pretty good try, I think some of his points make sense too. some of them don't also, but he codes pretty good so would be nice to see him stick around

what joshhavepigdog just said made my eyes bleed

"Clearly you are someone special/OP maybe even Sarang Noether tier or beyond."

"Ooo, I think you might be the most overpowered person/dev/security guy in here now."

what kind of propaganda campaign is this lol

> wants pure merit/work to be rewarded

> thinks that a tool designed to improve mining profitability and thus the security of the network against attacks is clickbait

I think it's pretty obvious :D

<joshhavepigdog> Maybe his idea to change the CCS is wrong, but I think his frustration with projects getting funded by hype/emotional appeal rather than raw utility is legitimate. I think he should just write his own CCS and compete for funding just like everyone else.

Solar mining. Let’s be real, how many people actually set up solar rigs after that CCS lol. I mean maybe I’m wrong and tons of people used the completed research to set up solar miners, but I doubt it. I’m not saying people shouldn’t have been able to fund that CCS (people can use their money however they want to finance whatever cause they want), but I think there are bigger fish/issues to fry in Monero than solar

mining rigs. Ooo12 probably gets frustrated because he knows there are bigger issues to solve and he sees things which are of lesser consequence getting funded.

Ooo12 complaining about it in here is probably not worthwhile though, he needs to clearly state what issues he can fix in a CCS and why it’s actually important relative to some of the other projects that get approved without hinderance for funding.

<joshhavepigdog> I don’t see anyone else in here claiming they can do BP++ (which seems extremely complicated and difficult from an outsiders perspective) within one month’s time.

Maybe ooo is just talking nonsense and he couldn’t make more progress on BP++ in a given timeframe than anyone else in here, but ooo12 has at least some credibility since he spotted (If my understanding is correct) a big flaw in multi-sig that everyone else in here seemed to miss.

Correct me if I’m wrong but this ooo guy does have balls to say he can do BP++ in one month’s time and has proven a high degree of knowledge/skill from the whole multi-sig debacle. As an end user I don’t care about multi-sig (it’s unlikely I’ll ever use it in a meaningful way) but I understand its importance for certain use cases.

Developing Monero for the most part involves teamwork. As a Monero dev, you work together with others. You have to, no way around it, in the absolute minimum you have to get your code reviewed by at least 1 other person.

So, you may be the greatest C++, crypto and math wizzard walking on this planet, if you have difficulties with teamwork, well, that's a problem.

<rbrunner> "So, you may be the greatest C++,..." <- the team should accomodate to the greatest C++, crypto, math wizzard. the goal here is the best digital cash, not to make a group of people feel good

Yeah, ooo was definitely disturbing our Monero Dev Cuddle Club where we all strike our collective egos, making us feel good, and produce a little code now and then, so it did not become too obvious

Couldn't have that :)

we should start an ooo fanclub

i heard he can do bp-plus-plus-extra-premium-plus in 4 days *if* he has an never-ending supply of hot pockets funded through his own CCS

in addition, we can commission a few paintings

This reminds me a bit of this: en.wikipedia.org/wiki/Paradox_of_tolerance

<joshhavepigdog> My point exactly. I would say the guy ooo12 is pretty bad at communicating his concerns efficiently and in a palatable manner to you guys. It took 100s of messages for him to make a point that could’ve been the size of this message I’m sending now. He is pretty rude/abrasive as well. But acting like a beta wojak and being pouty with this guy isn’t any better. Having teamwork problems is inefficient and

leads to you guys despising him, but you can’t use this justify not merging his PRs etc.

<joshhavepigdog> Yeah he needs to work on communicating efficiently and in a palatable manner

<joshhavepigdog> I never implied this. He was acting like a drama queen and spamming the dev chat you are correct.

Well, two of their PRs *will* get merged and will go into the hardfork, despite all the hoopla. Agreed, after sitting there for months without proper review, but finally now.

