hello MONERO fans

can anyone read that link claiming Monero is busted?

is it true? - or some FUD?

Is it true ?

Monero eternally btfo all hail PirateCoin the new privacy coin.

>Do you think Vincent Rijmen exploded with anger when AES was broken?

is AES broken too?

i heard some Sp00ky things about the S-boxes - and the backwards similarity with 3DES

hehe

idk if its broken honestly as2333 i just looked at that site and a bit scared i guess?

.usd

Did you know that all witdraw-buyer-seller-depoist chains are trackable in Monero? No? You should have read Breaking Monero. How many people are you endangering with your 'privacy' coin?

how could i have been so stupid

socall[m]1: some entity put up a bunch of monero nodes hosted on OVH and tries to determine which node is the first node a transaction comes in from. Then does a lookup on torrent monitors to see the download history of that IP address, and given some keywords, will post the ip and keywords. It is a kind of sybil attack that has led to improvements in the p2p network of Monero. It has yet to be shown that

those connections are even correct, since the deployment of Dandelion++ makes it pretty hard to track. Also, if you want to remove all possibility of this kind of metadata attack, you can use a transaction pusher or configure your wallet or node to work over TOR - but the consensus seems to be that there is a high probability that the published data is too often incorrect to be of any practical value, AFAIK.

Your ISP has much better control over transactions originating with you (and what you download over torrents) than that project can ever hope to have

Can anyone recommend a Python library for interacting with the XMR block chain? I'm trying to do a simple program that can accept payment with XMR.

(I mean can I fairly easily google and find something, but I don't know if some should be avoided -- like some wallets)

Zta, there's one... hold on

Zta, ^^^^

Thanks! That's also the one I was thinking about using.

Is it because of security reasons that github.com/monero-project/monero/blob/master/Dockerfile isn't present prebuilt on dockerhub?

Sorry, I can't help you there Zta

It's okay, it has completed building. I just realized that maybe it would have been fine to download the monero cli and wrap it in a container instead. Definitely faster =)

not like, a huge deal or anything, but I the official GUI still won't auto-update for me. I think I had this issue before too and may have ended up manually updating

I'm trying to build a proof of concept webshop where one can buy a joke and pay with XMR. It'll be a simple REST service that responds with JSON.

I was thinking about this flow: 1) User requests a joke, the system responds with an OrderRequest consisting of: order-id, amount, wallet. 2) User pays amount to wallet though other means, specifying order-id as payment-id.

3) System polls block chain for confirmation of expected wallet, payment-id, amount. 4) When payment is confirmed, system updates the order to completed, 5) User can poll the system with the given order-id and receive the joke in the response.

Does this sound about right? If not, where can I read more about how this should be implemented?

I'm still waiting for the block chain to be downloaded, so I don't think I can test anything right now. I'd like to use the testnet. I think.

Btw: Is testnet and mainnet two different block chains? I mean, do I have to downloade 5 years of blocks when I move from testnet to mainnet?

got a lot of errors in my GUI log that look like "2021-05-21 10:19:51.006 13648 WARNING net.dns src/common/dns_utils.cpp:567 WARNING: no two valid DNS TXT records were received"

DNS works for everything else though -- DNS based block list for monerod works. Other DNS lookups all work.

That means your DNS server does not do DNSSEC. Or your ISP is hijacking it. Many do. And don't get done by the law for the crime because the'yre large companies.

hmmm, well the auto update has worked in the past, and also I do not use my ISP DNS

wait I did switch ISPs recently

testnet and mainnet are different chains. Testnet is about 5 GB I think.

Use either integrated addresses or subaddresses, not separwte payment ids, which are not supported anymore.

Otherwise it should work.

A separate address seem for each purchase seems like overkill... Is this really the correct way to do it?

Yes, that's the only way to separate transactions and tie to a specific order.

Integrated addresses are really the same address, just with a tag attached.

I just realize that I've never actually bought anything myself with crypto. I've only noticed that Coinomi has a PaymentId that can be filled out during a transaction.

Ah, I guess it supports the exact same use case then. Thanks.

utxobr: are you changing the default out_peers?

(context for folks not in monero-dev: imgur.com/o4xkV2k)

I bet you're hitting a file descriptor limit (or whatever is similar to that in k8s) and monerod isn't handling it well and closing all connections at once.

(that `pid` being `monerod`)

I wouldn't recommend increasing out_peers anyways

And I bet leaving that at the default 12 would mean you never see this issue.

I see - I'll lower it and leave it running for the day to see how it behaves

imgur.com/ESIYwn7 these are the values it goes to when it lowers

the values are just too "cute" - 128 and 32

(actually, incoming goes to ~20)

<sethsimmons "I wouldn't recommend increasing "> my thought process was that these connections are bi-directional anyway, so with a high out_peers, I'd be contributing to the network just as much as having a high in_peers

(thus, setting a high number for both)

does that make sense?

(bandwidth/compute is far from being an issue, so just jacked it all up)

AFAIK out_peers do not help the network and can open you up to easier Sybil attacks.

Any out_peer you connect to has to communicate with you, increasing network load without any clear benefit.

So from what I can tell, DNSSEC is working for me. Also I think the DNS based blocklist also uses it? which is working for me

Unlimited in_peers is very beneficial as new network participants can "leech" off of you, but out_peers being massive just causes you to "leech" off of nodes unnecessarily and doesn't help with TX propagation with D++ either.

got it - does it make sense during sync time though?

