02:40:00 Defcon 28 is cancelled and enters safe mode with networking. 02:40:00 https://www.defcon.org/html/defcon-28/dc-28-index.html 02:40:21 smart move 02:40:34 though I can't imagine video conferencing over TOR is going to be a good experience 02:41:17 We have the option to participate as a virtual village, I think this involves receiving and managing our own discord group on Defcon servers. 02:41:48 discord? that only does audio & text. no video? 02:41:51 hyc: That sounds nasty, yes. 02:43:09 hyc I just have special news about villages, the other teams like mainstage may have a different approach. 02:43:23 gotcha 02:44:11 Can you fiddle play on discord? I heard it has rich features. 02:48:41 I guess the audio should be fine 02:48:57 haven't tried it 02:49:14 I wonder if the codecs are optimized for speech though, instead of broadband audip 02:49:20 s/audip/audio 02:49:20 hyc meant to say: I wonder if the codecs are optimized for speech though, instead of broadband audio 03:24:45 "There are too many different platforms for one size fits all so instead of us picking a winner we will act as the coordinator pointing everyone where to go" - Dark Tangent 03:25:46 if discord sucks, we could use jitsi 03:27:14 guess so 03:28:29 Discord is great 03:28:36 It's proprietary af 03:28:49 But I use it a ton and they've got a solid product 03:29:10 I only recently started using it because of a few android games I'm playing 03:29:21 only using text chat in it 03:29:47 tried the voice channel for a choir I'm in, but the audio lag is unworkable 03:39:47 A synchronized thing like that is understandably an issue 15:55:55 Meeting in 1 hour 16:00:04 .time 16:00:04 2020-05-09 - 16:00:04 16:29:37 anyone here have a lenovo carbon x1? 16:50:02 kinghat[m]: nope, but the motherboard fried on my Yoga 720 after 2 years 16:50:40 I'm very much not over that lol 16:51:34 ah damn 16:51:55 looking at picking up a used gen 3 carbon x1 16:52:25 iirc I've heard generally good things 16:55:07 Hello. Test ping. 16:55:10 Seems okay. 16:56:11 problem is the ram/cpu are soldered on 16:56:38 yeah it's super thin right? 16:57:08 kinghat: That comes off easily with tacky flux and a hot air solder station, I just removed a 88-pin BGA. 16:57:22 Maybe if sgp is right and the parts are thin, then not so easily. 16:58:28 its for sure much thinner than say the t series. kinda close to a mac book air i think. 16:58:54 I have a T490 for work and it's plenty thin for me 16:59:06 msvb-mob: i feel like i'd dick things up, though, i did search out youtube videos for replacing the ram. 16:59:38 thought about getting a t540/50 and upgrading it 16:59:39 Oh I think sgp meant the whole device is thin. The soldered on parts are only difficult to remove if they are the thin things. 17:00:09 the meeting is starting now, so let's postpone this 17:00:18 0. Introduction 17:00:23 We would like to welcome everyone to this Monero Community Workgroup Meeting! 17:00:27 Link to agenda on GitHub: https://github.com/monero-project/meta/issues/461 17:00:34 Monero Community meetings are a discussion place for anything going on in the Monero Community, including other Monero workgroups. We use meetings to encourage the community to share ideas and provide support. 17:00:38 1. Greetings 17:00:50 hi 17:01:33 Hello. 17:02:01 hi 17:03:18 ping needbrrrrrrr90 ErCiccione[m] sarang xmrscott[m] 17:03:51 the mighty Salazar is on vacation, so I'll let him be :) 17:04:08 2. Community highlights 17:04:10 * needbrrrrrrr90 grumbles 17:04:13 See Monero weekly highlights at https://revuo-monero.com 17:04:14 * needbrrrrrrr90 rolls over 17:04:19 Check out resources at https://communityworkgroup.org. It also has a calendar you can subscribe to for meeting reminders. 17:04:36 We have a new mod on xmrtrader 17:04:43 Xmr2020 17:04:43 I saw, very nice 17:05:01 have views/comments been up? 17:06:07 Nope 17:06:09 Prep for it 17:06:14 got it 17:06:22 Mostly because of Monero Means Money, the MCW YouTube channel's monthly views are up >999% since last month. Monthly impressions are up 468%, monthly CTR is up 53%, monthly watch time is up 967%, and monthly new subscribers are up 832% 17:06:43 The views for the film are not slowing down much either. For the most part, it’s a linear line https://i.imgur.com/Gs9acTR.png 17:07:14 I referred Diego to Messari’s Mainnet 2020 conference. I emailed them asking that they include a Monero perspective and they seem to be open to it so far. We should continue doing this (I can give you a receive-only/forwarded @communityworkgroup.org email address if you want to do outreach) 17:07:38 Does anyone else have community (non-workgroup) updates to share? 