-
slighty_toasted
/msg NickServ VERIFY REGISTER slighty_toasted nqhgwdsogxfh
-
jess
dont worry about fucking up sending that, it's not a password or a secret token
-
jess
it's a one time use string for email verification. happens to the best of us
-
slighty_toasted
I guess copy/pasting it doesnt activate the /msg command
-
jess
it does, but you copied a space before the /
-
slighty_toasted
aha
-
jess
easily done
-
mark_bleep[m]
I'd like to run a full node, I assume that means a full 75gb download
-
slighty_toasted
95GB as of right now
-
slighty_toasted
Does a service similar to torservers.net exist but for monero nodes?
-
slighty_toasted
With the influx of people wanting to set up VPS nodes but not being technically capable of doing so I think it's a great idea
-
nioc
mark_bleep[m]: you can also run a pruned node which is about 35GB now
-
mark_bleep[m]
<slighty_toasted "95GB as of right now"> K. Thx. Is there somewhere that tracks size and growth rate of these ledgers? Would be interesting to compile if not.
-
mark_bleep[m]
<slighty_toasted "With the influx of people wantin"> Agreed.
-
slighty_toasted
mark_bleep[m] I'm not aware of any services providing that information accurately
-
mark_bleep[m]
<nioc "mark_bleep: you can also run a p"> What's the difference? Can it still process transactions?
-
nioc
yes you can
-
slighty_toasted
mark_bleep[m] 1/3 the blockchain size, 1/8 the network contribution, 100% same functionality as full node.
-
mark_bleep[m]
So, what's the point of a full node beyond archive?
-
nioc
if you do go that way sync pruned to start, not aftaer syncing the whole chain
-
mark_bleep[m]
<slighty_toasted "mark_bleep 1/3 the blockchain si"> Ah, ok. 1/8 contribution is the difference
-
nioc
I run a full node cause it's only 95GB
-
mark_bleep[m]
Size is meaningless given storage cost, but getting a new node online seems like it should be a focus is it's going to be a real primary monetary tool.
-
nioc
also HDD is slow to initially sync vs an SSD
-
nioc
takes the same amount of time to do an initial sync for full or pruned node
-
selsta
"1/8 contribution is the difference" <-- 1/8th of some historical data, but it fully contributes propagating transactions and blocks
-
nioc
I believe it still needs to verify all the blocks
-
donkeydonkey[m]
8 is running good so far no block list. Height: 2263929/2263929 (100.0%) on mainnet, not mining, net hash 1.84 GH/s, v14, 12(out)+34(in) connections, uptime 0d 2h 15m 15s
-
camalonso
is block.txt anymore updated since there is now the enable-dns-blocklist?
-
selsta
yes, I will keep updating it
-
Kronovestan
looks like the "bad actors" nodes are stuck at 2263960 lol!
-
Kronovestan
block height that is
-
nioc
Both 2263960 and 2263958
-
Kronovestan
Well that's great news seeing that they are not functioning.
-
p0nziph0ne
selsta: enable dns blocklist is using your online txt as source and no need to update any file locally?
-
ackroydai
why are these people doing this?
-
zhunodxn
jess: I can tell you why you can't stop the 'spam'. You are thinking in cult doctrine. If it was real spam, and I was selling Viagra for example - you could easily ban keywords and urls. Instead, stop being a sheep, think like a cult leader. Recoginse that this 'spam' is just some bullshit that you tell to the sheep.
-
ackdroid
what an idiot well-kicked ™️
-
mark_bleep[m]
<zhunodxn "jess: I can tell you why you can"> I don't understand this
-
selsta
mark_bleep[m]: ignore
-
selsta
09:12 <p0nziph0ne> selsta: enable dns blocklist is using your online txt as source and no need to update any file locally? <-- correct
-
fhvusxzlg
Will you HODL XMR or sell it to buy Tari when it comes out?
-
ComplyLast
sell of course
-
ComplyLast
is that even an honest question?
-
Inge-
idiot.
-
binaryFate
we demand better trolls
-
ComplyLast
actually there's a telegram OTC brokerage selling Tari IOUs. Maybe I should hook fireice with a contact over there, he seems very interested
-
ComplyLast
I have my fair share with NFT stuff with Btc already, but... whatever floats your boat.
-
raecarruth
wtf is tari
-
raecarruth
and of course there's somebody on telegram shilling it...
-
Mochi101
hehehe
-
fluffypony
raecarruth: Monero merge-mined sidechain focused on digital assets
-
raecarruth
ok
-
Inge-
It is ... not really comparable to private p2p money
-
nobody[m]
Howdy.
-
M5M400
howdy
-
nobody[m]
whatever happened to xmr being on binance?
