13:50:12 meeting in 2 hours 10 mins https://github.com/monero-project/meta/issues/1106 14:42:12 Be there or be []? 16:00:18 meeting time https://github.com/monero-project/meta/issues/1106 16:00:21 greetings! 16:00:45 Greetings 16:00:52 Hello. 16:01:49 lets share some highlights, have we seen xenus definitive guide on how to buy monero as of november 2024 https://yewtu.be/watch?v=UKOE2DKBmRQ 16:02:07 I want to change this Donors, Rule 2: "In the event that a proposal is overfunded, unable to be completed, or otherwise put in a state where donated money will not be dispersed to the intended recipient, the default is that the remaining XMR will be put in the Monero General Fund. There are some exceptions, but they are rare, and these decisions 16:02:07 rest with the Core Team." 16:02:47 To: "In the event that a proposal is overfunded, unable to be completed, or otherwise put in a state where donated money will not be dispersed to the intended recipient, the default is that the remaining XMR will be put in the Monero Jet Fund. There are some exceptions, but they are rare, and these decisions rest with the Monero Community 16:02:47 Workgroup." 16:03:03 hola 16:03:14 hello 16:05:31 hey 16:05:39 the current overfunding is about 260~ xmr https://github.com/plowsof/scrape_ccs_fr 16:06:37 btw, this Bounty [Monero point of sale device with 0conf](https://bounties.monero.social/posts/159/5-000m-foss-monero-point-of-sale-android-app) has someone working on it. ofrnxmr shared a site , that has a "hotshop" like monero integration 16:07:35 https://www.bitrequest.io/request-url/ 16:07:50 that is https://www.bitrequest.io/ , appears to put the address (optional view key for live monitoring) into a payment request URL. monero-js then loads the wallet and scans for payments 16:07:57 thanks ofrnxmr, never heard of this before 16:08:32 RINO is closing at the end of the month, and LocalMonero officially closed on the 7th November 16:09:02 I thought rino closed end of oct? 16:09:34 people have until end of november to withdraw funds (i received an email) 16:09:58 and gingeropolous made a ccs 10 mins ago which we can cover later 16:10:28 yes the original date "We will shut down the platform on October 31st, 2024" hm 16:11:04 the email i received on wednesday states "As already announced before on Reddit and Twitter, RINO is winding-down 16:11:04 end of November. Please remove any remaining funds ASAP." 16:11:26 There is evidence that there are a lot of spy nodes concentrated in a few IP address subnets: https://github.com/monero-project/research-lab/issues/126 16:11:33 Hello community 16:11:51 rucknium: isn't there a ban list we can add them to 16:11:56 my 3 nodes are running the block lists 16:11:59 You can prevent these nodes from spying on your node by enabling a blocklist. Save https://gui.xmr.pm/files/block.txt in the directory where you launch `monerod` and then add this flag when you restart `monerod`: `--ban-list=block.txt` 16:12:09 jeffro has a nice PR which enables people to add comments in the block file 16:12:40 https://www.forked.net/ip-address-leasing/ 16:13:23 Purchase youre ip range today, low low price of less than $1 per ip per month. Bundles on 1000 available /s 16:13:28 Your* 16:13:55 I added a little function to my R package https://github.com/Rucknium/xmrpeers called `peers.ip.collect()` that shows you when your local node is connected to suspected spy nodes, plus when the "subnet saturation" of those peers is occurring. Obviously, you have to not have the banlist enabled to see when you are connected to those suspicious nodes. 16:15:48 the "asmap" pull request was mentioned in the MRL meeting 2 days ago https://github.com/monero-project/meta/issues/1105 (which would improve moneros resilience to spy nodes iiuc) https://github.com/monero-project/monero/pull/7935 16:15:55 these nodes are funny, and almost lazily implemented 16:16:22 Asmap is a bad idea imo. It allows malicious nodes to "block" good connections by saturating the map 16:17:19 <0​xfffc:monero.social> hi everyone, sorry for being late. 16:17:25 the behavior of the attack here seems to be an attempt to defeat dandelion 16:18:38 can someone just fix it then please, thanks 16:18:45 Which can be remedied if you either a) use tx-proxy b) have good incoming connections. If you dont have incoming connections, i'd highly recommend tx-proxy 16:18:51 ofrnxmr: You can discuss it at the next MRL meeting 16:18:58 Malicious node can access to the private key? 16:19:02 no 16:19:06 no 16:19:36 News: [Monero Observer](https://www.monero.observer/) - [Revuo Monero](https://revuo-xmr.com/) 16:19:56 @rucknium 👍 16:20:05 Where is the thread of malicious? 