC assignment about setting up an anonymous crypto wallet. I am first trying to figure out in what way I could best prepare my device to stay anonymous. Would you guys use an OS like Tails for e.g. + Tor + free vpn + on a public network? Or is even this not truly anonymous? Of c [... too long, see mrelay.p2pool.observer/e/1aGnyvIKTm0taWZ4 ]

<assholeorangecat:matrix.org> @dopper01:matrix.org: You mean a monero wallet or a different crypto wallet? Using a vpn with tor is not officially recommended and I would not recommend it either unless it's your own VPN you trust. If your only goal is to have an anonymous monero wallet you can do so without tor or vpn it will still be anonymous but in s [... too long, see mrelay.p2pool.observer/e/iv64y_IKWmhfT2tG ]

<assholeorangecat:matrix.org> Oh and yes tails with encrypted persistant storage + monero is a simple and easy setup that works.

<dopper01:matrix.org> Thanks! So to fully anonymously make and use a Monero wallet it looks like: Tails + Tor + Monero wallet? Couldn't a government for e.g. (in theory) still track down the location of where I am at, because there are also Tor nodes owned by the U.S. government right? and they are constantly trying to trace people back through the network?

<dopper01:matrix.org> And do you think Monero is the best wallet for pure anonimity?

<ofrnxmr:xmr.mx> monero is a blockchain, or a coin, not a wallet ❤️

<ofrnxmr:xmr.mx> There are various wallets which can hold monero (getmonero.org/downloads), and each have their own level of privacy/anonymity built in

<ofrnxmr:xmr.mx> Some only use tor (anonero), some have tor built in (but optional, stack wallet, cake wallet, feather wallet), some allow using tor or i2p (monfluo, cake wallet, feather, monero cli, monero gui), etc

<dopper01:matrix.org> @ofrnxmr:xmr.mx: Sorry yeah my fault :), but do you think there are other alternatives for Menore that provide more anonimity (for transactions) or is Monero basically top of the line?

<ofrnxmr:xmr.mx> You mean , other blockchains?

<dopper01:matrix.org> yup

<dopper01:matrix.org> thank you for the insights btw?

<dopper01:matrix.org> !*

<iamnew117:matrix.org> there are many privacy focused coins like Zcash , DASH etc > <@dopper01:matrix.org> And do you think Monero is the best wallet for pure anonimity?

<iamnew117:matrix.org> but i think Monero tops all

<iamnew117:matrix.org> i meant to reply to this msg my bad > <@dopper01:matrix.org> Sorry yeah my fault :), but do you think there are other alternatives for Menore that provide more anonimity (for transactions) or is Monero basically top of the line?

<ofrnxmr:xmr.mx> Lets use 2 examples: zano and zcash.

<ofrnxmr:xmr.mx> zano: does not support subaddresses and the nodes do not support proxying / tor by default. This leads to trivial correlation between using the same wallet with various services

<ofrnxmr:xmr.mx> zcash: a bitcoin fork, most wallets use (afaik) a small selection of electrum servers, which trivially can monitor the balances of your T addresses and correlate your Z transactions to the same user

<ofrnxmr:xmr.mx> Dash is also some of the weakest privacy in the space. Essentially a low/near zero volume mixer when you opt in

<ofrnxmr:xmr.mx> Litecoin mweb is better than dash

<assholeorangecat:matrix.org> > <@dopper01:matrix.org> Thanks! So to fully anonymously make and use a Monero wallet it looks like: Tails + Tor + Monero wallet? Couldn't a government for e.g. (in theory) still track down the location of where I am at, because there are also Tor nodes owned by the U.S. government right? and they are constantly trying to trace people back through the network?

<assholeorangecat:matrix.org> I think even if you by chance connect to tor over 3 government spy nodes what do they get except that you are connecting to a monero node. From your perspective as a cyber security student you can still look into stuff like packet size analysis/timing etc that they can do then but even then monero itself is still private. If y [... too long, see mrelay.p2pool.observer/e/rrX-y_IKNk9KLW9P ]

<ofrnxmr:xmr.mx> @assholeorangecat:matrix.org: If you're using an onion, they dont know what you connected to

<assholeorangecat:matrix.org> @ofrnxmr:xmr.mx: Yes if you are connecting to the node via tor they can't get your ip so it's not that big of a deal to use "hostile" monero nodes. I was assuming a full compromisse tor of all 3 tor nodes ^

<ofrnxmr:xmr.mx> @assholeorangecat:matrix.org: Its still a big deal to use hostile monero nodes. You can lose $

<ofrnxmr:xmr.mx> Maybe you meant hostile tor nodes?