-
Mochi101
it still is
-
nobody[m]
not for americans :v
-
Mochi101
-
nobody[m]
yeah, binance.us has no such option, though
-
nobody[m]
wild. oh well, i'll switch to kraken.
-
Mochi101
really
-
elchupacabra420[
If dex delists xmr further thats could be problematic? Cause localmonero users force you to ID too and noone wants to give that info to some random guy on the net
-
Minimons
Hello! My GUI wallet is convinced that I have my keyfile already opened (Couldn't open wallet: internal error: "..." is opened by another wallet program). (Linux 0.17.1.8). Anybody know how to get passed that?
-
selsta
Restarting your computer might work.
-
Minimons
salsta: I am on a Linux system.
-
rupee
the former Head of XRP Institutional Liquidity for Ripple is the current CEO of binance.us. That might have something to do with XMR not being supported.
-
rupee
they really liked to trace where their XRP went
-
gingeropolous
rupee, hah!
-
Minimons
Anybody know how the UI keeps track of locked wallet files? There are no active processes and I do not see any .locked files are anything that would suggest that the wallet is locked. Ofcause I would look through the source but I am just feeling lazy. ;-)
-
ayahuaza
elchupacabra420[ yeah, that's why atomic swaps will help in this situation a lot
-
ayahuaza
but I don't think DEX can delist monero, because it's decentralized tho;D
-
dEBRUYNE
nobody[m]: XMR never used to be on Binance US
-
dEBRUYNE
Minimons: A reboot is still advisable
-
Lyza
<Minimons> the fact that the error does not appear until after you enter your password, makes me suspect the information is stored in the wallet cache somehow. but yeah I'd reboot before getting all crazy with the wallet cache
-
alphed-
Hi
-
alphed-
I’m from the government and I’m here to help
-
elchupacabra420[
Must be you're first time then.
-
elchupacabra420[
never remembered a helpful gov.
-
sech1
They want to help you part with your money
-
alphed-
It's for your safety
-
elchupacabra420[
:)
-
onf
hey guys, what's the difference between DCC CHAT and MSG? my understanding is that DCC CHAT is unencrypted and directly between the two participants while CHAT goes through the server and is encrypted if TLS is used, correct?
-
Minimons
Lyza - I talked with dEBRUYNE about it. The problem is that the UI misunderstands a 'permission denied' for 'file is open by another process'. Fixing the permissions makes it work again but it misleads the user. I promissed to create an issue on github (when I get sober again) ;-)
-
onf
oh fuck, wrong channel
-
Minimons
The fix for the '2 blocks remaining' in .8 works GREAT. Thanks my HEROs for that update!
-
rupee
f9ad5567e6e1e4a88213190cbde6d974265640438e9f2de41ce0d4839cb021f4 monero-gui-mac-x64-v0.17.1.8.dmg
-
rupee
that hash doesn't match getmonero.org
-
rupee
-
rupee
but not the Verify Hashes part of this page
getmonero.org/downloads/#gui
-
dEBRUYNE
Check if it's not an old release that is displayed
-
selsta
looks ok here
-
rupee
after refreshing the page it matches
-
rupee
maybe I had the tab open a while
-
rupee
thanks for double checking
-
selsta
maybe some caching
-
Kronovestan
rupee, I've had that issue too. I always open the download page in an incognito browser window to prevent that now.
-
monerouser1144
selsta possibly bad IP 64.225.123.149 (stuck at same block 2263960 for am long time "sychronizing")
-
ayahuaza
so monero mining is best with CPU not GPU right?
-
selsta
monerouser1144: added
-
nioc
ayahuaza: correct
-
jess
what hash algo does monero use
-
jess
i hope it's something pog like scrypt
-
moneromooo
For PoW ? Custom one called randomx. Otherwise mostly keccak (pre-standard AES).
-
ayahuaza
RandomX?
-
moneromooo
er, pre standard SHA3.
-
ayahuaza
same timing :D
-
jess
interesting
-
moneromooo
It exploits strengths of current microprocessors to keep ASICs from being so much more dominant. It's slow to verify though, which is a very annoying drawback.
-
monerouser1144
Following up yesterday's thoughts about creating resilient monero public nodes, has anyone worked on an AppArmor profile for monerod yet? (note: AppArmor is like SELinux, and can be used to prevent an exploit to a daemon from escalating).
-
azy
my updated node went down. how can i find out why? ~/.bitmonero/bitmonero.conf didn't display anything
-
selsta
more attacks
-
selsta
different one this time
-
ayahuaza
what's up with that CipherTrace monero transaction tracing tool?
-
onf
monerouser1144: it's on my list of TODO (with lots of other time consuming things)...
-
ayahuaza
or was it just to scare people?
