-
sgp_
we should have a meeting today to discuss the second BP+ audit
-
sgp_
we have received 2 SoWs
-
sgp_
-
sgp_
2 SoWs are in the issue
-
sgp_
Monero Research Lab meeting time
-
sgp_
ping ArticMine sarang knaccc DeanWeen Isthmus SerHack vtnerd xmrscott
-
sgp_
I know this wasn't scheduled much in advance, but we need to make a decision on BP+ today
-
Isthmus
hey, I'm partially around
-
sgp_
(ideally regarding the audit because we now have SoWs)
-
sgp_
-
sgp_
first up, BP+ second audit
-
sgp_
we have received 2 SoWs
-
sgp_
TrailofBits may be submitting one, but it's been a few weeks and we don't have it yet. They are also not likely available in the short term
-
sgp_
-
sgp_
-
sgp_
wow, silence lol
-
SerHack
hey!
-
sgp_
hey serhack :P
-
sgp_
here's what's next for the audit to proceed
-
sgp_
1. we need to pick one
-
DisBotXMR1
<glennhodl> im interested I just have no idea what's going on, so just observing
-
sgp_
2. I need to confirm with MAGIC that we can open a campaign for this (likely)
-
SerHack
+1 for JP, I chatted for a while with him and he seems really expert, I wonder about deadline
-
sgp_
JP says he is available within the next 1-2 weeks
-
sgp_
we can have an audit report in 3 weeks
-
gingeropolous
woof that quarkslab
-
sgp_
from today
-
SerHack
I see
-
SerHack
and what about quarkslab?
-
sgp_
I think Quarkslab is a good choice, but I have a lot of confidence in JP and think he is a great choice personally
-
sgp_
JP is also <1/3 the cost
-
gingeropolous
who / what is JP?
-
sgp_
gingeropolous:
aumasson.jp
-
sgp_
-
sgp_
-
» xmrscott[m]1 attempts to slide into meeting quietly
-
h4sh3d[m]
JP is a really good choice
-
sgp_
imo, with his expertise and immediate availability, we jump on it
-
sgp_
and we would do it through magic so we can send him a check in USD, and USD and XMR donations would be tax deductible
-
gingeropolous
so that'll be 2 total audits so far?
-
gingeropolous
if JP is selected?
-
sgp_
the original plan was to do 2
-
sgp_
yeah, JP's will build on the previous one which was quite extensive
-
gingeropolous
ok. my general gut feeling is to not skimp on this, mainly because of all the "mOneRo prIntS iNfIniTe mOneY", but thats not really technical or scientifically based opinion.
-
dEBRUYNE
I'd do JP, seems like a suitable candidate + availability
-
sgp_
gingeropolous: I think a third is relatively excessive personally, but obviously security is important
-
sgp_
-
gingeropolous
right. at what point is it just throwing money at a problem just because. i dunno.
-
sgp_
is there anyone here that feels strongly that we need a third?
-
gingeropolous
it's good that this is iterative though. can always assess after JP whether a third is warranted.
-
sgp_
is there anyone against me opening the fundraising campaign for JP ASAP?
-
h4sh3d[m]
I'd go for assessing after JP, if the time frame allows it
-
h4sh3d[m]
but that's not something we want to rush anyway
-
xmrscott[m]1
Sounds like no one is against then
-
xmrscott[m]1
*against doing the JP campaign ASAP
-
sgp_
okay, I will talk with MAGIC and open a fundraising campaign for JP's audit pending board approval
-
sgp_
if MAGIC can't do it, I'll let you know ASAP and open a CCS
-
Isthmus
Thanks for coordinating this
-
sgp_
ty to sarang also for sitting on some of the auditor calls with me :)
-
sgp_
is ArticMine here to talk about the block size / fee penalty?
-
sgp_
any other MRL topics for this meeting?
-
sgp_
okay, meeting adjourned then :)
-
DisBotXMR1
<CrimsonKing> guys
-
DisBotXMR1
<CrimsonKing> how much is such an audit expected to cost, and how many manhours are put into it ?
-
sgp_
CrimsonKing: the one from JP is for $12500
-
sgp_
the one from Quarkslab is $41,250
-
DisBotXMR1
<CrimsonKing> appreciated.
-
ttaynsgurpp
Remember kids. If you call project coral reef for what it is - fluffypony embezzling half a mil usd from the monero fund for a website with smaller adoption than monero woo plugin, you will get excommunicated. Why do you think charities need Teslas? They don't and Elon won't support Monero 150k will sure buy a lot of party time for those that actually do get it.