01:22:14 some interesting output stats, thanks to needmoney90 for pointing out a much better way of tracking the chains 01:22:18 https://paste.debian.net/plain/1156433 01:23:08 very interesting that backward chain length>=7: goes from 12.6% after 1 week, to 39.0% after 2 weeks, to 58.7% after 4 weeks 01:23:29 that's % of outputs that exist within a chain at least that long 01:24:01 from that output backwards 01:55:15 Code for that? 02:27:16 https://paste.debian.net/1156437/ 12:56:52 Thanks knaccc! 14:38:56 Reminder that the weekly research meeting is today at 17:00 UTC 16:10:27 https://mobile.twitter.com/SoatokDhole/status/1283200790883074049 16:10:30 -____- 16:10:40 Whoops, intended for -lounge, sorry :/ 16:11:05 Saw that today lol 16:11:07 #notsurprised 16:14:50 Will move this conversation to -lounge... 16:16:30 (#monero-research-lounge, that is) 16:17:38 Too lazy to look which letter is different lol 16:17:52 Last one 16:18:15 Ah 16:18:18 So secure 16:56:48 The meeting will start in just a few minutes 17:00:30 OK, let's get started! 17:00:35 The usual agenda: https://github.com/monero-project/meta/issues/483 17:00:41 Logs will be posted there after the meeting 17:00:44 First, GREETINGS 17:00:45 hello 17:00:48 Hi 17:00:56 I probably can't hang around for the full meeting, can I drop quick notes? 17:01:05 Sure 17:01:08 Go ahead Isthmus 17:01:15 We're mostly turning our attention towards solutions now, though we did just note yesterday that if Keccak pre-image is the last line of defense against Shor's then with Grover's even with an outside observer it can be potentially be broken. Though the can can be kicked down the road by increasing key size 17:01:38 Unrelated, I've been looking at 0-value transactions lately 17:01:40 https://github.com/Mitchellpkt/stingy_spammer 17:01:56 I don't think this is a big threat for Monero based on default behavior of miners 17:02:25 This feels very similar to an attack on Zcash that was reported a long while ago 17:02:43 I think it's probably applicable to most privacy coins 17:03:38 Reminiscent of the sapling woodchipper, but I don't think they explored 0-value, just low-value/big-size 17:03:59 Anywho, that's all from me 17:04:00 Sapling doesn't enforce strictly positive values, right? 17:04:19 And fees are fixed (or at least, not dependent on factors like size or outputs) 17:04:20 Not sure. Protocol definitely allows 0-fee txns, I found like 2000 on-chain 17:04:20 afaik 17:04:30 Ehhh 17:04:32 Not "fixed" 17:04:39 Fixed is the wrong term here 17:04:46 "Recommended" to be 0.0001 ZEC, which about 98% of transactions follow. 17:04:47 Fees are independent of size/outputs, right? 17:04:58 Fees are 100% arbitrary, you can slap anything in there 17:05:01 Right, you can just set a fee to be 0.0001 ZEC and have a ton of outputs 17:05:05 Yep 17:05:06 Meaning DoS 17:05:11 This is _still_ an issue, right? 17:05:17 (off topic, I know) 17:05:53 Privacy combined with gratis can be deadly since censorship cannot be used to fight spam 17:06:01 Yeah, I've had some chats with Zcash/ECC folks, and they've discussed the for a better way to handle market selection. (Chats with individuals, not speaking officially) 17:06:16 Hmm ok; it was reported quite a while ago, and the reaction seemed to be "shrug" 17:06:23 Anyway, hopefully lessons we can learn from that 17:06:38 hello 17:06:43 I know some in ECC/ZF are extremely opposed to the idea of fee markets 17:06:48 I don't really get that 17:06:49 but whatever 17:07:02 Anyway, thanks Isthmus 17:07:06 Any other updates to share? 17:07:09 Thanks 17:08:10 OK, we can continue with ROUNDTABLE, where anyone is welcome to share research of interest to this group 17:08:17 Does anyone have something they wish to share? 17:08:42 I have completed my fee and scaling analysis with recommendations for issue 70 17:08:51 Excellent; go on! 17:08:51 Will be postig there this week 17:08:56 Ah ok 17:09:03 Please let us know when this happens Arc 17:09:05 ArticMine: 17:09:06 * 17:09:19 The basic idea is a dynamic penalty free zeon based upon the long term median 17:09:52 In any case I'll post here when issue 70 is updated 17:10:03 Great 17:10:42 I've been working on CLSAG, Triptych, and Arcturus this week 17:11:12 Hardware device support for CLSAG is proceeding nicely, and should be in place for the upgrade 17:11:23 Its preprint has been updated, and addresses reviewer recommendations 17:11:34 I have a blog post ready to go, as well 17:11:42 Triptych and Arcturus received small updates 17:11:52 Triptych was submitted to an ESORICS workshop 17:12:15 and Arcturus is still under consideration for PoPETs, though I've been working on an improved security model related to that used in Omniring 17:12:25 good times 17:13:36 There will be a developer meeting this Sunday at 17:00 UTC to discuss the upgrade timeline 17:13:48 Are there any questions on these topics? 17:16:45 OK, does anyone else wish to share any research topics of interest? 17:17:59 super quick meeting 17:18:09 For sure 17:18:31 Well, if there aren't any other topics, we can move to ACTION ITEMS, anything people wish to share that they intend to tackle this week 17:19:07 I've been working on a bunch of ideas for improving the Omniring security model for use in Triptych/Arcturus, which has been a fun but frustrating challenge 17:19:16 as well as on-chain output analysis 17:19:29 These will continue this week! 17:20:01 As well as working with the CLSAG audit team to finalize their report for public release 17:20:07 Anyone else? 17:21:33 A super quick meeting indeed :D 17:21:40 All right, in that case, we can adjourn! 17:21:44 Thanks to everyone for attending 17:21:50 Logs will be posted to the GitHub agenda issue shortly 17:24:11 Isthmus any news on the fixed-reward for coinbase patch? IIRC it was slated for last weekend (or is it this coming weekend?) 17:33:12 256-bit hashes are safe from Grover's search for the forseeable future