17:08:04 I was hoping to ask rehrar about his nonworkgroup virtual meeting research. 17:08:23 Does anybody know how far he got with that, anything conclusive (best platform) or did he write anything searchable? 17:08:50 He probably won't be here today, but I know he likes using Mozilla Hubs 17:09:20 and I've heard Zoom's breakout feature actually works, but I haven't tested that and it's not very Monero-friendly 17:10:13 for other questions on this, can you bring them up during open ideas time? 17:10:35 So sgp do you think rehrar abandoned the virtual world servers, the ones that felt like minecraft? 17:10:46 Okay, we can review later on... 17:10:50 3. CCS updates 17:10:55 Funding required: 17:11:01 All proposals are fully-funded! 17:11:09 Ideas (to be discussed): 17:11:15 Translation of Mastering Monero into Brazilian Portuguese (37 XMR) https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/137 17:11:19 luigi1111, I thought this was supposed to be merged already? ^ 17:11:49 unless there are other comments on this one, I believe it already should have been merged 17:12:32 if anyone has questions please do it 17:12:46 Compilation time reduction and housekeeping (52 XMR) https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/138 17:12:58 xmrscott[m] shared his support for this in the proposal 17:13:30 I encourage the Monero devs to include a summary of their discussions there 17:14:37 Research post-quantum strategies for Monero (603 XMR) https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/142 17:14:49 I added a comment that I like the new scope for this proposal 17:15:05 Yeah, Isthmus and I had discussed the scope and deliverables 17:15:14 (note that I am not part of that CCS, just offering my advice) 17:15:42 .0ok 17:15:43 a blog post helping discuss the matter clearly will be very useful 17:16:22 has anyone else had a chance to review this proposal? I don't think Isthmus advertised it much yet 17:17:39 I'll ping him and ask him to promote it 17:17:47 Any other CCS comments before we move on? 17:17:56 I can also ask him to discuss it at the next research meeting if he's available 17:18:27 Oh, I want to mention that the Monero Audit Workgroup is recommending the CLSAG audit and will be making a CCS proposal for it shortly once the final SoW is completed 17:19:17 total cost is about $15k, though some of that has already been paid for by previous donations 17:19:38 We might need a CCS proposal for Defcon 2020-2021 storage costs 17:19:46 I feel summoned. 17:19:58 payment for storage ends August 17:20:02 AJS we have a bit leftover, but I don't know if it will cover the whole year. 17:20:09 How much is it for the year? 17:20:09 The recommended CLSAG audit is for Teserakt, JP Aumasson's new company 17:20:14 (he was formerly with Kudelski Security) 17:20:15 I manage to negotiate monthly fee down to $85 from $115, which is comparable to self-storage costs. 17:20:33 I think we should have enough. 17:20:40 Inventory: https://monero.sandcats.io/shared/rByAjvOR-VPt6IXkh9diOZDBHteIzBvNF0KKVmBvNne 17:20:41 I'll message you. 17:20:48 picture of stuff: https://imgur.com/amxK7BN 17:20:57 okay 17:22:06 CCS for a year of storage seems reasonable 17:23:27 Any other final comments? 17:24:01 4. Workgroup report 17:24:08 is selsta here? 17:24:15 a. Daemon/CLI workgroup 17:24:30 the devs are preparing for the 0.16 release 17:24:38 it will not require a hardfork 17:24:54 yes 17:25:11 selsta: do you have any other cli/monerod updates? 