-
nioc
it's to make money
-
onf
ayahuaza: mostly big talk, they could be able to trace some old tx as monero was lacking in some areas back then, but they can only guess when it comes to newer tx
-
nioc
without any real capabilities
-
ackdroid
I have been connecting to moneroworld node without incident for cli wallet
-
ayahuaza
fair enuf
-
ayahuaza
what's the best way one could provide strength to monero network, by running a full node?
-
SerHack
ayahuaza: yes!
-
ayahuaza
SerHack to running public full node + Tor or i2p? is safest bet?
-
monerouser1144
Has anyone tried running HAproxy in front of monerod ?
cbonte.github.io/haproxy-dconv/2.4/intro.html#3
-
_I3^RELATIVISM
its a shame anonimal stop developing kovri because of all the monero people nonsense
-
_I3^RELATIVISM
garlic routing inside onion routing is a interesting concept
-
selsta
he decided to stop developing kovri because he wanted to work on other things
-
selsta
not because monero people wanted it stopped?
-
_I3^RELATIVISM
not really the backlash from some usuless pwoplw was the incentive for him to stop
-
_I3^RELATIVISM
not because he "wanted"
-
_I3^RELATIVISM
selsta:
-
raecarruth
it isn't because nobody uses i2p...
-
onf
wasn't kovri just different implementation of i2p?
-
_I3^RELATIVISM
no onf
-
_I3^RELATIVISM
I2P is garlic routing
-
jess
why is it called garlic
-
_I3^RELATIVISM
kovri was garlic routing inside onion routing
-
moneromooo
A different router, for the same protocol (mostly).
-
jess
garlic doesn't have layers like an onion does
-
_I3^RELATIVISM
which is what tor uses
-
_I3^RELATIVISM
moneromooo: not really
-
_I3^RELATIVISM
they are 2 diferent concepts
-
_I3^RELATIVISM
garlic routing you bundle packets in a clove
-
_I3^RELATIVISM
so you encrypt bundle packets toghether
-
ayahuaza
i know i2p is faster than tor, but is it safer?
-
_I3^RELATIVISM
so no packet can be targeted
-
_I3^RELATIVISM
while in onion routing(akator)
-
moneromooo
I2P and kovri are both not tor...
-
onf
ayahuaza: it's not faster, but it's decentralized unlike tor
-
_I3^RELATIVISM
you just encrypt each packet seperate protected by encryption layer
-
onf
ayahuaza: which actually leads to it being slower
-
ayahuaza
oowh okay, well then someone lied to me on the net
-
ayahuaza
ty onf
-
_I3^RELATIVISM
onf: both are decentrlized
-
_I3^RELATIVISM
ayahuaza:
-
onf
_I3^RELATIVISM: not really, in tor there are centralized authorities afaik
-
ayahuaza
but I heard of exploits when running exit node
-
_I3^RELATIVISM
the only deiferenced is oe uses garlic routing while another uses onion routing
-
ayahuaza
on TOR
-
_I3^RELATIVISM
onf: that is not truth
-
moneromooo
Directory auths are semi centralized.
-
moneromooo
Wait. I'm getting pulled in. Mistake :D
-
onf
_I3^RELATIVISM: aha, so why does anonimal list it as one of the two issues with tor in kovri proposal?
-
moneromooo
(kinda like seed nodes in monero, actually)
-
raecarruth
centralized authorities in tor? o_0
-
raecarruth
since when?
-
_I3^RELATIVISM
^^ "KOVRI was garlic routing inside onion routing. They are 2 different concepts. Garlic routing, you bundle packets in a clove so you encrypt bundled packets together so no packet can be targeted. While in onion routing (akaTOR) you just encrypt each packet separate protected by encryption layers."
-
selsta
-
selsta
because Kovri is based on the I2P spec
-
_I3^RELATIVISM
its called garlic given the structure of a gralic with cloves and onion given the onion layers
-
_I3^RELATIVISM
selsta: exactly kovri is based of I2Pd but it is not just that
-
_I3^RELATIVISM
it uses TOR like onion routing inside each clove
-
_I3^RELATIVISM
so being "based of" is not the same thing as being "equal to" selsta
-
_I3^RELATIVISM
that is why it is a fork of it
-
_I3^RELATIVISM
if not one would just use I2Pd
-
_I3^RELATIVISM
trully a shame, hopefully one day project gets restarted, preferebly outside monero, so the same thing doesnt happend again.
-
onf
ayahuaza: well either way, there are several core differences between tor and i2p in how the network works: 1. in tor, volunteers run nodes that route traffic, in i2p everyone routes traffic by default (this leads to strong decentralization, but also slow users can (and do) bottleneck the network's speed) 2. tor was primarily built as a way to anonymize connections to clearnet with exit nodes being
-
_I3^RELATIVISM
anyway Cheers.
