00:41:10 I got an email saying RINO.io is live and on mainnet escapethe3ra 13:29:53 when matrix irc bridge for the main monero channel? 13:30:27 in 2 yearsβ„’ 13:58:07 We got three new Monero wallet announcements just this week. Not bad! 13:58:28 Rino, Stack Wallet, and MyNero. 13:59:14 Will replace the wallets that died due to hardfork ;) 14:10:46 supply and demand, I guess 14:12:21 I think someone may need to create a Matrix account such as "Monero-help Desk" at https://www.getmonero.org/community/hangouts/ where people could be channel their questions and may get answers....I think this may smooth things. What do you think? 14:13:26 we have a matrix support channel 14:15:12 selsta: could you plz share the link 14:15:13 I wonder if anyone with frontend skills wants to build a frontend for monero-lws 14:15:30 selenze[m]: I don't use Matrix myself, but search for Monero Support or something 14:15:40 you already know i built one 14:15:51 i am struggling to release it as i have no help 14:15:58 and other things you dont need to know 14:16:13 i wish the monero community supported people like me and the noethers 14:16:17 speechless 14:16:41 endogenic: I've written you a couple of private messages but you never answered :( 14:16:54 that's false 14:17:03 and hey so that means you can pretend like i dont exist 14:17:05 how lovely. 14:17:17 when are you all going to wake up 14:17:24 youre like children 14:17:25 selstawho is in charge of adding the matrix channel for the one I mentioned. I would be glad to help with the little know I have. 14:18:35 #monero-support:monero.social 14:19:54 ofrnxmr[m]: and where is the web link for this.... 14:21:25 It would be better to find it in the monero website somewhere in https://www.getmonero.org/community/hangouts/ or https://www.getmonero.org/community/workgroups/ 14:22:00 or here https://www.getmonero.org/resources/user-guides/ 14:22:45 alot of skilled contributors "fall through the cracks" and dissapear, due to lack of support (be it funding , or just 'help') . we're all in our own caves , dealing with our own issues and sometimes we miss when devs create things. I discover ~2 year old monero projects every other week it seems , it's not that i was actively ignoring that developers work for 2 years , i just 'didnt know' 14:24:29 plowsof: yeah....things seem broken while at the same time the house has a lot of expertise....kind of house management for what I can see 14:25:43 if you have an idea that you believe is going to help the monero community, no one is going to hand you support, you must push it in peoples faces and ask. for example, someone wanted to do 3 months of greek translations , put a donation address up, and actively advertised / sought support on Reddit / other avenues , and boom , 40 xmr - if they had no asked for help they would have got nothing, and disapeared 14:27:24 everyone gets ignored, no one cares, unless you ask / seek help 14:28:21 plowsof: if we are talking on the same issue....I think the primary reference should be better house manged 14:30:02 selenze: Could you define "primary reference" and "house managed"? 14:36:42 "selenze: Could you define "..." <- the primary reference point means for getmonero.org and what I mean on house management is I thin the getmonero.org needs a revamp...a kind of house management form a management perspective. 14:40:24 selenze: Ok. You can make a Pull Request for website content here if you want something improved: 14:40:25 https://github.com/monero-project/monero-site 14:41:25 Just have a look at this https://www.getmonero.org/resources/roadmap/ and no 2022 14:42:16 plowsof updated the roadmap in a PR. It has not yet been merged and uploaded 14:42:54 I guess we should task someone for such tasks ....If I am not mistaken someone did the CC thing I gues 14:42:59 https://github.com/monero-project/monero-site/pull/2036 14:44:19 I kind of feel someone need to better be tasked with the overall project. may be this should be forward/Advertised by the core team as a CC by them selves so that skilled people can overtake it. 14:48:01 It's hard to find good, trustworthy people. Though I do think that the people who have the power to update the website have been slow to review potential improvements. I think they may just be concerned about screwing things up in an update. 14:49:18 Like https://www.getmonero.org/2019/11/19/warning-compromised-binaries.html 14:51:03 Rucknium[m]: Well, I think the core team need to advertise for such main task having put forward a certain incentive in the CC and then select candidates, which the core can select from a pool of experts...you know the process. 14:52:11 why fix if it's not broken? 