I thought transactions are only propagated through out_peers

as I can control these parameters programatically, I wonder if I should jack it up during sync time, then lower aftwards

because incoming peers can be all Sybils

<utxobr[m] "got it - does it make sense duri"> Absolutely does! I generally increase to 512 during IBD and then drop back to 12.

Out peers for dandelion, all peers otherwise.

<sech1 "I thought transactions are only "> Yes, they are.

(AFAIK)

Yeah thats my understanding

<moneromooo "Out peers for dandelion, all pee"> can you _not_ use dandelion? 🤔

More out_peers would be more beneficial if not using D++

<utxobr[m] "can you _not_ use dandelion? 🤔"> Only if you compile yourself.

You'd set the dandelion but to false in the P2P message.

got it!

bit*

Probably not a good idea though. It just degrades overall privacy.

👍️

thanks everyone! gotta do work now

so I'll lower the out_peers on this node, see how it behaves and also incorporate that "very high out during sync - auto low afterwards" later

thank you!

moneromooo: isn't that dangerous? people could spin up a bunch of nodes with dandelion deactivated and damage the overall privacy of the network

Less privacy is dangerous to some extent.

(before I go): is removing that option something that should be done for the next hardfork?

(or perhaps considered)

What option ?

that dandelion bit you mentioned that can be on/off

No. You want to switch to broadcast as some point.

If you don't, you end up with a fairly trivial DoS vector, and people without incoming connections will only ever see new txes when they're mined.

you can always compile a node that just broadcasts every tx it receives, it's not a part of consensus

aah I see

Anonymity and privacy being a big selling point for Monero, it feels a bit ... off? that I find my username filled in as the default wallet name in the GUI. I would have preferred "my wallet". Just saying. I know it's safe to extract $USER (and $HOME) from the environment variables, but it still feels unnecessary.

Besides, my guess is that everyone will change it from the default anyway.

It's only a local and temporal name, so I don't really think it's an issue (and makes sure people don't have problems transporting wallets without changing defaults).

I'm only reporting first impressions ;)

Understood!

something something Norwegian police want to trace Monero now

Inge- ?

sech1, translate.google.com/translate?sl=a…-saken-her-er-politiets-krypto-haap

"An entirely new cryptocurrency that has not been known to the public" really?

Wonder what good that is... a private coin.

So dumb.

alright y'all, I have triple checked that I have DNSSEC enabled and working. Using Clouflare DNS over TLS, their online checker confirms DNSSEC is enabled. Auto update still gives "no two valid DNS TXT records" warning. thoughts?

.beg

p​arazyd: How many character​s in milk

4

parazyd: @bonuspot tipped 0.0000009 XMR to parazyd [6c9fb1cc] Wait ≈23 hrs 54 min before trying again. @bonuspot: 0.01640615

.faucet

Mo​chi101: Which is​ bigger, 3 or 1

3

Mochi101: @bonuspot tipped 0.0000133 XMR to Mochi101 [baf88077] Wait ≈23 hrs 58 min before trying again. @bonuspot: 0.01638955

massive tips lately!!!

wow!

.balance

Mochi101: • Your balance is: 0.0025926 XMR (≈0.66 USD)

.faucet

S​erHack: How m​any letters in pub

3

SerHack: @bonuspot tipped 0.000005 XMR to SerHack [a8ea3335] Wait ≈1 day 1 min before trying again. @bonuspot: 0.01638455

.balance

SerHack: • Your balance is: 0.0010299 XMR (≈0.26 USD)

the subliminal messaging there hey SerHack

hey Mochi101, how's it going?

not bad... you?

Would be better if XMR was $5000 though

I do agree haha, I'm doing good :D working on the book

nice

.balance

Zta: Your default coin is now set to XMR. Change with coins command.

Zta: • Your balance is: 0 XMR

juuuust checking...

Word of guys running Monero community should be BELIEVED. Why would anyone that stole money and laughed at the losers that took the bait ever have a reason to lie to you? removeddit.com/r/Monero/comments/6d…ds_to_give_up_his_commit_access_and (changed link to removeddit since /r/monero mod removed to try to cover it up - maybe fluffy himself?)

\

I challenge anyone here to send exactly 0.0102646xmr to this address: 85Uuk2JJzSY4F9MoHUX7ShjMrzshQ9Q9QMYocfMqNZR99EEihNTr9cr72ivsJJXQvyKnQE7ssTDhPSXZUKyFrR4276GEpau

why?

but if I explained, it wouldn't be challenge,

I will be back here tomorrow, and I hope by then at least 7 people accept the challenge.

lol

Sup Luigi

-server notice- All references to libera.chat are now subject to network-wide ban (k-line)!

<\x> lmao

sure

lol

Hi all :-)

hi from one, but not all (yet)

apotheon: Hehe, thanks :)

gingeropolous: Hi, is uwillrunanodesoon.moneroworld.com:18089 down?

Are we going full matrix? Yeeeey

PacoKajMilito[m]: ?

No plans for XMPP?

PacoKajMilito[m]: hopefully not

haven't heard anything about moving to "network that shall not be named"

or oftc

mys: There's a presence on both of those, though.

is it official?

"official"

who knows

getmonero.org still lists freenode as official

and matrix obv