Hello people! Wondered if there's any services or good projects to donate to that accept XMR?

I do have donated a cup of coffee to the Tor and Monero Projects and theres Mullvad vpn which accepts XMR. I just find it fun to use XMR to give away to people I know or projects i support

The xmr community fund maybe?

Oh yeah, you just said that.

Also, buy a t shirt for yourself here

Monerodevs.org

povl[m]: to be fair im pretty sure i typed as you answered xd

edge7[m]: > <@edge7:matrix.org> Also, buy a t shirt for yourself here

>

> moneromerch.com

Heh, a good way to flaunt my nerdiness xd

edge7: There are good things to pay for while benefitting productive members on monerosupplies.com if the shirt does not fit.

I meant to answer Killercat103: , sorry.

I bought a couple of flip flops for summer

MSvB[m]: Are both 3-rd party stores?

MSvB[m]: I don't have wearable merch like moneromerch so i get why people would go there :)

I thought monero merch was sort of affiliate with the community

Idk if monero werable merch is a bit much on my end but its interesting nonetheless.

I'll save both pages for later

The 3d coin are pretty cool. Anyone knows the format of the file?

Is that on moneromerch?

Killercat103: maybe I2P if you like tor? Or zlib if you support that kind of thing.

Gotcha stl

Whats zlib?

Killercat103[m]: Nonero supplies

I looked up I2P but sadly they dont seem to accept donations :/

edge7 the monero dot fail list is comprised of nodes in the peer list of a monero node (located in singapore) and user submitted ones. There is no vetting of servers. The singapore node did not have the dns block list enabled for at least 6 months so known surveillance nodes where there.

How does one become an affiliate of the Monero community

Killercat103[m]: Ah alright. Zlib is free books on tor. If you don't like piracy but want to support free knowledge for all, maybe project gutenberg.

Use code COMMUNITY or my affiliate link for 5% off tech support sessions in #monero-support:monero.social

Aha, my opinion is honestly a bit mixed when it comes to piracy

But free knowledge and cencorship circumvention, privacy and ethics/freedom both in software and irl yeah

* But free knowledge, censorship circumvention, privacy and ethics/freedom both in software and irl yeah

<Killercat103[m]> "I looked up I2P but sadly they..." <- apparently because they got a lot of btc donations and then the price went up lol

The transaction fees?

I don't see why they could not accept Monero then. It has very low fees in comparison xd

Cat accepts donations for her services

Cat?

<edge7[m]> "I thought monero merch was..." <- they donate 30% of profits to ccs. I have ordered some stuff there as well and waiting on delivery. The owner is very nice and is a supporter of monero

Am running a monero node like this

docker run -d --restart unless-stopped --name="monerod" -p 18080:18080 -p 18089:18089 -v /home/edge7/Desktop/monerod:/home/monero/.bitmonero sethsimmons/simple-monerod:latest --rpc-restricted-bind-ip=0.0.0.0 --rpc-restricted-bind-port=18089 --no-igd --zmq-pub tcp://0.0.0.0:18083 --enable-dns-blocklist --in-peers=50 --out-peers=50 --public-node

Can anyone check the last few params to be sure am not missing anything. That should be enough to create a public node which is advertised

ofrnxmr: --public-node also?

I think the public node is for advertising. Otherwise it is public but the ip is unknown

Ip unknown sounds impossible

How do you guys buy your monero?

I need to buy some asap

brams0[m]: Local monero.

<plowsof11> "Ip unknown sounds impossible" <- From the official doc

The daemon allows to make a node public by simply adding the flag --public-node. Doing so, it will be advertised on the P2P network and people will be able to connect to it

So it looks like without that it does not get advertised. Correct?

edge7: please, for the love of god/plowsof (your choice), stop double posting!!

Did this yesterday too.

Jsyk, its the same people in almost every room. Different rooms for different purposes

<brams0[m]> "How do you guys buy your monero?" <- Localmonero

Agree. I deleted it from there and put it here as yesterday I was getting more answers here

Ideally you should be in Monero or Monero Support . This is a workgroup room, for community projects, funding, etc.

its ok for now, but for next time 👍

<plowsof11> "ofrnxmr: --public-node also?" <- For bootstrap and simple mode (gui)

I dont use either of those features, as i dont trust simplemode nodes (and therefore i dont trust bootstrap ones either).

People/wallets should really _only_ be using nodes that they trust or know the operator of

There are a number of privacy issues and/or exploits regarding using "random" nodes

Youre better to use any of the many nodes hosted by known community members, than to assume that a majority of --public-node (advertised / auto / bootstrap / simplemode) were configured by well intentioned people

Ie, if you were malicious, youd spin up 1000 node ips with --public-node on them

Since its not a default flag, youre the majority of --public-node nodes. And its the auto connection method for the official software

i think there should be absolutely no "auto selecting of random/unvetted nodes". If youre using bootstrap, you should specify a remote node.

