Torhoo onion mirror : torhoocc3yugradvhrppml2fin4xob7kgg7uf42s4xk7p6r5vzy62ead.onion

Tested XMRGlobal CLI Swap Tool – My Experience : Monero | Torhoo darknet markets

Tried out the XMRGlobal CLI swap tool today, figured I'd share my experience.

Did an ETH -> XMR swap, took about 30 minutes, which is expected. Everything went smoothly, no weird issues. Feels way better than using a browser-based swap. If you care about privacy, this look like a solid option.

/u/chatnoir P

1 points

4 months ago

This is weird. First post, new account, one day old, shilling this service.

/u/xmrglobal P

1 points

4 months ago

We had a similar review on X, even with a video… not sure if that counts as shilling...

/u/boluxthecrook

1 points

4 months ago

/u/hugbunter like this. Is this really abnormal? considering there are many lurkers here or people not wanting to show their real account reviewing a new site.

I haven't even looked at this site but it's post like this (again) that just go and shit on everything and instantly cast doubt in peoples mind, ensuring actually decent sites struggle to get off the ground.

/u/HugBunter A

1 points

4 months ago

It isn't abnormal as such for the reason you described, but it is normal to treat new accounts with more skepticism, especially with anything that could influence (negative or positive)

/u/xmrglobal P

1 points

4 months ago

Funny how you rarely see the same scrutiny when it comes to negative ratings.

Either way, having /u/Hug with such reply, negative or positive, is an honor!

/u/HugBunter A

2 points

4 months ago

I wasn't saying it should be and this is something I am in the process of improving for us all. You're completely right and that is why there needs to be a change, with anything, negativity always seems to be easier to believe and become accepted unfortunately.

/u/xmrglobal P

1 points

4 months ago

"I haven't even looked at this site" ... Thank you for your honest review!

/u/stylish

1 points

4 months ago

I fail to see the point in generating a captcha on a modifiable client side python script for a non-authenticated publicly accessible API route.

/u/xmrglobal P

1 points

4 months ago

This is true but this is not the final version. Captcha will be verified via API in the future.

Right now, this tool is a test to see how users interact with it, and we’ll continue to upgrade and improve it. Thanks for your opinion!

It’s open-source....modify and use it as you wish.

/u/root P

1 points

4 months ago

It isn't really open source if the entire service is closed source and the only thing that is open source is the wrapper that interacts with the website.

/u/xmrglobal P

1 points

4 months ago

Wasn’t this about the captcha and the cli?
While the CLI tool's code is open-source and allows users to see the data being sent to the API, the API's backend logic is closed-source. This design ensures that users can verify the data transmitted from their end, maintaining transparency.

/u/DrugHub P

1 points

4 months ago

Backends will always be closed source. We will also be launching an API and a demo client for vendors, only fancier. The client will be open source but the backend won't be. No sane darkent service will open source their backend for obvious reasons. API endpoints will be open and documented but again the backend will not. Maybe you ought to research how web APIs work.

/u/root P

1 points

4 months ago

Backends will always be closed source lol wut?

/u/DrugHub P

1 points

4 months ago*

Lol yeah. Do you even know what a backend is dickhead ? Ddg is your friend. Let me put it differently: How many darknet services published their backend source code, willingly that is ? Tochka open sourced their backend, Eckmar did (more or less) then there are a bunch of hacked services who had their backend "open sourced". Stay in your lane and don't talk about shit you obviously have no idea of.

Edit: Open source language does not equal open source code. Dread mostly uses PHP, known fact. Open source language, not open source code. We use something else, and many services are using languages your insignificant self never heard about and doesn't know they exist. Gtfo and keep trolling some place else.

/u/root P

1 points

4 months ago

I didn't even say anything negative I just said it isn't open source 😂
I thought xmrglobal said somewhere the service was open source but I'm reading their posts and I guess they didn't.

/u/DrugHub P

1 points

4 months ago

Misunderstanding then. It's a similar thing to what we are working on, an API and a client, a demo client mostly because users can change it if they wish, once you have the API documentation the clients are easily changed or rewritten using different languages. The client must be open source because asking anyone to run a closed source application on their machine would be madness more so being a darknet service.

But for the backend it's a bad idea open sourcing that. AFAIK only Tochka did, willingly at least lol.

/u/[deleted]

1 points

4 months ago

The Eckmar markets who leak their APP_KEY like /post/fc034fe1b76f95563770 can still be hacked with RCE via CVE-2018-15133.

https://torhoo.cc/go.php?u=YUhSMGNITTZMeTl1ZG1RdWJtbHpkQzVuYjNZdmRuVnNiaTlrWlhSaGFXd3ZRMVpGTFRJd01UZ3RNVFV4TXpNPQ==#

return $unserialize ? unserialize($decrypted) : $decrypted;