One of them against their will by the way, if I am not gravely misunderstanding them, but can't have all ...

thanks for looking at this on rbrunner, i believe 1 of the 2 will be this? monero-project/monero #8426

Yes. And the other is the almost-famous-now 8149 of course: monero-project/monero #8149

<joshhavepigdog> The guy hasn’t communicated very clearly in here, but he does seem competent.

<joshhavepigdog> Haha

Much more has already been merged over the years

<rbrunner> "Yeah, ooo was definitely..." <- sarcasm aside, some one doesn't have to be a "team player" to give value to the project

I think it's easy to considerably underestimate the complexity of the question to find a "modus vivendi" between ooo and pretty much all the rest of the dev community

not saying he doesn't need to do his part at expressing himself better

For them, this "getting to express themselves better" might be a challenge at least a magnitude more difficult than writing code for Monero.

I dont think its so difficult.

Ooo doesnt want to talk

He wants to be confident that when he sits in his lab and pulls all nighters doing nerd shit for monero, that it will get proper reviews by those getting paid to review

or he doesn't want to conform to the way things are done here

but if he truly has valuable insights then there needs to be some accomodation

lack of reviewers is not a new issue

He comes and goes. Comes with code, solutions or with anger. Doesn't usually stick around otherwise

"some accomodation" puts a smile on my face.

:)

Maybe not many people noticed, but I and ofrnxmr[m] had a chat with ooo that went over 3 hours, on July 1, about various topics, communication among them: libera.monerologs.net/monero-community/20220701#c115574

<joshhavepigdog> Yeah I backread everything

<joshhavepigdog> At first I thought ooo12 was a troll until I got the full scoop about how he solved a problem and others took credit for it lmao. But it’s also partially his own fault, because he effectively just created pull requests and lurked without ever commenting in the matrix channels lol

<joshhavepigdog> I’d never heard of this guy or any of his PRs until he started kicking up a storm haha

<joshhavepigdog> He seems pretty skilled, just a bit of a derper who has an abrasive personality but I think having him in the team is a healthy development.

<joshhavepigdog> If everyone is happy chappies in here and nonconfrontational it benefits the community to have an odd ball like this guy who isn’t scared to speak his mind. It might piss people off, but people can just ignore this guy.

he has good points re: CCS

bridgerton[m]: agree 100% i understand his mindset

some people just dont want to make friends. he clearly gives a fuck about monero and that should count more than being nice

"Abrasive personality" is missing the point. ooo123 says that he/she/they wants to contribute under the condition that there is a bounties-based competition set up with all competitors working on the same problem. _Maybe_ something like that could be set up if Monero had five times the number of developers its has now. The Monero Project doesn't have that, so ooo123's conditions cannot be met. That's an impasse in negotiations that

cannot be overcome.

Unfortunately, that's the end of the story unless ooo123 wants to change the conditions.

You need 5 times the number of developers + those developers need to accept that they have a high probability of not being paid when they lose the competition.

The CCS process is certainly not perfect as it is.

And HackerOne bounties are too low in value.

<joshhavepigdog> I agree with everything you have said Rucknium.

ooo makes PRs without any description/information

sorry, this is not how open source development works

i dont care if he is jesus himself

<joshhavepigdog> If ooo12 wants he can create a website/system that competes with both the CCS and bug bounties but to it will be difficult getting other devs and users to finance this new competing source of funding.

<joshhavepigdog> Or he can make his own CCS

<joshhavepigdog> Proposal

Its not about money

<joshhavepigdog> I don’t understand why he doesn’t. He just has to explain it perfectly.

I think ofrnxmr[m] expressed it well: "he sits in his lab and pulls all nighters doing nerd shit for monero" In my view, that's their thing, mainly.

Its not about money. He has and he's left more xmr on the table than he has taken

<joshhavepigdog> He is free to do so. Speech is not compelled. It might trigger you and be a bad group development practice, but in my opinion it’s stilly to say someone can’t patiticiapte just because they don’t explain their work lol

why are we still talking about ooo? who is joshhavepigdog? Just a regular monero user, like he says? Then why does he care so much about discussing some random person who created 2 ill formatted PRs?

