Hacker News new | past | comments | ask | show | jobs | submit
I don't see how EU regulators would allow payment privacy in any meaningful way.

It will be choked out at key junctions with KYC in the same way crypto has.

It is a project supported by the EU.

> The NGI TALER project is funded under Horizon Europe (Pilots for the Next Generation Internet) with the aim of bringing GNU Taler to market across Europe. https://www.taler.net/en/ngi-taler.html

Unlike crypto, it is designed from the beginning with KYC/AML in mind. https://www.taler.net/en/principles.html

The issue seems to have been that GLS Bank was not able to support this beyond Germany. KYC/AML is a pretty complex topic. And since GLS is a tiny local bank (1,100 employees) it would have been a very large project for them. https://ich.taler.net/t/taler-en-belgique-en-france-ou-au-lu... https://www.gls.de/taler

More on the implemtation here: https://www.taler.net/en/kyc.html https://docs.taler.net/design-documents/023-taler-kyc.html https://docs.taler.net/taler-kyc-manual.html

loading story #50200704
loading story #50200477
The buyers are anonymous, the recipients (i.e. shops/merchants, generally) are not. The idea is that this will effectively prevent money-laundering and tax evasion as merchants wouldn't be able to hide any earnings.
loading story #50199298
the anonymity of payment is between customer and merchant,

and much much less so wrt. (customer,merchent)-> auditor aspect.

It's also more German laws you have to worry about then EU regulators, as the German laws based on the regulation are noticeable more strict then what the EU requires.

And while this laws do apply to all transactions, they don't require the customer to be identified in every transaction. Instead it's a risk based model. E.g. you local grocery store doesn't check you identity when you buy some groceries with cash. Even if you buy with card no one checks if that is your card and the information the card transaction shared does not fulfill the data collection requirements for the highest risk transaction.

This is why Taler can work, _it_ has enough information to do risk and fraud detection for many "daily" low risk transaction. And for very high risk transactions the merchant anyway has to identify you out of band and can't rely on the card transaction information. Through I guess somewhere in between is still a gray area not sure how Taler handles that.

> I don't see how EU regulators would allow payment privacy in any meaningful way.

The wording on the Taler website is a bit wishy-washy, but I THINK the TL;DR is:

1. They tried to do be a payments processor with assistance from a German bank.

2. That didn't work out for what Taler claims are "unrelated reasons" but I suspect we all can agree it was due to KYC/AML hurdles.

3. The Taler plan now appears to not be a payments processor but rather merely an issuer.

And in that respect, there is plenty of precedent for that passing in the EU, i.e. there are are already many online places you can go swap your Euro for Bitcoin legally.

So, yes, there will still be KYC/AML. You will still need to provide your ID to swap your Euro for your Taler. But after that, Taler has nothing to do with transaction processing, you go spend your Taler balance elsewhere and somebody else's server processes the transaction. Taler will know and be obligated to retain records of who bought how much, when and how but not when and where (of if) they spent it.

At least that's my interpretation of the word-soup on their website.

loading story #50201215
loading story #50198946
I don't get your point. The current proposal for a digital euro supports private peer-to-peer transactions
private and anonymous, especially from the government are two totally separate things.

If I am understanding Taler, it is not like cash coins/paper where the government does not and has no way to know that you, e.g., bought a bottle of wine from a vintner with cash, and that vintner can use that bill/coins in many different ways and the gov't has essentially no way to trace or track that.

The way I am seeing it... please correct me where I'm not understanding something... the Taler architecture would require you to pay cash into an exchange, then you extract (likely IDs/tagged/marked) Taler, you then pay that Taler to a merchant, e.g., who by policy cannot remain anonymous, and that merchant deposits that market Taler into the exchange. So in that scenario, what has happened is that the Taler the merchant received "privately" is clearly associated with the Taler you extracted from the exchange to pay the Taler deposited by the Vintner.

It's maybe private in that the Vintner does not need to know who you are, but you can bet the control freak tyrants in the government will know that you bought that wine.

So what you may say, wine is fine, but what if it's something the government doesn't want you doing, buying, supporting? Maybe wine is now illegal because {fill in the reason}, maybe you are not sufficiently obedient and compliant during an "emergency" and need to be cut off? Maybe you are sanctioned by the EU and all your money is taken and you have no means of even feeding yourself other than the "humanitarian" limit of living on €200/month and you can't even return to your native Switzerland from Brussels because you are not allowed on trains, planes, or allowed to drive across borders like happened to Jaques Baud for speech some tyrannical EU politician or bureaucrat did not like?

loading story #50201186
loading story #50200762
loading story #50199664
loading story #50200567
Then these "regulators" must be put in jail for treason.

