10:09:32 Meeting today in ~5 hours 15:00UTC https://github.com/monero-project/meta/issues/838 10:34:17 Matrix is very very slow 10:35:53 hopefully we can get her restarted before the meetings 10:40:12 .ping is the bridge alive also 10:40:27 pong 10:59:28 Might explain why only monero rooms are slow with the fluffychat 11:54:15 thats alot of stickers from monerosupplies.com https://www.reddit.com/r/Monero/comments/13sxmft/doing_my_part_bought_a_bunch_of_stickers_to_place/ , does monerobull have an outreach update for us today regarding the monerochan plushies month? 13:18:25 "thats alot of stickers from..." <- A what 13:18:36 Is there a meeting today 13:18:45 I already have topia and Kon meeting ffs 13:19:31 This monero stuff is more work than my actual job smh 13:24:50 I do have a pretty cool announcement coming up though 13:26:15 "This monero stuff is more work..." <- I'll be mb stand-in rep if needed. Consider it my attempt toward apprenticeship lol 13:26:58 monerobull tried to unionise and has been replaced 13:27:15 Huh 13:27:34 No I'm actually trying to become Jeff bezos 13:27:44 plowsof11: So the opposite 13:35:26 Ceo of monero? 13:36:40 That sounds like a liability but i have a mug that says #1 monero ceo 13:37:43 Just checked, only says monero ceo 13:38:02 #1 is probably vik 13:44:18 * monerobull[m] uploaded an image: (61KiB) < https://libera.ems.host/_matrix/media/v3/download/matrix.org/KUZKEtgjNNbnLhbgiFrtVcnc/grafik.png > 14:49:39 Ffs 14:50:10 I just spent 20 minutes trying to figure out why i could reach https://monerosupplies.com but not http 14:50:25 It's because IVPN blocks http sites... 15:00:15 Meeting time https://github.com/monero-project/meta/issues/838 15:00:28 Greetings 15:00:33 hello 15:01:41 hi 15:01:43 hi 15:02:56 Hi 15:03:04 lets talk about recent events, firstly the vulnerability disclosure for 10 block old decoys bug @ https://github.com/monero-project/monero/issues/8872 (which will soon be released on getmonero as a blog post) 15:04:05 Hello 15:04:15 hello 15:04:44 several third party wallets have already updated: cakewallet: https://nitter.it/cakewallet/status/1662200109625401344 , featherwallet: https://old.reddit.com/r/FeatherWallet/comments/13r2urt and mysu.dev . it is strongly recommended everyone update to the latest version of each - and cli/gui users to use v0.18.2.2 and above 15:05:06 my nodes peer list has shown for the month of may 'more public rpc nodes using the latest version than not' https://paste.debian.net/1281273/ 15:05:30 Mysu.dev stackwallet.com also updated 15:05:41 Mysu was the first 🥇 15:06:20 There is a suggestion by me in MRL to treat Monero's statistical protocols like its cryptographic protocols are treated 15:06:22 Formal written specifications and code audits 15:06:25 thanks for confirming, ofrnxmr had also contacted all of the above to inform them about the issue. 15:06:26 Monerujo will be the last? 15:06:51 monerujo and anonero pending 15:08:05 This is at least the third programming problem in the decoy selection algorithm (not protocol/math/stats problem) in the last two years or so 15:08:56 If Monero's cryptography code had this many problems, it could be catastrophic. 15:09:39 Maybe I can convince jeffro to work on the C++ side and reserve-engineer a specification for what the code actually does now. 15:10:02 sounds like a priority , i wonder where it would fit into seraphis' plans (i know jeffro256 also shares the sentiment of a full re-write of the algorithm) 15:10:27 We need to know what the current algorithm does anyway 15:10:35 jeffro has recently finished his ccs ... perhaps something for the next one? 👀 15:10:43 Regardless of any plans for future rewrites 15:12:01 jeffro256: ccs soon, i hope 15:12:48 the Monero project gets flack for releasing disclosures on reddit/github issues - for this one, we can pretend like there was a pre-release (to make sure it was factually correct, then we're going to push it to a getmonero blog like professionals) 15:13:35 By the way, two of the problems were pretty classic programming mistakes (not at all a statistics issue). This recent one was off-by-one error. Another one was integer division when it should have been floating point division. 