00:29:38 <bemore> I don't understand why people are getting suddenly worked up over transparency when they haven't bothered to ask in the first place. These channels are active and responsive.
00:35:28 <selsta> A lot of people asked for core team transparency.
00:39:53 <selsta> The first report is a step in the right reaction.
01:10:48 <bemore> oh, well nevermind me if they have :P
08:50:53 <rbrunner> Supercop was merged? Where can I see that? Was not able to find the PR / commit.
08:52:12 <rbrunner> Ah, never mind, found it: https://github.com/monero-project/supercop/pull/3  It's not the master branch, but the monero branch there
08:53:09 <selsta> you can test the PR here: https://github.com/monero-project/monero/pull/6337
08:55:09 <rbrunner> Alright, thanks. Just because somebody today on Reddit was crying out for good news about Monero :)
08:55:09 <selsta> though compiling the monero-wallet-crypto-bench bin requires some cmake magic
08:55:38 <rbrunner> Uh, with "cmake magic" I am sure not to apply
08:56:42 <selsta> I can explain it if you want to test it on your system
12:55:04 <ErCiccione[m]> About yesterday's discussion. I would like to have some info from the core team about their plan to avoid the general fund to get drained in a year or so. The suggestion from luigi1111 to move rehrar's job to a ccs system + core filling the shortcoming sounds like a good short term solution to me.
12:57:32 <ErCiccione[m]> I'm aware my tone can often sounds harder than it actually is, so i rephrase the first part from "i would like some info" to "i would like a conversation to be started about it"
12:57:44 <ErCiccione[m]> If that makes sense :D
15:05:53 <bemore> ErCiccione[m] I don't participate much here, but in my experience with places that have a diffusion of responsibility, conversation topics need to be directed at individuals rather than an open room. I don't know how the core team operates, but I bet if one of them felt responsible for this specific issue, he would help coordinate discussion in a positive way.
15:42:54 <ErCiccione[m]> I see your point, but i'm confident they are aware of the issue after yesterday's discussion and will discussec the feedbacks received yesterday. I'm merely making some pressure, because i forsee problems if the issue is left to collect dust.
15:45:58 <gingeropolous> nonsense, monero's goin to the effin moon. all our prollems solved. mo money, no problems, thats how the song goes
15:52:39 <bemore> well, you can be confident or be certain :P
16:18:51 <sgp_> ErCiccione[m]: we will definitely discuss it to some extent tomorrow during the Coffee Chat
16:19:16 <sgp_> But it's meant to be a casual discussion, not for formal decisions lol
16:44:52 <Inge-> Looks like malicious code allowed someone to print an extra 300M rvn
16:45:57 <sech1> yeap
16:47:56 <hyc> https://twitter.com/OhGodAGirl/status/1278873356368924673
16:48:08 <dsc_> > A community code submission caused a bug that has been exploited. Law enforcement has been notified and is working with us.
16:48:21 <dsc_> ;')
16:54:04 <selsta> a wallet bug can mint coins?
16:58:13 <hyc> with an incompetent enough dev team, anything's possible :P
17:01:33 <sech1> what does law enforcement has to do with it? I'm not a lawyer, but I can't see any law that was broken
17:01:51 <sech1> Code reviewed and checked in? Then it's a new consensus.
17:01:51 <hyc> yeah that sounds like a stretch
17:01:57 <sech1> attacker played by the rules
17:02:17 <sech1> it's like Ethereum DAO hack
18:36:09 <midipoet> unless there was a responsible disclosure agreement that was breached? would that be illegal?
19:27:37 <hyc> agreement between which parties?
