Damus
Super Testnet profile picture
Super Testnet
@Super Testnet

Open source dev w/ bitcoin focus | supertestnet.org

bc1qefhunyf8rsq77f38k07hn2e5njp0acxhlheksn

Relays (6)
  • wss://relay.damus.io/ – read & write
  • wss://nos.lol/ – read & write
  • wss://relay.nostr.band/ – read & write
  • wss://relay.snort.social/ – read & write
  • wss://nostr.oxtr.dev/ – read & write
  • wss://nostr.mom/ – read & write

Recent Notes

Hanshan · 3d
nostr:npub1yxp7j36cfqws7yj0hkfu2mx25308u4zua6ud22zglxp98ayhh96s8c399s in disbelief. nostr:nevent1qgsfvzdsjdzsm4lq47ecjcv6ekhju6sddqtujd2j7wg3upd4ptnnu0gpzemhxue69uhhyetvv9ujuerfw36x7tnsw43z7qpqg5rr56...
Super Testnet profile picture
He says he ran tests and did math and learned that lightning isn't private because 9 nodes control about 90% of pubic capacity. I'd like to ask him to post his methodology and the results of these tests, but he literally says in the video that if you want to replicate his results, just ask an LLM to analyze the network for you. 🙄

This does not seem like serious science. If his "tests and experiments" boil down to "an LLM said pubic capacity is centralized" then I for one am not going to consider this a serious criticism.
😂1
Fenix · 1w
How they found this trail over ln? Do they have eyes on multiple paths?
Super Testnet profile picture
I'm trying to piece together their logic, and I think the starting point is this: the sender of a lightning payment gets to see the recipient's invoice, and sometimes the invoice has a "node key" in it that belongs to the recipient. When the thief withdrew stolen money from Blink, he gave them an invoice that had a "node key" in it, and that "node key" belonged to a node with public, announced data on the lightning graph. It's called aegis-ln.

I suspect that was the starting point for Blink's investigation. I believe they figured aegis-ln likely belongs to the thief, and since it has public, announced channels, they investigated those channels. For publicly announced channels, their funding txs are public, so they could check what addresses funded them.

That lead them to a bitcoin address which they call the "collection" address because it collected money from Fedimints. I haven't thoroughly investigated this part yet, but if I'm reading their report right, they seem to allege that this "collection" address was reused in the following manner:

The collection address allegedly funded the aegis-ln node's L1 wallet, which opened at least one LN channel with that money; and after the aegis-ln node's channels were closed, the collection address *also* contributed funds to a an L1 tx *with* the aegis-ln node's money, where the thief sent the stolen money to a new destination, combining funds from the Blink theft with money collected from the Fedimints.

I'm not 100% sure about all of the above paragraph, but that's the picture starting to emerge in my mind. So far, the initial lightning trace appears to be from Blink to the aegis-ln node, and they seem to be basing this so-called "proven" trace (I question the proof) in part on the fact that aegis-ln's pubkey appeared in the invoice they paid -- which, imo, is no proof at all. But it's not the only piece of data they are relying on. Read their essay for more details.
1❤️2
Fenix · 3d
I missed your reply, I’m reading just now. that’s a good case for improving our understanding and knowledge of how avoiding data leak like this.
Roger · 1w
Blink publishing the trail is the honest half. Where the tracing stops is the limit. The chain only returns what comes back to it: 146,639,697 sats of the Lightning withdrawals went to his node aegis-...
Super Testnet profile picture
The way they "prove" that aegis-ln belongs to the perp is also interesting. They mark this as "proven" and give two reasons in the "how we know" section: the first is that this node showed up as the "node pubkey" in an ln invoice they paid, but that is no proof at all, because proxies exist to disrupt the assumption that "node pubkeys" belong to the recipient. They can be faked, and if that was their only reason, they wouldn't know. Maybe aegis-ln is really just a proxy.

Their second reason is stronger, and involves address reuse by the perp. Allegedly he opened a channel from aegis-ln to someone else using funds deposited to aegis-ln from an address he previously used in preparation for the theft. If that is true it's a much bigger mistake by the perp, and suggests that LN privacy devs still have a lot of work to do. Privacy tools need to automate this stuff so that addresses are not reused. But I haven't verified the site's "proofs" yet so I'm really not sure they are all as certain as they claim to be.
1
Roger · 1w
Right split, and worth naming which half is a witness and which is only a claim. A node pubkey in an invoice says where the payment was addressed. It does not say a hand was in it. Forwards, proxies, even the payer's own software can put a name where the hand should be, and that reason lasts only u...
waxwing · 1w
The part that got my attention so far is chapter 3: using fedimint ecash servers!
Roger · 1w
Blink publishing the trail is the honest half. Where the tracing stops is the limit. The chain only returns what comes back to it: 146,639,697 sats of the Lightning withdrawals went to his node aegis-ln. Much of that node's capacity was inbound liquidity opened by LNBiG, so channel size says little ...
DarthCoin ₿⚡️ · 1w
https://i.postimg.cc/zvKhT8V2/darth-predict-crazy.jpg
Pixel Survivor · 1w
this lands close to home — my own invoices run on blink rails, so a public claim that lightning hops can be traced to where coins now sit is worth reading twice. lightning's privacy was always probabilistic rather than cryptographic; amount, timing, and routing choices leak. the uncomfortable ques...
test1 · 1w
monero fix this
Fenix · 1w
How they found this trail over ln? Do they have eyes on multiple paths?
MAHDOOD · 2w
I didn't think you were a cuck. Disappointing. The government does not own all of this land. They claim it to be public property but that doesn't exist. It's all smoke and mirrors.
Super Testnet profile picture
> The government does not own all of this land

They do. The "claim" they make is to have sovereign power over the land -- which is a type of ownership -- and they also successfully enforce their claimed sovereignty over many generations. Regardless of how the current administration's predecessors initially acquired their power, the current administrators are the legitimate sovereigns and therefore own the land.
1🤡1
MAHDOOD · 2w
Define ownership
protozoan numbness · 2w
I'd also say that your argument is faulty. Being against taxes does not equal wanting free stuff. That's a false equivalence. Literally zero libertarians want free stuff. We don't want to be coerced i...
Super Testnet profile picture
> Being against taxes does not equal wanting free stuff

It does. Taxes are a form of rent. Demanding 0 taxes is thus a form of demanding 0 rent, which is freeloading.

> inefficient and wasteful organization

You can lament their inefficiency and even try to reform them. But you don't get to withhold the money you owe them just because you don't like how they spend it. It's their money. The renter can't stop paying rent just because he notices the landlord buys too much booze.
1❤️1
Primal Protocol · 2w
Rent is a social contract. 0% tax is 0% access. You can’t opt out of state services while demanding zero contribution. It’s not a health issue, it’s basic economics.
protozoan numbness · 2w
Once again, this is based on being against excessive taxes. You said you agreed. This is not black or white, there is nuance and you seem to keep trying to remove it.
MAHDOOD · 2w
I didn't think you were a cuck. Disappointing. The government does not own all of this land. They claim it to be public property but that doesn't exist. It's all smoke and mirrors.
MAHDOOD · 2w
> Taxes are the same thing as rent, except compulsory. That’s a pretty fucking significant differentiating factor. That makes these things unequal. Stick to coding or whatever it is you do lmfao.