<dopper01:matrix.org> @assholeorangecat:matrix.org: the only thing in that case is that i would worry about them being able to track me somehow

<assholeorangecat:matrix.org> @ofrnxmr:xmr.mx: I'm not aware that a hostile node can take your monero in any way.

<ofrnxmr:xmr.mx> brb

<ofrnxmr:xmr.mx> monero-project/monero #8134

<ofrnxmr:xmr.mx> > with a 3.93xmr transaction fee

<lactunatic:matrix.org> Hi, if run an onion node on whonix, do I have to enable the ban list too?

<ofrnxmr:xmr.mx> > 3.93 xmr transaction fee for .34 transaction seems way to high and hopefully this is something that does not happen ever to anyone else.. it was 800 dollars approximately transaction fee for a 70 dollar transaction..

<ofrnxmr:xmr.mx> monero.observer/pacificnwvet-pays-3.93-xmr-fee-0.34-xmr-transaction

<ofrnxmr:xmr.mx> @lactunatic:matrix.org: Its a good idea, yea

<lactunatic:matrix.org> @ofrnxmr:xmr.mx: I mean I only see clearnet IP adresses there. Do I not stay in the onion network, if I use a onion node? Or do I understand sonething wrong?

<dopper01:matrix.org> Of those wallets you mentioned, which would you actually recommend for someone prioritizing anonymity on Tails? Feather seems popular, but of course popularity doesn't mean its always the best

<assholeorangecat:matrix.org> official gui and cli always worked for me

anyone has a list of so called "trusted nodes" ?

last entry is ~1yr old

would be cool to have an updates list, thx

<dopper01:matrix.org> And when running Tails specifically, which wallet would you recommend Feather, official GUI, or CLI? And does it even matter for anonymity which one I pick?

<ofrnxmr:xmr.mx> btcdwed: That list is up to date

<ofrnxmr:xmr.mx> @dopper01:matrix.org: feather

<assholeorangecat:matrix.org> @dopper01:matrix.org: unless any of them are compromissed I don't think there is any difference for anonymity maybe make sure whatever you choose supports tor

<ofrnxmr:xmr.mx> Or cli

<ofrnxmr:xmr.mx> @lactunatic:matrix.org: Yeah, wrong. Monero node requires connections to clearnet ip addresses

<dopper01:matrix.org> Any specifc reasons for feather or CLI over official GUI?

<ofrnxmr:xmr.mx> Gui is more geared to desktop users

<ofrnxmr:xmr.mx> feather and cli are lightweight

<assholeorangecat:matrix.org> if you like cli use cli if you like official gui use it and if you prefer feather gui use that personally have never used feather so idk what is the difference

<dopper01:matrix.org> ahh ok so more just personal preference

<dopper01:matrix.org> I love cli ahaha

<dopper01:matrix.org> So cli it is

<dopper01:matrix.org> So now once i have the wallet setup, what is the best way to actually get XMR into it without KYC? Are p2p exchanges like Haveno still the best way, or are they also not fully anonymous anymore?

<assholeorangecat:matrix.org> if you already have other cryptos you can use those on an exchange you like once you are in monero you are anonymous anything before expect to be tracked

<dopper01:matrix.org> i have bought crypto on regular exchanges with KYC's, but to my understanding, exchanging Monero there loses me anonimity?

<assholeorangecat:matrix.org> @dopper01:matrix.org: if you for example buy xmr on that exchange and then send it to your own wallet once you are in you have your privacy. But let's say you keep it on the exchange and use the exchange to send some XMR to a "criminal" and that criminal gets caught and they get acces to his wallet then they could prove you sent him that monero.

ofrnxmr:xmr.mx thx!

<dopper01:matrix.org> @assholeorangecat:matrix.org: and so basically there is no way to be able for anyone to track that i once bought the monero on the exchange (where i did the kyc)?

<assholeorangecat:matrix.org> The exchange know you bought monero but once you have it in your own wallet you are good

Wallets don't hold monero, they hold keys to the blockchain where all coins reside

*your keys

<assholeorangecat:matrix.org> and if you and your associates encrypt your storage with a strong password they can raid and seize whatever they want as long as you got a backup of your seed encrypted in a 3rd location it's all good

true

thats the way!

:P

<dopper01:matrix.org> sounds good! thanks!

