[abecedarius]

Thanks. You're talking about section VI.c of http://zerocash-project.org/media/pdf/zerocash-oakland2014.p...

It's saying if an attacker extends the blockchain just for you, and makes only you know about its forked blockchain, they would then know that if someone creates a transaction against the unique part of that chain, it must've been you. That attack appears to have nothing to do with the Zcash company as an insider -- the software is open source and hosted from Debian, etc. Am I misunderstanding? How does Monero stop an analogous attack?

(The paper continues "To mitigate such attacks, users should check with trusted peers their view of the block chain and, for sensitive transactions, only spend coins relative to blocks further back in the ledger (since creating the illusion for multiple blocks is far harder)." I don't know whether current software does this for you -- that paper's from 2014.)