Not sure who Josh is 🤷‍♂️

Slow Sunday?

in addition ooo has been DoS'ing both dev chat, and community chat

dsc_: And more like 15 or so, js. 3 that weren't merged

perhaps he developed some kind of cult following? I dont understand

<joshhavepigdog> It is about money though. He has beef with the current Crowdfunding system. He shouldn’t. If he explains himself and his reasoning has merit he can get the financing. If the average Monero voter is unfortunately more concerned with non-core related projects than that is a tragic situation in my opinion and like ooo12 but it may be a reality unfortunately.

Don't forget the dog and the pig of Josh

No, it isnt about money. Its about priorities

who is josh.

does he have skin in the game? :P

im so confused.

He's using telegram or something, so i doubt it

<joshhavepigdog> Yeah I’m just an average idiotic Monero user. I’m not as smart as you guys. This 100% true. But you are making an appeal to authority rather than the soundness of logic.

you have no idea what you are talking about

maybe pick up a programming book, participate in FOSS communities, come back if you have something to contribute

<joshhavepigdog> This is true. That’s why the discussion has moved to here from the dev channel to avoid distracting work on the code.

so dont claim ooo is some kind of god coder

<joshhavepigdog> What’s your point? You are trying to dunk on me because I’m not a dev? Ok you’re right, but you haven’t addressed any real issues with ooo12 contributing to the project.

Yes I am dunking on you because you claim ooo is "sarang noether tier" and "best dev/sec guy around" whilst you have no software skills yourself

Not explaining PRs is a real issue. Maybe hard to grasp in its full glory for non-dev. (No, not an appeal to authority.)

The thing with the PR's were I think they were explained before they were submit

<joshhavepigdog> Ok fair enough. I’m not knowledgeable about contributing to group dev work.

But yes, the pr's themselves were blank and left nothing to go off of

For any random reviewer to stroll by.

7760 was an exploit though.

FOSS follows a certain workflow, deviate from it, you get comments from your peers - its normal

Monero has even stricter workflows because it involves money

So, perhaps it wasnt explained because they knew about what it was fixing? Same with multisig. It was submit through hackerone and everything was explained to koe and vtnerd behind the scenes

Im not sure how to reproduce, but ive had it happen multiple times. Without 7760 using ssl would eventually deadlock my node

Yes, and after a proper review it will finally get merged, as I mentioned already. I never ever saw somebody shooting against the code itself

<joshhavepigdog> Did you catch any of the bugs that ooo12 did? Look I’m not trying to be an ooo12 simp. And Sarang Noether tier could be uninformed outsider take. I haven’t seen anyone try to speedrun something bp++ tier though. Of course a speed run done haphazardly is bad.

Well, other than redefining std::string :)

"Did you catch any of the bugs that ooo12 did?" <== what are you trying to say, josh?

<joshhavepigdog> I apologize if I have offended you due to my ignorance of FOSS practices. I’m just an outsider looking in and I think some of the stuff the guy said and what he did makes sense. We may have to agree to disagree.

I can easily imagine that for outsiders "looking in" it may look very different to an "insiders's look"

"you are making an appeal to authority rather than the soundness of logic"

"Did you catch any of the bugs that ooo12 did?"

who is josh, seriously.

An example of what 7760 fixes

"this happens so frequently I have to schedule monerod to restart every hour in the hopes that the service remains useful, but just recently I noticed the "bug" or whatever it is occurring after the node had 9 minutes of uptime."

yes, p2p / networking has issues

see also talosintelligence.com/vulnerability_reports/TALOS-2018-0637

thats not the point

<joshhavepigdog> I’m saying that this guy made contributions to the code that no one else caught/did unless my understanding of events is incorrect. He may have contributed in a way that is not compatible with FOSS practices, but he did make a unique contribution, no? Is it not worth tolerating this guy? I’m not on the dev team like you guys are (I am a rube who has not contributed a single line of code), so like you said I

have no say. I just doubt that it’s a good idea to drive away people who can contribute to critical code because they don’t follow good practices.

Josh, dont worry. We havent driven him away.

