is monero reproducible build?

I heard rumors the cli was (cli > gui anyways) but cannot confirm

and does cli monero wallet work with hardware wallets? asking for a friend

cannon-c[m]: wiki.trezor.io/Monero_(XMR)

cli has reproducible builds, the gui does not but that is being worked on

cool cool,

so I can use the cli without having to compile massive amounts of dependencies, while still trusting the cli? where can I have info on the cli reproducible ?

as in using the pre-compiled cli, with trusting that it was from the source code and not anything else

since the open source only matters if compile yourself, or can confirm it actually came from the source code. The issue with having to compile, is the massive amounts of dependencies and compiling each dependency. with each dependency in turn having more dependencies. manually compiling dependency tree is almost a week long project when work for a living

reproducible build is the unicorn of open source software

moar bloatware!

cannon-c[m]: see github.com/monero-project/gitian.sigs

the signatures from community members

you can download the CLI and compare the hashes

cannon-c[m]: if you do ever feel like doing the reproducible build yourself, you don't need to worry about dependencies as the gitian scripts take care of everything for you. you just need time and cpu.

gitian script support cross compilling?

yes.

it will build all the supported platforms automatically.

nice

just. beautiful.

everything is done in containers, the only thing you need to install is docker (i think there is support for lxc as well, but not sure)

the dependencies aren't going to clutter up your main system, though

because uses docker right?

yep

.io has been around for a while

oops

.io?

wrong channel, sorry. i suck at irc

one more question for now

two

1. any privacy/security issues with using remote nodes?

2. Monero support pruning? Like if I want to have a monero client on my computer but dont want to take up 70 GB or whatever

Monero does support pruning. I'm not sure how much the space savings are as I don't use it myself, but it's significantly less than the full 70GB

~25 GB.

thanks

any thoughts on question 1?

For remote nodes: use SSL. Make sure you run it.

so pruned node is way to go over remote node ran by someone else?

that's definitely a good idea

how long for sync over tor?

average

i would prefer a pruned local node, personally

I might run full node eventually

im thinking for my laptop though

remote node automatically sees your IP address, and your submitted transactions, for one thing

<ndorf "remote node automatically sees y"> even if I use tor? can see that multiple transactions are linked together?

er, no, not if you use tor of course

I'll use pruned then, any idea how long for download and sync assuming I use a Tor router?

everything is transparently routed through tor

not sure about that, but i'd guess a long time.

few days maybe?

I just do not want to broadcast that I am a monero user to my isp

live in a police state

yes I'm sure I'm a known tor and i2p user

but at least that does not reveal anything else

sorry to hear that. i'm not really an expert with the tor stuff, so i really want to avoid giving you any bad advice

there is some built-in tor support in monero, but i *think* it only handles tx submission, not syncing blocks

sinking blocks?

downloading the blockchain, and then new blocks as they become available

yes, I just need to find way to do that over tor

I have strong ip tables that block any non tor traffic

i'm not confident i could give you completely correct advice on this topic, if you are seriously concerned about government surveillance you should wait for someone more knowledgeable in this area to show up.

or just see if it works

worst case scenario if non-tor will just be blocked at iptables level

my uninformed guess is that if you have a system-wide tor proxy/filter set up, it should just work

but

for sending txs, i'd advise you to look into the special support monero has for it

esp. if you're concerned about linkability of transactions

you'd want to be careful not to submit them using the same tor circuit, i'd imagine

If your government really wants to know at the ISP level, then they probably could tell you run a monero node by traffic analysis, even via tor.

^ that

(ie, see you get traffic when a monero block is found).

however, that seems to be a much higher bar than "alert us when any port 18080 traffic is seen"

Right.

If you can run your node on a VPS somewhere your government/ISP does not see, then use that node from your laptop, it seems safer from that point of view.

You'd likely need to disable the auto refresh in simplewallet too.

yeah but trusting a VPS node has its own problems doesn't it?

"monero node by traffic analysis, even via tor."

it might as well be a remote node owned by the VPS provider

how?

And if you want to really screw with this, transfer some random amount of other data to/from your VPS when you start simplewallet.

or maybe just leech off library wifi for few days to download blocks

actually worse if the provider has your real name

plant a blackbox in ceiling tile or something

pick up few days later

How ? By looking for packets. Tor sends TCP packets to other nodes. Those are timed and sizes mostly the same as the real packets.

So if you get traffic timing that correlates with txes/blocks on the monero network, the probability you run monero goes up as time goes.

yeah need to mix tor with other traffic of course

block compression would be nice also

for transmitting

monerod does have support traffic but for txes only (to hide whn you send one of yours).

