00:01:24 yes 00:01:41 cool i found one 00:01:51 https://hackerone.com/monero 00:03:23 please report through hackerone and make sure to read the Vulnerability Response Process 00:04:11 do they understand german ? 00:04:24 most likely not 00:17:25 Isthmus: did you have a chance to segregate the coinbase and non-coinbase spends for Bitcoin? 00:27:14 so send the report 00:30:13 DrHanner, if you can't translate to english, just use google translator or something 00:30:34 but yeah send the report :) 00:32:47 darn i so want to talk about it :P 01:11:55 Oh yeah, send a confidential text to one of the biggest info slurpers around. Can't miss. 01:12:51 lol i see your point 01:13:07 but it is easy fixable so that is a plus 01:13:25 else i am pretty impressed with monero 01:13:41 quite a solid algorithm 01:13:50 Please ping me when it's filed, so I can check. There'll be a release soon so it'd be nice if whatever you found can be fixed in that. 01:14:22 i send it like 40 minutes ago 01:14:34 Thanks. 01:38:52 DrHanner: I replied, not sure if you're getting notifications (I am not). 01:40:34 Hey atoc - sorry for the belated followup, was super swamped today. Insight started with professional training Fellowships for specialized tech fields, including my blockchain engineering program ( www.insightconsensus.com ) 01:40:36 But now we bring our best researchers and developers in-house as “Residents” and I help connect them with exciting work in open-source ecosystems. Right now I’ve got teams working on Monero, Zcash, Polkadot, ICON, and have a half dozen more queued up. Ping me if you have any ideas :- ) 01:40:54 https://www.irccloud.com/pastebin/x2Tl9Dyu/ 01:41:28 Huh, snippet was unexpected 01:41:41 @sgp_ Turns out that finding the BTC coinbases is easy (SELECT FROM `bigquery-public-data.crypto_bitcoin.transactions` WHERE is_coinbase IS TRUE) but identifying when they’re spent isn’t quite as trivial. 01:41:51 However, once the spend time feature is engineered, should be easy enough to generate a summary dataset by adding … COUNT(whatever) … GROUP_BY(spend_time) 01:42:01 * Isthmus upvotes DrHanner for responsible disclosure 01:44:04 i saw it and responded moneromoo 01:44:41 hard to explain to a non coder moneromoo 01:46:20 moneromooo is quite the coder 01:48:07 Replied. 01:53:35 i send a pseudo program 01:58:11 Thanks. 02:02:40 u are welcome 02:03:19 else impressive code 03:01:58 moneromooo ? 03:02:09 Yes ? 03:02:44 i googled to reverese black2 if you knew the key is trivial :P 03:03:27 It is best not to give hints of the claimed exploit on a public channel :P 03:07:28 Anyway, I'm off till tomorrow for now. I'll reply to any new message on H1 then. Good night. 03:07:34 nite 09:27:59 well well 09:29:16 anyone from the monero security team here or a monero developer ? 16:48:04 Since transaction volume was discussed elsewhere, here's a fun plot https://usercontent.irccloud-cdn.com/file/ROjiFNaH/tx.png 16:48:18 "Clear" means transactions where amounts are in the clear 16:48:35 "Semi" means transactions where inputs are in the clear, but outputs are hidden via commitments (transitioning to the CT model) 16:48:48 "Opaque" means transactions where inputs and outputs are hidden via commitments (the CT model) 16:49:48 The same data, with each bar normalized https://usercontent.irccloud-cdn.com/file/pklSPykY/scaled.png 16:50:00 neat graph; it's good to see tx volume at/above the level witnessed in the 2017/18 bubble 16:50:05 Yeah 16:50:12 super cool graph, thanks for sharing] 16:50:22 I'm adding on the more recent months 16:50:27 Good to see the vast majority of pre-RCT inputs migrated quickly 16:50:31 (this is up to block 2M, chosen for simplicity) 16:50:44 There are still a nonzero number of non-opaque transactions, due to transitioning old funds 16:50:54 but it's clear that these are edge cases 16:52:03 I'll post updated versions of these once my scripts finish their updates 16:52:28 I'm working them into an easy-to-use script that anyone can run incrementally to produce consistent data of this kind 16:52:42 I think having this data readily available is useful 16:53:08 the low volume of 'semi' transactions implies most outputs are spent temporally close to where they were created, which broadly aligns with assumptions about spend patterns 16:53:46 Yeah, even though we occasionally see apparent spikes that are clearly a mass transition of many old outputs 16:55:02 If anything, this is a good reminder of how useful protocol enforcement can be 16:55:11 The transition was extremely fast 16:56:06 I'm also running a similar plot, but showing only deducible transactions over time, classified by type 16:56:25 If anyone has better ideas for terms for these types, let me know; I just made these up for the purposes of this analysis 16:56:42 I don't like saying "pre-CT" and "post-CT" since that's not an accurate description 17:02:10 How about BC (before confidential) and AD (after denominations) ? 17:03:39 Or CE (confidential enabled) and BCE (before confidential enabled) if we want to go more modern. 17:03:55 :D 17:04:25 Of course, you can still have non-opaque txs after the CE cutoff... 17:04:53 I think it might be confusing to some people since the transition point didn't ban non-opaque transactions (or you couldn't spend old funds) 17:05:03 This tripped up the authors of that preprint, for example 17:06:46 Or: clear, transition, confidential? 