Putin is committing his genocide to Ukrainians; Trump is siding with him. It is time to call those who weaken Europeans as enemies.

[flagged]
>the tyrannical government of the EU, which requires total control for the next phases of its very existence

When people start saying hyper-opinionated stuff like this, I usually tune out. The rest of your comment, whether or not it has nuggets of merit or insight, is going to be tainted by the fact that you've bought into the whole "evil EU is tyrannical" thing. It's very in vogue right now among the MAGA and alt-right types. They all started hating the EU with a passion of a thousand suns all of a sudden, pretty much in synchrony, and curiously coinciding with anti-EU propaganda campaigns driven by EU's fascist neighbour next door, angry at the EU stopping it from genociding its way through eastern Europe.

Like, your point about one of the Euro's main raison d'etres for the general public - frictionless cross-border transactions without needing to convert currencies - going away with online payments, that's a good point. Too bad about all the talking points you couched it in.

I can assure you the dislike towards the EU is not a MAGA and alt-right exclusive. In fact you can turn it around and try to find the groups which are in favor of the EU at the moment. Nevertheless my first thought about their endeavor to jump the German bureaucracy hurdles and furthermore the EU ones was indeed how they, the bureaucracy, will pile you up more with each hurdle you pass until you give up. Tyrannical EU is not a stretch.
loading story #50200489
Same, this sentence when I stopped reading and started rolling my eyes.
This is a surveillance oriented alternative to cryptocurrencies which uses the distraction of complicated cryptography to obfscuate the fact that by design it intentionally undermines the privacy of its users: it attaches the receivers identity to every payment they receive, along with the amount and makes it non-private-- potentially opening the door to abuse by kidnappers, extortionists, marketers responding to income signals, plaintiffs attorneys, and other such scoundrel.

The claims that is is privacy preserving are deceptive, and in my option constitute an act of intentional fraud on the part of its creators -- the fact that people are deceived by the privacy claims is clear in your comment: You ask why would the banks adopt something private. The answer is: it isn't.

Its existence is justified under a fairytale model of how the world works-- a false belief that actually anonymous payments are unlawful and that their compromised alternative is the best possible. In the path of doing so, they not only falsely sell a system with compromised privacy as private, but they also help bring about a dystopia where privacy is unlawful in much the same manner that doing business with companies that refuse to accept cash does.

It would be fair to say that its an upgrade to privacyless systems-- because it doesn't attach the sender's identity to the transactions themselves--, but to characterize it as a private or privacy preserving system is a lie.

Taler is meant to be private and anonymous for the payer (customer) and not for the payee (merchant). I feel they’ve always been very clear about this, so unless you disagree about the premise, calling them deceptive seems unreasonable.

Moreover, I don’t know in which part of the world you live where private on-line payments are commonplace, but the only cashless payment options I tend to see are with bank transfers, credit or debit cards and payment processors like PayPal. My understanding is that compared to those, Taler gives payers privacy and doesn’t make things any worse for payees than they already are, which makes it an enormous step forward for privacy. Perhaps I’ve missed something, because saying it helps bring about dystopia when it only strives to make things much better than they are right now seems terribly out of touch.

Thank you very much for your input! Would you please publish a proper paper with references to code of the project that proves your statements, that would be incredibly helpful. Also it would be of great importance to backup your words with some facts!
The "fraud" claim is kind of bizarre to me, but it's clear (and not hidden) that Taler intentionally provided less privacy for payees than other designs and systems because of a conscious decision that payees should have less privacy.

I find this objectionable, but not at all deceptive or manipulative.

It's absolutely deceptive as you're seeing demonstrated in this thread-- I comment on this intentional and-- you believe "not hidden" lack of privacy-- and I get a reply demanding a publish a paper to prove it ("Papers please"... fitting!). This has consistently been the case for Taler. Sure, you and I are aware of the limitations-- but we're domain experts.

People hear that it's private and -- unsurprisingly-- think it's private! :P In my view it's like to Apple's proposed content scanning in end to end encryption that applies a lot of additional cryptographic complexity with language that suggests that it's protecting the user's privacy, but in reality the complexity is entirely there to undermine their privacy (in a somewhat selective way) and a far simpler scheme would give much stronger privacy.

