-
h2017
when i have the trezor is there any real reason to also have a non-blank monero wallet password?
-
h2017
when i'm protecting the trezor itself and it's pin and its 12 word nemonic
-
selsta
h2017: the wallet cache might contain sensitive data
-
selsta
past transactions etc.
-
h2017
ok, i see that makes sense
-
h2017
but nothing that they would need the trezor for
-
h2017
by the time people have my hard drive i'm moslty worried about $5 wrench attacks by then anyway
-
moneromooo
We clearly need to make it so they have to buy at least $10 wrenches to double our safety.
-
hyc
if the Fed keeps printing, they'll be $10 wrenches soon enough
-
h2017
ok i notice that the wallet software doesn't seem to want to work when i have two trezors plugged in. it tries connecting to one of the trezors first and if it's the wrong one, it gives up
-
h2017
that's not good. it should look through a list of available trezors and then connect to the right one
-
h2017
(IMO)
-
tvomme
Do you think that you are too smart to be in a cult? Then I would encourage you to look
-
tvomme
into how any other cult works / worked. They aren't populated by stupid people.
-
tvomme
Do you think that you are too smart to be in a cult? Then I would encourage you to look
-
tvomme
into how any other cult works / worked. They aren't populated by stupid people.
-
tvomme
Aum Shinrikyo was almost exclusively university professors and graduates. For Pete's sake - they had the know-how and means to make WMDs.
-
tvomme
As to Monero, I would encourage you to look at Jonestown mass-suicide. You know why Jones killed them all?
-
tvomme
Because he was afraid he is loosing control over them. People like that will burn everything to the ground around them rather than give up control.
-
tvomme
Being smart doesn't make you immune to being in a cult. This is the most valuable lesson Monero taught me.
-
jess
seen
-
ErCiccione[m]
Qasim back at it :)
-
Mochi101
Guys, am I in a cult?
-
M5M400
Mochi101: probably?
-
Mochi101
Damn, I thought I was too smart for that.
-
ErCiccione[m]
You are not. You should have learned that valuable lesson from Monero.
-
Mochi101
Please don't kill us all fluffypony
-
M5M400
Mochi101: we should look for a less culty, more welcoming community that keeps to themselves and improving their fork of evil software instead of spending all their time badmouthing and attacking the very thing that they copied from
-
Mochi101
wait a second...
-
M5M400
you know... one with a charismatic leader that isn't an ass.
-
Mochi101
A fork that welcomes eveRYOne?
-
fluffypony
hah
-
fluffypony
I see what you did there
-
M5M400
that random IRC person really opened my eyes here, eh
-
p0nziph0ne
ring ring, yes hello, this is p0nzi speaking, am i right here at the cult or am i too late
-
ErCiccione[m]
Who would have guessed that the truth comes from spammers on freenode. I'm finally awake.
-
M5M400
allah is not doing. ryu is doing.
-
M5M400
-
M5M400
-
Mochi101
Is that the video game character Ryoken?
-
M5M400
-
Mochi101
Come on M5M400, I'm from the generation that skipped school to play that game in the arcade.
-
M5M400
right. I forgot you are old
-
h2017
hi
-
Mochi101
hello
-
fluffypony
the problem with these tweets is it's sometimes hard to tell if someone is spamming or just making a joke
-
fluffypony
IRC messages I mean
-
fluffypony
not Tweets
-
Mochi101
That's the nature of IRC fluffypony. Always has and always will be. !/s
-
zib
you know someone is looking at twitter too much when he confuses it with irc
-
mfoolb
well.. 'funny' messages could be left out of #monero and part of for example -community
-
anchor[m]
Fun police
-
raecarruth
how does anybody confuse twitter with irc?
-
p0nziph0ne
fluffy getting older
-
fluffypony
exactly
-
fluffypony
I'm getting gray hairs where there shouldn't be
-
h2017
i notice that the wallet software doesn't seem to want to work when i have two trezors plugged in. it tries connecting to one of the trezors first and if it's the wrong one, it gives up
-
h2017
this is on linux
-
dEBRUYNE
Why would you want to use two simultaneously?
-
h2017
why not? the trezor wallet is ok with that. why shouldn't the monero wallet?
-
h2017
this only came up because i wanted to know that if you plugged in the wrong wallet it wouldn't cause chaos with an existing wallet tied to a different trezor
-
dEBRUYNE
It wouldn't open
-
selsta
trezor wallet is written from the ground up for trezor
-
selsta
monero wallet is not
-
h2017
yes there are no sersious issues. i'm not wanting to use the trezor wallet. i'm just saying that if that's not a problem for it then it's not crazy to beusing two trezor's at once. the trezor people don't seem to think so.
