<ofrnxmr> You know how much each outgoing transfer is for > <@coinwalletapp:matrix.org> Hi! if you really know the code, please post a detailed message on the forum with examples of what actions the wallet can observe and how a developer and/or an attacker might use that.

<ofrnxmr> How? If you charge 10% and receive 0.1xmr in fees, the transfer was obv 1xmr

<ofrnxmr> And (iirc, i dont have time to re-read your code) you pull the fee % from the backend - its not hardcoded

<ofrnxmr> How could it drain user funds? By setting the fee to 100%

hi

<ofrnxmr> @coinwalletapp:matrix.org

i have a question for you coinwallet

why does your wallet security depend on a 4-digit PIN

even if it's hashed, it can easily be bruteforced in 10 seconds with a GPU

also btw, tell me wtf are the encrypted blobs of data wrapped around base64, and why do they get sent when i make a new wallet

i'd reverse engineer your JS to find out more, but i figure you know the answer

so one thing is clear: it stores an encrypted form of the monero wallet (seed?) in the server, even if it's client-side decryptable.. why would you put dependency on a server

second: because you have to check txids manually with your server, this reduces privacy because the server knows which transactions are yours

in practice, this is more janky to use because there is no concept of "scanning for transactions", you have to know all the TXIDs of transactions that came to you, even the ones that you may not be aware of

i get the limitations of having to run this all on a browser, but this is the worst UX for a monero wallet, and i wouldn't recommend any newcomers to use it

selsta part-time monero development (3 months) (18) is now fully funded! ccs.getmonero.org/proposals/selsta-18p.html @luigi1111

<jmrdmatrix:matrix.org> Hello everyone!

meeting today in 5hrs10mins monero-project/meta #1271

[CCS Proposals] plowsoff closed merge request #613: Federation Market Nodes repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/613

<plowsof:matrix.org> meeting time monero-project/meta #1271

<plowsof:matrix.org> greetings

<plowsof:matrix.org> we had the 18 block re-org but then a 10 block re-org , some links here monero-project/monero-site #2535

<plowsof:matrix.org> and TradeOgres seizure rcmp.ca/en/news/2025/09/rcmp-execut…e-56-million-dollars-cryptocurrency

RCMP thinks the operator is from the US and died recently. The servers were in Canada

hi

<plowsof:matrix.org> hello, Datahoarder and ofrnxmr are doing things. should people be running github.com/nahuhh/monero/tree/dns_testpoints-public on testnet?

<ofrnxmr:xmr.mx> Not too many :P theres a bug that needs fixing

<ofrnxmr:xmr.mx> anyone can run it though, but we might break their nodes temporarily while testing selfish mining

is this compatible with the checkpoint system in older versions of monerod?

it is, just adds more records , does 2/3rd+1 consensus and reduces the check interval

previously it did 50%+1

<plowsof:matrix.org> Development of a Book on a Finality Layer

<plowsof:matrix.org> has moved to funding ccs.getmonero.org/funding-required

<plowsof:matrix.org> hbs EVM atomic swaps gui is in line to be moved to funding repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/597

<ofrnxmr:xmr.mx> DataHoarder: Also old versions only chrck hourly, and only check 4 domains

<plowsof:matrix.org> and i closed a proposal which was AI slop to save everyones time. then i had an interesting back and forth with this person repo.getmonero.org/monero-project/c…s-proposals/-/issues/197#note_31943 , thats all my ccs updates for today thank you

wait, wut, that's it?

<plowsof:matrix.org> but how long before someone actually has to do something on the moneropulse DNS'?

can I shill for rick here?

*ruck

<plowsof:matrix.org> highlights of AI slop* we didnt cover the ideas yet, so you still can

That branch already checks moneropulse, and moneropulse (testnet) domains are being updated

<plowsof:matrix.org> 👏

plowsof: is the AI slop proposal in question the uhh "federation market nodes"?

<plowsof:matrix.org> it's alive dig -t txt testpoints.moneropulse.net +dnssec

<plowsof:matrix.org> correct

<plowsof:matrix.org> lets cover the open CCS ideas unless there are other highlights

<plowsof:matrix.org> News: Monero Observer (monero.observer) - Revuo Monero (revuo-xmr.com)

<plowsof:matrix.org> a. MoneroOS Resurrection (repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/596) from 4rkal

<4rkal> I’m here btw

<4rkal> If anyone has any questions

<plowsof:matrix.org> thanks for joining

I came across this, not sure if helpful to your proposal: github.com/MineCoreLive/minecore

<4rkal> @plowsof:matrix.org: This proposal has been open for two months now. Monero is under attack, this could help

<4rkal> I’ve answered all relevant questions. I see no reason as to why it shouldn’t be merged

<plowsof:matrix.org> thanks for sharing pumpxmr

<plowsof:matrix.org> any other questions/comments

<4rkal> pumpxmr: Looks abandoned

<4rkal> Interesting nonetheless

<plowsof:matrix.org> thanks for joining 4rkal, i think we can move on

i actually tried minecore a bit

<jmrdmatrix:matrix.org> Excuse me gentlemen, I just joined this group...may I be reminded of its purpose and how I can contribute?

it's pretty bare-bones

<ofrnxmr:xmr.mx> @jmrdmatrix:matrix.org: Work related things. this is a meetings on CCS proposals and other community updates and ongoinga

<plowsof:matrix.org> this is currently a meeting. people are giving opinions on CCS proposal ideas. the agenda is here monero-project/meta #1271 they occur every other week , Saturday 16:00UTC

<ofrnxmr:xmr.mx> See here^ > <@plowsof:matrix.org> meeting time monero-project/meta #1271

<jmrdmatrix:matrix.org> Wow very impressive I will listen and watch...