15:14:38 vtnerd , and jberman also new ccs soon? (vtnerd has been looking into bulletproofs re-write from haskell c++... [Jberman CCS update](https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/359#note_21276) ~40% faster local wallet scanning using Koes [asynchronous design](https://gist.github.com/UkoeHB/4b3528a5c3a3134bd82d19a2bc6a8e87) 15:15:14 Yes, soon I will request one 15:16:19 yo 15:16:37 anything else to share? News: [Monero Observer](https://www.monero.observer/) - [Revuo Monero](https://revuo-xmr.com/) - [The Monero Standard](https://localmonero.co/the-monero-standard) - [Monero Moon](https://www.themoneromoon.com/) 15:16:37 (after highlighting Ruckniums comments in bold) 15:17:13 yes: https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/388 15:17:48 we will get to that shortly yes 15:18:36 moving on to the merge requests 15:18:46 a. [VostoEmisio Animated Core Concept Videos](https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/387) 15:19:22 they have created some short animated videos for monerokon (inside the Animated Videos folder here https://cryptpad.disroot.org/drive/#/2/drive/view/e0aHmKq5gc5FqX-JXn7FgMQllZRdQfrqk+6ubQSjGBs/) 15:19:40 Merge vosto 15:19:46 Very good 👍 15:21:20 they have made assurences that the produced video will have the same quality as this example (not created by them but just a reference) https://www.yewtu.be/watch?v=pYOSfEgF32Y&ab_channel=XPLAI and are putting an expiry date into their proposal of 4 months after funded to complete 15:21:59 9xmr to be raised through the CCS (not currently taking over the other animated videos proposal) 15:22:21 all things considered i like it too and will give a thumbs up 15:23:01 is the previous animation ccs still on-going? 15:23:16 hinto[m]: No 15:23:21 this seems like a good opportunity to re-use the funds 15:23:42 vosto might also do post production video editing for monerokon 2023 15:23:46 VostoEmisio did two small paid graphic design projects for me. I was satisfied with the result. 15:23:49 I believe the intent here is to try to do a better job at the same rate 15:24:03 the reason for not re-using is they didnt specifically target taking over that ccs right now 15:24:31 ideally this would be a short test? 15:24:33 We can alwways choose to use the funds for it if we feel like it / after merging 15:24:43 after the animated explainer ptsd 15:25:03 providing they put the promises in this comment inside the proposal : https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/387#note_21253 15:25:08 Iirc this is for 1 video to start, and will evolve into more if we accept 15:25:10 plowsof11: That one was obvious trainwreck from the first demo though 15:25:18 Vostos is actually looking awesome 15:26:11 yes voting for a small ccs to evolve into 'possibly taking over the animated video ccs' as ofrnxmr says above is my thoughts here 15:26:44 is there anyone against it? 15:27:48 +1 15:28:17 the video will be (to be confirmed) about common misconceptions - first videos topic: monero has an infinite supply , is this bad etc 15:28:46 looks like its a merge on this one 15:28:46 no comment on this one 15:30:00 moving on 15:30:01 b. [Wallet SDK for Android](https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/388) 15:30:25 "thanks for confirming, ofrnxmr..." <- Has anyone contacted mymonero? Are they affected? 15:31:29 I just want to mention that I got mymonero-web-wallet working in a self-hosted way, that works with self-hosted monero-lws server. Spendss actually work as well ☺️ 15:31:32 cryptogrampy: My guess is that MyMonero is not affected. I believe they still have their own decoy selection code that is not a direct copy of wallet2's code. It would be good to check. 15:32:15 also, giving your viewkey to them: they already know when you spend an output ? 15:32:23 plowsof11: > <@plowsof:matrix.org> b. [Wallet SDK for Android](https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/388) 15:32:23 > 15:32:23 ive been testing this lib with valldrac to help identify bugs and get the demo app to a stable state. android needs more monero support, since all the major wallets are already on or moving to cross-platform frameworks. huge +1 from me 15:33:42 thanks for testing r4v3r23 15:34:30 for me, sdk sccs largely depends on 15:34:30 1. how this relates to molly ccs, if at all 15:34:30 2. How this relates to existing java solutions such as monerujo 15:34:30 ...(truncated) 15:35:51 ofrnxmr[m]: > <@ofrnxmr:monero.social> for me, sdk sccs largely depends on 15:35:51 > 1. how this relates to molly ccs, if at all 15:35:51 > 2. How this relates to existing java solutions such as monerujo 15:35:51 ...