16:20:35 Where is the thread of malicious node? 16:20:38 https://github.com/monero-project/research-lab/issues/126 16:21:03 Benraouane Soufiane: Reduces privacy of the IP origin of a transaction, potentially. There are also eclipse and network partitioning attacks. You can read about those on the internet. 16:21:12 we can move on to the ccs ideas, theres plenty of reading material on that 16:21:35 a breaking monero episode to : Remote nodes 16:22:07 moving on unless... 16:22:45 https://github.com/monero-ecosystem/outreach-docs/blob/master/monero-outreach-docs%2Fen%2Ftranscriptions%2Fbreaking_monero%2F07_remote_nodes_en.md 16:23:06 thanks, now then 16:23:30 a. [Carrot animated video](https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/506) 16:24:11 proposal has been up for a month now. they are open to creating video content on any subject. it seems the engagement rate could have been better, especially after a month 16:24:21 Doesn't have any support, i'd close/postpone it til after carrot is further along 16:24:37 vote on close / merge / postpone 16:24:50 if you wish 16:24:54 close. the quality isn't there 16:25:01 By postpone, i mean close and reopen later (if at all) 16:25:26 with that being said, I'm voting close 16:25:46 plus wouldn't we want to have vosto do it to match the style of the other videos .. 16:26:19 brand recognition is too strong! 16:27:25 so definitely not a merge sentiment here, closing this particular proposal 16:27:50 moving on 16:27:53 b. [CryptoCheckout WordPress plugin (for WooCommerce) & Shopify app](https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/514) 16:28:14 a proposal from Benraouane Soufiane 16:28:26 Thanks! 16:28:35 is it AI? 16:28:45 probabltly 16:28:53 No 16:28:58 no, AI knows how many piconeros are in monero 16:29:34 :D 16:29:41 I voted on the gitlab - close. Requires users to submit txkeys to an explorer. Disregards the fact that funds can be burnt. Doesn't use correct atomic units, had/has a 1%fee. Proposer doesnt seem to know how monero works 16:30:13 at first, it seemed like a novel approach to verifying payments without needing to provide a secret view key. per transaction payment proofs. however, this is not feasible in monero as the proofs does not tell us if the outputs are spent.. or burnt etc 16:30:14 I suggest to create WP plugin for WooCommerce merchants & a Shopify app, for the existing solution 16:30:21 and proposer keeps "resolving all threads" instead of giving proper responses 16:30:30 but now Benraouane says, its not an issue 16:31:17 i checked the xmr integration, bear in mind im not a dev, and i noticed the maths for atomic units was incorrect .. the xmr integration didnt seem well thought out 16:31:31 bare in mind i can't spell 16:31:37 I respond to the @poweeoff concern the 1% which is not applicable 16:31:53 yes, fees. the proposal mentions nothing about fees 16:31:56 actually bear is correct :p 16:32:07 nooooo 16:32:26 i will grin and .. bare it 🤞 16:32:34 haha 16:32:45 do we want to give it another 2 weeks before voting. maybe proposer will put some more thought into it 16:32:54 Proposer claimed that monero-wallet-rpc didnt show balances, and that all projects yae explorers to verify transactions (including moneropay, brxpayserver, bitcart etc) 16:33:37 do we think there is a demand to fund a payment processor that merchants must look in monero gui to verify payments have been made or customers have to enter some txid/key after purchase? 