<plowsof:matrix.org> Cindy did it work? xmrig downloaded + started?

it mines off of moneroocean

no p2pool

<plowsof:matrix.org> RIP

<plowsof:matrix.org> moving on

<plowsof:matrix.org> b. [hbs] EVM Atomic Swaps (repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/597)

<plowsof:matrix.org> 7 updoots, time to merge

i was gonna work on something similar, like a super light image with nothing but a TUI program that ran xmrig

<hbs:matrix.org> I'm here if there are any more questions, though I think I answered all those that were asked

that would be loaded via network TFTP boot by a master server (which hosts p2pool)

but i do't know about the interest on that

<plowsof:matrix.org> id reach out to actual miners with several machines already - see if they would consider switching to your proposed setup and what they would gain over their current. ive seen several posting on r/moneromining

<plowsof:matrix.org> moving on, thank for joining hbs

<plowsof:matrix.org> d. v1docq47 - monero konferenco 2025 voice-over and working on xmr.ru (repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/607)

<plowsof:matrix.org> open for feedback

<plowsof:matrix.org> c. Monero Python Maintenance (repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/598)

<plowsof:matrix.org> seems that a proof of concept showing the stressnet team who require multiple wallet rpc's to be running at the same time the benefits of this would be beneficial and/or dockerised. not happened yet

<plowsof:matrix.org> Rucknium has even considered monero-oxide (or already using?)

<plowsof:matrix.org> moving on

<plowsof:matrix.org> e. Revuo Monero Maintenance (2025 Q4) (repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/610)

<plowsof:matrix.org> speaking of newsletters, should cyphergoat.com/blog/twim-3 be added to the meeting agendas?

<4rkal> @plowsof:matrix.org: Would be greatly appreciated!

<plowsof:matrix.org> you joined the meeting so its the least we can do

<plowsof:matrix.org> thanks for the newsletter

<plowsof:matrix.org> recanmann is the author? and will continue for the foreseeable future?

<4rkal> Yes

<4rkal> Btw the newsletter is also available via email

<4rkal> If anyone is interested

<plowsof:matrix.org> how does that work? subscribe to the list and receive text only version?

<4rkal> It’s a pretty html version

<plowsof:matrix.org> im blind, its right there "Stay updated - Get new posts via email"

<plowsof:matrix.org> Subscribed successfully.

<plowsof:matrix.org> ok lets move on

<plowsof:matrix.org> f. Boog900 full time work on Cuprate (3 months) (repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/611)

<plowsof:matrix.org> boog will be back on Monday 👍️

<plowsof:matrix.org> with some time left i believe nioc wishes to shill something during any other business

is there any plas to make a lightweight monero library

that doesn't depend on the monolith of the official monero program

i'd like to eventually write one in C, mostly for embedded environments

Rucknium has been doing a tremendous amount of work recently and has this page up rucknium.me/donate

I would be willing to match donations given

<plowsof:matrix.org> generous offer, thank you nioc

i support nioc's shilling

It's time for the sponsored segment

<plowsof:matrix.org> Cindy i do not know, i would ask jeffro256 perhaps... this sounds like something hardware wallets are currently using. what features would you require? decoding outputs / signing transactions?

DH may have a address on the p2pool site :)

<plowsof:matrix.org> DataHoarders website with images blocks.p2pool.observer

Or OpenAlias p2pool.observer

generating wallets would be the core part

<plowsof:matrix.org> i miss the low quality images which gave me quake2 nostalgia but they are high quality now

perhaps decoding outputs and signing would be side-features

yes, DataHoarder really up'd the image qualities

Thanks to Cindy for making the simple p2p SVG logo

It still has none officially but it's a good display

it was inspired by the original very low quality p2pool logo

For any small pool operators that want their logo shown please make one and don't just use Monero logo lol

<plowsof:matrix.org> ohh thanks

<plowsof:matrix.org> i noticed something

No idea where that logo was for either

did you take it from mining pool stats?

<plowsof:matrix.org> what about the likely AI slop generated thing for the nintendo64 Cindy? this is also C github.com/bowler-bear/retro-crypto

Yes, Cindy.

this looks like a mish-mash of stuff taken from other projects

(also the creator shows screenshots of the... linux build instead of the N64 build)

but i'll see if i could salvage parts from it

<plowsof:matrix.org> and anybody who has seen a QR code before knows what monospacing looking like

<plowsof:matrix.org> from this bounty bounties.monero.social/posts/168/4-…th-offline-wallet-address-generator

i actually hope monero doesn't use AES at all

it would be crippling

<plowsof:matrix.org> an open end here, thanks all for attending

I didn't check in detail, is the bounties site view key public? I assume so somewhere

we can get that yes

also i like how the bounty lists "vanity generation" as one of the functions

i uhh.. have doubts that'll be efficient

vannity address options : Would you like an address that begins with 4? or 8?

thanks plowsof