I think it's analogous to promoting a key-escrow cryptosystem as "communicate privately!"-- both in terms of people not getting the privacy from it they would expect and helping to bring about a world where actual privacy is unlawful. The privacy problems of Taler are essentially identical to those of key-escrow: even if you don't have any fear of 'lawful' access, any access that exists may be abused. The only reliable solution to the security/privacy problems is for the access to not exist unless that is literally impossible. But it's clearly not impossible, as many people use more private systems than taler every day including in Germany.

Taler is strictly less private and considerably more complicated than a basic chaum-cash token system-- which actually provides the privacy people expect it to have. So it's not like I'm suggesting blockchain mumbo-jumbo is the only alternative. :)

The system was designed by people who value taxation as something important to a functioning state. You can call that a conspiracy, I would rather call it social market economy.
Almost a decade ago I had a conversation with a GNU Taler proponent in Germany. I pointed out the risks that come with additional government surveillance of payments in the face of potential future governments that may not value liberty as much as the current one does. His pushback was that the german voters would never elect someone as crazy and corrupt as Trump (this was during his first term) and he can fully trust the future german government. It was a somewhat surreal conversation, and feels more surreal with the current shift towards AfD...
That seems to be the widespread attitude in Germany, that the current systems were set up to prevent a repeat of the bad stuff that happened, and as long as those systems are functioning, the bad stuff cannot happen again.
The tradeoffs of the design itself sacrifice payee safety and philosophically imply that the lives of its users are secondary to socially engineering goals which they dishonestly deny are incompatible with same.

https://github.com/jlopp/physical-bitcoin-attacks

That is objectively, justifiably classifiable as manipulative and destructive.

To clarify: I assert that taxation and a functioning state, and the safety and security of the users of an online currency are absolutely not incompatible with one another—and I'm not even implicitly asserting that the definition of a "functioning state" is some kind of weird ancap impossible libertarian ideal.

Indeed, taxation today and historically is not based on mass surveillance and doesn't depend on mass surveillance.

If you're failing to pay taxes on any scale you're going to get caught by whistleblowers or by conspicuous visible purchases. Enforcement isn't 100%, of course, but it never is for any crime and it doesn't need to be.

Even if your effective tax rate is 50% evasion can only double your money at best, and you've only got taxes to pay if you've got a successful income stream-- it doesn't take much threat of imprisonment or large fines to keep someone with something to lose staying within the lines. You're already making good money (if you're not-- no taxes) so why risk your good situation for a small constant factor more?

Some amount of successful evasion simply means somewhat higher taxes for everyone else, and that is a reasonable compromise for not living in a panopticon-- particularly since no amount of surveillance can entirely prevent tax evasion.

To the extent that someone wants to engage in evasion they'd route around this surveillance system or not even worry about it: Data isn't intelligence, visible income can be offset by fake expenses (which are private in this system too!)-- and so it can't be said that this scheme's surveillance would even be particularly effective at blocking tax evasion. You'd be left with detecting it via traditional means, just as you already can even with completely private transactions, but without the privacy loss.

So it's a non-solution to a non-problem, that create significant privacy related collateral harm. It can do both because non-evaders won't bother to take the additional steps to protect themselves, and are exposed to every hack, leak, data-breach, change of policy, or abuse of lawful process.

(Analog: run strong encryption or strong encryption+steganography inside key-escrowed encryption. This possibility bounds the potential benefits of key escrow but fails to bound the harms.)

For any system one should imagine the abuse potential should the currently benign regime be replaced with a future genocidal one. Certainly Germans should be well acquainted with the value of that kind of reasoning-- it isn't like targeting sub-populations for asset seizure is a hypothetical threat. A key property of privacy loss is that it's forever: you might not mind a piece of exposure today but years from now it could turn fatal.

But even then I wouldn't complain about it except for the misleading presentation of it as a privacy system and the smearing of opponents as tax evaders.

It's simply a falsehood to claim people opposed to this are opposed to taxation. Personally, I find taxation to often be a superior choice to fund public infrastructure compared to the most obvious alternatives such as printing money or accumulating debt-- particularly because taxation is more visible and thus more accountable. But we must take great care to mitigate the potential collateral damage of taxation including accounting overhead, market distortion, and loss of privacy.

The false and defamatory characterization of opponents as tax protesters is part of why I feel comfortable saying that I believe the mischaracterization of the system as 'private' is an act of intentional fraud. An honest system doesn't need to discourage or suppress its critics by falsely accusing them of being in favor of crime or other anti-social conduct.