"IRS offered $625,000 bounty to anyone who could 'crack' Monero; no one succeeded"

https://news.ycombinator.com/item?id=25752042

You can analyze the dust spend in transactions to deanonymize Monero users. You need to be processing a lot of transactions to do this, or have the ability to spy on the processing of a lot of transactions.

Even if someone could _see_ the transaction and identify the user behind the wallets, at least a crypto still prevents fund holding and transaction blocking.

Putting someone in jail is effectively fund holding and transaction blocking.

Jailing people would generate backlash far quicker than transaction blocking and fund holding. As a tool of control it can't be used as liberally, so I'd still argue crypto is a net benefit here.

I'm not saying privacy isn't great, just that even without it, crypto is still useful. Privacy is absolutely an amazing force for freedom.

Not sure about that. People are generally fine with the imprisonment of people labelled as tax cheats, regardless of whether the label is accurate. The war on drugs has taken decades to reverse.

>Clearly, optional privacy is not privacy at all.

This is a marketing term without actual meaning. There's a system with some anonymity. Then there's the external world. There's no 'optional' anonymity. The error lies in incorrectly comparing monero to zcash as a whole, instead of shielded transactions themselves. Names themselves are irrelevant. Depositing xmr to an exchange is equivalent to withdrawing from the anonymity pool.

From the design perspective, the mixin model is vulnerable to an active adversary that has spent output data from exchanges and spams the chain to generate recent known outputs when the target makes transactions. Full zk-snark anonymity is fully resistant to this.

A problem of both xmr and zcash is that they have no other use than anonymity, making it easier to ban and impractical for larger amounts and forcing commerce to hedge price risk, generating deanonymizing metadata. For actual commerce anonymous dollar is the ideal, for as long as dollar remains the main unit of account in the world.

https://zk.money supports dai, although it's still in alpha with a limit of $1000 per external deposit.

https://aztec.network/index.html

Arrr or Pirate is Zcash, but with always on privacy BTW. I like it a lot, but it's relatively new.

Also, the ZKSnark method that provides the privacy requires that the devs threw away their initial PKs. If you trust they did, then it's a great option.

I think VRSC is similar to ARRR and Pirate.