-
onf
significant part of the design, while in i2p the so called outproxies to the clearnet are ad-hoc services similar to tor gateways on the clearnet
-
_I3^RELATIVISM
agreed
-
_I3^RELATIVISM
is anybody else here interested in restarting such project btw?
-
moneromooo
It sounds interesting, but I have neither the time nor domain knowledge.
-
moneromooo
If it does get mostly finished, I could help plugging it in though.
-
h2017
hi
-
h2017
the attacker must have come up with a new attack. my node with no blocklist has ohnly been up for 6 minutes
-
moneromooo
Yes, they did.
-
h2017
is there anything i can do to help?
-
moneromooo
I don't think so.
-
moneromooo
7243 might be enough to fix. Otherwise a second patchj will get in when a dep is merged first.
-
h2017
ok i'll run with --enable-dns-blocklist and see what happens when the new release comes out
-
selsta
dns blocklist does not block tor currently
-
h2017
in that case i'll just use the banlist
-
monerouser1144
fwiw I use monerod with selsta's smaller block.txt (187 IPs) & --enable-dns-blocklist . And at the system level I use iptables+ipset that blocks all tor exit nodes (1745 IPs). Works fine and never had a problem during the past month.
-
moneromooo
h2017: actually, somthing you can do to help:
-
moneromooo
Merge 7228, then 7244, then
paste.debian.net/hidden/cdd5ded0 and see if you get any more trouble.
-
h2017
i'll look it into. no promises. i'm not that familiar with git
-
marmulak
pray you never have to be
-
moneromooo
And pray you never have to be familiar with anything useful either.
-
marmulak
I admit it is kinda useful
-
marmulak
HAPPY NEW YEAR
-
onf
marmulak: seems kinda early
-
marmulak
not in Australia!
-
onf
oh :D
-
onf
happy new year then :)
-
marmulak
and soon the rest of the world
-
ayahuaza
yeah happy new year all, may you all be equanimous
-
ayahuaza
"The I2P network does not officially "Exit" traffic. It has outproxies to the Internet run by volunteers, which are centralized services. I2P is primarily a hidden service network and outproxying is not an official function, nor is it advised. The privacy benefits you get from participating in the the I2P network come from remaining in the network and not accessing the internet. I2P recommends that you use Tor Browser or a trusted VPN when you
-
ayahuaza
want to browse the Internet privately."
-
onf
That's what I said
-
ayahuaza
indeed, thanks onf
-
onf
np
-
ackdroid
Kinda like a p2p bulletinBoard?
-
sethsimmons
Put together a (hopefully) simple guide to installing monerod as a systemd service on any Ubuntu/Debian box:
sethsimmons.me/guides/run-a-monero-node
-
sethsimmons
Would love any feedback you all may have before I share it more widely.
-
gingeropolous
damn. someone posted a systemd thing to help with the memory exhaustion
-
gingeropolous
anyone remember where / who it was?
-
sethsimmons
-
sethsimmons
-
gingeropolous
it was like memory accounting or something
-
sethsimmons
It wouldn't help, per se, but would reboot the node if it hit that limit
-
gingeropolous
goddamnit reddits search is useless. pretty sure it was reddit
-
sethsimmons
It was here IIRC, just not sure which channel/who it was
-
gingeropolous
ah sweet. i can grep logs. thanks
-
selsta
anyone running without ban list and can say if the attack is still ongoing?
-
sethsimmons
I am running with DNSBL and no issues so far.
-
selsta
might be because you have enough RAM
-
selsta
to survive the attack
-
moneromooo
Still ongoing, logs show I got one 3 minutes ago.
-
sethsimmons
Possible, but I haven’t seen any undue usage.
-
moneromooo
Actually, 3 mins ago, 4 mins ago, 4 mins ago. Busy.
-
-
sethsimmons
The major RAM usage drop-off was me restarting for a config change.
-
ackdroid
-
M5M400
haven't seen anything ram dropping in the past 6h selsta
-
ErCiccione[m]
selsta: I' m running a node without ban list. Attack seeems to be ongoing
-
selsta
M5M400: they use tor
-
M5M400
ye. I iptabled off a good chunk of exit nodes
-
ErCiccione[m]
had very big ram usage, one last spike gave it the final blow
-
ErCiccione[m]
Almost resynced again, let's see what happens
-
monerouser1144
ackdroid those hardening rules are for a generic server, I think we need to tailor them to a monero node.
-
M5M400
been pretty quiet since yesterday
i.imgur.com/zDHQqVB.png
-
monerouser1144
My monerod is at ~500MB RES, 43.1GB VIRT
-
slipcritical[m]
Supernoob here curious about crypto. Can anyone explain how Monero is more private than btc when all crypto transactions need to pass through 'know your customer' institutions anyway to convert to and from fiat? It seems that all crypto is non-private in the end.