16:34:00 doesn't seem likely 16:34:03 a site that says 2$ / month for unlimited tx's but another page says 10$ a month https://cryptocheckout.co/fees/ 16:34:06 geonic, imho, proposer has been 100% unable/unwilling to take a different approach. Just resolves threads and doubles down on usinf localmonero's block explorer to verify payments 16:34:16 ofrnxmr: no, I said the others requires the mnemonic phrase of the wallet, then sync 16:34:22 Claiming that "its not his problem if funds are burnt" 16:34:32 specifically states no fees per tx but i see a 1% fee hardcoded , but this was from an older version. so the repo is messy and not professional 16:35:11 proposer can take an already built solution, today, with proper monero integration 16:35:32 plowsof: "however, this is not feasible in monero as the proofs does not tell us if the outputs are spent.. or burnt etc " I didn't read all the details of the proposal, but if the outputs are owned by the merchant, isn't it irrelevant if they are spent or not, since the merchant now has control (and can spend it as they wish)? 16:35:33 for example bitcart.ai and start marketing it to merchants via third party SaaS 16:35:53 "no, I said the others requires the mnemonic phrase of the wallet, then sync" << "As I think the monero-wallet-rpc package (I've tried before) does not gives you the real time balance, & does not contain sync function, the sync itself requires a service & a server." 16:36:01 plowsof @plowsof:matrix.org: I said not applicable, it requires the mnemonic phrase of theerchant & deploying the app.js 16:36:33 @plowsof:matrix.org: I said not applicable, it requires the mnemonic phrase of the merchant & deploying the app.js, 16:36:48 Even the code exist in back.php 16:37:05 In response to the funds burning, you said "That problems does not concern us, what we need is to confirm such amount were sent from such address (buyer) to such another address (merchant), locked or not, already spent or not, burnt or not, does not concern us." 16:37:09 Even the code exists in back.php 16:37:26 the merchant provides only an address, no private view key, we can submit a payment proof that is valid (but we didnt pay for the goods) , is my understanding of.... 16:37:57 https://github.com/monero-project/monero/issues/8819 16:38:00 Exaxctly 16:38:05 "but if the outputs are owned by the merchant, isn't it irrelevant if they are spent or not, since the merchant now has control (and can spend it as they wish)?" << ruck, the service uses explorer to prove payments instead of a wallet 16:38:58 bitcart.ai exists, no need for this 16:39:03 No, you should pay, then submit your payment proof 16:39:28 And the spender has to submit tx proofs to localmonero's explorer (previously rino's) 16:40:17 plowsof @plowsof:matrix.org: from what you'll get the payment proof, you don't make a transaction? 16:40:19 moneropay, acceptxmr 16:40:34 btcpayserver 16:41:13 Hotshop, bitrequest 16:41:26 all work listed in "Future" can happen, today 16:41:46 None of these requires submitting your tx keys to an explorer 16:41:51 2.1 Million merchants can all ping localmoneros block explorer with this SaaS 16:42:04 They require mnemonic phrase of the merchant, they are not decentralized 16:42:11 no they dont. 16:42:19 Do they integrate with Shopify and Woocommerce? 16:42:43 https://docs.bitcart.ai/integrations/shopify 16:43:15 i can host this for people using this mode https://docs.bitcart.ai/deployment/thirdpartyhosting 16:43:23 I think btcpayserver does too. But shopify isnt the issue, its "what is actually being integrated" 16:43:42 this is not a monero integration, this is a copy and paste of a generic method used for transparent blockchains 16:43:49 And in this proposal, its not payments being integrated, its block explorer payment proofs 16:43:55 plowsof: Wonderful. 16:44:16 plowsof @plowsof:matrix.org: bitcart not listed on the Shopify app store 16:44:42 solano has different number of atomic units than monero, and the dev of the payment processor does not know this 16:44:52 Maybe you could contribute to bitcart to get it listed there? 16:44:55 It does not follow the standard developer guide of the Shopify, concerning developing payment apps 16:45:15 yes, i would look into why not and contact MrNaif about that 16:45:20 does the proposer have any merged code/prior contributions? 