25
7
A Bitcoin Laundry or Mixing Service is a service that accepts BTC payments, and returns the same BTC amount, only from coins that are unassociated to the original BTC. It is a privacy service that works well if it has massive usage.
What are some good mixing services? Is there any data on how well they actually anonymize (e.g. what size are their "stashes" or user base (bigger stash = bigger anonymity)?
1
A large part of the confusion surrounding mixers is simply a mixture of poor grammar and terminology. As was shown to me in this question there is no distinct recognizable item corresponding to a "bitcoin" the way there is corresponding to, say, a dollar. It might be better to say that mixers disguise the transaction chain leading to your account by passing through one or more intermediaries. There is no such thing as a "dirty" coin, just data that can be tracked back to "dirty" sources
– David Perry – 2011-10-11T14:26:25.0131It doesn't disguise by adding layers like a Tor node does. Rather, you give it "dirty coins", it gives you "clean coins" - coins that someone else gave it, that have absolutely nothing to do with your coins (they might be accidentally dirty from some other source, but they are not dirty from anything you did with them). – ripper234 – 2011-10-11T14:42:50.837
Again, it doesn't "give you" coins because coins don't exist. You give it a transaction history that leads back to source A and it gives you back the same balance but with a transaction history leading back to point N. Unfortunately once the history with source A is associated with you in any identifiable way it is indelibly associated with you forever. This is an important distinction that anyone looking to protect their privacy needs to make. Such washers can only hide the fact that the controller of address A also owns address B. – David Perry – 2011-10-11T14:51:22.963
The main thrust of my point being that people imagine "coins" as distinct objects which are transient. They imagine that "as long as I'm not holding the 'dirty' coins I'm ok" when they're not. There are no coins, only transaction histories which determine balances, and transaction histories are forever. If you take payments for something illegal or embarrassing on address A and have them "mixed" and sent to address B, you still have to worry about address A being burned. – David Perry – 2011-10-11T14:53:51.993
@DavidPerry - Coins do exist, I don't know why people keep saying they don't exist. It's just a matter of defining what 'coin' and 'exists' mean. If you take payment for something illegal on address A, but are not personally identified with this address (nobody knows it's you), you can move bitcoins from A to L, get a separate set of Bitcoins from L to B with a different history, and then exchange coins from B via Mt. Gox to your personal USD bank account, without fear (assuming the mixer has enough volume, etc...). – ripper234 – 2011-10-11T15:03:40.357
1But you could do the same thing without the mixer. Just transfer the 'dirty coins' to Mt. Gox and then withdraw. Nobody would know it's you without compromising the recipient in either case. (In one case, it's Mt. Gox. In the other case, it's the mixer. I'd say Mt. Gox is more trustworthy than the mixer anyway.) – David Schwartz – 2011-10-11T15:11:01.853
@David Perry that is easily solved by simply no longer EVER using address a again as well as deleting it from your address book. Now if you have linked address A to other sources of information (i.e. used it for multiple funding sources, including it in a blog or forum signature) then yes the "taint" of address A can still be traced back to you. – DeathAndTaxes – 2011-10-12T02:01:26.613
3@DavidSchwartz - Mt Gox could be looked at as a 'mixer' of sorts but they don't provide any "service level agreement". Looking at my transactions some rapid round trips through Mt. Gox are very obfuscated others however appear to be put into infrequently used accounts and it may be possible w/ sufficient block chain analysis to identify/track the funds. A superior mixing service would be one that mixes large amounts of transactions through multiple iterations and in/out addresses involving random periods of time. Of course as you point out trust is a major issue. – DeathAndTaxes – 2011-10-12T02:05:13.617
1@DeathAndTaxes: True, but such tracking wouldn't be useful. At best, an attacker could tell that someone transferred funds to Mt. Gox and someone withdrew funds from Mt. Gox, getting the same coins. There's no way they could tell they're the same person. If you want to be crazy, deposit the Bitcoins into an anonymous Mt. Gox account and get a Mt. Gox code. Deposit that into your account two weeks later. Nobody but Mt. Gox could track that. – David Schwartz – 2012-05-07T09:32:45.760