What was driving him away was having a vulnerable nrework while paying pepole to review spelling mistakes

<joshhavepigdog> I am a rube, who thinks Monero is the best form of money currently in existence. It is important to me.

Or rather, what drove him to talking instead of working

> <@ofrnxmr:monero.social> monero-project/monero #7482

>

> An example of what 7760 fixes

monerujo had a bug that would kick you out of wallet on login

joshhavepigdog: I found a substantial privacy issue with Monero no one else had found, submitted it to HackerOne, faced strong skepticism of my claims, persisted, submitted a CCS proposal, and got funded. I accepted the existing structure and made my contribution feasible. ooo123 wants a structure that is not feasible at the moment. Story ends.

ever since i started using selsta's node running 77600 it has never happened

Rucknium: I think you misunderstand ooo's issues.

r4v3r23[m]: anecdotal, the code changes are large, they can include exploits / vulnerabilities - so its very suspicious if a *new* coder adopts this "special workflow"

Again, its not about his personal pay but about work completion priorities or lackthereof

dsc_: he has been submitting code for years as an anon

dsc_: just pointing out my experience. 7760 & 7999 have made a substantial difference in node connection stability

im starting to believe this is some kind of attack on monero

incl. this 'josh' person

i hope core will be careful in dealing with these big code changes

whether the code in those PRs is up to snuff is the devs job

Josh is on telegram, I dont think he's.... um.. well versed in whats going on. Hut everyone is free to have an opinion

dsc_: i think we have other members of the "community" we should be more worried about

this is how FOSS projects are attacked

ofrnxmr: If we had people who could complete all the high-impact work, that would be great. We don't have enough people. I've said we need to do more recruitment ( reddit.com/r/Monero/comments/pkg3d6…ero_project_should_actively_recruit ) and I'm on the MAGIC Monero committee in part to do more recruitment.

this is *exactly* how FOSS are attacked

dsc_: selsta has been running the code for like a year. Its been in production but has lacked s formal review. Sech and Jberman both reviewed. Jeffro and vtnerd as well.

ofrnxmr[m]: again, i dont care what it fixes, if it is written by jesus himself, I care about how ooo conducts himself

this is all very fishy

my 2 cents

so behaviour > code?

later guys, goodluck

But DSC, ooo doesnt conduct himself, usually.

Usually he tells someone in private what the problem us, fixes it, and goes back to looking for more

Youd probably remember him under different names, he's been around for a while.

:( I just want my wow pr reviewed. I feel ooos pain

(Wowario already fixed it in his repo. Should just merge his fix. Either way, I hold my own hand when making tor tx on wow. No peers because setup instructions are wrong)

Also.. wow doesnt have the --proxy flag on release, I believe its on upcoming version?

That was written by ooo too. Jsyl

Rucknium: yea. We definitely need more recruitment. Recruitment requires money and money we dont have. Magic grants is a hard way to get money into the hands of an anon

And really, the donor would have to be ok with associating with monero in public

Recipients of MAGIC grants need to KYC to MAGIC. Donors can donate completely anonymously if they don't want a U.S. tax credit. Yes, MAGIC isn't a total solution. It's partly a way to get established non-anonymous cryptographers (and other specialists) to use their skills to help Monero.

Wait, you mean MAGIC can't do magic? :)

All in all ruck, I think ooo plays and has played an important role in monero for quite some time. Not everybody has to be a nice guy.

And lest we forget, we paid a nice guy dev 45€/hr to attend 5 hrs of meetings and fix a spelling mistake from Github to GitHub.

The latter part only relevant because 7760 went untouched but in the milestone report from nice guy dev was claimed 7760 to have been reviewed for 3hr.... (full message at libera.ems.host/_matrix/media/r0/do…377d2bfcf8f5096a2dc8bad41777e7a8a98)

I think if we didn't have that "nice guy" we would have to invent him, it's such a nice diversion ...

As in "Have you already seen that very, very bad example of CCS abuse?"

People would probably be hard pressed to come up even with as little as a second convicing example ...

I booked that under "shit happens" and marched on, frankly.

Haha, a false flag attack.

