Someone just donated $15,000 in the last 20 minutes 👀👀👀

Prediction summary: ring sigs and mixing inputs make churning an act in futility.

tldr: fmp or bust

Best churn / only viable one = seappind 1xmr for 1 xmr with different, unrelated history.

s/seappind/selling/

Like "research into how well rectangles roll". Im all for it

But dont expect to learn anything we dont already know

Which is that rectangles and ring sigs dont roll and its a waste of time trying to make ring sigs fungible

p2pool.observer shows just has asinine it is to mix your own outputs.

tge decoy selection model needs an extremeky competent algo to force it to combine outputs that have been combined before or other craziness in order to not expose that only 1 person spends these known (change, refunds, whatever) outputs together

Again, tldr: fmp

ofrnxmr: fmp?

And why are you assuming that a churn has to spend multiple outputs? A wallet could very easily segregate outputs to prevent this. It would be a usability trade-off, but so be it.

Can you expand on what it is that we currently "know" about churning? Are you holding something out on us?

<defeatoverseer[m> "ofrnxmr: fmp?" <- Full membership proofs

<defeatoverseer[m> "And why are you assuming that..." <- Sweep single is already possible a form of churning. Forgetting about what to do with the change kills the churn

If you spend the churned output, say 1xmr and spend 0.97

you have 0.03 xmr left. What do you do with it?

Mix it with other churnd change?

Or always spend whole outputs alone and somehow always have exact change

It's a trade-off. If privacy is more important to you than that 0.03 then you leave it.

Thats burning xmr

Not churning

inefficient af.

You churn until you get an amount that is unusable to you.

Sometimes high privacy demands that.

like, if you have to do that for privacy might as well use btc and 16 layers of nonsense

l1 should work out of the box, period. Lol

Not a bunch of workarounds to gain privacy

Anyway, my tldr is the long story short is its a foregone conconclusion that ring sigs have a lot of fingerprintable heuristics that can never be perfect.

"can i draw a line from transaction z back to a?" Yes. And not likely unless the real spend

Ring sigs leave bread crumbs, churning just adds more crumbs

Where's the research that says that?

As i said

<ofrnxmr[m]> "Prediction summary: ring sigs..." <- ^

<ofrnxmr[m]> "Like "research into how well..." <- ^

Im not against research to prove it

Or disprove it (lol)

We all know the actual research is thin to non existent. we just increase ring size without actually using a decoy algo or input/outputs that make sense from a privacy perspective

I'm much more optimistic, I believe that there are certain cases where churning one/a few times definitely helps (provided you do it in a specific way)

And the main reason for that is due to the lack of dummy outputs (which imo would reduce the need for churning, but of course it comes at the cost of extra chain growth)

Plus, I believe that there is *some* technique for picking decoys when combining outputs that would help hide that fact, but it's quite messy and complicated, and would definitely take a lot more work than just "pick according to some spend distribution"

r4v3r23[m]1: if CBDCs arrive and they are net negative (likely), then the public will require a viable alternative for their day to day financial transactions. Scaling up to even a quarter of an average countries population size would be an extremely difficult task, all things considered.

<merope> "I'm much more optimistic, I..." <- In what specific way?

Hmmm I have a picture in my head, but I'm not really sure how to describe it (or if it's even accurate)

The research should tell us this.

People have ideas about how to do it, but there's nothing conclusive yet.

evalda[m]: This is the common way of doing it, it may be good it may not be.

The XMR amounts are irrelevant, and you don't need separate wallets either. It's about the graph made by the inputs and the outputs in the transactions they show up in (either as decoys or real spends)

Separate wallets are not required, but they make it easier to not mix churned and unchurned outputs in the future. Although wallet accounts can do the same.

Is there word already from our Reddit mods how the story with the blackout is planned to continue for the Monero subreddit?

Just saw that r/CryptoCurrency is back. Hmmm.

I'll put it back to public later today

We can do a vote on what to do next

dEBRUYNE: and me are basically the only really active mods left

By all means put that vote up. Reddit moved about 1 millimeter yet, completely laughable if you ask me

To be honest, i don't care anymore about what reddit will do now

monero.town works great

The reddit privacy frontends and rif will die

Means I'll be checking the subreddit a whole lot less frequently

Understandable.