-
nioc
with btc you know what address a tx was sent from, what address it was sent to, how much the tx was for and how much change went back to you
-
nioc
with monero none of that info is public
-
Kronovestan
M5M400, can you explain how you got monerod to sync fast? I swear I had seen you had a way to sync faster a few weeks back?
-
slipcritical[m]
thanks, nioc. Makes sense.
-
nioc
:)
-
monerouser1144
sethsimmons I quickly glanced over your systemd scripts and one comment is that I'd create a separate monero user and put everything under /home/monero (instead of the default user)
-
monerouser1144
PS: I'm referring to the instructions at
sethsimmons.me/guides/run-a-monero-node
-
monerouser1144
Also, until an AppArmor profile is ready, one could use systemd to harden the daemon.
-
M5M400
Kronovestan: just 1gbit, nvme and 128 in/out peers. and a bunch of other nodes in the same DC (hetzner)
-
sethsimmons
<monerouser1144 "sethsimmons I quickly glanced ov"> Good idea, rather than leaving it as whatever user they get, which can be root.
-
sethsimmons
Can standardize docs then too
-
sethsimmons
I’ll make thoise changes!
-
nobody[m]
slipcritical: realistically speaking, it's not incredibly difficult to obtain XMR without KYC
-
monerouser1144
Well, I have to head back home for New Year's eve. Happy new year everyone, with health and happiness :-)
-
nobody[m]
KYC is certainly a pain in the ass, but is so easy to get around that it's not an issue for most people.
-
Kronovestan
M5M400, ah ok it's the peer number I'm missing. What about syncing from a local node on the same network? like 10.0.0.2 syncing to 10.0.0.3? Just add priority node right? Would that be faster?
-
nobody[m]
and even if you do opt in for a KYC exchange, the only information that's really collected is that you're buying and selling the coin - what you do while on the network is entirely anonymous. an apt metaphor would be that a survellience camera on your street can watch you go to and from your home every day, but doesn't know what you're upto when you're at said home.
-
Kronovestan
Mining is KYC free :)
-
nobody[m]
mining is something i don't understand well enough to explain.
-
Quotes
-
nobody[m]
especially in regards to how it's profitable
-
nobody[m]
considering the cost of power in the US
-
h2017
moneromooo, i put the data-dir under /var/lib/monorod
-
h2017
sorry meant for monerouser1144
-
Kronovestan
nobody[m], that's the key to understand... you're "buying xmr" with your power bill when you mine. Now unless the power company does KYC .... lol
-
elchupacabra420[
Despite youve some deeper electrian skills or house in Uruguay...
-
Kronovestan
Monero can't be fully decentralized.. can it?
-
endor00[m]
Define "fully decentralized"
-
Kronovestan
the nodes where you first start your sync if you don't have any of the blockchain data
-
onf
Kronovestan: the project as a whole definitely can't as it needs a centralized group of developers.
-
endor00[m]
<Kronovestan "the nodes where you first start "> That's a common problem among all decentralized networks. I2P has the same issue.
-
endor00[m]
So until someone figures out how to solve this bootstrapping problem, we need a few hardcoded nodes to act as an entry point to the network
-
moneromooo
The seed nodes are semi centralised. They're run by various people. I run one.
-
moneromooo
They do not have particular powers others don't have though, and you dont have to use them, you can use --add-exclusive-node IPHERE.
-
moneromooo
Then you'll get your first peer list from that node, then you can run normally.
-
Kronovestan
moneromooo, ah gotcha... it works kind of like a bittorent
-
agentpatience
something just crashed my new node!!
-
agentpatience
it was runing for a couple days [killed]
-
selsta
agentpatience: which block list are you using? also which version?
-
agentpatience
i used the latest from yesterday it was like 24K in length if I recall
-
agentpatience
-
agentpatience
block_tor.txt
-
selsta
please restart it again
-
selsta
and wait until v0.17.1.9 is out
-
selsta
you might also want to use
gui.xmr.pm/files/block_tor_new.txt it includes more IPs
-
ayahuaza
what do you guys think about pivx?
-
ayahuaza
looks good on paper, but as I heard lots of design flaws
-
agentpatience
selsta, can you please append ll the ip to just one file? It is hard to version track this stuff...
-
agentpatience
*all
-
selsta
-
agentpatience
yea but you keep changing it how the hell is anyone on www supposed to know about this?
-
agentpatience
you keep changing filename?
-
selsta
-
selsta
block_tor_new might contain a couple false positives
-
agentpatience
keep it the same so we don't have to keep wondering what the next variant is?
-
sethsimmons
calm down buddy
-
selsta
it is confusing :P
-
sethsimmons
Hes doing this for free on his own time
-
selsta
block_tor_new is not a good name I agree
-
agentpatience
some poor bastard that wants to try out monero trading doesn't know about any of this shit, and really its a goofy workaround. The block list file shouldn't change its ID it complicates things even more to the people that know about it.