17:25:18 CLI / GUI code are ready, we will branch and then test for a week 17:25:26 and then release 17:25:31 testers welcome :) 17:25:31 Test failed 17:25:35 Lol 17:25:56 good bot 17:26:10 release contains over 500 commits so it will be a major release 17:27:40 Dandelion, bulletproof improvements, daemon wallet communication speed improvements, and a lot of other minor stuff and bug fixes 17:27:54 *Dandelion++ 17:27:56 that’s it 17:27:59 They're different :) 17:28:25 I know but the Bitcoin Dandelion++ reference implementation also only calls it Dandelion so it got confusing 17:29:02 some coins don’t even know if they have Dandelion or Dandelion++ lol 17:30:39 thanks selsta 17:31:01 b. Localization workgroup 17:31:21 ErCiccione doesn't seem to be here, but they posted a call for translators this week: https://www.reddit.com/r/Monero/comments/gf8js7/call_for_translators_new_gui_release_approaching/ 17:31:22 [REDDIT] Call for translators: New GUI release approaching, we need to translate the new strings! (self.Monero) | 65 points (93.0%) | 8 comments | Posted by ErCiccione | Created at 2020-05-07 - 15:23:32 17:32:11 skipping c since selsta already covered it 17:32:34 (unless there are gui-specific things, and if so please interrupt me) 17:33:37 actually I think we can skip to f, since the other workgroup reps don't seem to be here. Please comment if you have an update 17:33:40 f. Monero Research Lab 17:34:09 Hi 17:34:23 Working on the CLSAG audit scope and associated materials 17:34:44 as well as additional implementation proof-of-concept code for Triptych and Arcturus 17:34:56 and some updates to in-memory key encryption 17:35:19 Nothing too earth-shattering 17:35:56 Others have been focusing on future updates to transaction structure for better uniformity 17:38:35 thanks sarang, anything else? 17:38:44 That does it for me 17:38:55 okay 17:38:57 5. Open ideas time 17:39:04 does anyone have an idea to share? 17:40:46 currently Monero Means Money has subtitles only for English and Portuguese, perhaps the Localization workgroup could solicit volunteers for this sometime 17:41:14 There is a new project for our DC28 participation if we choose to virtualise. 17:41:18 https://taiga.getmonero.org/project/michael-monero-village-at-defcon-planning/ 17:41:41 Defcon 29 in Las Vegas was cancelled yesterday, in case we didn't hear the news. 17:41:56 I was looking at weblate's documentation and it's possible to use it for subtitles 17:42:07 And replaced by 'Defcon Safemode with Networking' involving Village Discourse servers and whatever we want to uniquely set up. 17:42:24 Yeah idk about connecting remotely to defcon 17:42:27 Would make really easy to contribute translations there 17:42:29 Just feels like a baaaad idea 17:42:57 Guess I could connect through my burner smart fridge 17:43:26 needbrrrrrrr90: Other villages like Skytalks completely cancelled their participation. 17:43:48 imo we should expect to participate and see what that looks like 17:44:09 I suspect we should socially distance from defcon, for virus purposes 17:44:19 But if you want to roll the dice 17:44:33 In this community meeting it's just a sneak preview, but we can discuss in more detail during our first (and last?) DC28 meeting, sometime I'l try to schedule it and post on IRC and Github. 17:44:43 Thanks 17:44:49 do we need to remotely connect? I'm out of the loop from these discussion 17:44:58 s/discussion/discissions 17:44:58 sgp_ meant to say: do we need to remotely connect? I'm out of the loop from these discissions 17:45:15 Basically my concern is that we will attract people who both have money on their comouter and aren't cautious, and defcon is known for 0days and such 17:45:18 sgp: There will be no Vegas on site installations, so everything is IP remote yes. 17:45:21 It feels like an easy target 17:45:27 -xmr-pr- [meta] SarangNoether opened issue #462: Research meeting: 13 May 2020 @ 17:00 UTC 17:45:27 -xmr-pr- > https://github.com/monero-project/meta/issues/462 17:46:24 hyc already gave some opinions and useful information about Discourse, if you want to scroll to IRC discussion about ten hours ago. 17:46:38 needbrrrrrrr90: can we try to mitigate that by not using Defcon's services? Is that a requirement? 17:47:01 I'm not sure sgp, we can talk about it in the meeting 17:47:13 And I'll get informed so I'm not repeating already said stuff 17:47:24 netrik182: sounds helpful to allow non-coding translators to contribute w/o dealing with github 17:47:26 sgp: I think there are no real requirements, if we don't use the Discourse server it may seem we're not participating. We could always make it a landing page and stick a topic permanent pointing to our real services, like a 302. 