403 karma · joined August 3, 2017
Interested? We're pre-launch but email us at info@pinkdate.is. Or join our Slack: https://join.slack.com/t/pinkapp/shared_invite/enQtMjQ0NjI2MDM0ODY1LWJhMGQ5ZTY4ZjRmODFlMTRlYWU3NDUwYWMzMDA1MGVlZGE1NThlN2ZjMWE2NGYxODRmNmY2NTg1YWI2MWM0YTk
How will we stay online? Read an overview of our server opsec: https://medium.com/@PinkDate/pink-app-trading-latency-for-anonymity-and-other-techniques-815ee21c6da4
>Green says that he and his fellow researchers are not interested in facilitating criminal activity with Zerocoin. "Zerocoin would give you this incredible privacy guarantee, then we could add on some features which let the police, for instance, to be able to track money laundering. A back door."
https://www.newscientist.com/blogs/onepercent/2013/03/bitcoi...
That alone scares me off of it, and why we're suggesting people use Monero to invest with us. I know that was a while ago, and zerocoin isn't zCash but combined with Zooko's tweets about making zCash too traceable for criminals, no thanks. The crypto is too new, so who knows how they could go about hiding a backdoor.
It's so odd anyone would ever work with these guys given their attitude and statements.
Combine that with two of the founders saying they're OK with backdoors (Green) and making it too traceable for criminals (Zooko) plus a 20% cut of all the currency for years and it starts looking sort of bad. (Yes it's 10% overall, but instead of showing long-term trust in their project, they decided to grab 20% really quick.)
Monero is far from perfect. Their ringsize is pitiful. But it works well, doesn't require heavy hardware, and privacy is mandatory. Plus it feels like a real community effort, not commandeered by a group that's open to making things traceable or demanding a huge cut.
https://monero.stackexchange.com/questions/5682/how-do-i-use...
" We at the Lab previously thought that one possible solution to knacc's described attack would be churning, where one sends funds to oneself multiple times before using at a merchant. Unfortunately, this leads to chains of self-referential transactions, which leave an undesirable and identifiable statistical signal. "
Now the follow-up I've gotten says that this just means you can't churn too quickly. There is still no analysis of how often to churn, how long you need to wait, and on and on, until you're safe. The Monero wallets offer no way to manage your inputs either, so if you ever re-use a wallet (exchange->WalletA->WalletB a couple times) you'll leave even more of an trace.
So the number one idea that springs to mind, Exchange->Monero->Exchange, might be a worst-case scenario where you can easily be linked with a high probability. Especially when the approximate input time is known.
For instance, if you know a target exchanged Bitcoin in a certain transaction, you can simply trace all possible chains from that output and see when one hits an exchange, prioritizing shortest first: if an exchange output goes right back to an exchange, that's probably enough to get a warrant or targeted investigation.
Furthermore, an attacker could make a bunch of transactions so other transactions use known inputs, reducing effective ringsize even more. This wouldn't be very expensive at current volumes.
Even still, Monero still seems far ahead of competition. My biggest concern is that they don't put any sort of disclaimers, and incorrectly state it's untraceable. This will get people into trouble. The Tor Project does a far better job of being clear with the risks and shortcomings. The Monero community, mostly, seems to just advertise as if everything was solved. That plus the ridiculously low ring sizes feel rather irresponsible.
In reality, you probably need to batch a few customers together: 10 customers putting in 1 BTC, 1 customer putting in 10. But these don't need to be long-lived groups, if the mixer has the volume. So "their address" would only be the same for a few customers. An attacker would need to constantly make transactions to determine the addresses involved.
Most mixers give you completely "clean coins": That is there's no transaction chain from your inputs to your outputs. So they are probably doing some sort of system similar to what I describe.
Monero's less theoretically secure, and indeed, there's no info on how to safely "launder" coins through Monero. Ringsize is very small, at 5. But it seems to be a proper community effort and probably the best contender right now.
Dash is mired in mishaps, from its inception and instamine as Darkcoin. A single user or group of users hold magical keys that can undo 24 hours of blocks. They have centralized nodes and the mixing scheme isn't even theoretically secure.