-
sethsimmons
then use the DNSBL
-
sethsimmons
That wont change
-
sethsimmons
—enable-dns-blocklist
-
selsta
DNS does not contain Tor
-
selsta
I would rather have some more crashes than a lot of legit nodes getting banned
-
agentpatience
if you are going to release a new version at least but in the notes that you need to pull a certain block list to circumvent KILLS lol, ?
-
selsta
it’s a different attack
-
selsta
we can’t predict that lol
-
_I3^RELATIVISM
contribute instead of complaining agentpatience
-
_I3^RELATIVISM
and patience would help agentpatience
-
_I3^RELATIVISM
sorry if you are offended but such types or demands are nor helpfull or productive
-
_I3^RELATIVISM
Im not a active meber of monero though just my own opinion
-
mark_bleep[m]
<sethsimmons "—enable-dns-blocklist"> Is this not a default for monerod? Mine keeps crashing I assume this would help a bit?
-
agentpatience
I hear ya selsta. I don't mean to sound off
-
sethsimmons
<mark_bleep[m] "Is this not a default for monero"> No, and it shouldnt ever be a default as its by definition centralized.
-
selsta
mark_bleep[m]: --enable-dns-blocklist does not contain tor so your node will keep crashing
-
mark_bleep[m]
<_I3^RELATIVISM "and patience would help agentpat"> Ironic.... Still I don't see demands more firm criticism which don't appear to be ignored so I think everyone's on the same page actually
-
agentpatience
I am restarting the nodewith -enable-dns-blocklist but this is just testing right?
-
selsta
you can download
gui.xmr.pm/files/block_tor_new.txt and start with --ban-list /path/to/block_tor_new.txt
-
mark_bleep[m]
<selsta "you can download
gui.xmr"> Ok, so is it blocking just known tor exit nodes or known bad actors that happen to be all tor exit nodes
-
selsta
just known tor exit nodes, once the attacks cool down I will recommend to remove this list again
-
selsta
if you are familiar with compiling monero yourself you can also fix it that way
-
mark_bleep[m]
Kk. Because that would explain my problem trying to sync a new node from tor? 😂
-
selsta
possible :D
-
agentpatience
ok, i started my node here with --enable-dns-blocklist however, i am uncertain if I need to pass other block lists?
-
kinghat[m]
you guys have something for the next network upgrade? i thought i remember talk of it.
-
sethsimmons
<kinghat[m] "you guys have something for the "> What do you mean?
-
sethsimmons
<agentpatience "ok, i started my node here with "> That is basically the Tor-less version of selsta’s blocklist.
-
sethsimmons
If you want to block Tor IPs you need to use his as well.
-
agentpatience
oh ffs
-
agentpatience
hes got 3 versions!
-
agentpatience
do i pass all 3 lol
-
agentpatience
actually maybe 4 now
-
sethsimmons
no.
-
sethsimmons
Maybe actually embody your name and slow down.
-
sethsimmons
He’s explained it to you above.
-
sethsimmons
Read the scrollback.
-
selsta
like I said,
gui.xmr.pm/files/block_tor_new.txt contains all IPs that you need
-
selsta
with this list your node should stay online for multiple hours
-
mark_bleep[m]
Can this app do pinning?
-
kinghat[m]
i dont know, thats why im asking. i thought there was a protocol change or something that other p2p networks employ to make it harder to attack the network but needed a network upgrade and we are not doing one for a while 🤷♂️
-
mark_bleep[m]
<mark_bleep[m] "Can this app do pinning?"> NVM doesn't look like it
-
sethsimmons
mark_bleep: not sure.
-
sethsimmons
<kinghat[m] "i dont know, thats why im asking"> The long-term fix for one of the attacks will be part of the next hard fork. A short term fix is in place and working properly.
-
agentpatience
why can't he keep his blocklist to one file, i don't get it. Theres no harm done doing that and it centralizes the versioning.
-
sethsimmons
Make your own list
-
sethsimmons
If you want to merely complain about the work of others
-
agentpatience
Thats not the answer.
-
kinghat[m]
ya, whats the long term fix?
-
sethsimmons
<kinghat[m] "ya, whats the long term fix?">
monero-project/monero #7135
-
kinghat[m]
i just dont remember what it was
-
agentpatience
I'm here as a end user to file legitimate issues to developers of a project I use.
-
sethsimmons
Then file an issue, whining about file names over and over isn’t helpful.
-
sethsimmons
This is an unfortunate necessity short-term.
-
onf
agentpatience: you as an end user should be grateful for the work of others and not complain about minor inconveniences
-
sethsimmons
Not worth the time to make it the perfect UX when it won’t be needed long term.