14:58:29 Rucknium: The sarcastic think about git is....If I want to do some git contributions..I am asked for email. Why can't the people put an option to have some other login mechanism.......just think monero (privacy by design....we proclaim!) on a non privacy platform ...I think we still are cought in the old tradition and the community seem not to divorce itself to create the other side of the story 14:59:40 selenze: Monero accepts patches submitted through IRC and Matrix. Makes things a bit harder, but it can be done. 15:00:37 or just use a new account with a throw-away email.... 15:03:55 I prefer to eliminate the hassles in the middle. But could you please take my point...I am talking about the principles of monero and the things/platforms we should make ready for it to flourish in such context, not a temporary solutions. 15:05:03 "selenze: Monero accepts patches..." <- that means I have to visit all the matrix channels which I think are in a kind of disconnected fashion leaving the few. 15:05:46 There is already a website manager CCS, by the way: https://ccs.getmonero.org/proposals/erciccione-website7.html 15:18:15 "There is already a website..." <- I see ErCiccione is handling the issues...even the recent git issues that he is trying to address. I better write to him at the Monero website matrix then....because there seems some issues are still pending and his contract is near to expire. 15:20:42 Rucknium: Will submiting a request via the matrix channel suffice as same to that of the gits....how are they going to synchronize...I am thinking of writing some issues via the "Monero website" matrix channel 15:24:41 I assume so. Just explain in your message that you don't want to use GitHub directly for privacy reasons. 15:29:34 Sure. will do that. 15:31:14 [But sarca](https://repo.getmonero.org/users/sign_up) just look at this...no option for alternative signin. And this is hosted I presumed within the getmonero.org thing! 15:41:41 selenze[m]: what kind of alternative signin are you expecting? 15:48:48 selsta: Thanks for your attention. If I could do via non privacy concerning issue. 15:49:58 something that I can sign in with my monero account for example ..and you add a password for that 15:50:49 spirobel was developing something like that. Stopped I think. 15:51:00 the whole I idea is in all the platforms that relate to Monero, those platforms should uphold the principle of monero too....privacy by design. If not lets get them revamped 15:51:50 i'm late and just now getting up to date on this: https://y.com.sb/watch?v=vM9voeuUWVo 15:52:01 damn wrong window, sorry 15:53:43 selenze: Having an email address is a basic part of using the internet. And not requiring an email address makes it easier for the system to get spammed. And the gitlab has been spammed before. 15:54:20 also this would requires us to have our own gitlab fork, something we definitely don't have the resources for 15:54:59 I'm fine with emails as long as they don't have that issue with non-mainstream email provider 15:55:42 signing with you're monero "account" would be less private for you're money than signing with you're throw away email account created in tor 15:57:18 selsta: where is https://repo.getmonero.org/users/sign_up hosted? And how much can the monero gitlab can cost ...just a roug estimate 15:58:06 it is self hosted on some server that the core team has 15:59:49 RavFX[m]: You could create monero ID that doesn't have to deal with your funds. Infact the way I see it, we can escrow people to do tasks, activities having some funds of their wallet ID for all their activites...we can use it as a collateral to do many things by escrowing the funds to be locked ...many poping ideas on that. 16:00:10 selsta: so why can't the fork thing with the monero git repository... 16:01:22 Because we have barely enough devs to work on monero 16:01:28 No bandwidth for novel gitlab forks 16:03:03 monerobull[m]: then we advertise in the CC and am sure people will come for that. And I can see the community would be happy to fund it. 16:03:15 even the bandwidth thing...just lets put the estimates 16:03:32 I don't mean literal bandwidth 16:03:49 Brain bandwidth πŸ™‚ 16:03:56 * Brain collective bandwidth πŸ™‚ 16:05:08 "it is self hosted on some server..." <- ...what I mean is how is it provisioned...even the official monero website....I guess this should be primarily documented and that it be rooted in the privacy that monero upholds. 16:05:39 Ok create a bounty: https://bounties.monero.social/ 16:07:10 https://github.com/monero-project/meta/blob/master/SERVER_SETUP_HARDENING.md 16:07:16 here is some info on the setup 16:07:39 Rucknium[m]: I will look into and ...and hopefully it won't ask me for email sign in. But I guess this should be addressed or advertised by the core team 16:08:40 selsta: Thanks. will get into that. 16:11:33 so.... a unique identifier is a unique identifier, even a pub key. so anyone find out what the actual difference would be? 16:12:38 "Brain bandwidth πŸ™‚" <- ??? 