16:45:24 no 16:45:30 I vote no then 16:45:56 ofrnxmr: it requires a mnemonic phrase, I'm already did since 2022 16:46:34 it does not 16:46:53 These all use view-only wallets 16:47:10 🤦‍♂️ 16:47:35 bitcart, btcpayserver, birtequest. None of these use a hot wallet (mnemonic passphrase) 16:47:39 https://github.com/BenraouaneSoufiane/cryptocheckout.co/blob/15942c7a676ce23963d06ec664dc323cf4fde46c/site/back.php#L25 16:47:59 sloppy 16:48:12 ofrnxmr: as per the official docentation, it seems they generate a private key for each merchant 16:48:30 Private key is equivalent to mnemonic phrase 16:48:38 and heres the offending line that says that monero has 9 atomic units .. 16:49:18 i think we can move on, benraouane can clarify criticisms here at a later time if they wish, its a no from me 16:49:27 that's worse than misgendering 16:49:31 what huge difference can three zeros do? /s 16:49:47 if wownero was integrated it wouldnt be as bad 16:50:36 c. [Monerotopia 2024 Marketing and Publicity](https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/515) 16:50:40 brb putting my preferred atomic units in my email signature 16:50:47 lmao 16:51:07 a new comment from jeffro on the 'topia marketing proposal 16:51:10 My only problem with monerotopia is the time 16:52:20 yes the time is an issue. based on positive reception to the proposal we've gone ahead. Vik paid them yesterday and they're pushing ahead. we have digital ads running right now 16:52:40 Vik is absorbing the volatility risk and I guess the risk that people will vote no here 16:52:54 +1 16:53:09 So new proposal is to repay vik for his altruism 16:53:14 btw jeffro is misinterpreting mbull's comment. this was monerobull's concern 2 weeks ago (before we had a proposal) 16:53:36 I pitched it to him as him getting his money back, was not a donation 16:53:39 guess I'm on the hook then 16:54:01 as I remember geonic stated in the comment from the beginning that he would prefinace it, or? 16:54:11 Well i guess we wait for vik to send the invoice after everything is settled? 16:54:14 doug, sunita and I have met twice with the PR company this week. they know what we want to achieve 16:54:49 nice 16:54:56 yea if approved then that would be provided for payout 16:55:07 (if vik is getting change back, paying extra etc) 16:56:18 he wired $6000 yesterday, which was equivalent to 36.42 xmr at the time 16:56:22 i think we can pre-approve it, and wait for invoice to adjust the amount accordingly 16:56:40 can i keep the rest 16:56:46 yes 16:56:48 thanks 16:57:11 deal 16:57:43 there was probably a wire fee, will confirm 16:58:00 pre approved to cover the entire amount - i suspect the full amount would still be needed to cover % markups 16:58:09 Anyway. I vote yes to repay vik his costs, once the confirmed whether the pr company used all/less funds (if there is change etc) 16:58:33 cool 16:58:51 d. Gingeropolous 1TB MRC upgrade 16:58:51 https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/516 16:59:07 FWIW, I think this proposal is fine. Will there be a report after the conference about how many local tickets vs international tickets were sold? IIRC, there is a discount on tickets to locals, so it should be easy to compute that data without any privacy issues. 16:59:49 They only had like 3 vip tickets left a couple days ago 16:59:57 have MRL already shown sentiment for gingers new proposal Rucknium? 17:00:06 ruck: yes. although the PR co was clear with us that they're not expecting a huge rush of locals in such a short time. we're expecting most of the media coverage to come out after the conference. they promised to bring 20 journalists to the opening day of the conf. 17:00:10 Yes let me get the logs 17:00:53 its 20xmr btw 17:00:54 for d. I'd say yes in principle, but i don't know that i like chainanysis node running mrl, and gingers unwillingness to share the ips that he was fwding to 17:01:36 Yes to proposal, no to proposer is my vote 🤷‍♂️ 17:01:38 Discussed at these two MRL meetings: https://github.com/monero-project/meta/issues/1102 https://github.com/monero-project/meta/issues/1098 . Positive sentiment. 