-
selsta
yes
-
DrHanner
cool i found one
-
selsta
-
selsta
please report through hackerone and make sure to read the Vulnerability Response Process
-
DrHanner
do they understand german ?
-
selsta
most likely not
-
sgp_
Isthmus: did you have a chance to segregate the coinbase and non-coinbase spends for Bitcoin?
-
DrHanner
so send the report
-
gingeropolous
DrHanner, if you can't translate to english, just use google translator or something
-
gingeropolous
but yeah send the report :)
-
DrHanner
darn i so want to talk about it :P
-
moneromooo
Oh yeah, send a confidential text to one of the biggest info slurpers around. Can't miss.
-
DrHanner
lol i see your point
-
DrHanner
but it is easy fixable so that is a plus
-
DrHanner
else i am pretty impressed with monero
-
DrHanner
quite a solid algorithm
-
moneromooo
Please ping me when it's filed, so I can check. There'll be a release soon so it'd be nice if whatever you found can be fixed in that.
-
DrHanner
i send it like 40 minutes ago
-
moneromooo
Thanks.
-
moneromooo
DrHanner: I replied, not sure if you're getting notifications (I am not).
-
Isthmus
Hey atoc - sorry for the belated followup, was super swamped today. Insight started with professional training Fellowships for specialized tech fields, including my blockchain engineering program ( www.insightconsensus.com )
-
Isthmus
But now we bring our best researchers and developers in-house as “Residents” and I help connect them with exciting work in open-source ecosystems. Right now I’ve got teams working on Monero, Zcash, Polkadot, ICON, and have a half dozen more queued up. Ping me if you have any ideas :- )
-
Isthmus
-
Isthmus
Huh, snippet was unexpected
-
Isthmus
@sgp_ Turns out that finding the BTC coinbases is easy (SELECT <whatever> FROM `bigquery-public-data.crypto_bitcoin.transactions` WHERE is_coinbase IS TRUE) but identifying when they’re spent isn’t quite as trivial.
-
Isthmus
However, once the spend time feature is engineered, should be easy enough to generate a summary dataset by adding … COUNT(whatever) … GROUP_BY(spend_time)
-
» Isthmus upvotes DrHanner for responsible disclosure
-
DrHanner
i saw it and responded moneromoo
-
DrHanner
hard to explain to a non coder moneromoo
-
sarang
moneromooo is quite the coder
-
moneromooo
Replied.
-
DrHanner
i send a pseudo program
-
moneromooo
Thanks.
-
DrHanner
u are welcome
-
DrHanner
else impressive code
-
DrHanner
moneromooo ?
-
moneromooo
Yes ?
-
DrHanner
i googled to reverese black2 if you knew the key is trivial :P
-
moneromooo
It is best not to give hints of the claimed exploit on a public channel :P
-
moneromooo
Anyway, I'm off till tomorrow for now. I'll reply to any new message on H1 then. Good night.
-
DrHanner
nite
-
DrHanner
well well
-
DrHanner
anyone from the monero security team here or a monero developer ?
-
sarang
Since transaction volume was discussed elsewhere, here's a fun plot
usercontent.irccloud-cdn.com/file/ROjiFNaH/tx.png
-
sarang
"Clear" means transactions where amounts are in the clear
-
sarang
"Semi" means transactions where inputs are in the clear, but outputs are hidden via commitments (transitioning to the CT model)
-
sarang
"Opaque" means transactions where inputs and outputs are hidden via commitments (the CT model)
-
sarang
-
UkoeHB_
neat graph; it's good to see tx volume at/above the level witnessed in the 2017/18 bubble
-
sarang
Yeah
-
fort3hlulz
super cool graph, thanks for sharing]
-
sarang
I'm adding on the more recent months
-
fort3hlulz
Good to see the vast majority of pre-RCT inputs migrated quickly
-
sarang
(this is up to block 2M, chosen for simplicity)
-
sarang
There are still a nonzero number of non-opaque transactions, due to transitioning old funds
-
sarang
but it's clear that these are edge cases
-
sarang
I'll post updated versions of these once my scripts finish their updates
-
sarang
I'm working them into an easy-to-use script that anyone can run incrementally to produce consistent data of this kind
-
sarang
I think having this data readily available is useful
-
UkoeHB_
the low volume of 'semi' transactions implies most outputs are spent temporally close to where they were created, which broadly aligns with assumptions about spend patterns
-
sarang
Yeah, even though we occasionally see apparent spikes that are clearly a mass transition of many old outputs
-
sarang
If anything, this is a good reminder of how useful protocol enforcement can be
-
sarang
The transition was extremely fast
-
sarang
I'm also running a similar plot, but showing only deducible transactions over time, classified by type
-
sarang
If anyone has better ideas for terms for these types, let me know; I just made these up for the purposes of this analysis
-
sarang
I don't like saying "pre-CT" and "post-CT" since that's not an accurate description
-
moneromooo
How about BC (before confidential) and AD (after denominations) ?
-
moneromooo
Or CE (confidential enabled) and BCE (before confidential enabled) if we want to go more modern.
-
sarang
:D
-
sarang
Of course, you can still have non-opaque txs after the CE cutoff...
-
sarang
I think it might be confusing to some people since the transition point didn't ban non-opaque transactions (or you couldn't spend old funds)
-
sarang
This tripped up the authors of that preprint, for example
-
sarang
Or: clear, transition, confidential?
-
fluffypony
lol moneromooo
-
UkoeHB_
"Or: clear, transition, confidential?" I like this, although "clear, CT-transition, and ringCT" might be better since we could in the future have "clear, CT-transition, ringCT, Arct-transition, Arcturus"
-
sarang
We can always update the names when that happens
-
sarang
Perhaps the biggest fault of RingCT is its uncool name
-
fluffypony
it was before we were cool sarang
-
sarang
How cool are we now?