(truncated) 15:36:15 Wth r u talking ab(ut 15:36:16 Depend on monerujo? 15:36:20 you tell me 15:36:25 more options? 15:36:33 "unless monerujo did the work already" 15:36:40 whats wrong with more android options? 15:36:43 Read what i wrote and read the ccs 15:36:58 The proposer doesnt know if this is duplicate work 15:37:03 kayabanerve spoke highly of this ccs in this comment here https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/388#note_21318 (having spoke first hand about issues including the security++ idea when validating blocks from remote nodes) 15:37:04 fragementation? you prefer centralized options? 15:37:18 ofrnxmr: your critique makes no sense 15:37:55 a better, modern SDK for building android wallets, unrelated to molly. why be against? 15:38:04 ofrnxmr: Molly has a distinct CSS for their integration, and as r4v3r23 noted, it's not Molly specific. 15:38:12 only to you 15:38:18 As for Monerujo, they definitively did not do the work present in the Molly efforts. 15:38:27 this benefits the monero ecosystem as a hole 15:38:38 s/hole/whole/ 15:38:39 monerujo dont exist until they update to v0.18.2.2, ticktock 15:38:53 Molly still uses wallet2, yet barely. It's a complete re-architecture of the wallet side. 15:38:57 Is monerujo still alive 15:39:08 It's halfway between wallet2 and a complete rewrite (monero-serai). 15:39:11 ofrnxmr himself updated monerujo apk to use an updated version of monero several months ago 15:39:27 so we only need 1 android option? i dont understand 15:39:32 they slow AF 15:39:34 kayabanerve: im referring to 15:39:34 > It is important to note that we have not conducted a comprehensive comparative analysis yet between our SDK and existing Java libraries like Monerujo's xmrwallet or woodser's monero-java. 15:39:36 are we pro centralization? 15:39:38 That's how it's able to offer the amount of features, flexibility, and security it declares. 15:39:46 Can valldrac up the ccs amount and add light wallet server support 15:40:22 cryptogrampy[m]: hes open to more advanced features, first is to get a stable basic version out 15:40:26 ofrnxmr: Sorry if I'm missing context, I'm just joining in, but my point stands AFAICT. Molly is a sweeping re-architecture to meet strict goals not achievable under existing works, which simply bind wallet2. 15:40:50 the quote i posted is from the ccw 15:41:03 any meaningful objections to a new Android wallet SDK? 15:41:16 If valldracs implementation makes it easier for people to build wallets than monerujos existing code then I'm for it 15:41:20 Yes 15:41:21 > It is important to note that we have not conducted a comprehensive comparative analysis yet between our SDK and existing Java libraries like Monerujo's xmrwallet or woodser's monero-java. 15:41:24 Most of the features in the CCS aren't possible without messing with the guts of wallet2. Accordingly, they're exclusive to Molly, since no one else has put in this level of effort yet (in this context, Android). 15:41:32 valldrac themself claims they dont know (?) 15:42:34 ofrnxmr: dont donate if you have issues. i fail to see reasons to block this CCS 15:42:36 note that this is the first time the idea has been discussed - and iirc valldrac also wants to update the demo? 15:43:00 plowsof11: he his, and ive been testing the apk 15:43:13 @woodser's work on monero-java would be the best-case existing work, due to their work on APIs, yet it's monero-java, not monero-android. 15:43:20 Hm. I'll invite them to the conversation. 15:43:33 Thank you 15:44:38 hello there 👋 15:44:47 I'm unsure if they immediately have the time, yet they can comment now how monero-java is comparable to the proposed Molly work. 15:45:04 Yo. Able to see the prior messages or need someone to bring down context? 15:45:37 yeah I can see prior messages 15:45:50 distilling the context is also nice :) 15:45:54 Also, I could be wrong, yet AFAIK Monerujo doesn't have a library. It's an app which integrates wallet2. 15:45:55 note this isnt just an monero lib, its and SDK with a working demo app that devs can base their wallets on 15:46:06 I'm not trying to say it can't be used as a lib. I'm noting Monerujo isn't trying to be a lib AFAIK. 15:46:34 its makes creatong hugh quality android wallets significantly easier 15:46:34 Molly CCS for an effective Monero Android SDK with a variety of security and functionality improvements over wallet2. 