I think the best option would be to lock down participation but mirror posts from forum.monero.social and monero.town to the subreddit

Doesn't impact people just checking in, prevents a whole lot of bot comments and decentralizes the community platform a bit

If you go that way, let me know. Forum.monero.space antispam bayesian filter has only had 2 days to train on click spam farms in Bangladesh and China so it doesn't catch everything.

I'd need to tweak site permissions so new users can't post links to have 100% of spam not mirrored

That's cool

My spam filter is much more annoying for users to deal with

In my experience one tends to underestimate what it takes to smoothly run something of the size of Monero subreddit, assuming a sizeable portion of participants switches

(somewhat confusing signup, no email notifications)

The bots (the more clever ones) will migrate as well if there will be a sizeable exodus from Reddit now

But the benefit is that only humans can post in this town 🔥

rbrunner: Depends

You have to say that, don't you :)

I mean, things like Reddit (the whole sheebang) count their servers in units of "data center" ...

If you had bots spam r/monero with braindead comments to make accounts look more legit to sell them and the spam on r/monero was just collateral damage

Anecdotally, yes of the more proactive mods in the fediverse bad bots have started moving in. That's why one of the major topics of conversion at the recent fedicon was around moderation improvement for fedi serviced

Yeah, people complain about how bad the mobile Reddit app is. Is there a mobile, what is it, Lemmy app - *at all*?

* Anecdotally, the more proactive mods in the fediverse have said bad bots have started moving in. That's why one of the major topics of conversion at the recent fedicon was around moderation improvement for fedi serviced

There's two actually

And why Mastodon in the last month did an emergency captcha service add feature that has been requested forever

Lemmur and jebora

And those are good?

* Lemmur and jerboa

* Anecdotally, the more proactive mods in the fediverse have said bad bots have started moving in. That's why one of the major topics of conversion at the recent fedicon was around moderation improvement for fedi services

I'd say on the level of the reddit app without the privacy violations and tons of ads

Ok, interesting to hear.

Anyway, the Reddit server claims that we have around 1000 concurrent readers on the subreddit. That's quite some load if true. On what kind of hardware is monero.town running right now?

Also, the web versions are actually useable on lemmy

rbrunner: 8gb RAM 2 cores VPS

And it's only serving that forum, basically, I assume?

Yeah

Monero.house had 1 core and 1 gb ram and served 100 users fine

It is trivial to migrate to a bigger server should we ever have to

But people on the Lemmy admin chat told me their instances with thousands of users don't require much more impressive hardware either

You mean a total of 100 users? So maybe 10 active in parallel or so.

this is house

this is town

* ^this is house

Ah, ok. I just barfed on my keyboard after seeing that "Gendersternchen" there. I hate those with a passion :)

lmao

I say use only feminine form all the time, problem solved without butchering the language and the spelling. But well, I am going off-topic now ....

I'm not sure what the English version says but i bet it's just users 😂

Btw, damn good stats on the migration from house to town

Over 50% of users in less than two days

Yes of course. That's what I see if I use it, "users"

Had to do it since the .house domain was used by scammers in 2018 and on a bunch of blocklists. .town is clean though

Well, good for your migration, but not yet much of a sudden influx with the subreddit dark, seems to me

reported

The subreddit claims 100,000 users. So you have still some freaking magnitudes of possible growth ahead of you

I think the biggest issue server wise is probably going to be storage for Lemmy/Kbin. 1000 users performing top 20 links + aggregate sum of comments and votes shouldn't be too intensive. Fedia.io is up to something like 1GB consumed storage after 2 days so even if you assume linear growth a few years down the line if storage isn't optimized it'll cost a pretty penny every month

In theory though whatever monero link fedi service exists though should only have subs that are monero based, not a lot of image based subs, so maybe storage won't be so bad for a monero instance

xmrscott[m]: I'll be moving the image database to backblaze storage once it fills up the vps too much

<rbrunner> "The subreddit claims 100,000..." <- that is a lie, every single day there are many, many bots joining the subreddit

I imagine. And of course it's in the interest of Reddit to exaggerate, so no wonder.

CEO already has. "Please don't wear reddit gear in public or you could be assaulted" as if anyone has encouraged physically harassing random people wearing reddit apparel

I start to seriously consider that monero.town might, just, barely, be a viable replacement for the Monero subreddit ...

luigi1111plowsoflets get those CCss merged

s/CCss/CCSs/

Yes, that CEO is jumping from one climax to the next currently. Probably a little overstrained the poor man.