Simple mode should use "trusted by community nodes" only (like feather).

My plan is to connect my own wallet with my own remote node. But I used the - - public flag for advertising.

I am confused tbh.

--public-node advertises to the network in order to allow bootstrapping

@edge7 just make sure you synchronize your wallet and then you debug it with bp20

Simple mode in monero gui uses the list of nodes so that people can use gui without configuring a node

(Which is silly and dangerous)

If you want to connect your own node, and share your node with others, you dont need --public-node

You only need to share the ip and port with whomever you are sharing with (or use them yourself)

<edge7[m]> "151.30.244.162:18089..." <- If i want to use your node, i only need this ip and port

And you dont need to set the --public-node flag for that

But I want to share that also to people that I cannot talk with!!!

Those people are insane and need to stop using random spy nodes they found in dark alleys and then wondering why things went left

edge7[m]: Thesee people are using a feature that allows the user to be _too_ sloppy.

you should not be using remote nodes of whom you dont know and/or trust the operator

Just did a monero transaction, the trader told me it should take about an hour for the coins to arrive

Accurate?

Ok. I see your point. Now. I am in the safe side and am actually advertising correctly. You just don't trust the concept

brams0[m]: From localmonero?

Yep

brams0[m]: Where and how. 1 hour is a bit too much

Localmonero

2 transactions. 20mins/10 confirmations before it gets forwarded to you from escrow

No kyc no id

Paypal though

You should see your funds in your wallet after 10 c(nfs

Paypal doesnt matter, what matters is, "did they finalize?"

I guess you paid a huge spreads. How many usd for 1 monero?

10c?

If they finalized the trade, youre looking at ~20 mins before the funds are sent to you

10 confs*

Yep, they told me its on the way

Confirmations (10x2mins = 20mins)

Oh so 20 mins?

Okay

How traceable is it? Compared to btc

Is this the first time for you? I was worried as well my first time. Be sure the address you pasted is correct. Also check what local monero platform says for that particular transaction

edge7[m]: No, its not me

Its common knowledge and a security advisory

Do not use remote nodes of whom you dont know

Simple mode has long been a problem, and im saying it should be sunset

brams0[m]: The xmr or paypal?

Compared to btc is like comparing fish swimming to horses swimming

ofrnxmr[m]: Yes but majority of people will use the simple mode, me included when I started. You cannot expect every person is techy. The more good people offer public nodes advertised the better for the network

No they wont

Not once its removed

Is there any road map to remove it?

I dont expec them to be techu

They can use feather wallet and get an ideal experience without the potential of being robbed or having their privacy eroded

edge7[m]: We dont do "roadmaps" per se

ofrnxmr[m]: Both

But yes

Like could someone tell that I bought it from pp?

I'm guessing not

yes

If the seller sells xmroften, paypal can be pretty sure youre buying what that person claims to sell

Yeah but what I do with the xmr isn't linked to me?

Its not linked to you

They can't tell what I'm doing with it?

right

If you have time, check out the Breaking Monero series on youtube

And edge7: specifically the video on remote nodes for you

ofrnxmr[m]: alrighr

This is old news, before we learned of new attacks, some of which require a hard fork to mitigate

I got some of it

I got 12 out of 15 usd

I got to wait for the rest?

I'm using the feather wallet if it helps

Why you say 12?

Yep it's going up

How are you computing the usd value

edge7[m]: I paid for 15 USD worth of monero

and got 12 USD in my balance

Now I lost 1 cent

edge7[m]: With the feather calc

Just look at MONERO. NO USD. have you got the right amount of monero or not?

I don't know, I chose 15 USD on localmonero

But there must be written the exchange rate you paid..

Localmonero sellers set their own rates

3 USD was the fee charged by the person you traded with, probably. If you want someone to provide a service, you have to pay them.

The trade on localmonero shows how much xmr you were supposed to get

Yeah I got the right value

Thanks guys

I suspect you have paid a fairly large spread. That is xmr / USD is now at 161.2. But the trader applied a spread. They always do, especially with paypal

Yeah paid like 17usd

Yeah, especially if they are paying fees on their end

Paypal fees

Stupid question maybe, but what is "spread"?

M-coffeeplease-[: Not stupid, got no clue aswell

If something is quoted at N but I sell you at K where K > N then K-N is the spread. Basically a fee.

To be precise the spread is the gap between the bid and the ask prices of a security or asset

Ah, thanks! Was trying to look that up some time ago and could not find. Probably off-topic here, so sorry for that. Thanks again.