-
sethsimmons
These things are being doen FOR FREE FOR YOUR OWN BENEFIT.
-
sethsimmons
Feel free to give ideas on how to improve but whining helps no one.
-
ackdroid
well said
-
sethsimmons
selsta clearly explained how to use the block lists and what each does.
-
mark_bleep[m]
Fwiw a simple, current string for deploying a node is almost, but not quite what people need. Given attacks and change I realize that isn't necessarily easy but if hash site is right and only 1200 or so full nodes are running globally then it's not much of a network until more are running.
-
agentpatience
I just wanted to provide feedback here instead of opening tickets on github but if you prefer that then I will do so.
-
sethsimmons
Not for this “issue”, as it’s a non-issue.
-
sethsimmons
<mark_bleep[m] "Fwiw a simple, current string fo"> Yes, Ansible/Docker would be a great way to build a simple deployment tool for end-users.
-
sethsimmons
If you have the experience go for it :)
-
agentpatience
actually having multiple block lists to save a node really disturbs me deep down inside.
-
selsta
-
selsta
this list will always contain the block list you should use
-
selsta
is that better?
-
mark_bleep[m]
<sethsimmons "Yes, Ansible/Docker would be a g"> Ansible yes, docker... Ugh. Maybe. The problem always arises in edge cases
-
agentpatience
lmao, fuck off man with your varients
-
selsta
I can make more variants :D
-
sethsimmons
Dude, getfo of here.
-
binaryFate
agentpatience: please be civil, especially when everyone is trying to help volunteering on new years eve
-
agentpatience
I hear you. I recpect everyones advice and opnions here. I am duly noted.
-
selsta
but I was serious, I will make sure that
gui.xmr.pm/files/block_simple.txt always contains the list to use
-
selsta
you can ignore all the others
-
agentpatience
ok
-
mark_bleep[m]
<selsta "this list will always contain th"> I think the issue he's having is at its core too abstract.
-
agentpatience
Thanks for clearing that up, hopefully I won't hear about those others again I couldn't sleep for days
-
selsta
always contains the list you should use until these attacks are over
-
selsta
then no block list is necessary
-
monerofanboy2
Would it be possible to put
gui.xmr.pm/files/block_tor.txt in a secondary dns blocklist? It may improve the situation for complete monero noobs who only use the gui and have no idea how to add blocklists
-
-
mark_bleep[m]
<sethsimmons "Not for this “issue”, as it’s a "> > <@mark_bleep:matrix.org> I think the issue he's having is at its core too abstract.
-
selsta
monerofanboy2: everything we add to the dns list will be blocked for 10 days
-
binaryFate
A secondary dns blocklist would just be more confusing to newbs
-
selsta
binaryFate: opinion on adding Tor exit nodes to DNS block list?
-
selsta
or rather not
-
monerofanboy2
"everything we add to the dns list will be blocked for 10 days" I get that, but the malicious tor exist nodes are not in the dns block list, right?
-
selsta
no, we have to add all tor exit nodes
-
binaryFate
Tricky one, because we're about to fix current attack, so 10 days will be longer than necessary
-
selsta
though once people update the DNS list will reload anyway
-
ackdroid
some of those onion nodes are suspected owned, prob not the attackers
-
mark_bleep[m]
<binaryFate "Tricky one, because we're about "> Is ten days based on DNS TTL?
-
selsta
afaik ten days once loaded in monerod
-
binaryFate
it's based on the time at which you query and get the list afaik
-
binaryFate
<selsta> though once people update the DNS list will reload anyway <-- are you sure?
-
selsta
restarting resets the bans
-
mark_bleep[m]
<binaryFate "it's based on the time at which "> Right, but dns replicates based on a TTL value that can be modified for each record to be anywhere from 5m to two weeks (standard) and checks for updates halfway through
-
binaryFate
I think the dns TTL is short, the 10 days is entirely internal to monerod
-
mark_bleep[m]
I guess I could look up the TTL myself instead of asking.. it's a txt record, but I'll need to track down it's name
-
binaryFate
selsta: ok then I would be on the cautious side and add tor nodes to dns list now, so that it helps user experience until next release
-
mark_bleep[m]
<binaryFate "I think the dns TTL is short, th"> Ok, that's what I was wondering, because 10 days is a bit long for Dns expirey
-
monerofanboy2
idk, I'm running 8 nodes currently. 7 with block_tor.txt and 1 with block.txt and the DNS blocklist on all 8. The 1 node not using the block_tor.txt appears from the logs to be crashing hourly. The other 7 nodes appears to still be going strong.
-
binaryFate
mark_bleep[m]: Check
monero-project/monero #7138 it's a fairly simple one to follow
-
binaryFate
monerofanboy2: yes we know, there is a new attack. The fix is coming.
