[bisq-network/bisq] [Feature]Integrate whirlpool into Bisq wallet (Issue #5867)

[chimp1984]

> One should also note this research paper that has done on the ability of chain analysis firms to identify and track existing Bisq users:
[The Bisq decentralised exchange: on the privacy cost of participation.pdf](https://github.com/bisq-network/bisq/files/8493918/The.Bisq.decentralised.exchange.on.the.privacy.cost.of.participation.pdf)

I was in contact with the researcher. The context of the DAO partizipants is in reality that most are re-using a Github identity for their repeated compensation requests, thus leaking information about what they have earned on the blockchain is irrelevant. 

DAO partizipants who do not want that (to the price that they cannot build up reputation) can create a new GH identity and new Bisq data directory/wallet for each contribution. They need to get un-connected BSQ (buying them on the market) and unconnceted BTC (coinjoined). So the effort and convenience costs are high but doable for those who want to do it.

The BSQ colored coin concept has inherently less privacy than BTC and inherits all the weak privacy already existing in BTC.
The anonymity set alone is a hard to solve issue when it comes to privacy with BSQ. I think one need to consider it as a limitation same as the weak privacy in Bitcoin is a limitation but there are ways around it if one is willing to take the effort.


> It might already be possible to load your Bisq wallet into Sparrow Wallet 

Yes that should be possible for BTC (not for BSQ - it is very dangerous to do anything with BSQ utxos outside Bisq as they would get burned if any of the complex rules are broken). 
The user has to do probably a spv resync after that in Bisq. I think a easier way is to just send the BCT as a transaction (miner fees are not high luckily these days). 

Also one need to consider that neither Sparrow Wallet nor Samurai/Whirlpool are audited toroughly (as far I am aware). Its very complex stuff and to trust that it will really protect one should not be based on what they put out in their marketing. I considered Sparrow Wallet an interesting wallet until they decided as one of the first to support that evil address verification protocol (and removed it after ppl complained). Something I would not expect from people who take privacy really serious. 

https://twitter.com/SamouraiWallet/status/1487096159990685704?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1487096159990685704%7Ctwgr%5E%7Ctwcon%5Es1_&ref_url=https%3A%2F%2Fcointelegraph.com%2Fnews%2Ftrezor-removes-controversial-address-verification-protocol-other-wallets-follow-suit




-- 
Reply to this email directly or view it on GitHub:
https://github.com/bisq-network/bisq/issues/5867#issuecomment-1099989519
You are receiving this because you are subscribed to this thread.

Message ID: <bisq-network/bisq/issues/5867/1099989519 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bisq.network/pipermail/bisq-github/attachments/20220415/5b92cd0b/attachment-0001.htm>