I got an email saying RINO.io is live and on mainnet escapethe3ra

when matrix irc bridge for the main monero channel?

in 2 years™

We got three new Monero wallet announcements just this week. Not bad!

Rino, Stack Wallet, and MyNero.

Will replace the wallets that died due to hardfork ;)

supply and demand, I guess

I think someone may need to create a Matrix account such as "Monero-help Desk" at getmonero.org/community/hangouts where people could be channel their questions and may get answers....I think this may smooth things. What do you think?

we have a matrix support channel

selsta: could you plz share the link

I wonder if anyone with frontend skills wants to build a frontend for monero-lws

selenze[m]: I don't use Matrix myself, but search for Monero Support or something

you already know i built one

i am struggling to release it as i have no help

and other things you dont need to know

i wish the monero community supported people like me and the noethers

speechless

endogenic: I've written you a couple of private messages but you never answered :(

that's false

and hey so that means you can pretend like i dont exist

how lovely.

when are you all going to wake up

youre like children

selstawho is in charge of adding the matrix channel for the one I mentioned. I would be glad to help with the little know I have.

#monero-support:monero.social

ofrnxmr[m]: and where is the web link for this....

It would be better to find it in the monero website somewhere in getmonero.org/community/hangouts or getmonero.org/community/workgroups

or here getmonero.org/resources/user-guides

alot of skilled contributors "fall through the cracks" and dissapear, due to lack of support (be it funding , or just 'help') . we're all in our own caves , dealing with our own issues and sometimes we miss when devs create things. I discover ~2 year old monero projects every other week it seems , it's not that i was actively ignoring that developers work for 2 years , i just 'didnt know'

plowsof: yeah....things seem broken while at the same time the house has a lot of expertise....kind of house management for what I can see

if you have an idea that you believe is going to help the monero community, no one is going to hand you support, you must push it in peoples faces and ask. for example, someone wanted to do 3 months of greek translations , put a donation address up, and actively advertised / sought support on Reddit / other avenues , and boom , 40 xmr - if they had no asked for help they would have got nothing, and disapeared

everyone gets ignored, no one cares, unless you ask / seek help

plowsof: if we are talking on the same issue....I think the primary reference should be better house manged

selenze: Could you define "primary reference" and "house managed"?

<Rucknium[m]> "selenze: Could you define "..." <- the primary reference point means for getmonero.org and what I mean on house management is I thin the getmonero.org needs a revamp...a kind of house management form a management perspective.

selenze: Ok. You can make a Pull Request for website content here if you want something improved:

Just have a look at this getmonero.org/resources/roadmap and no 2022

plowsof updated the roadmap in a PR. It has not yet been merged and uploaded

I guess we should task someone for such tasks ....If I am not mistaken someone did the CC thing I gues

I kind of feel someone need to better be tasked with the overall project. may be this should be forward/Advertised by the core team as a CC by them selves so that skilled people can overtake it.

It's hard to find good, trustworthy people. Though I do think that the people who have the power to update the website have been slow to review potential improvements. I think they may just be concerned about screwing things up in an update.

Like getmonero.org/2019/11/19/warning-compromised-binaries.html

Rucknium[m]: Well, I think the core team need to advertise for such main task having put forward a certain incentive in the CC and then select candidates, which the core can select from a pool of experts...you know the process.

why fix if it's not broken?

Rucknium: The sarcastic think about git is....If I want to do some git contributions..I am asked for email. Why can't the people put an option to have some other login mechanism.......just think monero (privacy by design....we proclaim!) on a non privacy platform ...I think we still are cought in the old tradition and the community seem not to divorce itself to create the other side of the story

selenze: Monero accepts patches submitted through IRC and Matrix. Makes things a bit harder, but it can be done.

or just use a new account with a throw-away email....

I prefer to eliminate the hassles in the middle. But could you please take my point...I am talking about the principles of monero and the things/platforms we should make ready for it to flourish in such context, not a temporary solutions.

<Rucknium[m]> "selenze: Monero accepts patches..." <- that means I have to visit all the matrix channels which I think are in a kind of disconnected fashion leaving the few.

There is already a website manager CCS, by the way: ccs.getmonero.org/proposals/erciccione-website7.html

<Rucknium[m]> "There is already a website..." <- I see ErCiccione is handling the issues...even the recent git issues that he is trying to address. I better write to him at the Monero website matrix then....because there seems some issues are still pending and his contract is near to expire.

Rucknium: Will submiting a request via the matrix channel suffice as same to that of the gits....how are they going to synchronize...I am thinking of writing some issues via the "Monero website" matrix channel

I assume so. Just explain in your message that you don't want to use GitHub directly for privacy reasons.

Sure. will do that.