-
agentpatience
+1 binaryFate
-
p0nziph0ne
what a moron to pull this attack off in christmas and new year eves time
-
selsta
mark_bleep[m]: dig -t txt blocklist.moneropulse.de
-
mark_bleep[m]
> mark_bleep: dig -t txt blocklist.moneropulse.de
-
mark_bleep[m]
Excellent, the dns server was what I needed. Tyvm
-
monerofanboy2
it does not bother me personally in the least bit that 1 node keeps crashing, but I'm thinking of the those who know very little other than "help me, my stuff is broke and I'm angry because I have no idea what I am doing" ..... If we could switch the dns blocklist from "block" to "block_tor" it would help many of those confused people that have no
-
monerofanboy2
idea why nothing is working.
-
monerofanboy2
sorry for the double negatives
-
monerofanboy2
that grammatically do not make sense. (facepalm)
-
mark_bleep[m]
Haha
-
mark_bleep[m]
TTL was updated between my lookups.. now it's at a reasonable level
-
mark_bleep[m]
First lookup had it at 515100, next at 7085, so 6 days to 2 hours
-
mark_bleep[m]
Ignore all that. Typo. Blech
-
monerofanboy2
Does some sort of notification system exist for new monero cli releases?
-
monerofanboy2
I would like to be immediately "on it" when v0.17.1.19 drops
-
selsta
monerofanboy2: this exists feed:https://github.com/monero-project/monero/releases.atom
-
mark_bleep[m]
<monerofanboy2 "I would like to be immediately ""> Maybe something like this?
-
-
mark_bleep[m]
<monerofanboy2 "I would like to be immediately "">
github.com/AurelienLourot/github-commit-watcher
-
binaryFate
I think github has email notification for that
-
monerofanboy2
I was thinking more discord push notification to my phone/computer, which I just realized I should be able to setup based on new monero releases on github. I know of other projects that do that, I just need to set it up myself for once.
-
gingeropolous
how often is the dns blocklist updated?
-
sethsimmons
7000s IIRC
-
gingeropolous
nice
-
gingeropolous
oh the tor list ins't on there hrm
-
selsta
yea we will add it
-
gingeropolous
well lets see if monerod can handle --block-list and --dns-block-list
-
gingeropolous
loaded fine
-
grndslm
guys.... where can i find a list of what the various xmrig or randomx options do??
-
monerofanboy2
I think this is what you are asking for?
xmrig.com/docs/miner/command-line-options
-
grndslm
well..... i've seen that before, but there's some things I don't really understand what most of those options do.... like numa, astrobwt-avx2, etc.
-
grndslm
and should I limit --init or threads to number of cores, or threads?? I've heard xmrig runs faster when limited to cores, as opposed to threads....
-
h2017
readging above convo. those crititizing the work of the devels, do *not* do that. they are doing god's work
-
h2017
if you want to critize make sure that you accompany your criticicism with a generous tip because they deserve to be more than compensated for all they have done.
-
slighty_toasted
Does something like torservers.net exist but for monero nodes?
-
slighty_toasted
If not I think it'd be a great idea
-
slighty_toasted
Especially with the influx of people lately wanting to run a node but not having the technical know-how
-
selsta
ok, we can’t add Tor to dns-blocklist, too many entries
-
selsta
using --ban-list is requires until we put out a new release
-
selsta
or recommended
-
p0nziph0ne
is the second attackvector already known?
-
mark_bleep[m]
<h2017 "if you want to critize make sure"> Just because the skill of the criticizer is low doesn't mean high value can't be extracted by the recipient.
-
selsta
p0nziph0ne: yes
monero-project/monero #7244 might be enough to stop it
-
selsta
else a second PR is requires too which will soon be submitted
-
p0nziph0ne
selsta: thanks, wish i would understand anything in coding
-
hyc
mark_bleep[m]: if you think you're pointing out anything the devs haven't already recognized, think again
-
BobSacmanto[m]
How many transactions per second can Cardano do as of the end of 2020?
-
BobSacmanto[m]
* How many transactions per second can Monero do as of the end of 2020?
-
slighty_toasted
this might be outdated but heres a video from 2018 where hyc says it's 1700 transactions/second
-
slighty_toasted
-
slighty_toasted
31:30
-
moneromooo
You'd need a really beefy machine for that.
-
moneromooo
Unless that was before rct.
-
slighty_toasted
the video was shot a year after ring ct
-
hyc
I don't recall the source of those numbers now
-
hyc
but most likely still practical on current hardware
-
hyc
maybe not on a Pi4 tho ;)
-
hyc
1700tx/s at 1500bytes/tx means 2.5MB/s network bandwidth
-
slighty_toasted
Monero's all time highest tx/day is 32k which averages to 0.37 tx/sec. RAM and bandwidth should be cheap by the time Monero gets remotely close to 1700 tx/sec