none of those will be the original name, none of those will be official channels

I see no need to leave, and it would hurt us.

it has always looked strange to me that we rely so heavily on 3rd party platforms

The style of discussion, no voting, forums are more linear. Not saying that a forum would not work, I just don’t see it as a direct replacement.

you could clone the reddit UX if that's all you're concerned with

I think we should do backups of Github issues and PR discussion/ Monero subreddit / Stackexchange

hyc I've been fighting this fight for so long :P

But moving to a forum would also mean losing a portion of the broader community.

selsta: does the "broader community" do anything?

Yes.

how so? you can always paste URLs to anything you want to reference

anyway.... the suggestion is only worthwhile if it actually gives us other benefits. I've seen plenty of old forums get overrun by spammers.

hyc: not sure if I understand

if we switched to a forum and that happened again, it would just suck time to clean them up, so, whatever

but I don't see that moving off reddit inherently means we lose contact with "the broader community"

I don’t particularly like Reddit but it is extremely popular.

If discussion moves to a different place only those really interested would move.

You could argue that’s a good thing but I don’t see Reddit as a place for serious discussion anyway.

It’s just social media.

it seems to be the bulk of our community discussions now

hyc agreed, I think this is the problem

Reddit can still be a place for the masses to discuss Monero

but we should move serious Monero discussions, and announcements to the forum

and link to that from Reddit

hmmm. well, making people look in two places for complete info is a drag

why is our primary way of making announcements through a centralized platform that we have no control over?

Don’t we already use Github issues for technical discussions like the PoW change?

And the Monero blog for announcements?

I just don’t think we need another forum. We have so many places lol

the forum didn't work well before and that was before there was a spam issue there

github works for discussing actual code. even that is kind of lousy.

I mean the meta repo.

the length of the PoW discussions made them a pain to navigate

nioc the software itself was also kind of the worst

I had no issue with it and that says alot :D

but it certainly had limitations

I really don't see the difference between a subreddit and any other webforum.

We have multiple subreddits, the website blog, Github meta repo, Stackexchange, Irc, telegram

do we need another forum? :P

no. we need fewer.

but on infrastructure that we actually control

anyway, it obviously has pluses and minuses so I'll leave it

yep

ideally everything would be self hosted but that comes with its own downsides

yes, more management hassle for us

like we have seen with Gitlab, no proper CI integration

SSH access!

I would not mind getting rid of the subreddit without a replacement

Technical question -> stack exchange

Super advanced question -> #monero-dev

On-topic discussion -> #monero-community and github/gitlab

¯\_(ツ)_/¯

o/

Motivational speeches -> PRIVMSG dsc_

I'd love for us to have an official forum that has a bitcointalk style of threads

It allows for deep discussion and you can quote stuff from years back

I think the issue with our previous forum was mainly the format and the software

Same.

Just DO NOT use bitcointalk unless there is an update to make it mobile-friendly

I don't think we should get rid of our subreddit, it has a lot of activity and is one of the biggest crypto related subreddits

too big to fail^(tm).

Regarding forum software

Does anyone like Discourse?

I find it confusing but I don’t know what alternatives there are.

in my humble opinion the best forum platform i've used is XDA Developers, but it's not open source. unless a reverse-engineering magician can get the source code, our hands are tied.

with that IOTA wallet security breach story, all jokes aside, do we have any vulnerability testing /audits for the CLI/GUI ? do we have bounties up on HackerOne that cover them, or some other such measure?

Do we know what the issue with the wallet was?

i think they are still trying to understand the issue

midipoet: HackerOne bounty covers CLI/GUI.

I think audits are unrealistic, at least it would make sense to audit consensus related code first.

selsta: thanks! i thought it probably did, but nice to be reassured.

Let’s wait for IOTA details first.

They use node.js and have a lot of dependencies which are a common attack vector.

selsta: agree that audits are expensive, and the bounty mitigates the issue somewhat. i guess it's good to acknowledge that individual security of funds usually comes down to the wallet/private key level, of which the wallet is, at least partially, responsible for (afaiu).

Is there someone from Cake Wallet here?

Soimatter: I'm talking to vik on telegram right now, he's available if you have an account there. Knifeofpi is supposed to be here for IRC, but...isnt. For some reason.

They're figuring out why no one is on IRC atm, should have a rep online soon

Hi - did somebody need me?

SoiMatter: ^^^^

SoiMatter: ^^^^^

SoiMatter: ^^^^^^

Thanks guys. KnifeOfPi I contacted Mykola!

OK!

Nioc Inge- needmonero90 thank you!

my job is done, I can go outside now SoiMatter

Yes sir

Interesting spike in xmr transactions on the 12th

Haven't spiked like that since minko.to time

people buying NSFW Valentine's gifts without their partners knowing.

hm

actually plausible? But its a bit close to vday

midipoet: Re: security, our attack surface for both CLI/GUI are small(er) than Electron based apps

hello all

heya endogenic

dsc_: this may well be true. i haven't a clue to be honest.

dsc_: did you see that the IOTA network freeze was possibly due to a backdoor in one of the npm dependencies of their wallet? :D

that means someone thought IOTA was valuable enough to explicitly target?

some dev with wildly distorted view of reality

one attack I thought was creative from a technical standpoint was: zdnet.com/article/users-report-losi…-in-clever-hack-of-electrum-wallets

Exploiting rich text rendering in Qt from external entities

The Monero GUI actively avoids using richtext for that very reason