"Sorry soldier. I need this alt to take one for the team"

? Kind of insider joke?

Nah, just that nobody (except Josh) uses their real name. So mj can always come back as jm

Lol

<joshhavepigdog> Fair enough. I agree. If he wants a new structure so bad and no other devs/members think it’s a good idea, then he can build that funding option by himself and try to gain adoption there. If that is his staying point, change the CCS to how I want or I leave, then maybe he will have to leave because he is making a ridiculous request.

<joshhavepigdog> Accurate summary. I don’t know what is going on on GitHub except for the ELI5 breakdown which I read and understand in the matrix channels. Dsc makes a good point that large anonymous code changes which aren’t explained by said user could be interpreted as a threat actor attempting to pass malicious code.

<joshhavepigdog> Lol I’m too stupid to attack Monero even if I wanted to. I don’t know squat about programming and couldn’t understand the math used to verify pedersen commitments or bulletproofs. All I’m saying is that there might be a cost if we kick this ooo12 guy out. If he leaves because he throws a hissy fit and the ccs doesn’t change to how he wants it to be, then that is his choice.

s/good/bad/

s/user/contributor/

* his choice. People kicking him out and him leaving by choice are two separate things.

has been claiming 30 hours a week ccs for how many months, then says 'im considering ditching my job' lol don't hate the player hate the game?? apparently he was paid to work on the Monero GUI - i don't even know what c++ is and within a few days of looking at the issues / pr's on monero gui - i found many things i could review, and i even got a small fix merged. his excuse is 'i wasn't asked to review anything'

i voluntarily organised a few meetings , of which me and several other people took part in , and he was the only one who received .. 5*45 euros

Josh

You're misunderstanding.

Most agree from ooo to Luigi, with Kaya, spirobel and many others inbetween, that agree CCS has many issues.

Josh... (full message at libera.ems.host/_matrix/media/r0/do…9a499edbdc9fa34c6daab7e95268c189959)

<joshhavepigdog> You’re talking about some else than ooo12 though, right?

<joshhavepigdog> Sweet, I agree 100% with what you and Rucknium have said. My only concern was that some devs wanted to basically blacklist him or boot him out from the project and GitHub (not merge any of his pull requests just because they hate him) (my evidence for this concern was that People were pure trash talking about him and many have him muted as well lol). If he despawns from Monero by personal choice that is fine

and can’t be stopped. It seems like he won’t be kicked though so we all good now.

Devs like who, mj? Anyone else?

Koe, Jberman, Kaya, rbrunner, Jeffro, selsta and more are to _work_ with him.

Far from "blacklist him" or boot him out of the project.

<joshhavepigdog> Sweet

<joshhavepigdog> I’m happy. Not that my happiness should impact your guys decisions anyways haha. Thanks for clarifying and sorry for the roundabout conversation.

Sorry. I didnt meant to are "are to work with him"

But

"Are happy / willing to working with him"

Yeah, not kicking them out. But I still see potential difficulties ahead.

No problem. As rbrunner said, one conversation was over 3hrs, but that was only one conversation

If we really want to fully implement Seraphis and Jamtis, that will need veritable mountains of new code.

<joshhavepigdog> Fair enough he is an interesting cat

Implementing that is certainly not a one-person show. And where are we back to now with this? Exactly, at teamwork.

And ooo is interested in seraphis. But he feel like we did him wrong.

<joshhavepigdog> True, someone could solo speedrun but it needs to be reviewed by others before it gets merged.

And you know, with big pieces of new code, you architect first, refine that to a design, and the implement. That gives *intense* and *close* teamwork.

<joshhavepigdog> It is what it is. As long as he doesn’t get kicked then what he does moving forward will be up to him. I was just surprised to see his claim about BP++ speed run haha

You discuss things, listen with patience at times, make compromises, make sure no misunderstandings creep in, be all-around tolerant, and so on.

Life as a dev working in a team.

In our case with the added difficulty that we can't meet in person, and not all people know each other.

This is difficult stuff even at the best of times.