-
dEBRUYNE
The Trezor Monero integration was probably designed for a single device, not for having two devices open simultaneously
-
h2017
it could scan them and figure out if there was one with the right identifiers instead of giving up
-
h2017
giving up if the first one is wrong is unnecessary
-
h2017
anyway it's not a big issue
-
dEBRUYNE
Probably too much work required for little benefit obtained
-
dEBRUYNE
There's hardly any people using multiple devices simultaneously
-
dEBRUYNE
And a more likely case is probably using Ledger + Trezor, which I think works fine
-
h2017
the trezor people will probably never put monero as part of there wallet software right? too much data stored on their server so it wouldn't be a privacy coin if used that way. is that it?
-
h2017
i don't need full privacy for my usages of monero so if it was part of the trezor wallet that would be convenient for me. it would be nice if it was there and as part of the settings you could point to the monerod of your choice
-
h2017
anwway that may be a question for trezor and not this chan
-
selsta
afaik they are considering it
-
h2017
i'm trying to understand monerod. so i want to set up a public node. so it indicates rpc-bind-port should be 18089. What should --rpc-bind-ip be set to?
-
moneromooo
Whatever NIC you want to be opened to outside clients. Or 0.0.0.0 for all.
-
h2017
if a public node it should be available for all right?
-
moneromooo
Your choice.
-
h2017
if setting up a private node i shouldn't even port forward to 18089 right? because no one but me should be using rpc command on the node if i intend to be private, right?
-
moneromooo
If you do that, make sure you use --restricted-rpc.
-
h2017
yes i know to do that
-
moneromooo
If you don't intend to use your node from the outside, bind to 127.0.0.1.
-
h2017
ok i think i have enough info
-
h2017
you guys want more public nodes right?
-
moneromooo
Some do.
-
moneromooo
It seems to be a necessary evil.
-
h2017
ok so there is no consensus on that? but you do want more nodes, right, even if private?
-
moneromooo
Oh yes.
-
h2017
so maybe i'll just run a private node
-
Lyza
more honest public nodes can only help
-
Lyza
btw I've seen my node often using a lot of CPU lately, and being slow to respond. I've seen a couple of mentions that maybe our friend has progressed to ddos attacks is that a confirmed thing?
-
selsta
public node?
-
selsta
public rpc node*
-
Lyza
yeah I've got restricted RPC avail publicly with the "public-node" flag enabled
-
selsta
-
selsta
but we don’t know if it works yet because restarting makes the attack stop
-
Lyza
got it ty for the link
-
Lyza
maybe it's because my server is a beefy boy but I've been able to power through it without connections getting entirely dropped
-
selsta
it also only increased CPU usage on my nodes
-
Lyza
well I'll see about trying to build and test if I get a minute
-
Lyza
is somebody's got it pre-built I can test that
-
Lyza
btw the thing people have been reporting where the Language etc settings sometimes get reset in the Windows GUI, I just experienced that. Doesn't look like there's an issue open. Is there anything in particular that would be useful for tracking this down? other than the GUI log
-
Quotes
fuck windows, use linux!
-
Lyza
lol sh
-
selsta
Lyza: only language?
-
Lyza
no, it reset everything. it went from advanced mode to simple (bootstrap) and even turned the custom window decorations back on
-
selsta
when did this happen?
-
Lyza
about 10 minutes ago. it wasn't right after an update, either. I've been on 0.17.1.7 for days
-
selsta
anything else you changed?
-
selsta
windows user?
-
selsta
using something like ccleaner?
-
selsta
portable mode?
-
Lyza
Windows user, yes. No restarts today. No ccleaner or anything similar, didn't run anything that would touch the registry Only use Windows defender, have exceptions set. Have not been using portable mode, did not recently turn it on or off
-
selsta
Changing Windows user can cause this.
-
selsta
as far as I know
-
Lyza
ther eis onyl a single user
-
selsta
we can hope that this resolves once we update Qt to 5.15
-
selsta
else no idea, we did not change anything in months
-
Lyza
ah yeah I remember a discussion about how Qt handles the interaction with the registry
-
Lyza
I think this has been happening for most of the 0.17.1.x releases iirc
-
Lyza
Qt 5.15 in the next release?
-
selsta
no
-
selsta
but it is planned for a future release
-
selsta
Lyza: did you delete a wallet?
