She's retired from active participation in Dash. (she is still a passive investor though.)
Jump start dash adoption by acquiring 400k users in 4 months
- Thread starter Dashmaximalist
- Start date
Andric Tham
New member
If privacy is a concern, then the technical constraint here is not that the phone number is stored somewhere (centralized or decentralized), but that wallet addresses can be linked to phone numbers.
In that case, is there a way to verify that a phone number belongs to someone without ever linking that phone number to them? Using cryptographic techniques we could obscure links between a person’s phone number and their public key, such as with a mixing service or zero knowledge proofs.
We can pool everybody’s encrypted phone number upon registration, and allow all members of the pool to receive a wallet address with $1 worth of DASH.
Since everybody in the pool will receive a dollar, we only need to record that the phone number is part of the pool. A hash of the user’s phone number can be created, and a “token” can be generated from that hash for claiming the $1 wallets. To be extra secure, this hashing function can be executed offline on the user’s device before they’re sent to the pool.
We can then generate the wallet addresses trustlessly, without knowledge of which phone number requested it. Using zero knowledge proofs, the wallet creation service can ask the encrypted phone number pooling system: “Does this token match the hashed phone numbers in your system?”. The wallet creation service does not need to know the encrypted phone numbers stored in the pool, only that the token matches and the user is entitled to $1 in DASH. If the number pooling system returns true, users will receive their $1 wallet and their token invalidated.
As long as the hashing function is secure, we would not need to worry about phone numbers being linked to public wallet addresses, and the phone number can even be throwaway. The only downside is that if the number ever gets reassigned to someone new that has ever claimed a $1 DASH wallet before, they will not be able to do so again.
I'm not a cryptographer or economist, but I wonder if this is possible?
In that case, is there a way to verify that a phone number belongs to someone without ever linking that phone number to them? Using cryptographic techniques we could obscure links between a person’s phone number and their public key, such as with a mixing service or zero knowledge proofs.
We can pool everybody’s encrypted phone number upon registration, and allow all members of the pool to receive a wallet address with $1 worth of DASH.
Since everybody in the pool will receive a dollar, we only need to record that the phone number is part of the pool. A hash of the user’s phone number can be created, and a “token” can be generated from that hash for claiming the $1 wallets. To be extra secure, this hashing function can be executed offline on the user’s device before they’re sent to the pool.
We can then generate the wallet addresses trustlessly, without knowledge of which phone number requested it. Using zero knowledge proofs, the wallet creation service can ask the encrypted phone number pooling system: “Does this token match the hashed phone numbers in your system?”. The wallet creation service does not need to know the encrypted phone numbers stored in the pool, only that the token matches and the user is entitled to $1 in DASH. If the number pooling system returns true, users will receive their $1 wallet and their token invalidated.
As long as the hashing function is secure, we would not need to worry about phone numbers being linked to public wallet addresses, and the phone number can even be throwaway. The only downside is that if the number ever gets reassigned to someone new that has ever claimed a $1 DASH wallet before, they will not be able to do so again.
I'm not a cryptographer or economist, but I wonder if this is possible?
Last edited:
demo
Well-known member
This is usefull, as long as the database is distributed and the task of adding hashes of phone numbers in the database is performed in a decentralized way ( by the masternodes maybe?)
Because if the job is performed by a single server , the administrator may claim that he deleted the phone numbers, but in reality he may not do that, and there is no way to verify whether he is telling the truth or not. At least, if many servers (operated by different admins) are doing the job, some of them may tell the truth and some phone numbers may be deleted for sure. You may also give the option to the holder of the phone number to select the server he trusts.
Last edited:
demo
Well-known member
Why venezuela specifically? There are countries that are more poor.