<joshhavepigdog> I could be wrong here, but wouldn’t it be theoretically possible for a single individual to do all of those things? They would be have to be dedicated and thorough, but I’m not aware of how it isn’t possible in theory. People would have to review it to get merged, certainly, but the initial cryptographic design and code implementation could theoretically be performed by a single individual no?

rbrunner: And not a job

<joshhavepigdog> Yeah he might have a tough time on those things haha

Even at work meeting, youre lucky if half of the members show up

Not sure I understand, not a job?

Like, not paid / employed to work on monero in a team

Ah, I see, no boss around that can speak tough at times :)

True

If you are working for an employer you are obligated to do certain things, dress certain ways, show to to meeting, instantly fired for offences

Where here, people show to because they want to.

Show up*

They code for their own reasons, in ooo's case, I believe to test himself (and others)

@joshhavepigdog which chat has ooo1’s BP++ claims?

<joshhavepigdog> It’s in here if you back read

👍🏼

<joshhavepigdog> I’ll do it for you and send through the verbatim quotes

<joshhavepigdog> Give me about 2 min

About implementing Seraphis and Jamtis: Yes, I think it would not be completely out of question that somebody working fulltime for, say, 1 year, could pull that off

But one person doing all the architecture and design decision alone, in a dark room, without getting feedback, would be extremely dangerous IMHO

<joshhavepigdog> Gotcha. That was my point. In practice it seems most development here is collaborative, but even Koe seems to be roughly soloing Seraphis.

<joshhavepigdog> Or at least it is brainchild?

True, but I think he would readily accept a partner in work - if one was around, that is.

<joshhavepigdog> I think ooo12 wants to do be this solo speed run dark room guy, then let you guys review when he finishes

<joshhavepigdog> Whether or not that is best practice I don’t know

<joshhavepigdog> But he makes big claims

<joshhavepigdog> I will find quote now

Maybe it's not obvious, but designing software systems and implementing them are two quite different things. You can be excellent at one and terrible at the other, easily.

<joshhavepigdog> Selsta ~ but how would you get bulletproofs++ ready in 3 weeks? second release can't contain any consensus related changes unless it's an emergency

Ooo12… ~ > <@selsta:libera.chat> but how would you get bulletproofs++ ready in 3 weeks?

with enough enthusiasm it's possible

<joshhavepigdog> ^^ Verbatim quotes.

<joshhavepigdog> Ooo12 giving some SigmaChad vibes

we will see in a couple months

no need to speculate now lol

<joshhavepigdog> I’m not good any of this highly technical stuff. I think ooo12 reckons he is good design, implementation, and security analysis/review. Whether or not this is true, well I guess we will have to see. So far he solved an issue that other missed though.

Not trying to kiss ass here, but ooo is a lot more than multisig

Multisig is just the straw that broke the camels back

<joshhavepigdog> I know haha, but ooo12 got me hyped with that big claim though. He is a drama queen as you know, selsta. I’m pretty sure he was trying to negotiate with you to delay the august hardfork by about 1-2 months, and if you did he would speedrun BP++ in exchange. But this isn’t a tenable solution, because it would require third party audits which would take longer than 2 months.

Unfortunately (as far As I could tell) he started to pout when you said BP++ couldn’t be merged for at least 6 months. I agree with you, but this fella has the sprite, he got passion even if he is an oddball.

<joshhavepigdog> What other feats has he performed.

<joshhavepigdog> We straight up are trying to power scale ooo12 like a Dragon Ball character right now lmao XD

<joshhavepigdog> I wonder if he will see these messages haha. Ooo12 what is your full power level?

Monero anyway is not a sprint, but a marathon. A lot of other coins and projects have to sprint like crazy however, before investor / ICO / premine funds run dry, and everything implodes

Or public attention drops through the floor

Sometimes, to get people to try a different perspective, I joke about what our ancestors will do at Monero's 100th birthday, 2114

descendants

:P

<joshhavepigdog> I agree with you, but this guy isn’t some random scammer. Remember his whole ruckus in the dev channel was that people didn’t care enough about security haha

Ah, right, of course :)

Ooo was asking about HF delay because he doesnt want to wait years for another one.