-
Lyza
selsta I did not
-
Lyza
I'm trying to think if I did anything funny at all but I really can't recall doing anything unusual
-
Lyza
I only opened the GUI to see if my node was still responsive under the abnormal CPU load
-
selsta
I can’t imagine how the registry settings would get wiped
-
h2017
i wish that the wallet software was different. i think the devels should have kept the wallet package separate from monerod. that way everyone would be encouraged to run their own permament node
-
selsta
wallet is separate from monerod
-
h2017
yes but it's packaged together and the wallet starts monerod automatically
-
selsta
I doubt that not bundling it together would result in more full nodes.
-
h2017
it would because people would be forced to think about it.
-
selsta
the CLI wallet is doing that
-
h2017
the wallet is designed basically to conceal everything that's really happening in the name of user friendliness
-
h2017
the gui wallet anyway
-
selsta
what is the alternative? force everyone to use the CLI wallet so that they have to think about it more? we already get complains that the current GUI is too complicated
-
selsta
I think we can’t make everyone happy, but a simpler to use GUI wallet + CLI for power users seems like a good tradeoff
-
h2017
i don't know what happens on windows specifically. the alternative is to have the user set up monerod using the command line and not have wallet do any of that automatically. on windows there should be a gui utility available for configuring monerod (maybe there is already)
-
h2017
because windows users like that kind of thing
-
sethsimmons
Making things harder will not encourage adoption or increased node count.
-
dEBRUYNE
h2017: They are considering it for Trezor Suite as far as I know
-
selsta
But users use the GUI wallet to specifically not use the command line. CLI wallet is for users who like command like.
-
sethsimmons
And not every user needs a full node for their security/privacy model.
-
selsta
command line*
-
sethsimmons
If you really want increased node counts make a dead-simple always-on GUI for running monerod across OSs so non-CLI users can easily CJ tribute a node.
-
sethsimmons
*contribute
-
h2017
sethsimmons, excellent idea
-
h2017
i don't think linux users need that but windows ones do
-
sethsimmons
I’m sure some Linux users would benefit, not all Linux users are CLI-native.
-
sethsimmons
Even just having that bundled with the GUI to simply install monerod as a service with a simple taskbar icon would be nice.
-
sethsimmons
I’d gladly fund it but can’t do it myself ATM.
-
nioc
-
h2017
nioc yes i can see where you are going. i was wondering the same thing myself. i don't claim to understand any of the technology but using the trezor website as a wallet certainly feels insecure to me
-
h2017
the use of a middle man indicates a possible attack vector
-
h2017
not saying i disagree
-
nioc
this is brand new so thought that you and everyone else should know
-
h2017
thanks. don't own ledger fwiw
-
nioc
whoops
-
h2017
i have a friend at work who does. i'll pass it on
-
nioc
why did I think that it was trezor lol
-
h2017
anyway it's probably best to not use the trezor wallet, if all the data is hosted at trezor.io and all of the instructions to the trezor have to pass through the web-site
-
h2017
or perhaps i don't know what's going on
-
selsta
web wallet should be fine if trezor is programmed correctly
-
h2017
selsta where is the data you see in the web wallet stored?
-
selsta
fine as in they can’t steal your funds
-
nioc
not sure but I thought that trezor didn't collect the personal info that ledger does
-
selsta
not fine if you want privacy
-
h2017
selsta if the web wallet gets taken over by hackers they could do anything i think
-
selsta
you have to confirm all your transactions on your trezor
-
moneromooo
You need to use the web site to use the hardware ?
-
selsta
so they could not steal your funds
-
h2017
selsta ok that makes sense
-
ndorf
couldn't they substitute a bad transaction for the one you intended, stealing your funds that way?
-
h2017
moneromooo, no you don't. it's just one option and monero isn't supported with their webwallet
-
h2017
ndorf selsta is right. the physical device asks for confirmation with the specific amount on the screen
-
h2017
so i guess the web wallet isn't as scary as i was thinking
-
selsta
yep, you confirm the address and amount on the hardware wallet. that is only if there is no bug to exploit this
-
h2017
you also confirm the address on the screen of course
-
ndorf
gotcha. still seems iffy, they could leave the amount the same and substitute the address. plenty of people probably wouldn't catch that
-
h2017
that's for sure
-
Lyza
ngl an "always on" GUI node for Windows users would probably help. Then have users either launch a wallet separately, or launch or wallet from the node GUI
-
Lyza
or for Linux / Max GUI users even
-
sethsimmons
Having that as an option when installing the GUI would be awesome.
-
sethsimmons
Just have it start on-boot and give a simple icon to see status/jump to logs/console.