It's a travesty that some of these companies raise millions without giving up equity, voting, or dividends.
Until we have serious ringsizes this will remain an issue.
We're working on a guide for people to invest anonymously with us. It's not so simple. Monero is great, but their current defaults are too low to guarantee the privacy they say they have, and changing the defaults makes your transactions stick out.
What you have to do is:
1. Exchange into Monero.
2. Churn with Monero. This means you'll send your XMR from your wallet to your wallet, over and over again. Probably once every 3-6 hours, randomly. The destination address is private in Monero, so sending to your own wallet is fine.
3. After some time (1-3 days) send to another exchange to get Bitcoin/Ether/etc. Need to look at trade volumes to make sure you don't stick out. And probably not send out the same amount you put in. Keep half or some chunk and slowly leak it back to Bitcoin.
4. Optionally one could stack on a couple of Bitcoin mixers, on the idea that you won't have the bad luck to hit two compromised mixers. But each one will take ~2% so it adds up.
At that point you have coins reasonably unrelated to your earlier identity. Getting them into cash is a whole other guide.
Most ICOs have a hard time justifying their token. Some are obviously just speculative investments. I hope ICOs come to an end for the most part.
We're doing something similar to an ICO, except issuing shares. Shares are a known thing, and well established. Share price should grow based on the company's prospects, not pumping schemes. Cryptocurrency fundraising as a whole is still incredibly valuable. In our case, legal risk means we can't raise money from people we know (oh, how that'd be so much easier!). Even without the anonymity issues, I think a lot of companies are going to abandon ICOs after the token bubble pops and stick to traditional share-selling, using tokens as a ledger.
>people want money
>we give them money
We already even have debit cards by hiring other people to set them up.
And in the end, what does LE end up with by doing all this? A few individual prostitution "busts", with no real change.
We have no issue breaking an unfair, unjust law that actively hurts people. Example: A judge ruled that the gang-rape of a sex worker was merely "theft of services".
These are not really tokens, they are dividend-generating shares that will optionally be recorded via ERC20 tokens. We are using the term ICO only because saying IPO or Blockchain IPO tended to confuse people.
We want to raise secondary rounds to really expand, and screwing Series A investors sounds like the worst way to achieve that goal.
As far as getting the money out, first, a lot of the business is cash and the providers just keep it, just like today. The profits mostly go to investors, so we're talking anyone who buys an ERC20-tokenshare. Use Tor, tumble coins and then run through ZCash and Monero if you're really concerned.
Look at all the indictments for similar projects. So far there's been no real tracing of money, just huge opsec errors.
Unlike other ICOs[1], we're offering shares with dividends. Plus, we have an actual, real, business model that can generate significant profits.
1: I hate the term ICO for what we're doing, but calling it an IPO generated confusion. We're quick to distinguish the difference, though.
As part of the onboarding process, the worker will perform sample services. We will pay them for this (along with referral fees if they were referred). Having sex with people is what a sex worker's job is. It's just that the client in this case will report to us and verify their ID.
Seems like a good way to filter out people that are not serious or have ulterior motives (such as law enforcement).
That is why we are not relying on any specific jurisdiction but operating extrajurisdictionally.
This is not a troll. Two of us have already quit our jobs and have been on this full time for a couple months.
We're investigating how we can enforce some of the rules via smart contracts, but there's still likely to be loopholes.
Since fixing the laws is going to take a while, we've taken it upon ourselves. We're building such a superior solution for both sex providers and clients, it'll hurt trafficking like iTunes hurt music piracy.
As for tear-avoidance: https://medium.com/@PinkApp/pink-app-trading-latency-for-ano...
This isn't our first rodeo.
The core team is much smaller than that. There are a couple advisers/seed investors, but they are not all aware of each other (that's the 5 number). In every person's case, this is not our first rodeo. This is one of the key issues and I feel we have it handled. Everyone else will be hired in a trustless manner and investors have no part in day to day operations.