I agree that the phone otp project should target the real economy, and incentivize the 1$ dash slaves to do their transactions in dash. Otherwise all of them will cash their dash to their local currency, and thus the campaign will be futile (from the dash point of view). It will be a pure charity, and no benefit will occur for dash (apart from the fact that it will make dash known)
Last edited:
stan.distortion
Well-known member
Came across this yesterday, it looks like phone company security is becoming a prime target:
https://www.nytimes.com/2017/08/21/business/dealbook/phone-hack-bitcoin-virtual-currency.html
Dashmaximalist
Well-known member
thanks but i am very well aware of this exploit as i mentioned previously this a social engineering hack and not entirely a technical one, which takes a lot of effort and is usually aimed at millionaire investors.
hacking for $1 that we give to the poor would be an utter shame to any hackers.
The only way hackers could ever compromise our campaign would be to hack all the phones in a particular country and if that happens i am sure the govt will stop such a thing.
stan.distortion
Well-known member
True, not worth it for a dollar but if someone's so impressed they move their life savings... Not sure if it would be possible without the phone number being visible to someone other than the phones owner :/
demo
Well-known member
On the other hand, the same way the gov can stop hackers, the same way the gov can be aware of the people who use dash, and this is not a good thing. And this is where the proof of individuality stands.
Dashmaximalist
Well-known member
ok so , we don't hold the private keys of your dash wallet , the users holds it themselves and it's their responsibility to keep them safe and tbh with you if you are putting millions you better understand how crypto security works
btw we will teach all these things on the site getfreedash.com starting from basic stuff to advanced stuff ( like hardware wallets etc ) , this site will be a one stop shop to learn things about crypto and dash. it's not just about throwing the $1 at you, want to make it more like a site that gives all round info and incentivizes you to bring your friends.
stan.distortion
Well-known member
Lol, faucet 2.0
It's a shame this is coming before Evolution, the profiles would probably make these security issues irrelevant.
Dashmaximalist
Well-known member
Lol, faucet 2.0
possibly we will inform poeple about the evolution's evolution as well, but Evolution can't bring in millions of users without giving a bit of carrot ($1)
demo
Well-known member
demo
Well-known member
She is not active in the forum (amanda_b_johnson was last seen: Aug 8, 2017) but she is still active in twitter. You may go there and ask her to bless this campaign.
I could do it myself, but I have not a twitter acount, and additionaly @amanda_b_johnson doesnt give a shit about the opinion of the slaves (like me). You are a masternode owner, and amanda is a well known MNO flatterer. So your call in twitter may incentivize her.
Last edited:
demo
Well-known member
just bought a domain called getfreedash.com and hosted it
Please add "under construction" at the top of the site, and ask the visitors whether they want to be informed by mail whenever the site will be ready and active.
Additionaly, is this site open source?
What kind of code do you write?
Do you have a github project?
Dashmaximalist
Well-known member
this is just a website builder , i am yet to hire devs and others, once the code is all done and i will put it on github with the list of dash transactions done ,so that people can trust that we have paid.
Last edited:
I like the idea of this and would vote if you submit a proposal but at the moment there seems to be too much controversy about this to risk an official proposal yet. Good luck.
Dashmaximalist
Well-known member
@TheSingleton Thanks for the support , i would first run this on a pilot with my own money for say $500 or so , publish the results to the team and then request for funds
Sounds like a good plan. If things are looking good you might be able to run this on donations till the official proposal passes. I wouldn't mind donating a little bit though of course if this blows up that's wouldn't scale.
Dashmaximalist
Well-known member
Thanks for the support again , will start with $100 and check that, watch this space
Last edited:
demo
Well-known member
For our purpose, there is a few code and a lot of installation/customization/configuration/administration.
I made a quick and dirty google search and here some results.
A possible implementation may include:
https://www.djangoproject.com/ as the web framework
https://www.rapidsms.org/about/ as an sms service plugin to django
then use http://www.kannel.org/ as a RapidSMS Backend
That way your system may be transported anywhere. The best option is to physically locate your backend at the targeting country. But you need someone to go to that country and install it.
In case you dont want to use a custom Backend and you want to pay an online WAP gateway, then you may try this one https://www.tropo.com/pricing/
Even cheaper, chose a local WAP gateway located at the targeting country.
Last edited: