Getting ready to operate GNU Taler in Germany

152 pointsposted 5 hours ago
by dewey

47 Comments

jttnr

17 minutes ago

I'm a happy GLS Bank customer, and I've just learned about its involvement in Taler. Pretty awesome.

Europe desperately needs its own digital payment solutions to reduce its dependence on US companies and its exposure to sanctions that could target EU citizens if the president has a bad day.

GLS is also on board with Wero, which, unfortunately, hasn't seen big adoption yet.

I really hope Taler takes off.

grothoff

5 minutes ago

I should stress that GLS has been very helpful, and continues to be helpful.

Eueudhsbsj32

4 hours ago

I don't see how EU regulators would allow payment privacy in any meaningful way.

It will be choked out at key junctions with KYC in the same way crypto has.

ano-ther

2 hours ago

It is a project supported by the EU.

> The NGI TALER project is funded under Horizon Europe (Pilots for the Next Generation Internet) with the aim of bringing GNU Taler to market across Europe. https://www.taler.net/en/ngi-taler.html

Unlike crypto, it is designed from the beginning with KYC/AML in mind. https://www.taler.net/en/principles.html

The issue seems to have been that GLS Bank was not able to support this beyond Germany. KYC/AML is a pretty complex topic. And since GLS is a tiny local bank (1,100 employees) it would have been a very large project for them. https://ich.taler.net/t/taler-en-belgique-en-france-ou-au-lu... https://www.gls.de/taler

More on the implemtation here: https://www.taler.net/en/kyc.html https://docs.taler.net/design-documents/023-taler-kyc.html https://docs.taler.net/taler-kyc-manual.html

neobrain

3 hours ago

The buyers are anonymous, the recipients (i.e. shops/merchants, generally) are not. The idea is that this will effectively prevent money-laundering and tax evasion as merchants wouldn't be able to hide any earnings.

traceroute66

4 hours ago

> I don't see how EU regulators would allow payment privacy in any meaningful way.

The wording on the Taler website is a bit wishy-washy, but I THINK the TL;DR is:

1. They tried to do be a payments processor with assistance from a German bank.

2. That didn't work out for what Taler claims are "unrelated reasons" but I suspect we all can agree it was due to KYC/AML hurdles.

3. The Taler plan now appears to not be a payments processor but rather merely an issuer.

And in that respect, there is plenty of precedent for that passing in the EU, i.e. there are are already many online places you can go swap your Euro for Bitcoin legally.

So, yes, there will still be KYC/AML. You will still need to provide your ID to swap your Euro for your Taler. But after that, Taler has nothing to do with transaction processing, you go spend your Taler balance elsewhere and somebody else's server processes the transaction. Taler will know and be obligated to retain records of who bought how much, when and how but not when and where (of if) they spent it.

At least that's my interpretation of the word-soup on their website.

dgellow

4 hours ago

I don't get your point. The current proposal for a digital euro supports private peer-to-peer transactions

tyrabound

3 hours ago

private and anonymous, especially from the government are two totally separate things.

If I am understanding Taler, it is not like cash coins/paper where the government does not and has no way to know that you, e.g., bought a bottle of wine from a vintner with cash, and that vintner can use that bill/coins in many different ways and the gov't has essentially no way to trace or track that.

The way I am seeing it... please correct me where I'm not understanding something... the Taler architecture would require you to pay cash into an exchange, then you extract (likely IDs/tagged/marked) Taler, you then pay that Taler to a merchant, e.g., who by policy cannot remain anonymous, and that merchant deposits that market Taler into the exchange. So in that scenario, what has happened is that the Taler the merchant received "privately" is clearly associated with the Taler you extracted from the exchange to pay the Taler deposited by the Vintner.

It's maybe private in that the Vintner does not need to know who you are, but you can bet the control freak tyrants in the government will know that you bought that wine.

So what you may say, wine is fine, but what if it's something the government doesn't want you doing, buying, supporting? Maybe wine is now illegal because {fill in the reason}, maybe you are not sufficiently obedient and compliant during an "emergency" and need to be cut off? Maybe you are sanctioned by the EU and all your money is taken and you have no means of even feeding yourself other than the "humanitarian" limit of living on €200/month and you can't even return to your native Switzerland from Brussels because you are not allowed on trains, planes, or allowed to drive across borders like happened to Jaques Baud for speech some tyrannical EU politician or bureaucrat did not like?

grothoff

27 minutes ago

"It's maybe private in that the Vintner does not need to know who you are, but you can bet the control freak tyrants in the government will know that you bought that wine." -- actually no. Because the digital cash you "extracted" from the exchange was blindly signed, the exchange/central bank would NOT learn that you bought wine. Only that someone (anyone who previously withdrew a sufficient amount of digital cash) bought wine. Please do read up on cryptography, how to do this is known since 1989.

riffraff

2 hours ago

Private and anonymous are different but the digital euro proposal is for both things, it is supposed to be equivalent to cash but only for small sums.

I have no idea how that's supposed to work.

gregorygoc

43 minutes ago

Your whole argument is looney. Do you live in the EU?

nullc

4 hours ago

This is a surveillance oriented alternative to cryptocurrencies which uses the distraction of complicated cryptography to obfscuate the fact that by design it intentionally undermines the privacy of its users: it attaches the receivers identity to every payment they receive, along with the amount and makes it non-private-- potentially opening the door to abuse by kidnappers, extortionists, marketers responding to income signals, plaintiffs attorneys, and other such scoundrel.

The claims that is is privacy preserving are deceptive, and in my option constitute an act of intentional fraud on the part of its creators -- the fact that people are deceived by the privacy claims is clear in your comment: You ask why would the banks adopt something private. The answer is: it isn't.

Its existence is justified under a fairytale model of how the world works-- a false belief that actually anonymous payments are unlawful and that their compromised alternative is the best possible. In the path of doing so, they not only falsely sell a system with compromised privacy as private, but they also help bring about a dystopia where privacy is unlawful in much the same manner that doing business with companies that refuse to accept cash does.

It would be fair to say that its an upgrade to privacyless systems-- because it doesn't attach the sender's identity to the transactions themselves--, but to characterize it as a private or privacy preserving system is a lie.

BodyCulture

3 hours ago

Thank you very much for your input! Would you please publish a proper paper with references to code of the project that proves your statements, that would be incredibly helpful. Also it would be of great importance to backup your words with some facts!

schoen

3 hours ago

The "fraud" claim is kind of bizarre to me, but it's clear (and not hidden) that Taler intentionally provided less privacy for payees than other designs and systems because of a conscious decision that payees should have less privacy.

I find this objectionable, but not at all deceptive or manipulative.

nullc

3 hours ago

It's absolutely deceptive as you're seeing demonstrated in this thread-- I comment on this intentional and-- you believe "not hidden" lack of privacy-- and I get a reply demanding a publish a paper to prove it ("Papers please"... fitting!). This has consistently been the case for Taler. Sure, you and I are aware of the limitations-- but we're domain experts.

People hear that it's private and -- unsurprisingly-- think it's private! :P In my view it's like to Apple's proposed content scanning in end to end encryption that applies a lot of additional cryptographic complexity with language that suggests that it's protecting the user's privacy, but in reality the complexity is entirely there to undermine their privacy (in a somewhat selective way) and a far simpler scheme would give much stronger privacy.

I think it's analogous to promoting a key-escrow cryptosystem as "communicate privately!"-- both in terms of people not getting the privacy from it they would expect and helping to bring about a world where actual privacy is unlawful. The privacy problems of Taler are essentially identical to those of key-escrow: even if you don't have any fear of 'lawful' access, any access that exists may be abused. The only reliable solution to the security/privacy problems is for the access to not exist unless that is literally impossible. But it's clearly not impossible, as many people use more private systems than taler every day including in Germany.

Taler is strictly less private and considerably more complicated than a basic chaum-cash token system-- which actually provides the privacy people expect it to have. So it's not like I'm suggesting blockchain mumbo-jumbo is the only alternative. :)

riedel

2 hours ago

The system was designed by people who value taxation as something important to a functioning state. You can call that a conspiracy, I would rather call it social market economy.

midmagico

an hour ago

The tradeoffs of the design itself sacrifice payee safety and philosophically imply that the lives of its users are secondary to socially engineering goals which they dishonestly deny are incompatible with same.

https://github.com/jlopp/physical-bitcoin-attacks

That is objectively, justifiably classifiable as manipulative and destructive.