If you look carefully in local monero many traders buy at N but sell at K. This is perfectly normal. But the most liquid is the market the lower is the spread.

In local monero I have seen huge spreads when paying with PayPal or bank sepa. Much less when paying with bitcoin or similar

Kraken offers fair spreads but is an exchange with all the cons

Yeah, I buy mostly on Kraken now. When the Monero are in my own wallet they are "gone", right? I could as well have had a boating accident or lost them in a gamble.

Thanks for your explanation! Very helpfull.

What do you mean by gone? They know to which address they have been sent. And they obviously know who you are as the KYC policy

There is an address on Kraken where I get my bought moneroj in. I withdraw those to some address. A secondary address of my own wallet presumably, but could have been anyones address. I just want to say, 'they' don't know if I still own those moneroj or not.

they can't see if you ever spend the funds, but they can see that you keep withdrawing to the same address. The also know the amounts and times when you bought and withdrew.

Not the same address in my case, but yes you are right.

They cannot know if the address where they sent the funds to still have those moneros. With bitcoin they could. But not with monero

They can see I am into Monero. Not a problem that violates my threat-model now, but might become a problem in the future. Hmm, need to think a bit further on that.

in theory

In practice, there are plenty of ways to expose yourself as having access to funds that were reported to be in a boatinf accident

ofrnxmr[m]: Example please?

Example:

you make 25 withdrawals to the same wallet, using different subaddresses but the same wallet. You use 3 or 4 different services (swap, cex, localmonero, a mining pool). You dont make any spends during the time you receive these 25 transactions.

can anyone determine that you didn't make any spends?

yes, if later consolidate

if you*

Not got the point. What you mean by consolidate

i was replying to nioc

My reply for you is in progress

do those listed entities need to communicate to determine that you haven't spent?

only the source and the spy. The recipient doesnt need to collab

I wasn't including the recipient. Also consolidating doesn't mean an amount wasn't spent

Now, you have 25 inputs in your wallet, lets say 7 from cex, 7 from swap site, 7 from localmonero and 4 from a mining pool. Lets assume the total value of these is $2500

you now have a boating acident and claim to have lost these funds. The government accuses you of owning the 14 outputs from the swap site and cex. lets assume the government also has info from mining pool.

you now, some time later, need to make a $2500 transaction and do it by spending the 25 inputs together. If the government sees all 14 decoys in the same tx, they can preclude that you owned all of those oroginal, unspent outputs, and also notice that 5 payouts from a mining pool are in this same pool as well, leading to assumption that this same wallet is also owner of the subaddress from mining pool

nioc: By spent, im not referring to "sent to someone else", im referring to "made a transfer" (and consolidated inouts) whether to yourself or otherwise.

P2pool.observer has a good example of this by showing when miners true spends are fingerprintable

<cryptofix[m]> "@edge7 just make sure you..." <- Banhammer:?

This person needs the hammer

They posted in monero groups too, i dont remember which

Im not sure about cryptofix though.

Oh, it was NWLB No Wallet Left Behind

mining wallet should always be a separate wallet

the address is public

The example sounds convoluted to me. Maybe I have some gaps. But you are mixing too many things. The government would see a lot of decoys give the number of input spent..

<nioc> "the address is public" <- Addresses aren't on the blockchain, so why should that be a separate wallet?

if you give a cex your address now your mining wallet is tied to your identity. Why would you want to do that?

not only is your mining address public but also the mining payouts

<M-coffeeplease-[> "Addresses aren't on the blockcha..." <- He is talking about pool mining. Do not get confused. Addresses in normal transactions are definitely obscured

Okay, just to understand things better. A mining pool mostly needs the primary address iirc. The cex doesn't. So If I mine in a pool and use a secunday address for the cex, is there some problem in that? In this example I am not gonna spent all my moneroj in one time as in the example ofrnxmr gave earlier.

s/spent/spend/

On second thought, I don't think a primary address is needed in an miningpool, not sure though.

primary address is needed for mining unless they changed that while I wasn't looking :)

Is that only if the miner is mining the coinbase output to their own address? People pool mining are mining to the pool operator's address. Those miners should be able to tell the mining pools to send payments to subaddresses.

Yes

You can use any address with most pools

Coinbase nerds main address.

address doesnt matter here. Reusing an address is an overt privacy leak, but combining outputs is a more covert.

The exsmple i gave was an extreme

If i have 1 transaction (A) from binance now, and another next year, then spend them both together, binance knows i still held the A output

how's coinbase's lawsuit going?

Monero Offtopic

Coinbase has nothin 2 do with xmr