17:47:31 wait are we talking about Discord or Discourse? These are two totally different things 17:47:32 we could use our own Jitsi server 17:48:05 Defcon Discord is optional 17:48:36 Oops, I'm not sure sgp. 17:48:39 It's even worse than I thought. I wrote 'discourse' but the server they want to use is called 'discord.' 17:49:00 That's not even hosted by Defcon. That's hosted by Discord themselves, no? 17:49:17 sgp: Probably yes, and hyc wrote that it's not opensource. 17:49:37 I think needbrrrrrr90 wrote something as well, but strangely positive. Like, it's proprietary but very useful. 17:49:58 We should probably expect to use their Discord for chats (or Jitsi), and then a livestream like before for events/talks 17:50:04 For what it does, there's nothing like it. It's primarily for the game community, but they've expanded their suite of offerings 17:50:16 discord is great 17:50:26 Multi way video/voice chat now makes it a serious contender agaisnt jitsi et al 17:50:35 Discord is kinda killing it with convenience. The new video conferencing just.... works 17:50:38 So that's why I made the first (and only one so far) user story in project management about 'researching server technology.' To figure out what we want to do. 17:51:27 Discord is proprietary thereby a security threat particularly when its use is related to Defcon 17:51:56 ArticMine: Do you prefer some alternative, do you like jitsi? 17:52:10 Ehhh, open source doesn't necessarily mean not a security risk, because defcon 17:52:15 I suggest we stay with jitsi 17:52:39 intj440: yes, the only thing to note is that if there are synchronizations to be made, that will require some knowledge and an external tool (like Aegisub). But this applies to github contributions as well 17:52:42 I think this will largely depend on where attendees are tbh 17:53:27 FLOSS at least means a level playing field between the white hats and the black hats 17:53:44 we can still use Jitsi + YouTube for the speakers/events, but we may need to have a Discord presence to greet and answer questions, etc 17:54:01 Why? 17:54:17 marketing reasons. gotta meet people where they are to some extent 17:54:55 Fine and then send the to jitsi 17:55:02 them 17:55:06 yeah we can always do something like that 17:55:46 Let's not forget whatever research rehrar determined about things like Mozilla Hubs, that might be nice to mix in. 17:57:00 yeah 17:58:01 any final open ideas? 17:58:25 I might do a trivia session tomorrow if I'm bored 17:58:42 Sounds fun 17:59:53 6. Confirm next meeting date/time 17:59:57 The next community meeting will be in 2 weeks on 23 May at 17:00 UTC. 18:00:05 The next Coffee Chat is on Saturday 30 May at 17:00 UTC 18:00:10 Conclusion 18:00:14 That’s all! Thanks for attending this Monero Community meeting, and we hope to see you on r/MoneroCommunity and #monero-community. Take care, STAY SAFE AND ISOLATED, and know that change starts with YOU. 18:00:22 Thanks sgp, good meeting. 18:01:57 thanks sgp_ 18:06:07 thanks sgp_ 18:33:00 Sorry, couldn't make it in time for the meeting 18:33:53 netrik182intj440 : I think wouldn't be an issue to add the subtitles on weblate. If it's something we want to do we can organize 18:53:25 needbrrrrrrr90: Historically people don't waste 0days at DC with the exception of *maybe* some years for the official CTF when there's black badges to be won 18:57:23 Spending 0days at DC is generally considered a waste. If people want to avoid using Discord, could always either setup a bridge to MatterMost or Matrix, and then in theory you never have to DL or make a Discord bin 19:03:31 If anything, similar to Zoom, you're now likely to have a bunch of bored pentesters looking at Discord since DT mentioned Discord, reporting bugs/exploits for bounties 20:02:53 ErCiccione: nice, here is the github repo hosting the subtitles and some instruction I wrote to help contributors. It's managed by ajs https://github.com/ajs-xmr/moneromovie 20:03:05 I'll be glad to help organize it 23:24:11 Worst case, buy a burner mobile home