Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Public IP addresses? #210

Closed
dragGH102 opened this issue Jan 1, 2018 · 20 comments
Closed

Public IP addresses? #210

dragGH102 opened this issue Jan 1, 2018 · 20 comments

Comments

@dragGH102
Copy link

I think Verge is a great project.
However, when I found this, I got quite astonished...: http://xvg.keff.org/

Is this source reliable? i.e. does Verge blockchain keep IP addresses linked to transactions?
Because if so, I see no privacy here

Thanks for clarifying

@wertzuiop123
Copy link

dont post fud trash here...
You do realize there is an option for the transaction to be public OR private right? Or do you even read? That means, if chosen public...the IP address WOULD be visible

1 similar comment
@wertzuiop123
Copy link

dont post fud trash here...
You do realize there is an option for the transaction to be public OR private right? Or do you even read? That means, if chosen public...the IP address WOULD be visible

@dragGH102
Copy link
Author

@wertzuiop123 I do have some XVG, I have NO interest in spreading FUD. This is Github. Issues are meant to highlight issues.
If you provide a clear explanation (instead of just "can choose") I'll be happy to amend my comment.
Also reading of people being banned from Discord and everything, that's not nice

@dragGH102
Copy link
Author

btw, @wertzuiop123 I see you joined Github TODAY. I believe accountability matters when making statements :) Please clarify and I'll be glad not just to amend my post but also write a post IN FAVOR or Verge

@scottAnselmo
Copy link

scottAnselmo commented Jan 1, 2018

@dragGH102 Yes, reliable source. Core wallet prior to the 4.0 release didn't have integrated Tor and leaked IP. New wallet (4. 0) despite containing Tor code doesn't actually obfuscate IPs which means it isn't private even according to Justin's (dev) definition. Connections to Last.fm and cryptoradio are also sent over HTTP instead of HTTPS.

https://twitter.com/Fuzzbawls/status/947807266111045632

@Fr4g3roO
Copy link

Fr4g3roO commented Jan 1, 2018

@monceeef hey , can you post some images so the whole FUD can be stopped

@justinvforvendetta
Copy link
Member

radio is no longer connected. tor is integrated just needs to be put into the makefiles and the new update pushed

@Fr4g3roO
Copy link

Fr4g3roO commented Jan 1, 2018

@justinvforvendetta awesome work bruh, put it in twitter with images so the whole fuzz gets over xD

@sciack76
Copy link

sciack76 commented Jan 1, 2018

exactly there is no radio in verge qt 4.0... Tor wasn't enabled yet. Just relax and everything will be fine.

@dragGH102
Copy link
Author

Guys, chill. Verge is not just a money machine but technology. Discussions on potential issues are only healthy for the project in the mid/long-term.
Provide clear explanations and I'll write a post anti-FUD :D

@ghost
Copy link

ghost commented Jan 1, 2018

PLEASE learn the difference between private/public ledger addresses and IP obfuscation (hiding your network IP)...

Wraith is supposed to enable hiding of private wallet addresses/transactions...

IP obfuscation (hiding your network IP), on the other hand has been well established within verge for a very long time. Utilizing the TOR (onion router) and i2p networks, wraith was not about this.

@dragGH102
Copy link
Author

@anicca444 thanks for the explanation. I don't know Verge enough to confirm it's a good answer, but for now I consider it as such. Closing the issues and no FUD here ;)

@scottAnselmo
Copy link

Utilizing the TOR (onion router) and i2p networks, wraith was not about this.

@anicca444 It is according to Verge team. Multiple graphics from Verge team reference integrated Tor integration being a part of Wraith (although as noted above, all versions of Verge core wallet, Wraith or not leak your ResNet IP's which makes Verge not private according to Justin/dev's own definition):

For proof of Tor integration that is supposed to be a part of Wraith see this graphic from https://medium.com/verge-currency-xvg/the-core-wallet-3-0-is-live-52cc4b59c9bb

And this graphic from https://medium.com/verge-currency-xvg/meet-the-core-team-our-future-vision-and-an-important-announcement-3965730bd0b8

Or Justin's comment that Tor is integrated, but not released.

@justinvforvendetta
Copy link
Member

this is where tor is being integrated, and its very near completion:
https://github.com/vergecurrency/VERGE/tree/wraith-tor

@justinvforvendetta
Copy link
Member

and yes, our android app has been hiding users ip addresses via onion since it was released.

@bryanx86
Copy link

bryanx86 commented Jan 1, 2018

It hid my IP. I did not find it in a search of the leaked ip's.

@bryanx86
Copy link

bryanx86 commented Jan 1, 2018

I know fud when I read it. This is GitHub tho, not twitter. Lol. Keep up the great work. I love the UI on the Android app. Dark theme. @justinvforvendetta

@CryptoSyndrome
Copy link

CryptoSyndrome commented Jan 2, 2018

@dragGH102 hey drag, in general any reliable source will provide the steps of reproducing the steps which lead to his conclusion. I asked the owner of the tweet (which had that site as his " evidence " of the leaked IP) about the steps he made to collect the claimed leaked IPs. no answer until now.

@sanecito would you mind writing down the steps and the commands lines which led to exposing these IPs?

@justinvforvendetta
Copy link
Member

@CryptoSyndrome running netstat on the p2p port of a core wallet returns users and nodes that are connected to it. the verge electrum and android wallets do not do that, and we are making this core wallet retain user ip as well, but integration of tor, in the wraith-tor branch. it's near completion now.

@justinvforvendetta
Copy link
Member

as seen in this article: https://themerkle.com/moneros-ip-address-leak-isnt-an-exploit-and-doesnt-affect-anonymity/

some people think it isn't a huge flaw to expose ip, but here at verge, we take that seriously, and do think it is a huge problem, which is why we release tor and i2p wallets in android and electrum, and now, this one will be as well.

@vergecurrency vergecurrency locked and limited conversation to collaborators Jan 2, 2018
@vergecurrency vergecurrency deleted a comment from scottAnselmo Jan 2, 2018
@vergecurrency vergecurrency deleted a comment from scottAnselmo Jan 2, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

8 participants