16:13:39 "spirobel was developing somethin..." <- could you point me the link to this plz 16:17:41 selenze: https://www.reddit.com/r/Monero/comments/uv01ip/how_monero_solves_all_the_privacy_problems_in_web3/ 16:18:51 lol. plz send me the privacy upholding link 16:21:19 Reddit does not block TOR. So use TOR. 16:21:36 yes, why not use Tor and disable Javacsript? 16:22:04 otherwise it's a bit weird to ask someone a link and then complain 16:25:18 when you could teddit edit the link anyway.... 16:25:35 this complaints i don't think are valid 16:25:40 s/this/these 16:29:06 "???" <- Dev time is not free & unlimited ressource 16:30:49 That been said, for private auth, one could simple make it so you can use a Fido key for login. 16:30:49 send the same challenge to everyone and the key calculate the answer according to it's private key 16:30:49 So send the same challenge to everyone and store answer for each user. 16:30:49 As a bonus, one can use a Ledger instead of a Fido key 16:32:15 > <@al800:0wnz.at> That been said, for private auth, one could simple make it so you can use a Fido key for login.... (full message at ) 16:32:34 Yeah, it's just a Fido key. 16:32:34 Lot of service use that for 2FA 16:33:30 So make it so the key response is the login 16:33:30 And make it so the password is the 2FA (doing it backward compared to normal systems) 16:34:24 And because it's widely used and well documented, that kind of auth setup could be replicated easily for other systems 16:34:43 RavFX[m]: link plz 16:35:18 "Dev time is not free & unlimited..." <- On this issue....I think like wikipedia puts for its yearly or something budget....can't we the community finance it. 16:35:35 * RavFX[m] uploaded an image: (174KiB) < https://libera.ems.host/_matrix/media/r0/download/0wnz.at/aIyqgxSxTmSVbQOxGLqPkFIW/image.png > 16:36:00 use look hot it work, and make if for main login instead of 2FA 16:36:14 s/use/just/, s/hot/how/ 16:36:54 s/use/just/, s/hot/how/, s/if/it/ 16:36:55 And on successful "login" with the Fido thing, prompt for a password 16:37:34 If you have a ledger, it's even better (as you can recover you're "key" using your ledger seed phrase) 16:41:04 Or you cane make a slight variation. 16:41:04 Get the client side compute the answer from the challenge the server send 16:41:04 Then make the client encrypt the password using the answer from the key and send that to the server 16:41:04 server hash what he received from client and look for it in the DB, the matching entry it find is the user 16:41:51 * Or you cane make a slight variation. 16:41:51 Get the client side compute the answer from the challenge the server send 16:41:51 Then make the client hash the password using the answer from the key as salt then send that to the server 16:41:51 server hash what he received from client and look for it in the DB, the matching entry it find is the user 16:43:30 OR lets make another one. 16:43:30 The server could prompt for only a username and a password and ask no information (like email).. What about that? No key needed and no need to involve Monero in authentification 16:44:30 > <@al800:0wnz.at> OR lets make another one. 16:44:30 > 16:44:30 > The server could prompt for only a username and a password and ask no information (like email).. What about that? No key needed and no need to involve Monero in authentification 16:44:30 that would be wonderful. plz send the link then 16:44:39 Just use you're ledger or Fido for 2FA as it was designed for. 16:45:23 The last one is just user+pass auth... without asking for extra information. If you know how to program you can implement that easily 16:49:01 Just fork gitlab and replace the email db field by username and rename the "email" text for Username and remove the check that verify that it contain a @ symbol and a .something. And strip all code that rely on email or add email as an extra optional field. 16:54:33 Banhammer: BanhammerMonero 21:16:25 plowsof thanks for the ping, done 21:47:29 https://monero.observer/rucknium-completes-first-milestone-ospead-css-proposal/ 22:19:58 Awesome stuff! So is there some version of the document available right now before the shortened public one comes out? 23:07:24 jeffro256: Not sure your question exactly. There exists a full version, but it is not publicly available yet. Decision on publication of the full version is pending an analysis of competing risks. 23:08:41 Sorry, yeah there's a new version, I was just wondering if there was a revision publicly yet. Thanks! 23:10:31 Not yet. I plan to release the shorter public version simultaneously with the launch of mj-xmr's MAGIC fundraising campaign, which is going to complete some C++ tasks related to OSPEAD. 23:10:43 Since I can't really read or write C++ 23:26:23 C++ is an abomination and an offense to everything that is good and holy. I don't blame you lol 23:27:43 But I'm eager to see the results!