[But sarca](repo.getmonero.org/users/sign_up) just look at this...no option for alternative signin. And this is hosted I presumed within the getmonero.org thing!

selenze[m]: what kind of alternative signin are you expecting?

selsta: Thanks for your attention. If I could do via non privacy concerning issue.

something that I can sign in with my monero account for example ..and you add a password for that

spirobel was developing something like that. Stopped I think.

the whole I idea is in all the platforms that relate to Monero, those platforms should uphold the principle of monero too....privacy by design. If not lets get them revamped

i'm late and just now getting up to date on this: y.com.sb/watch?v=vM9voeuUWVo

damn wrong window, sorry

selenze: Having an email address is a basic part of using the internet. And not requiring an email address makes it easier for the system to get spammed. And the gitlab has been spammed before.

also this would requires us to have our own gitlab fork, something we definitely don't have the resources for

I'm fine with emails as long as they don't have that issue with non-mainstream email provider

signing with you're monero "account" would be less private for you're money than signing with you're throw away email account created in tor

selsta: where is repo.getmonero.org/users/sign_up hosted? And how much can the monero gitlab can cost ...just a roug estimate

it is self hosted on some server that the core team has

RavFX[m]: You could create monero ID that doesn't have to deal with your funds. Infact the way I see it, we can escrow people to do tasks, activities having some funds of their wallet ID for all their activites...we can use it as a collateral to do many things by escrowing the funds to be locked ...many poping ideas on that.

selsta: so why can't the fork thing with the monero git repository...

Because we have barely enough devs to work on monero

No bandwidth for novel gitlab forks

monerobull[m]: then we advertise in the CC and am sure people will come for that. And I can see the community would be happy to fund it.

even the bandwidth thing...just lets put the estimates

I don't mean literal bandwidth

Brain bandwidth 🙂

* Brain collective bandwidth 🙂

<selsta> "it is self hosted on some server..." <- ...what I mean is how is it provisioned...even the official monero website....I guess this should be primarily documented and that it be rooted in the privacy that monero upholds.

Ok create a bounty: bounties.monero.social

here is some info on the setup

Rucknium[m]: I will look into and ...and hopefully it won't ask me for email sign in. But I guess this should be addressed or advertised by the core team

selsta: Thanks. will get into that.

so.... a unique identifier is a unique identifier, even a pub key. so anyone find out what the actual difference would be?

<RavFX[m]> "Brain bandwidth 🙂" <- ???

<Rucknium[m]> "spirobel was developing somethin..." <- could you point me the link to this plz

selenze: reddit.com/r/Monero/comments/uv01ip…es_all_the_privacy_problems_in_web3

lol. plz send me the privacy upholding link

Reddit does not block TOR. So use TOR.

yes, why not use Tor and disable Javacsript?

otherwise it's a bit weird to ask someone a link and then complain

when you could teddit edit the link anyway....

this complaints i don't think are valid

s/this/these

<selenze[m]> "???" <- Dev time is not free & unlimited ressource

That been said, for private auth, one could simple make it so you can use a Fido key for login.

send the same challenge to everyone and the key calculate the answer according to it's private key

So send the same challenge to everyone and store answer for each user.

As a bonus, one can use a Ledger instead of a Fido key

> <@al800:0wnz.at> That been said, for private auth, one could simple make it so you can use a Fido key for login.... (full message at <libera.ems.host/_matrix/media/r0/do…ea19cb2e408f2ddf03c732240d6fbdb9c02>)

Yeah, it's just a Fido key.

Lot of service use that for 2FA

So make it so the key response is the login

And make it so the password is the 2FA (doing it backward compared to normal systems)

And because it's widely used and well documented, that kind of auth setup could be replicated easily for other systems

RavFX[m]: link plz

<RavFX[m]> "Dev time is not free & unlimited..." <- On this issue....I think like wikipedia puts for its yearly or something budget....can't we the community finance it.

use look hot it work, and make if for main login instead of 2FA

s/use/just/, s/hot/how/

s/use/just/, s/hot/how/, s/if/it/

And on successful "login" with the Fido thing, prompt for a password

If you have a ledger, it's even better (as you can recover you're "key" using your ledger seed phrase)

Or you cane make a slight variation.

Get the client side compute the answer from the challenge the server send

Then make the client encrypt the password using the answer from the key and send that to the server

server hash what he received from client and look for it in the DB, the matching entry it find is the user

* Or you cane make a slight variation.

Get the client side compute the answer from the challenge the server send

Then make the client hash the password using the answer from the key as salt then send that to the server

server hash what he received from client and look for it in the DB, the matching entry it find is the user

OR lets make another one.

The server could prompt for only a username and a password and ask no information (like email).. What about that? No key needed and no need to involve Monero in authentification

> <@al800:0wnz.at> OR lets make another one.

>

> The server could prompt for only a username and a password and ask no information (like email).. What about that? No key needed and no need to involve Monero in authentification

that would be wonderful. plz send the link then

Just use you're ledger or Fido for 2FA as it was designed for.

The last one is just user+pass auth... without asking for extra information. If you know how to program you can implement that easily

Just fork gitlab and replace the email db field by username and rename the "email" text for Username and remove the check that verify that it contain a @ symbol and a .something. And strip all code that rely on email or add email as an extra optional field.

Banhammer: BanhammerMonero

plowsof thanks for the ping, done

Awesome stuff! So is there some version of the document available right now before the shortened public one comes out?

jeffro256: Not sure your question exactly. There exists a full version, but it is not publicly available yet. Decision on publication of the full version is pending an analysis of competing risks.

Sorry, yeah there's a new version, I was just wondering if there was a revision publicly yet. Thanks!

Not yet. I plan to release the shorter public version simultaneously with the launch of mj-xmr's MAGIC fundraising campaign, which is going to complete some C++ tasks related to OSPEAD.

Since I can't really read or write C++

C++ is an abomination and an offense to everything that is good and holy. I don't blame you lol

But I'm eager to see the results!