<dopper01:matrix.org> one more question, but this might be a dumb one because of my lack of knowledge. what if for eg the government would gain access to my exchange account, wouldnt they be able to track down to which wallet the monero was sent to so they can connect my identity to the (previously) anonymous wallet?

<assholeorangecat:matrix.org> @dopper01:matrix.org: unless the get the view key or the seed phrase of you monero wallet there is no way to link it to your identity that's why you need encryption with a strong password and not leave your pc on unattended

<kiersten5821:matrix.org> @dopper01:matrix.org: they can track it depending on who you send the money to because of the 16 member ring sigs

<kiersten5821:matrix.org> there should be a lot of articles about this called "eae" or "eabe" attack

<kiersten5821:matrix.org> if "anon00123" pays me 3x and i check the members of the sigs and in all 3 payments there are outputs withdrawn from kraken by john kyc then i know you are john kyc

<kiersten5821:matrix.org> because for that to occur by chance the probability is almost 0

<ofrnxmr:xmr.mx> Worse: if you combine the out0uts in a single tx

<ofrnxmr:xmr.mx> Outputs

<pyratevevo:matrix.org> > <@assholeorangecat:matrix.org> if you for example buy xmr on that exchange and then send it to your own wallet once you are in you have your privacy. But let's say you keep it on the exchange and use the exchange to send some XMR to a "criminal" and that criminal gets caught and they get acces to his wallet then they could prove you sent him that monero.

<pyratevevo:matrix.org> This scenario is only if you use a fed wallet like a wallet from a CEX, right ?

<assholeorangecat:matrix.org> @pyratevevo:matrix.org: yes only if you use the wallet the exchnage is managing for you that's why once you have it in your own wallet there is really nothing to worry about

<plowsof:matrix.org> " I'm a cybersecurity student working on an OPSEC assignment about setting up an anonymous crypto wallet." really?

<pyratevevo:matrix.org> @plowsof:matrix.org: It's like asking about torrenting to seed Linux ISOs.

<dopper01:matrix.org> 🤣🤣🤣

<dopper01:matrix.org> its true tho

<dopper01:matrix.org> mrelay.p2pool.observer/m/matrix.org/tuZuADmrsjcvjUCBmbEbSTbr.png (image.png)

<dopper01:matrix.org> Also one more question hahaha: Are there any non KYC ways to get XMR directly? Like Haveno, mining? Or will I still have to have some kind of identification for it? If not, does anyone have experience with non KYC exchanges for Monero?

<plowsof:matrix.org> 🥱

br-m  volume are we looking at? for the nonkyc Monero?

<iamnew117:matrix.org> @dopper01:matrix.org: kycnot.me

<dopper01:matrix.org> Thanks!

<ofrnxmr:xmr.mx> @plowsof:matrix.org: I tend to skip the "about me" section when ppl send messages

good advice lol

:D

how do i connect to a remote onion node on monero wallet cli? I tried with `torify ./monero-wallet-cli --daemon-address`, is it correct?

it's synching but it's extremely slow, way slower than on feather wallet

feather wallet has an option to sync over clearnet to speed it up

docs.getmonero.org/running-node/monerod-tori2p/#__tabbed_4_2 alem "--proxy"

@plowsof is there any way to do the same via cli?

nvm

i dont know if 'using the cli without tor while the wallet syncs' then restarting with --proxy is the same effect

yeah, i noticed that the sync is independent of the cli session, how does this work? Why is my "height" not resetting when i close the cli/change node?

<pyratevevo:matrix.org> Protip for cybersecurity students: you can use anonymous messaging services like the Monero SimpleX group or image boards if those have a Monero space to ask your questions. Nobody in the community cares about one's credentials. > <@dopper01:matrix.org> its true tho

<hypermind:matrix.org> @pyratevevo:matrix.org: Thank you for the pro tip

<kiersten5821:matrix.org> @dopper01:matrix.org: dude it just says make a wallet not put any funds in it lmfao

<kiersten5821:matrix.org> 😂

Someone who isnt me (SWIM) is a cybersecurity student (IACS) and said thanks for the tip pyratevevo

WARNING: Don't run Python PIP LLM AI Slop "LiteLLM". The latest versions contain malware introduced via supply-chain attack which will drain your wallets

Comments from ai agents getting thumbed down?

GitHub issue thread likely getting spammed by compromised accounts controlled by the threat actor in order to slow down those trying to coordinate to shutdown the exploit