Transactions won't compress well.

cannon-c[m], do a search for tor and "website fingerprinting"

so how can I make download of new blocks over outbound anon network only?

"Only handshakes, peer timed syncs and transaction broadcast messages are supported over anonymity networks."

Your tor rules ?

This mode is for people who just run a tor router. If you have a set of iptables rules that proxy all traffic, that'll go there.

ie, like Qubes does. If you live in a police state, you night want that.

hmmm, maybe I can add ip tables for tor traffic redirect, i.e. all traffic from this user route to Tor socks5

but would be really nice to have tor support for all connections natively

instead of having to rely on iptable hacks

ok Kivori is exciting

Kovri

monero wallet does not seem to let pass be entered on Trezor T screen?

and monero cli wallet requires local copy of blockchain (either full or pruned) right?

and wow sync over tor is fast

yes wallet need to connect to a node in order to get the blockchain info

they are separate in monero

but cli wallet requires local node right?

and is there a way to have the wallet use trezor screen for password or no?

AIUI it can be a remote node

I don't know about trezor

I use my own local node so am unfamiliar with how to use a remote node with the CLI

syncing the blockchain is fast to begin with and will slow down later

yeah even over tor its fast right now

txs changed several times throughout it's history so this is part of it

also there are checkpoints

checkpoints?

they are added at each hardfork and among other things make it easier to sync

I just wish could use the trezor screen for password entry

not familiar with syncing over tor but if you have a HDD that will be the bottleneck

i know lots of questions, im a xmr noob

a SSD is much much faster

yes using ssd

that's how we all start :)

and in a VM behind tor router

definately pruning though since its my laptop

did you set it to prune before starting to sync?

not at first

then I cancelled ctrl+c and restarted the monerod with prune flag set

--prune-blockchain

will see what happens

someone is usually here to help but not many people are on at this time

yeah it is early

@( * O * )@

Monero wallets should have a "Why don't I see my funds?" info for users.

Inge-: did you lose your XMR again?

what XMR?

I'm more thinking about UX - since this is like half of all monero support

"they say they sent me the monero, but I don't see it" "I revocered my wallet, but it is empty"

a few small sanity-checks could provide the user with good information on why this could be (e.g. your wallet was restored with height X which means that if your funds arrived BEFORE date Y then it would not show up. Rescan from an earlier point in time?)

i agree - it may be helpful to have some info readily available for users

also, it could probably fairly easily sanity-check other things such as the top block on the connected node vs a few other points (other open nodes, xmrchain etc) - "The node you are connected to looks like it might not be entirely up-to-date.." - I can see some potential attack vectors, but a better UX would be very helpful.

^- Titel: MCC 2019: Future of Privacy Coins Panel

hello

㋡ hi

how to measure impact of different reward between genesis block and next blocks for new blockchain

genesis block is 100X of next blocks

can reward of next blocks change in far future because of emission or smth else

i mean without changing anything else

just genesis 100x and no other change

same emission etc

anyone here

monero looks at current total emitted to calculate emission of next block

BTC does not AFAIK

this has bit a few forks that made changes

smth more precise?

how to keep reward of next blocks the same

even after 10000000 blocks

Maybe the whitepaper can help: cryptonote.org/whitepaper.pdf

Chapter 6.1 Smooth emission

code changed a lot after original cryptonote

BaseReward = (MSupply−A)>>18

True.

what do u mean by true

newyearday: he's agreeing with you that monero has changed a lot since the original cryptonote

yep

Maybe this function can help: get_block_reward

this function help only for changing block 0

im not sure but there are other function that changes rewards of next blocks for any reason

i didnt change anything except block 0

to say the truth i dont know why "difficulty targets must be a multiple of 60" and not "multiple of X"

for version2

I couldn't tell you - Need to understand for myself.

target_minutes = target / 60; So the time is converted from seconds to minutes.

I guess the assert on the top of the function is not necessary - but you never know. Probably something to be on the safe side.

It does test if DIFFICULTY_TARGET_V2 is devideable by 60 (DIFFICULTY_TARGET_V2 modulo 60).

.usd

this seems like unreasonably high rates of SME adoption: bitcoinist.com/rising-crypto-adoption-growing-cyber-threat

by the way, a part from temperature anomalies, is there a way or an average time to know if thermal paste has dried out?

take the heatsink off and look at it. some of the higher end pastes recommend that you change it every couple of years

i just weld it

asymptotically: I'm ok.. I was just curious

While people eat these up, no reason not to recycle the same paper over and over again using a different hardware part...

news: you can output data through an output device :O

omg

What a concept.

insane.

hello

newyearday: hey fam

fam ?

famagotchi

famagotchi ?