17:01:46 thanks 17:02:49 (btw locals don't pay for tickets unless they want to enter the dome, so maybe ticket sales wouldn't be the best metric either) 17:03:33 Ok. If there are media pieces after, I would like to see those. 17:03:39 yes. media coverage would be my metric 17:04:02 where those meetings with sunita open source??? meetings minutes?? 17:04:06 :D 17:04:11 :D 17:04:40 I'm afraid they used a proprietary technology called Zoom 17:05:56 : ' ( 17:06:30 i think we can end it there. is there a monerokon meeting today? thanks all for joining and giving feedback 17:06:44 If the research computing server gets RAM, it would likely save the CCS money in the long term so that the server users do not have to spend time writing more complex code and lengthening the duration of `process --> analyze --> revise --> repeat`. 17:06:48 thanks for joining msvb-lab! 17:06:58 ty 17:07:02 plowsof mononokon meeting already kicked off haha. 17:07:07 5 minutes in. 17:07:11 Greetings 17:08:39 You're welcome, good meeting. 17:08:43 benraouane i will ask mrnaif whats going on with bitcart and shopify store. do you have a link? is it an app store? 17:09:08 Maybe I shouldn't speak in the third person: I am one of the server users that has to spend time writing complex code and handling longer iterations. 17:09:20 Still not built 17:09:30 oh 17:10:09 I propose to built it (& publish it through the app store) 17:10:30 ah yes i understand 17:14:31 @ofrnxmr:monero.social: as per the official documentation, it seems they generate a private key for each merchant 17:26:13 <0​xfffc:monero.social> monero.social account does not show matrix.org accounts messages. 17:27:17 Uhoh 17:27:36 the markets room is _totally_ broken 17:28:00 Monero.social _only_ sees monero.social there 17:28:42 [@0xfffc:monero.social](https://matrix.to/#/@0xfffc:monero.social) i can see [@benraouane:matrix.org](https://matrix.to/#/@benraouane:matrix.org) 's messges 17:29:46 <0​xfffc:monero.social> Are you sure? there is a message from Benraouane Soufiane " as per the official documentation, it seems they generate a private key for each merchant " which I see in IRC, but don't see in Element. 17:29:52 <0​xfffc:monero.social> ofrnxmr 17:51:59 Ouch 17:52:10 The server is breaking down 17:52:29 Let's write a new protocol that is better! 17:52:46 (joking) 17:52:49 Lets call it "irc" 17:52:57 Niocat would be so proud 17:53:00 MHMP 17:53:00 Hahaha 17:53:02 Monero Hidden Messaging Protocol 17:53:15 blockchain messaging!!! 17:53:26 As if it would be secure... 17:53:33 Lol 17:55:08 ofrnxmr yes irc works even here in the emergency room 17:55:32 Not here for me :) 17:57:15 Will catch up later 18:00:06 Why not catch down? 18:28:27 That's because to be listed there you need to be fit under many conditions, maintain a legal entity I believe and many more conditions. My friend told me that it took them a year to get approved into shopify store. The hack we use is the best without having any legal entity and in decentralised nature 19:15:51 Thank you mrnaif 19:18:07 Yes, that's true, I forget, it's not about development issue, 19:20:10 : Even I'll build the app, I'll not submit for listing on the app store 19:20:51 plowsof @plowsof:matrix.org: Even I'll build the app, I'll not submit for listing on the app store 19:35:32 Ben just fork vitcart 19:36:03 Bitcart* it has everything you need :( 19:41:14 How to monetize it you may wonder. Selling it as a SaaS, either giving a merchant (power user) access to an account , or, charging for consulting / setting up the integration and maintaining it .. mr aif are there other ways i can become rich from bitcart? 19:43:29 mrnaif* 19:57:59 selling it as saas is something I've been trying for a while, but I still need to get my legal consultation whether I need any licenses to do so. this is the best way to monetize opensource projects. but yeah, it's complicated with mica and other stuff coming soon 20:02:30 Great to hear your perspective, thank you again. Perhaps Siren/Stnby of moneropay/digilol have sought advice already about this