So, I know that with Monero there is a chance of leaking an IP address if you are doing a transaction but am also aware that it can be prevented by using Tor or I2P and potentially obfuscated if you run a local node since it's just another part of the traffic from your IP. Are there any other vulnerabilities or issues for users that Monero currently has?

If I misunderstand the leaking of an IP address, feel free to correct me.

There is a series called Breaking Monero that goes over scenarios that you can get put into that would weaken your anonymity.

But for the IP address thing, Dandelion++ does a good enough job of hiding the origin IP of a broadcasted transaction, if that is your concern. If you need to hide having used monero at all, you will need a proxy such as TOR / I2P.

disagree, d++ does not hide TX origin from your ISP, only from other nodes. also, the standard way to use tor / i2p does not hide the fact that you have a node, though that is possible with torsocks or qubes or some such

breaking monero is good though

I'm mainly just interested in the issues and vulnerabilities that exist at the moment or have previously existed. I already run everything through Tor for my own personal reasons. Mainly wanted to ask because I like learning about how certain technologies work.

<Lyza "disagree, d++ does not hide TX o"> Whonix also does a really good job. It is virtualized though so it can sometimes have low performance depending on hardware.

Previously existing was a double spending bug back in 2017 getmonero.org/2017/05/17/disclosure…in-cryptonote-based-currencies.html

If you never heard of that one

I was not aware of that bug, very interesting!

I am rather curious as well how many people use Stratum Self-Select mining in the Monero community compared to other cryptocurrencies. It seems to be rather niche despite making 51% attacks far harder, even with larger pools. That's only if the mining pool supports the feature/option though.

Do I understand the Janus attack correctly? It only impacts sub-addresses so if for any reason you wanted to completely mitigate the vulnerability, you'd have to create a new Monero wallet account in the GUI or CLI?

Not asking for practicality, just if I understand this and the mitigation correctly.

* Do I understand the Janus attack correctly? It only impacts sub-addresses so if for any reason you wanted to completely mitigate the vulnerability, you'd have to create a new Monero wallet account in the GUI or CLI?

Not asking for practicality, just if I understand the exploit/vulnerability and the mitigation correctly.

AdorableTanuki[m: it impacts both normal and subaddresses - i.e. the attack lets you connect a normal address with a subaddress, or two subaddresses

My first pass meeting agenda: greetings. Give people a few minutes to introduce themselves, what they do/what skills they could contribute. People could give updates on any Monero things they’re working on. There would be a time to discuss CCS things. Recent reports or hyping up their own proposal (perhaps especially mj and rating89). Then an open ended brainstorm period. I’ve heard people talking about a separate fund for MRL,

that sort of thing could be discussed or whatever other ideas maybe for merchant adoption or whatever where that idea could get paired with people that can bring it to life

Or is a meeting all at one time not worth it at this scale?

That looks perfect to me

Maybe not the merchant adoption part

Just end with "any other topics"

Also importantly "agree on next meeting"

<bevanoff[m] "My first pass meeting agenda: gr"> Sounds good Bevanoff

I propose Saturday the 10th, so that there is enough time to make posts/organise/get the word out

Sounds good to me

sounds good. These pretty much were the regular "community meetings" in the past, they were great for various workgroups to exchange ideas/progress. I think it's super useful

Meta issue posted: monero-project/meta #585

matrix mods wanna update the header ping @binaryFate (sorry idk who manages these)

It's sgp_ charuto rehrar in Matrix.

But AFAIK needs to be set on IRC as well

Oh ok gracias

Thanks for driving these!

Great to have new faces step up to lead initiatives like this in Monero 🙂

I had created this, but I can close issue if you'd like: monero-project/meta #584

Wow I’m slow didn’t even see it lol

I like yours better I’ll close mine

Has there been coordination with each of the workgroups listed there that they actually want to come to such a meeting at said time?

If there's any changes that should be made, please let me know

I copied most of the agenda from a August 2020 meeting, so it should be fine I think

If no one from that workgroup says 'Hi' at beginning, skip over that workgroup

Yea I suppose

You probably need to add at least website and policy workgroups

@ErCiccione do you still head the translation work group. Is there anything they’d like to discuss or ask of the community. I see a couple translation CCS proposals, maybe a weigh in from current translators. Or perhaps some bilingual people will come to the meeting and they could help onboard sorry idrk how y’all work

Yes also does erciccione still maintain the site? If so I would like to make sure the time is okay for him

<binaryFate "You probably need to add at leas"> Thanks, updated

Also would add Malware workgroup. Afaik there is nothing being done or anyone really pushing this right now, but it's a nice topic for everyone to mention and chime in

Since it's always in the news

Updated again

@binaryFate If you could update the IRC topic to be something like 'Check github.com/monero-project/meta for latest Community meeting info' that would be great

If it's generic we don't have to worry about regularly bothering you or someone with access to change the IRC topic

Maybe there could be a dedicated issue thread so you just scroll to the bottom to find the next meeting time and there’s only one link?

Sure, I can just update the exiting issue time after each meeting if people want

Sure, I can just update the existing issue time after each meeting if people want

We usually explicitly mention the next meeting

I already updated the topic to "Mark your calendars: Next Community Meeting Saturday, July 10th, 17h UTC"

<sethsimmons "But AFAIK needs to be set on IRC"> bevanoff: I will let people know there is going to be a meeting. Some of the people who opened CCS proposals should be idling there

i should be able to make it for the meeting btw

<Keiji[m] "I copied most of the agenda from"> I suggest to take a look at older meeting issues. They are clearer and more elaborate

Ok, will look at tomorrow to find what you mean

great initiative btw, I really think it's missing! The community is way too split in sub-channels and nobody really knows what everyone else is up to

anyone know how I can contact vitalik for a research question?

UkoeHB: He is u/vbuterin in Reddit, I think. I don't know though if there is private messaging there.

coinstudent2048[: thanks I will give it a shot

I have his gmail from 2013 when I ordered a bulk of bitcoin magazine from him but I doubt it's gonna help nowadays

<binaryFate "I have his gmail from 2013 when "> I mean it doesn't hurt to try

he seems active on reddit so it should be fine

thanks for stepping up Keiji[m]

I'll plan to be there from Outreach. xmrhaelan[m] or Thunderosa[m] might join as well.

also pinging lh1008[m]

how do you do, fellow cypherpunks

<geonic> I'll plan to be there from Outreach. xmrhaelan[m] or Thunderosa[m] might join as well <-- great

oven[m]: doing great

<geonic "also pinging lh1008"> o7 I'll be there

Thanks for taking this on @Keiji. It's appreciated. I should be able to attend.

<kinghat[m] "youtube.com/watch?v="> Interesting interview

I appreicate the shoutouts, but all credit goes to bevanoff for stepping up to moderate as well as carrington for setting the date as well and both for also actively discussing. All I did was copy sgp's work with minor changes and volunteer to copy paste things in the future, so not as much effort. (・・;

> <@erciccione:haveno.network> > <@keiji.case:matrix.org> I copied most of the agenda from a August 2020 meeting, so it should be fine I think

>

> I suggest to take a look at older meeting issues. They are clearer and more elaborate

I looked at older ones from 2018 and 2019 and they are the same style I think. monero-project/meta #382 monero-project/meta #292

Someone with Mod or Admin role like sgp, pigeons, needmoney90, or charuto needs to set the topic on Matrix I think

Do you guys fear that Bitcoin is gonna win adoption over Monero, I say that because of El Salvador has accepted it as legal tender and other countries are think of doing the same. Just how in networking models, TCP/IP was adopted over the better OSI model.