Hoping to become a billionaire with the IPO, and now this.

Nobody understands him :)

he scammed me with the last reddit nft drop

good thing the two drops before that made up for it

You did something despite the word "NFT" showed up somewhere in the "thing" that they wanted you to do? :)

nono

they are "collectible avatars"

on the polygon chain

certainly not nfts 😂

Ah, yes, those.

As non-NFT as it gets, yeah

<rbrunner> "I start to seriously consider..." <- we got to be the publisher for some cool investigative journalism already :D

Yes, saw that. Interesting.

Anyway, worst case the party lasts only a few weeks, and then somebody with a grudge DOSSes you off the Internet, or gets monero.town blacklisted as well "because Monero", or whatever

but still a party of several weeks was had, which was nice.

Worst case, I mean

ill just buy cloudflare protection then

Is that expensive?

i dont think so

lol

That looks suspiciously reasonable. Waiting for the catch.

i think they just have so much spare ddos protection lying around that they can hand out while there are no massive attacks going on

they also have some program that gives FOSS projects some services for free

Might be. Maybe that's the catch. "Best effort". Which is no effort if they are busy with something really important

Is there good DDoS protection that isn't Cloudflare?

No idea. At least the impression from over here is that they got that market pretty much cornered.

they give away unmetered protection for free since their big boy business contracts is all they need

there is zero place for competitors

all they need to do is have enough infra to withstand the current biggest botnet

AFAIK, they block Tor with no way around. No working captcha option.

good thing tor is getting its own ddos protection

You could serve the site over an onion service and make the PoW DDoS protection mandatory.

that is what i plan to do

Exclusively, or as an alternative?

like, just serve both

tor exclusive sites are not user friendly at all and will leave you with at best 5% of the userbase

Probably.

Serving both clearnet and an onion hidden service from a single server are extremely easy if you are using NGINX. Probably easy with any reverse proxy software.

hey monerobull, I just want to say thanks for monero.town

<Rucknium[m]> "Is there good DDoS protection..." <- Not free, no

yeah ruck you can help me with that if you want to

I used this: sethforprivacy.com/guides/building-…s-blog/#enabling-native-tor-support

But I can help, sure.

There's a few others like Fastly and Akamai that are good, but they cost money

<Rucknium[m]> "Is there good DDoS protection..." <- Tor PoW protection 👀

time to start generating xmrtownalkjwef;lakjewf;oiaj23234234.onion

i might have

* i might have to

the donation address is 43townyvWJ82Ct4xWKrgAMJyfcbtUNfA6VVhgXWiH6pdgexBvcU8AnfTXDecaP12cqM7d7jYiriAwiyFff1o5C8xEBiLU3h :3

to spin up an onion? takes 2 secs

is that PoW protection for tor live yet?

Does not take two seconds to generate a vanity onion address unless it's very short.

Well, you just don't have enough compute power

I have over a dozen Gateway towers in my nursing home computer lab.

monerobull[m]: monero subreddit

cryptogrampy[m]: yeah just not enabled by default

Cool. I need to test it out

Rucknium[m]: still not very hard

I think we should leave r/Monero as it is and not force a transition

If a transition occurs it will occur organically, like the BitcoinTalk -> Reddit switch basically

I will make a poll on the subreddit with a few options

#1 keep everything like before

#2 mirror all posts from forum.monero.social and monero.town (with disabled comments)

#3 disable commenting and posting and only allow mirror posts

Anything else like going private indefinitely will just get the subreddit banned or taken over by reddit itself

<Rucknium[m]> "Is there good DDoS protection..." <- OVH has automatic and free DDoS mitigation as part of all its hosting offers

hbs: Thanks.

monerobull: Wouldn't 2 and 3 require API access?

Just for posting? Perhaps?

It would be a mod tool and they said they allow those 😂

If they don't, we can just use selenium to do it

Rucknium[m]: you can read more about it here ovhcloud.com/en/security/anti-ddos

Btw i just checked and monero.town provider has some ddos protections built in

nice

"ah this will pass" might be the worst thing for him to say rn even if he's right 😂

monero.town/post/2861 😂

nice indeed