Mostly asking "if I finish bp++ two week after the HF. Are you going to wait years to HF again? Or can we HF immdietly"

<joshhavepigdog> Yeah and selsta told him as soon as all the boxes are ticked there can be another hardfork but he still seemed pouty which is unfortunate but his choice lol

we can't change HF schedule based on anyone's wild claims like "I can do it in a month"

<joshhavepigdog> I agree. Even he could do it there would still need to be external audits of BP++ right?

we aren't changing it?

There is no real schedule though, that im aware of?

Not claims, but he was asking whether it was possible

Anyway, are BP++, as a cryptographic construct, peer-reviewed / audited already? Maybe any wild rush to implement could be altogether too early anyway

<joshhavepigdog> No you shouldn’t change the august hardfork. I agree 100% with you.

There might be gaping holes in there. Not probable, but possible.

He doesnt seem to want to rush, but to want to get started right away and to have it reviewed and audited in a timely fashion

he wanted to do security analysis too IIRC

Could be we would happily implement it complete with exploits

and that will likely take a while

still unknown

<joshhavepigdog> That’s what I was saying. If ooo12 is all wound up like Taz from Luney Tunes let him have at, but he doesn’t understand (I don’t think) that others will have to review his work and 3rd party audits

And you know, Monero does not rise or fall with or without BP++

<joshhavepigdog> I agree, but if he is so gung ho let him create a massive new piece of code and don’t merge it until all boxes are ticked.

From his perspective. With no HF necessary it took a year to fix the SSL exploits.

The BP+ question, imo, was more about "dont make me do this and then wait 10 years"

<joshhavepigdog> Yes, but we can’t just take his analysis because it will be biased if he is the guy who wrote the implementation for it. I think he may not fully grasp that.

That escalated quickly :) For years we hardforked every half year. Hardforking again half a year after the coming one would not be ideal, but maybe doable.

<joshhavepigdog> How would this happen?

<joshhavepigdog> Yes

By the way, just saying: See how peacefully and constructive a group of people can chat here even with quite different points of view and opinions.

It's possible.

<joshhavepigdog> What do you mean by this? I’m an uneducated rube (keep this in mind) but Monero’s network /current blockchain is basically based on the premise that BulletProofs are airtight and have no room for exploits (aside from Quantum) as far as you guys, the big brains and 3rd party auditors know. Or is my assessment of this situation incorrect?

Not sure what you mean. BP++ are probably a new construct as far as "airthighness" is concerned.

i want to play the bulletproofs+ game first and when im bored ill think about downloading bulletproofs++

<joshhavepigdog> I mean why does it matter when we hardfork? If BP++ was implemented and airtight according to a variety of different auditors and reviewers, then wouldn’t devs and end users be onboard with a hardfork to enjoy efficiency gains?

* and airtight (let’s say by the end of Jan 2023) according to

<joshhavepigdog> I’m not smart enough to comment on their air-tightness, but perhaps some of you guys are. Ooo12 implies that he is smart enough (may not be though).

Because a whole "ecosystem" has to move along with a hardfork. It's not just us throwing new software out to the people.

Exchanges. Hardware wallets. Pools. Miners.

Software wallets

<joshhavepigdog> So these parties would actually be against a Jan 2023 hardfork even if efficiency gains can be gained in a secure manner?

They are not happy if you show up only 2 months later and announce "Same drill again!"

<joshhavepigdog> Why though?

Manpower, for one thing. Work costs.

Not everybody is doing it for love :)

<joshhavepigdog> Is it because it’s a pain in the neck on the hardware and exchanges behalf each time they have to accommodate a new fork?

Basically, yes, as I see it

And with each hardfork tons of things can go wrong, or astray

Imagine the daemon(s) of a big exchange forking from mainnet accidentally

<joshhavepigdog> Alright fair enough. I’m just one user and ooo12 is just one dev, so I guess we must graciously accommodate the exchanges and hardware wallets as they have more people in their camp. I’m not being sarcastic by the way.