17:07:21 lol moneromooo 17:09:00 "Or: clear, transition, confidential?" I like this, although "clear, CT-transition, and ringCT" might be better since we could in the future have "clear, CT-transition, ringCT, Arct-transition, Arcturus" 17:12:04 We can always update the names when that happens 17:12:42 Perhaps the biggest fault of RingCT is its uncool name 17:18:05 it was before we were cool sarang 17:18:13 How cool are we now? 17:18:31 way cool 17:18:54 FWIW my original internal name for Triptych was LRS-56 :( 17:19:11 LRS = linkable ring signature, 56 = issue 56 on research-lab repo 17:19:38 honestly triptych sounds like some disease you get from eating parasite infected pork or something 17:19:43 I'd say ringct is cooler 17:19:45 :( 17:19:50 lol sry 17:19:58 if we had to do it all over again we'd give it a cool name like Zetaorium 17:19:59 or Infrablaze 17:19:59 Arcturus is way cool 17:20:00 I'm using this: http://storygen.weebly.com/future-tech-name.html lol 17:20:13 ahahahha that's fantatic 17:20:24 If I knew this existed, so many preprints would have different titles... 17:20:25 arcturus does sound like a cool transformer or something 17:20:38 It's from a Simpsons episode 17:21:01 Oh, I thought it was from space objects :( 17:21:09 That's where the Simpsons got it! 17:34:39 we already have a draft from the auditors but the CCS proposal is not yet moved to funding required 17:35:05 fluffypony luigi1111 luigi1111w ^^^ 17:47:35 so it's a space object in the Simpsons? 17:48:01 Heh, it was the name of a project in "You Only Move Twice" 17:48:15 niocbrrrrrr: the draft is only for the preprint review 17:48:20 the code review will come later in the month 17:48:52 No code changes are needed as a result of their preprint review 17:49:52 jwinterm: LRS-56 also sounds like a disease --> COVID-19 17:50:25 o_0 17:50:29 Glad I changed it... 18:34:29 I don't quite like "clear" since it's not the same as a transparent Bitcoin transaction, and the name may imply this 18:34:50 maybe "denominated" 18:35:03 even though the denominations weren't enforced 18:35:31 or "no-CT" 18:41:57 I'm open to changes 18:42:14 And I get why "clear" is non-optimal 18:43:25 At any rate, this is only relevant if/when making such plots and data more broadly available 18:46:05 "Amounts visible" -> "Transition" -> "Amounts hidden" ? 18:46:25 ^ sgp_ 18:47:44 "Amounts visible" might also lead to misunderstanding. 18:48:04 Why? 18:48:09 Output amounts were visible, not transfered amounts. 18:48:54 You mean w.r.t. addresses? 18:51:14 I'm not sure what you mean. I meant if Alice sends Bob 4.2 monero, you might see inpputs of 2 and 10, and outputs of (handwaving the fee) 0.2 0.8 4 8. 18:52:41 Right; I don't mean to imply that destination-amount mappings are known 18:52:49 Only that amounts represented in the transaction are known 18:53:01 I don't know a great set of terms that keeps this subtlety in mind :/ 18:53:14 And again, only relevant if/when these terms are used more broadly outside of research/dev 18:54:14 type1, type2, type3 :p 18:54:27 Heh, that's how they're represented in the data set... 18:55:10 pre-RCT, mixed, RCT? 18:56:19 But those don't necessarily correspond with the protocol enforcement cutoffs 18:56:30 that's the part that appears to have confused people (even researchers) 18:56:43 Maybe this is overthinking things 18:56:46 I dunno 19:00:21 Maybe just footnote "all transactions benefit from one-time addressing and (depending on protocol version) sender ambiguity" 19:00:48 "enumerated" "transition" "unenumerated" 19:00:57 ? 19:01:07 What is "enumerated" intended to mean? 19:01:23 (the fact that I'm asking means I don't really like them!) 19:02:00 I was trying to think of a single word that would convey "has a value number attached" 19:02:14 that was the closest I could get 19:03:01 Maybe "denominated" is more clear? 19:03:06 Even if not fixed denominations 19:03:23 Yes I like that better 19:03:58 denominated -> transition -> opaque (hidden?) 19:05:38 +1 19:06:05 Or, post-CT: +? 19:07:49 I don't think "post-CT" has any inherent meaning if you don't already get what "RingCT" means 19:08:00 and if you do, you probably don't need the explainer terms 19:09:00 and I don't like "post-CT" since I've seen the term used to imply "transactions where amounts are hidden" and "transactions appearing on chain after the CT protocol transition"... and these are not the same sets of transations 19:09:24 s/transations/transactions 19:09:24 sarang meant to say: and I don't like "post-CT" since I've seen the term used to imply "transactions where amounts are hidden" and "transactions appearing on chain after the CT protocol transition"... and these are not the same sets of transactions 19:09:29 good bot 19:44:16 I don't see them as protocol cutoffs as much as the "output types" 19:49:49 As do I, but I think there's confusion between those interpretations 19:49:56 and that leads to things like that preprint's conclusions 19:50:38 Fortunately this distinction is almost entirely irrelevant for anyone using Monero (except those transitioning old outputs) 21:44:58 maybe: plaintext [amounts] / transition/ encrypted ? 21:45:16 And then in future would be necessary to annotate encrypted further: RingCT, ... whatever 21:45:22 No way around that, really. 23:37:13 Updated transaction data: https://usercontent.irccloud-cdn.com/file/xwfZxIAO/tx.png 23:37:26 And scaled: https://usercontent.irccloud-cdn.com/file/jfBVKF6L/scaled.png 23:54:27 Nice 23:54:37 What do y'all think about EIP1559? 23:54:50 Here's a casual and semi-philosophical article: https://medium.com/@TrustlessState/eip-1559-the-final-puzzle-piece-to-ethereums-monetary-policy-58802ab28a27 23:55:01 And here's one that gets deep into its relation to transaction volume and dynamic block size: https://insights.deribit.com/market-research/analysis-of-eip-1559/