19:38:49 <fluffypony> I don't know if the code submission was malicious
19:39:00 <fluffypony> or they're trying to say that it's not "core devs" that caused it
19:40:25 <hyc> core or not, nobody caught it in reviews
19:40:49 <hyc> but since they know the offending commit, they should have some idea of the type of person who wrote it
19:40:52 <derpy_bridge_> <[discord] Kayla#5718>: it was malicious but since the bug abuse been done from unknown party then that's just the perfect scam
19:43:34 <derpy_bridge_> <[discord] Kayla#5718>: on one end code been pushed (that dev could just be like they didnt see that coming) and on the other end there's the other party (which could be the same but cant prove it) that did use that fuck up to go brrrrrr
19:46:11 <hyc> yeah, hard to believe the bug was accidental and an unrelated party discovered it and exploited it
19:46:12 <sech1> Are the details published yet? I'd like to see that sneaky code
19:46:22 <fluffypony> no not yet
19:46:26 <fluffypony> they released closed-source bins to fix it
19:46:42 <hyc> talk about flawed processes
19:47:09 <hyc> ... if this happened to us, would we also release closed-source binaries to fix?
19:47:34 <hyc> "this" meaning a bug discovered long after the fact
19:47:34 <sech1> last time we had an inflation bug, the fix was public but not announced
19:47:46 <sech1> until deployed
19:47:47 <hyc> sech1 yes but nobody had exploited it
19:48:30 <fluffypony> hyc: no, we wouldn't
19:48:50 <fluffypony> if it's REALLY bad we would discretely give mining pools and exchanges a patch
19:48:55 <fluffypony> and have them build from source
19:49:08 <fluffypony> and then once enough of them they confirmed they'd updated with it we'd make the patch public
19:49:33 <hyc> makes sense
19:49:43 <fluffypony> we've done that once before iirc
19:56:12 <Inge-> 300M RVN is a nice $5M.
19:58:04 <tevador> that was an expensive audit
20:22:03 <midipoet> lol
20:23:33 <hyc> $5M is only scratching the surface. the reputation cost will be more
20:24:30 <hyc> there are thousands of projects. why invest in one with a proven loss?
20:58:40 <needmoney90> because historically most projects that had that happen dumped, and the performance after the aftermath was actually decent (from memory) 👀
20:58:50 <needmoney90> weak hands leaving and all
20:59:15 <needmoney90> I've never tried to play that game tho
21:18:41 <niocbrrrrrr> bytecoin inflation bug was exploited and when announced it pumped
21:20:32 <hyc> talk about stupid money
21:20:54 <niocbrrrrrr> it may have been added to an exchange or two afterwards as well
21:21:11 <hyc> even knowing the devs are dishonest
21:22:41 <niocbrrrrrr> ofc everything pumped at that time
21:37:50 <sgp_> Weigh that against us all talking about RVN here. Free marketing
21:47:46 <derpy_bridge_> <[discord] Kayla#5718>: bad press is good press eh 😛
21:48:30 <derpy_bridge_> <[discord] Kayla#5718>: it still getting the word out, to communities that didnt know aobut it then it still brings some more people that start googling about it [...]
21:51:17 <derpy_bridge_> <[discord] Kayla#5718>: batman (bruce) pinging fullypony on twatter, monero irc channels now talking about it
21:51:50 <derpy_bridge_> <[discord] Kayla#5718>: i think it would only be fair if the word of monero being brought over their communities too, just sayin uwu
21:54:05 <derpy_bridge_> <[discord] Kayla#5718>: gotta brainstorm on how to get bad press on monero since that's the way to go
23:25:11 <shillo> when will xmr get its emoji?
23:25:16 <shillo> even tron has one
23:25:19 <shillo> https://twitter.com/SesameseedOrg/status/1279193644650557440
23:27:02 <dsc_> .soon
23:27:02 <monerobux> Two weeks™
23:55:18 <derpy_bridge_> <[discord] Kayla#5718>: :xmr_monero:
23:55:52 <derpy_bridge_> <[keybase] kaylasu>: :xmr_monero:
23:57:59 <derpy_bridge_> <[discord] Kayla#5718>: @shillo that's some not very subtle shill u be doing right there tho 😛
23:58:33 <needmoney90> thats about as subtle as a brick through a window
23:59:13 <needmoney90> ban
23:59:53 <derpy_bridge_> <[keybase] kaylasu>: oof, rude x)