Damus
L0la L33tz profile picture
L0la L33tz
@L0laL33tz
I wrote a very basic overview of watermarking, fingerprinting, timing analysis and supernodes for Bitcoin Magazine's last print issue, which is pretty much an unsolicited advertisement for why I think we need a second mempool (and also mixnets, but thats a longer story). Since no one cares about stuff like this on Twitter anyway, I'll explain here.

Bitcoin has a privacy issue on baselayer. I know this. You know this. Everybody knows this. The problem is that there's a lot of stuff we can't do to solve this issue without completely fucking up how Bitcoin works, like, say, anonymous amounts. But there is some stuff we *can* do to increase privacy on the Bitcoin baselayer. One of those things is incorporating a second mempool to integrate Dandelion++, the routing protocol used in Monero. Hear me out.

One of the ways blockchain surveillance firms identify who what transactions belong to on the Bitcoin blockchain is by operating so-called supernodes. A supernode sets up as many connections to other nodes as it can, and by doing so can establish where a transaction was first seen in the peer-to-peer network, ergo ascribe whom a transaction belongs to.

Here's where Dandelion++ comes in. Instead of propagating transactions to *all* connected peers, Dandelion++ propagates transactions like, well, a Dandelion.

In Dandelion++ propagation, Bitcoin nodes send transactions to *one* peer, instead of to all of them. This peer sends it to another peer, they send it to another peer, and so on and so forth. This is called the "stem phase".

When we've established enough plausible deniability, Dandelion++ reaches the "fluff phase". At this point, a node that did not *create* the transaction, but is simply relaying it, propagates it to all nodes in the network it is connected to, including supernodes, and the next node does the same, and so on and so forth – business as usual.

Incorporating Dandelion++ (or any other anonymizing propagation protocol, like Dandelion, Dandelion Lite, or Clover) would arguably seriously fuck up the blockchain surveillance stick as we are taking away the most obvious attack vector for blockchain surveillance firms. It's also not a trivial task, see ajtowns' overview of stempools (and no one wants to maintain another mempool on bitcoin, if we're honest). But it's a really interesting proposal to think about to increase privacy on Bitcoin that, yes, would be a lot of work to implement and maintain, but also does not get talked about enough imo for everyone yapping about Bitcoin baselayer privacy.

AJ Towns' Stempool overview: https://gist.github.com/ajtowns/f3a19c33b80750a47c5b83ecf6a09aaf

BM Article:
https://bitcoinmagazine.com/print/whistleblowing-in-the-surveillance-age


4220❤️34🤙15👀31✍️1❤️1
Juan 🍁 · 91w
I've never heard of this, thx for sharing
liminal 🦠 · 91w
I need to learn more but this is interesting
BE · 91w
Thanks for this good info. I’ll look up your article in Bitcoin Magazine also. I can’t do much to help directly bring this into implementation, but I can be one of many voices supporting and using it as it gets started. I expect the fight to preserve privacy against the authoritarian attacks by ...
Big Barry Bitcoin · 91w
I've heard about dandelion, not of the stempool stuff though. 🙏
ShiShi21m · 91w
So all the transactions coming from dandelion++ mempool flood original mempool & then selected by fees as usual? I assume you'd have to attach a second fee for the dandelion++ mempool to take your TX?
andrewtoth · 91w
This is a much simpler alternative that achieves the same thing, and has a PR ready to be merged today. IMO you should promote review of this to get merged asap instead of dandelion which has been around as an idea for a decade. https://github.com/bitcoin/bitcoin/pull/29415
vnprc · 91w
Doesn't erlay solve this problem by allowing a node to 'broadcast' transactions using reconciliation instead of flooding? https://github.com/bitcoin/bips/blob/master/bip-0330.mediawiki
Cody · 91w
Holy shit can't wait to read through this!
Chuck Langstrumpf · 91w
why not dump on wallstreet and convert btc to monero?
Alfred Hodler · 91w
Yesterday I published a lightweight tool that broadcasts transactions in a private manner through Tor. Seems much simpler than Dandelion. It can be integrated into wallets too. https://github.com/alfred-hodler/pushtx https://image.nostr.build/3a1acd8fd21b5e649b14e340f136c0dd5611a3bf1d23b3cd2201fbf6...
The real prophet Muhhammed who invented islam aka False Idol #1 · 91w
Has literally been in discussion since 2018 https://bitcoinops.org/en/topics/dandelion/
Skaag · 91w
This is absolutely inevitable by the way. I've been saying this for years. Bitcoin is software, and it will ultimately be forced to adopt the best innovations from other blockchains. The recent attacks on the Ethereum blockchain prove that Bitcoin's slow rate of progress may be a good thing in the l...