11:47:44 I think I'm misunderstanding something: block reward (as contained in the block header) is, reward = base emission + tx fees - block penalty 11:48:40 so my thinking is that if I want to see the block penalty, I could use https://web.getmonero.org/resources/developer-guides/daemon-rpc.html#get_coinbase_tx_sum to retrieve the total fees and base emission and the reward from the block's header 11:49:16 but when I do this I'm getting block penalty = 0 for all blocks.. have I made a mistake in my code or my understanding? 11:59:10 oh, `get_coinbase_tx_sum`'s emission already has the penalty included 12:01:01 okay, well then my question changes to: how do I get a hold of the exact block penalty for each block? 13:02:32 https://attackingzcash.com/papers/attacking-zcash-for-fun-and-profit.pdf 13:03:01 Do the “Metaverse Metadata Attack” described on page 9 make sense? 13:03:16 The author claims it is also applicable to Monero. 13:54:27 just read it 13:54:33 No idea how it applies to Monero 13:54:43 And its merely a heuristic analysis technique, not even a vuln 13:55:20 selsta way overblown IMO, and his solution is to implement the inverse of Ring Sigs -- using fake zaddr outputs in each Tx 13:56:59 Curious for others thoughts, but doesn't seem that big of a deal, nor does it seem to apply to Monero at all. The dude is a HARDCORE shill for his own project, and refuses to use responsible disclosure in any situation 14:06:23 selsta: that methodology does not impress me too much. Metadata have always been discussed in terms of privacy, but it's simply analyzing heuristic informations. The paper does not contain so much detail about fetching information from alternative blocks (could they give wrong information to analyst?). 14:12:25 It also fails to mention anything about how costly the "solution" is in terms of storage or compute 14:12:37 z2z is already massively computationally intensive 14:13:51 i thought it was 'metadata multiverse' for a second 14:14:33 Anyway it seems that guy wrote this paper only to share their own project or to "build their show". He is literally spamming their website on every tweet mentioning Zcash. He does not follow any responsible disclosure procedures. 14:15:04 he's a shill, and I hesitate to use that word because its so loosely used in the space 14:15:10 But its all an attempt to grab money for himself 14:15:20 His last "disclosure" was a pitch for VC funding 14:16:44 I don’t see what kind of metadata he can come up with simulating blockchain history but maybe I’m not creative enough lol 14:18:02 I have the high suspect that he's not the original author and someone wrote that paper to boost his project. 14:18:09 Apparently with FPGAs or GPUs you can turn consensus into an oracle that exposes zaddr? 14:18:23 idk 15:24:22 Hello all 15:24:51 Am updating MLSAG/CLSAG performance tests today to specifically include balance checks, for better timing comparison to my new Arcturus code and data 15:25:01 Triptych has been updated for this already 15:26:03 It wasn't really necessary when only comparing {M,C}LSAG to Triptych, but becomes relevant when Arcturus is in the picture since it doesn't offload the balance check 15:26:28 I'll be interested to read that Zcash heuristics paper 16:19:06 BMO-noire: check out zero to monero second edition ch7 17:10:43 Possible solution to atomic swaps just announced: https://twitter.com/SomsenRuben/status/1259880548589240320?s=20 17:10:44 [ Ruben Somsen ⚡️🇳🅾️2️⃣❎ on Twitter: "SAS: Succinct Atomic Swaps Short video overview: https://t.co/JMY59tuW1h Protocol specs: https://t.co/ybTozovCjo Mailing list discussion: https://t.co/hFB69NVrfb ] - twitter.com 17:18:40 Does it assume the existence of non-interactive refund transactions? 17:18:58 If so, that is unsupported 17:22:49 I don't see an implication for that, but I'm not sure 17:23:01 Direct link to protocol doc: https://gist.github.com/RubenSomsen/8853a66a64825716f51b409be528355f 19:16:56 its btw ltc and btc, and it uses ecdsa adaptor signature --- has anyone carefully looked into ecdsa adaptors? 19:19:59 h4sh3d scheme can be easily adapted to work with ecdsa adaptors and DL equivalence proofs, in the absence of xmr refund txs 19:24:49 Being able to replace hash preimage proofs (which are complex and computationally expensive) with DL equivalence proofs (which are straightfoward and computationally cheap) would be a huge benefit 19:27:56 do you think community would fund 1-week work for a research and writeup on that? 19:30:04 Possibly. Perhaps ask for input over in -community? 19:30:48 I also have it on my list to eventually work on, but I don't have a monopoly on math 19:34:41 zkao: are you able to access -community? 20:37:06 yes, thanks, i poked the revelant party 20:37:21 *relevant 20:38:42 ? 20:38:43 I meant that you could send a general message to the community IRC channel to see what those participants think about funding such work 20:38:43 ? 20:46:22 i asked h4sh3d to do it 20:48:17 Ah ok 20:49:37 he commented last week that he would work on it he had funding for it 20:50:32 I think a lot of people in the community would love to have atomic swaps and happily fund anything moving it forward. 20:52:04 It's very possible. But I do not want to speak for the community (hence the suggestion) 20:54:09 For sure!