To clarify: I assert that taxation and a functioning state, and the safety and security of the users of an online currency are absolutely not incompatible with one another—and I'm not even implicitly asserting that the definition of a "functioning state" is some kind of weird ancap impossible libertarian ideal.

nullc

4 minutes ago

Indeed, taxation today and historically is not based on mass surveillance and doesn't depend on mass surveillance.

If you're failing to pay taxes on any scale you're going to get caught by whistleblowers or by conspicuous visible purchases. Enforcement isn't 100%, of course, but it never is for any crime and it doesn't need to be.

Even if your effective tax rate is 50% evasion can only double your money at best, and you've only got taxes to pay if you've got a successful income stream-- it doesn't take much threat of imprisonment or large fines to keep someone with something to lose staying within the lines. You're already making good money (if you're not-- no taxes) so why risk your good situation for a small constant factor more?

To the extent that someone wants to engage in evasion they'd route around this surveillance system or not even worry about it: Data isn't intelligence, visible income can be offset by fake expenses (which are private in this system too!)-- and so it can't be said that this scheme's surveillance would even be particularly effective at blocking tax evasion. You'd be left with detecting it via traditional means, just as you already can even with completely private transactions, but without the privacy loss.

So it's a non-solution to a non-problem, that create significant privacy related collateral harm. But even then I wouldn't complain about it except for the misleading presentation of it as a privacy system.

Deukhoofd

an hour ago

So this is trying to compete against Wero, which is being backed by most major western European banks? I wish them luck, but I somewhat doubt they can compete against that.

grothoff

14 minutes ago

Wero, Mastercard, Visa, PayPal, Twint. The usual GNU story: FLOSS competes against AT&T, SCO, SGI, IBM, Sun, HP, ...

hangrybear666

3 hours ago

Never having heard of it before, the moment I read "cash like tokens in your account" I was immediately out. Also claiming buyer privacy when the money ultimately has to come from a bank transaction or another digital transaction leaving some sort of trail is a false illusion.

grothoff

23 minutes ago

You need to read more carefully. "Cash-like tokens in your wallet under self-custody." would be correct. Taler has no accounts.

kardianos

3 hours ago

Yeah, so it isn't intended to you. It is intended to be electronic cash, where the seller still has accountability for regulators and the buyer has some minimal amount of protection.

anonymous908213

an hour ago

tldr of my understanding (do correct me if I'm wrong):

Neither buyer nor seller are anonymous. Your bank knows your ID-verified identity and that you have deposited X talers. However, nobody knows when, where, or even if you spend those talers. You are free to spend talers on eg. a e-book about Tiananmen Square and the bank/state will never know that you did. The seller, on the other hand, has no protections, and will be destroyed for selling an e-book about Tiananmen Square. Also, you can't realistically buy a physical book about Tiananmen Square because you will give up your address to the shipper and by extension to the state.

If my understanding is correct... it's not good enough. In a free society we should be able to both purchase and publish e-books about Tiananmen Square, and this does not permit that.

KolmogorovComp

26 minutes ago

> In a free society we should be able to both purchase and publish e-books about Tiananmen Square

What? You can definitely publish about it in a free society, and cash anonymity has nothing to do with it.

pessimizer

11 minutes ago

I think I have your understanding of it, and if that's correct then what's happening is that Taler isn't helping somebody sell books about US support of Nazi militias in overthrowing the elected government and ethnically cleansing ethnic Russians from Ukraine, it's just enabling them not to necessarily reveal the buyers. If they want to make money from this publishing without the government seeing, they'd have to come up with another reason to have been receiving Taler that wouldn't make the government suspicious.

That's pretty hard unless Taler is very widespread. I could see a world in which that would work - if people generally made all small purchases in Taler and it replaced cash. But there's no reason for governments to buy into that (except as maybe an intermediate pretense after ending legal cash payments entirely), and no reason for large corporate chains to buy into it unless (and maybe even if) government has bought into it (too much legal exposure for too little benefit.)