15:46:35 s/creatong/creating/, s/hugh/high/ 15:46:40 https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/388 15:46:57 ofrnxmr: noted how valldrac themselves noted a lack of comparisons. 15:47:07 * of comparisons between existing work and the proposed. 15:47:39 devs still need to create JNI bindings when using monerujos lib 15:48:05 i like that maintenance is added into the ccs and valdrac is going to put an expiry on it so if its not completed in a reasonable amount of time, funds released. A comment from woodser would be great. as we have 13 minutes left and another idea to discuss, seems logical to wait for the comparison and discuss again later? 15:48:09 I commented how existing work (Monerujo and monero-java) are wallet2 bindings. Molly's proposal significantly re-impls wallet2 functionality to achieve its goals. I also ack'd xmr-java's API work, and then brought you in to further compare the two. 15:48:24 That's the summary, woodser ;) 15:48:30 SDK is an upgrade in terms of development 15:50:22 we can move on to the next idea in the meantime with 10 minutes left 15:50:35 c. [Resolve abandoned outreach CCS](https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/70#note_21324) ajs_ 15:51:32 hi 15:52:11 plowsof: re: 388 looks like majority in favor with no real objections 15:52:23 the idea is to set up Mobilizon instance and promote meet ups 15:52:36 nioc and midipoet had a question or 2 in those comments 15:53:05 How much of 36 xmr goes towards the first trip 15:53:09 The monerokon trip 15:53:45 i was going to use some of the funding for a trip to prague and attend events durnig PBW, but i am not sure I'll stay the whole week 15:54:06 i might use monerokon funds for a quick trip for a few days 15:54:24 Including printing of flyers, stickers, and t-shirts to giveaway at meetup 15:54:57 i think we can put off a decision 15:55:11 and flush out the ideas more 15:55:35 thats all 15:55:56 i just wanted to make sure the proposed meetups were advertised on meetup.com or whatever the local/regular meetup website it (even if facebook), as we want to use those meetups to get new people in. That is all really. Other than that i support the funds being used (though 36 XMR is quite a bit of fiat). 15:56:31 guestimate of the funds required for each - if i remember the trip will cost 3kusd? has support from nioc,midipoet,geonic and maybe scott already judging by those comments. ajs is also: planning monthly [Monero meetups](https://www.reddit.com/r/Monero/comments/13o0d9i/monero_t%C3%BCrkiye_meetup_25th_31st_may/) in Türkiye - ajs 15:57:10 So around 20/36 xmr - does this inckude the giveaways? 15:57:18 3k for the full week 15:57:26 but i will make a short trip instead 15:57:44 and bill monerokon funds 16:00:10 so we need to know where the 36 xmr plays into this all (it you could itemise each / flesh it out?) is that the plan moving forward? 16:00:37 put the idea on hold 16:01:01 when i have more time I'll put together a more detailed proposal 16:01:16 ok thank you 16:02:57 to summarise, VostoEmisio Animated Core Concept Videos -> merge. Android Wallet sdk -> more support than not, i would feel comfortable waiting on woodsers feedback also (its also the first time weve discussed it). Ajs taking over outreach -> on hold. 16:03:01 thoughts? 16:03:20 Seconded 16:04:54 read the ccs 16:05:28 my take is it's basically an android-focused service and SDK, to wrap parts of wallet2 in a kotlin api 16:05:35 next meeting time: it seems like we have several events taking place concurrently on saturdays and i want to force everyone to be here for a 1 hour meeting that lasts almost 2 hours like the good old days (not possible anymore) 16:07:19 Just one clarification about the SDK. I didn't compare it with Monerujo and monero-java in a "comprehensive" way because those libraries weren't suitable for Molly's needs in the first place. They didn't have the necessary functions and flexibility we required. We discussed this in the CCS. Basically, none of these libraries had the key features of the SDK (a total of 10). While we can compare them in terms of security, performance 16:07:20 SDK is still being heavily developed, so I'm not sure if it make sense to compare them right now. I'm confident the SDK will perform better anyway. The only drawback is that it's more complex internally 16:08:08 * of use, for the, * the common features, the SDK is 16:10:09 Can you give some examples of what would be an uncommon feature? 