Before making stupid comments like this, do you understand anything about multisig and why it is used? You don't seem to understand anything there. Did you read at all the whitepapers??

I really feel sad that there are people so stupid like this, yet pretending to be an expert and comment on code. Man, go home and learn, before making these comments. Ignorant is fearless - how correct the old Chinese proverb is!

Let me briefly give every people a summary why supercoin use multisig and what is the purpose of those transactions in the "ghost" wallet or multisig wallet. It is difficult to learn these, just go over the whitepaper, supercoindev did a great job to write these in a very clear and concise way.

First you have 4 parties:
- sender
- mixer
- guarantor
- receiver

these are 4 different nodes in the network, where mixer/guarantor are randomly selected from all the nodes satisfying minimum requirements. The problem is that if sender sends to mixer, and then mixer send to receiver with different address, the anon seems satisfied, but the sender and mixer can cheat, especially when mixer can receive the coins first then don't send to receiver, or mixer send to receiver first then sender refuses to send to mixer. To solve this problem, multisig tech is used.

Multisig allows user to create a wallet based on any number of keys, and specify the "unlock" conditions. In supercoin's case, a 2-of-3 multisig wallet is used, meaning that the wallet is created with 3 public keys from 3 different addresses, and it requires 2 signatures with corresponding private keys to unlock the wallet (that is to send out the coins). So with this, no one can cheat as otherwise the cheater could lose more coins.

Now this is the process implemented by the supercoin:
Sender finds randomly 2 nodes, acting as mixer and guarantor. When all parties agree to do the transaction (mixer/guarantor will get commissions), each send their address public key to other parties (they keep their own private key of course). A 2-of-3 multisig wallet address is created. Then sender deposits 2x amount to be sent to the wallet, and mixer/guarantor each deposit amount of send to the wallet. Why they do this? this is the guarantee coins, so no party will cheat. Now once all deposited and verified, mixer will send to receiver the amount needed, he will post the transaction so the 2 other parties can verify. At the same time, he will create the tx for returning all coins and send the amount to his address, and he will sign the tx with his private key. Sender will verify the tx to receiver, once verified, he then sign the tx mixer sent, and all money returned and mixer receives his sent amount + commision. Other 2 gets warantee money back. Transaction completed.

If anyone tries to cheat, the false transaction will not be verified by the other two parties, and because of 2-of-3, they can take the guarantee money from the cheater, and return their own money.

This is a well thought and clever designed scheme. It is not for silly people like the pretended experts here. It is for real expert and competent dev. I can understand why supercoindev had problem finding competent devs to take over. The altcoin space has so many fake experts and they are so stupid.

Learn and not pretend!

yes im fully aware that it is MIXING. my point is it inst doing anon. all of the addresses INCLUDING the original sender are shown in the transaction and can be identified with the method i stated. i didnt say it wasnt mixing,. in fact you repeated in more words what i was explaining was happening yet forgot to mention the part that by looking at the blocks you can tell who sent what to the mixer and where the mixer sent it. completely destroying the "anon". it isnt anon if i can see who sent it to the mixer and where the mixer sent it all in the same block.

 to find the source of the original super send, all i have to do is see which address in the block the mixer sends coins to and then check thier wallet to see if it is a refund = 1/2 of the transaction directly before it

you literally said nothing in your post. i wasnt saying it wasnt mixing. it IS mixing, thats my whole point. but it is mixing in a way where it is easy to see where everything came from.


the fact that the address started with a C was an example because in my example it did start with a C and i was trying to point out which address i was refering to. if i said mixer address and didnt point out which address it was people would have had a harder time following what i was saying. it doesnt matter what the mixer address is, the only point was to see how much the transaction was for. the address itself is not important. i fully understand what it is doing and i explained, if you actually read the post, how to find the full superSend transaction sender and revciever in the same block.

And remember that this is a p2p transaction, thus the need for cheat-prevention. If you use a centralized trust system, then you don't have to secure any of these, and this is why most other coins claimed to be anon are centralized mixing systems, which are a lot easier to be implemented. Actually Supercoin phase 1 implemented this system too.

You are completely wrong. This is what happened: S->MS->M1, M2->R, where S=sender address, MS=Multisig address, M1, M2 are two addresses from Mixer. You have no way to relate M1 and M2, because these are two independent addresses. So from R or S, how to do trace the tx??

The ignorant is fearless: how true it is! I won't waste more time replying your posts.

?? You are in a dream? I did this many time. From M2->R where is the info of sender;'s address?? again go and read the post #2, there is a detailed example with all the data. I tested it a couple of times, see the similar thing.

OK, with your example, this is what I get:

M1:
SUJYKR95xYk6dCA8daZVzRSNvnBPbxViCk

M2:
SUwEUFuNiJHcof9Dhk8NvE4ZDQXqwAAi76

R:
Sh6BvAWyrMfL8W6wNZG3qx9pfZ8KRwnmpc

S:
SPrq8J6vRpy5QZz3AE1TxUiYvfeto3AhqY

G:
SYL272errqj7Laim4uVy4jZAf6mjJ2z78g

I see M1<->MS, S<->MS, G<->MS, and M2->R
tell me, where M2 and S or M1 and R are related? because they are in the same block in the chain? Don't make me laugh again

Use tx amount to link the transactions?? This only shows you have no knowledge in the anon tx at all. Strasboug described this and an easy way to fix yesterday, you don't read anything else in this thread?? Please read it again.

https://bt.irlbtc.com/view/736705.msg9608926#msg9608926

Once you have canonical forms, then good luck to match these, especially with a relative big network. BTW, all anon coins (whether centralized or p2p) have the same thing. But this is easily fixable (many proposed ways) and it is not at all an argument that it is not anon (same stupid argument is that look in the same block to relate the unrelated transactions).

Oh well... clearly I am not here to discuss with an expert, but more doing teaching. Forget it. I won't waste my time.

Yes fastrabbit, I am glad at least some people really understand the concepts. Too many fake experts in this domain.

Clearly this guy does not understand multisig tx and its purpose...

I've been a supporter for supercoin all the time, and still hold some coins. It's sad to see the competent dev left. Whether we find a good dev or not, I hope those who understand the concepts and codes can continue improving on it, as I believe this tech first implemented by supercoindev will be the future of the altcoins.

You don't always find the links, I can create many addresses in my wallet and provision them from an exchange, as long as I don't transfer among them (even I do, you have no idea whether they are mine or not), you can't relate them at all.

BTW, relying on some people carelessness to use one address to provision all his other address or send coins to some places combining the coins from different addresses, is both stupid and unrealistic. This is like saying that encryption is bad because someone write the key and post on his office wall, so his encrypted data was stolen, now you tell me to look at all the walls to find the encryption key and steal others encrypted data... stupid