So any merchant who dealt in Taler would be maximally scrutinized, and whatever exception they were riding in order to be allowed to deal in Taler would be too valuable to give up through selling forbidden books. Like maybe your doctor could deal in Taler fairly freely, and he's not risking his medical license to screw around in politics.

rvz

4 hours ago

I think GNU Taler missed their chance of adoption since the world has moved on and was impatient with their progress.

Blockchains that support stablecoins are already here and millions of people already use them (and soon agents will use them as well).

All for worldwide, instant and extremely low fee payments and transfers.

dgellow

4 hours ago

Blockchain isn't necessary at all for instant, low fee payments. And no, pretty much nobody is using cryptocurrencies

dewey

3 hours ago

> And no, pretty much nobody is using cryptocurrencies

That's just not true, and I'm not talking about "you can pay with Bitcoin in the store" use case but the stable coin use case for settlement, which you can see Stripe expand a lot in the past years.

logicchains

3 hours ago

>pretty much nobody is using cryptocurrencies

Step out into the wider world and that isn't remotely true.

worik

2 hours ago

apart from criminals for crime, politicians for corruption and grandma sending her savings to a scammer, who is using crypto?

warkdarrior

4 hours ago

I haven't looked at Taler in a while. What capabilities do they have to transfer money around without being surveilled? Also are transactions final and irreversible?

tarpitt

4 hours ago

>What capabilities do they have to transfer money around without being surveilled?

It's basicially david chaum's blind-signature money idea. It's centralized but the central issuer can't connect the outputs to the inputs. (but unique inputs signed by the issuer correspond to unique outputs)

>Also are transactions final and irreversible?

I think so unless you are able to reveal the secrets of the transaction. Hmm, however revealing the secret to someone is basicially same as spending it to them (analgous to releasing a signed and finalized transaction into the mempool in cryptocurrency). It's finalized by the issuer signing it.

Like you basicially send the vendor the secret, and then they hand it in to the coin issuer and wait for the issuer to sign a new input, before giving you the merchandise. So idk how it would work reversing the transactions

rickydroll

4 hours ago

I thought it looked an awful lot like David Chaum's DigiCash. If they haven't brought Chaum into the discussion, I would be very nervous about using Taler.

[edit] Yes, he has been involved. https://www.heise.de/en/news/39C3-How-the-open-source-cash-G...

original https://chaum.com/ecash/

new and improved https://chaum.com/wp-content/uploads/2022/11/eCash_2.0_9-7-2...

Interesting stumble upon. https://chaum.com/wp-content/uploads/2023/11/Better-than-mon...

andylynch

4 hours ago

This is a proposal to operate a regulated payments processor, supervised by BaFin. All the usual, necessary regulations and consumer protections will apply under German law.

warkdarrior

4 hours ago

The announcement claims a "privacy-preserving [...] payment system". Are you saying this would come in conflict with German law?

fsh

4 hours ago

Taler is privacy-preserving for the payer, but not for the payee. This solves many legal issues such as tax evasion and money laundering.

none_to_remain

4 hours ago

I think it is the European sense of privacy where the government is implicitly inside everyone's trust circle.

abc42

4 hours ago

I think Taler is designed to be privacy-preserving while being able to comply with national laws. So not the currency you're looking for if you wanna buy something illegal.

lixtra

an hour ago

Nor something that you want to remain private.

pessimizer

31 minutes ago

Sounds like that's the only thing it's good for. As far as I can understand it's designed so the merchant has to report it in order to verify it exists. I find it really hard to understand, but I think the thing I'm missing is that the person who buys Taler in the first place simply has to trust the issuer - because they can't verify that they've actually received any without leaving a record i.e. becoming a merchant who is receiving Taler in exchange for cash.

So if you get Taler from your bank and spend it somewhere, the government can see it at your bank, and they can see it where it was spent, but they don't see you at all. You've done your trusting out of band.

If that's right, it could still be used for illegal and untaxed transactions if the entire chain was trusting out of band. I could use it to buy drugs without paying taxes if by dealer would be happy to shoot me later if they couldn't spend it at a retailer, rather than to check if it was good.

I still don't understand it. I've tried periodically for years, but I'm missing something.