16:11:49 ofrnxmr[m]: For example, with the SDK the app can choose how to store and encrypt the wallet data 16:13:02 fair, though I can point to monero-java's ability to export the wallet data as byte[], then the app can store/encrypt it however 16:13:47 maybe these serve different purposes, and an android sdk/service provides advantages in that context. from what I can see, the proposed apis are more focused to achieve basic wallet functionality, at least to start, whereas monero-java is intended to be a broad library to expose as much functionality as possible behind "clean apis" 16:15:41 from what I understand, monerujos lib is just an android build for monero, which apps then need to bind to. 3 apps til now have just used monerujos' default JNIs, whereas this SDK would provide another way to interact with monero codebase 16:16:23 Here's another example. The app can change the list of nodes to sync with on the go. It tells the SDK which nodes to use, and you can switch them up while syncing. This lets you connect to multiple nodes and spread out the connections evenly (client-side load balance) 16:16:28 monerujo is moving to Dart for android/ios compatibilty, so using their wallet as a base wont be viable much longer 16:18:03 * much longer for native Android devs 16:19:28 "fair, though I can point to..." <- Yeah, that's true. But can I export the wallet safely even when other stuff, like syncing, is happening? 16:20:55 yes to my knowledge. it's merely using the same code to export and save wallet data from monero-wallet-rpc or the gui 16:21:15 s/monerujos/m2049r's/ 16:22:11 "Here's another example. The..." <- if this requires any customizations to monero-project, it would be nifty to push that feature upstream so other apps/librarys can inherit. either way, could be a nice feature to support in monero-java too, alongside its current connection manager 16:25:46 woodser[m]: wallet2 needs to be re-engineered, and that's exactly what Seraphis is going for 16:27:05 if woodser has more time, and can come to a decision on yes/no for this ccs , much appreciated. i think we can end the meeting here? thank you all for attending 16:28:03 plowsof11: Sorry, I thought the meeting was over already 😅 16:29:24 I thought we were in after hrs as well 16:29:40 my main thought is I would be prepared to put in a lot of work and ongoing maintenance, because wrapping these apis is no small feat already, and I'm reading that there will be quite a bit of massaging of the existing wallet2 calls. so it's will be a committment 16:29:57 s/'s//, s/committment/commitment/ 16:30:20 "to summarise, VostoEmisio..." <- Id end the meeting minutes here 16:31:59 woodser[m]: Yeah, it's a hassle. But it's either dealing with the mess or giving up on Monero on Android, honestly 16:38:26 * Android, honestly (for native apps at least) 16:41:20 yeah I can see the advantage of a monero sdk targeted for android to help get devs running quickly on that environment 16:41:48 woodser[m]: this is the key point 17:35:58 "for me, sdk sccs largely depends..." <- > <@ofrnxmr:monero.social> for me, sdk sccs largely depends on 17:35:58 > 1. how this relates to molly ccs, if at all 17:35:58 > 2. How this relates to existing java solutions such as monerujo 17:35:58 ...(truncated) 17:36:35 * Let me answer those questions: 17:36:35 1. We need the SDK to integrate Monero in Molly. No SDK, no Molly integration. For the SDK, I estimate it will take 3-6 months from now to complete the development. Once that's done, we can move forward the integration in Molly while the SDK is maintained for 6 months. If we're lucky, Molly will have Monero by the time this CCS is over 17:36:35 2. The current libraries have issues and missing features for Android apps. The SDK aims to fix them 17:36:35 ...(truncated) 22:21:13 After 6months bin it? Or create a new proposal too maintain? 22:21:23 cryptogrampy: there is still no payout address for the final milestone for https://hotshop.onrender.com/ sir at https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/307 22:56:59 plowsof11: the misleading trailer just dropped 22:57:03 https://twitter.com/markofdistinctn/status/1662592776087953408?s=20 22:57:04 :p 23:29:30 this is exactly the kind of misleading trailer i hoped for, thank you <3 23:33:35 my pleasure!