Received-SPF: pass (sog-mx-1.v43.ch3.sourceforge.com: domain of gmail.com
	designates 209.85.160.44 as permitted sender)
	client-ip=209.85.160.44; envelope-from=fahree@gmail.com;
	helo=mail-pb0-f44.google.com; 
MIME-Version: 1.0
In-Reply-To: <201308211200.50200.luke@dashjr.org>
References: <CAN7nBXdW3H3fWHji0Hcem-eFnAxBYzmtrLBkYekVM=9DZBJVVw@mail.gmail.com>
	<201308211200.50200.luke@dashjr.org>
From: =?ISO-8859-1?Q?Far=E9?= <fahree@gmail.com>
Date: Wed, 21 Aug 2013 11:10:55 -0400
Message-ID: <CAN7nBXcah3ffygZ=AKZmFadk6_RGQk1pVoYgN2M1Gmr5FUFUaw@mail.gmail.com>
To: Luke-Jr <luke@dashjr.org>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Cc: bitcoin-development@lists.sourceforge.net
Subject: Re: [Bitcoin-development] Making bitcoin traceability harder
Precedence: list

Dear Luke,

thanks for your prompt response.

On Wed, Aug 21, 2013 at 8:00 AM, Luke-Jr <luke@dashjr.org> wrote:
> Let me start out by noting that there are plenty of good ideas which coul=
d be
> implemented, but haven't been yet, and might take a long time to get to. =
There
> are only a couple handfuls of Bitcoin developers, and even fewer of us wh=
o are
> able to work full-time on Bitcoin development. Perhaps surprisingly, even=
 this
> often isn't the bottleneck to new functionality: we have a terrible short=
age
> of testers, needed to make sure improvements don't break things in subtle
> ways. So, while your ideas are appreciated, please keep in mind that it m=
ay
> take time to add them, and you can help Bitcoin development much more by
> aiding in testing currently-written-but-untested features.
>
That's a useful reminder.

> With regard to your points made specifically, please note that addresses =
are
> intended to be single-use only. Thus, the "recurrent user of address A/B"=
 are
> not using Bitcoin correctly already, which is why they are so easy to tra=
ce.
> As far as keeping change amounts as powers of two, while I would personal=
ly
> love to find a justification for power-of-two amounts, I don't see how th=
is
> would help privacy. I think it would actually hurt privacy, as change wou=
ld
> now be clearly identifiable. Furthermore, it would necessarily have to th=
row
> away excess as a transaction fee - some users would be very upset with th=
is.
>
Even when you don't reuse your address, by considering the amounts in
a transaction, it is often easy to identify what is the main amount
and what is the residual. e.g. "oh, he spent $1.99 worth of bitcoin
out of his big bitcoin address, so the $1.99 is being paid, and the
rest is still the same person", and so trace identities. By using
power-of-two buckets (based on the binary expansion of the amount), it
becomes harder to do amount analysis. Sometimes, buckets are joined or
split, but that still doesn't help much identify how several buckets
combine into one transaction. As for transaction fees =E2=80=94 indeed, the=
y
should probably be paid in separate small-bucket transactions. I don't
see any particular difficulty about it.

> As you suggest, it is of course already best practice for merchants (and
> individuals!) to use a unique payment address for every transaction. Gavi=
n's
> payment protocol work has been making some great progress toward improvin=
g
> usability for this. There is also a general consensus that Bitcoin-Qt's
> "Receive coins" tab could be significantly improved to discourage address
> reuse further. I don't believe it has been discussed to have merchants us=
e
> multiple addresses/coins for a single payment; that might be worth some
> further discussion here as a privacy extension, but I don't think many wo=
uld
> consider it an urgent issue (it may help, but probably not enough to make=
 it
> worthwhile).
>
There is nothing urgent indeed. Nevertheless, I fear that the current
usage pattern is too easily traceable, and that tweaks such as the one
I'm proposing could make amount-based tracing much harder.

Thanks for your hard work!

=E2=80=94=E2=99=AF=C6=92 =E2=80=A2 Fran=C3=A7ois-Ren=C3=A9 =C3=90VB Rideau =
=E2=80=A2Reflection&Cybernethics=E2=80=A2 http://fare.tunes.org
He wa'n't no common dog, he wa'n't no mongrel; he was a composite.
A composite dog is a dog that is made up of all the valuable qualities
that's in the dog breed =E2=80=94 kind of a syndicate; and a mongrel is mad=
e up
of all riffraff that's left over.  =E2=80=94 Mark Twain