-
fluffypony
way cool
-
sarang
FWIW my original internal name for Triptych was LRS-56 :(
-
sarang
LRS = linkable ring signature, 56 = issue 56 on research-lab repo
-
jwinterm
honestly triptych sounds like some disease you get from eating parasite infected pork or something
-
jwinterm
I'd say ringct is cooler
-
sarang
:(
-
jwinterm
lol sry
-
fluffypony
if we had to do it all over again we'd give it a cool name like Zetaorium
-
fluffypony
or Infrablaze
-
sarang
Arcturus is way cool
-
fluffypony
-
sarang
ahahahha that's fantatic
-
sarang
If I knew this existed, so many preprints would have different titles...
-
jwinterm
arcturus does sound like a cool transformer or something
-
sarang
It's from a Simpsons episode
-
moneromooo
Oh, I thought it was from space objects :(
-
sarang
That's where the Simpsons got it!
-
niocbrrrrrr
we already have a draft from the auditors but the CCS proposal is not yet moved to funding required
-
niocbrrrrrr
fluffypony luigi1111 luigi1111w ^^^
-
midipoet
so it's a space object in the Simpsons?
-
sarang
Heh, it was the name of a project in "You Only Move Twice"
-
sarang
niocbrrrrrr: the draft is only for the preprint review
-
sarang
the code review will come later in the month
-
sarang
No code changes are needed as a result of their preprint review
-
netrik182[m]
jwinterm: LRS-56 also sounds like a disease --> COVID-19
-
sarang
o_0
-
sarang
Glad I changed it...
-
sgp_
I don't quite like "clear" since it's not the same as a transparent Bitcoin transaction, and the name may imply this
-
sgp_
maybe "denominated"
-
sgp_
even though the denominations weren't enforced
-
sgp_
or "no-CT"
-
sarang
I'm open to changes
-
sarang
And I get why "clear" is non-optimal
-
sarang
At any rate, this is only relevant if/when making such plots and data more broadly available
-
sarang
"Amounts visible" -> "Transition" -> "Amounts hidden" ?
-
sarang
^ sgp_
-
moneromooo
"Amounts visible" might also lead to misunderstanding.
-
sarang
Why?
-
moneromooo
Output amounts were visible, not transfered amounts.
-
sarang
You mean w.r.t. addresses?
-
moneromooo
I'm not sure what you mean. I meant if Alice sends Bob 4.2 monero, you might see inpputs of 2 and 10, and outputs of (handwaving the fee) 0.2 0.8 4 8.
-
sarang
Right; I don't mean to imply that destination-amount mappings are known
-
sarang
Only that amounts represented in the transaction are known
-
sarang
I don't know a great set of terms that keeps this subtlety in mind :/
-
sarang
And again, only relevant if/when these terms are used more broadly outside of research/dev
-
sgp_
type1, type2, type3 :p
-
sarang
Heh, that's how they're represented in the data set...
-
sgp_
pre-RCT, mixed, RCT?
-
sarang
But those don't necessarily correspond with the protocol enforcement cutoffs
-
sarang
that's the part that appears to have confused people (even researchers)
-
sarang
Maybe this is overthinking things
-
sarang
I dunno
-
sarang
Maybe just footnote "all transactions benefit from one-time addressing and (depending on protocol version) sender ambiguity"
-
xmrmatterbridge
<cankerwort> "enumerated" "transition" "unenumerated"
-
sarang
?
-
sarang
What is "enumerated" intended to mean?
-
sarang
(the fact that I'm asking means I don't really like them!)
-
xmrmatterbridge
<cankerwort> I was trying to think of a single word that would convey "has a value number attached"
-
xmrmatterbridge
<cankerwort> that was the closest I could get
-
sarang
Maybe "denominated" is more clear?
-
sarang
Even if not fixed denominations
-
xmrmatterbridge
<cankerwort> Yes I like that better
-
sarang
denominated -> transition -> opaque (hidden?)
-
xmrmatterbridge
<cankerwort> +1
-
xmrmatterbridge
<cankerwort> Or, post-CT: +?
-
sarang
I don't think "post-CT" has any inherent meaning if you don't already get what "RingCT" means
-
sarang
and if you do, you probably don't need the explainer terms
-
sarang
and I don't like "post-CT" since I've seen the term used to imply "transactions where amounts are hidden" and "transactions appearing on chain after the CT protocol transition"... and these are not the same sets of transations
-
sarang
s/transations/transactions
-
monerobux
sarang meant to say: and I don't like "post-CT" since I've seen the term used to imply "transactions where amounts are hidden" and "transactions appearing on chain after the CT protocol transition"... and these are not the same sets of transactions
-
sarang
good bot
-
sgp_
I don't see them as protocol cutoffs as much as the "output types"
-
sarang
As do I, but I think there's confusion between those interpretations
-
sarang
and that leads to things like that preprint's conclusions
-
sarang
Fortunately this distinction is almost entirely irrelevant for anyone using Monero (except those transitioning old outputs)
-
Isthmus
maybe: plaintext [amounts] / transition/ encrypted ?
-
Isthmus
And then in future would be necessary to annotate encrypted further: RingCT, ... whatever
-
Isthmus
No way around that, really.
-
sarang
-
sarang
-
Isthmus
Nice
-
Isthmus
What do y'all think about EIP1559?
-
Isthmus
-
Isthmus
And here's one that gets deep into its relation to transaction volume and dynamic block size:
insights.deribit.com/market-research/analysis-of-eip-1559