Like it happened for some pools at the last hardfork. Lost blocks were the result.

<joshhavepigdog> Oh really? I didn’t hear about this? Who lost blocks? The miners or the exchanges?

"Good news! We mined a block. Bad news - it was on a wrong chain."

<joshhavepigdog> And why exactly did they lose blocks?

<joshhavepigdog> So some mining pools lost their blockreward basically

I think so, yes

I mean something like that is not the end of the world, but as you said a potential pain in the neck

<joshhavepigdog> Also I want to thank you guys for taking the time to chat with me in here. It means a lot to me and I’ve learned a lot in the past few hours I’ve been on here about how changes are made in Monero’s code and the practice of working together and hardforks as well.

A pleasure.

<joshhavepigdog> Because I’m just unsophisticated rube. Who appreciates the good work you guys are doing.

Greet the pig and the dog :)

<joshhavepigdog> If Monero failed for some reason I would likely become disillusioned with crypto. I think this project is the true litnus test rather than BTC, because BTC’s policy is to never improve out of fear of failure/security compromise.

<joshhavepigdog> Yeah isn’t it their own fault for not paying close attention to the fork and switching over to the new chain? Seems it’s their own responsibility. An exchange is a different story because they have so many different projects that they can’t possible be sitting in here watching every last thing you guys do. Miners are a different story IMO

plowsof: I have been playing the BP+ game for a long time and it is boring now

<joshhavepigdog> I have a form of paranoia- but as far as you are aware BP and BP+ are airtight in Monero, correct? This question is redundant I suppose since you guys wouldn’t pass a proving mechanism that you had meaningful doubts about, right?

has been on the mainnet testnet coin long time

Yes, we had several reviews for those.

can't believe imma asking this, is BP+ currently in mooonero? 0.17

<joshhavepigdog> Roger. You guys probably are tired of people that have anxiety asking the same questions over and over.

<joshhavepigdog> Nope this coming hardfork it gets added if I understand correctly.

We stand now at BP. The hardfork will introduce BP+.

what I thought, has been on another coin long time :)

<joshhavepigdog> I always get anxious because I feel that the security of the ZK proofs for tx size are the foundation of Monero’s future success. And the BTC maxis claiming insecurity or risk in XMR ZKProofs will have frowny face 😦

people listen to btc mazis?

also maxis

<joshhavepigdog> I’ll take your guys word Over theirs though.

<joshhavepigdog> A BTC maxi who is my neighbor got me into crypto, so I try to give credence to what he says. You guys are more sophisticated and have participated in the reviewing, testing, and auditing process so I differ to you.

Anyone can claim anything. The goal (ideally) is to make informed claims based on real knowledge

<joshhavepigdog> I defer*

<joshhavepigdog> I’m too stupid to audit BP though 😦

<joshhavepigdog> But dangerous freedom seems to be boiling it down to some extent.

<joshhavepigdog> My real knowledge is that you guys have documented how BP work, tested it, reviewed it, audits etc. if all of these parties think we are airtight then I see no reason to think otherwise.

Also, bp had a flaw that Sarang had fixed in monero's implementation (so monero wasnt one of the parties at risk)

has ringct 3.0 been looked at>

<joshhavepigdog> Sweet. I remember there was that little news blob a couple months back. I think the Benedict (bulletproofs guy) confirmed that Sarang had done this as well. I hope some day Sarang comes back (pretty unlikely though I guess) 😦

<bridgerton[m]> "<joshhavepigdog> Sweet. I..." <- Sarang was at Monerotopia 2022 in Miami, youtube.com/watch?v=aHv2gq4Wm5I

<joshhavepigdog> I’ve watched that video 3 times haha.

<joshhavepigdog> I understand the quantum risk to issue/mint XMR in a BP tx, just I have a form of paranoia so I like to check that no doubts are had amongst the devs regarding BP every now and again. Isn’t that pointless? Well no, because maybe I’m off matrix for a week/month and during that time a similar bug was found to the one that Spagni and luigi1111 mentioned that was patched and verified unexploited.