00:03:45 You know how much each outgoing transfer is for > <@coinwalletapp:matrix.org> Hi! if you really know the code, please post a detailed message on the forum with examples of what actions the wallet can observe and how a developer and/or an attacker might use that. 00:04:15 How? If you charge 10% and receive 0.1xmr in fees, the transfer was obv 1xmr 00:05:11 And (iirc, i dont have time to re-read your code) you pull the fee % from the backend - its not hardcoded 00:05:41 How could it drain user funds? By setting the fee to 100% 00:15:52 hi 00:16:32 @coinwalletapp:matrix.org 00:16:44 i have a question for you coinwallet 00:17:06 why does your wallet security depend on a 4-digit PIN 00:17:21 even if it's hashed, it can easily be bruteforced in 10 seconds with a GPU 00:28:14 also btw, tell me wtf are the encrypted blobs of data wrapped around base64, and why do they get sent when i make a new wallet 00:28:37 i'd reverse engineer your JS to find out more, but i figure you know the answer 00:45:00 so one thing is clear: it stores an encrypted form of the monero wallet (seed?) in the server, even if it's client-side decryptable.. why would you put dependency on a server 00:45:38 second: because you have to check txids manually with your server, this reduces privacy because the server knows which transactions are yours 00:49:24 in practice, this is more janky to use because there is no concept of "scanning for transactions", you have to know all the TXIDs of transactions that came to you, even the ones that you may not be aware of 00:51:59 i get the limitations of having to run this all on a browser, but this is the worst UX for a monero wallet, and i wouldn't recommend any newcomers to use it 05:20:02 selsta part-time monero development (3 months) (18) is now fully funded! https://ccs.getmonero.org/proposals/selsta-18p.html @luigi1111 07:50:07 Hello everyone! 10:51:13 meeting today in 5hrs10mins https://github.com/monero-project/meta/issues/1271 10:51:57 [CCS Proposals] plowsoff closed merge request #613: Federation Market Nodes https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/613 16:00:57 meeting time https://github.com/monero-project/meta/issues/1271 16:01:00 greetings 16:03:20 we had the 18 block re-org but then a 10 block re-org , some links here https://github.com/monero-project/monero-site/issues/2535 16:05:09 and TradeOgres seizure https://rcmp.ca/en/news/2025/09/rcmp-executes-record-seizure-more-56-million-dollars-cryptocurrency 16:06:49 RCMP thinks the operator is from the US and died recently. The servers were in Canada 16:07:01 * pumpxmr waves 16:07:15 hi 16:09:53 hello, Datahoarder and ofrnxmr are doing things. should people be running https://github.com/nahuhh/monero/tree/dns_testpoints-public on testnet? 16:10:20 Not too many :P theres a bug that needs fixing 16:11:10 anyone can run it though, but we might break their nodes temporarily while testing selfish mining 16:11:43 is this compatible with the checkpoint system in older versions of monerod? 16:12:06 it is, just adds more records , does 2/3rd+1 consensus and reduces the check interval 16:12:30 previously it did 50%+1 16:13:06 Development of a Book on a Finality Layer 16:13:06 has moved to funding https://ccs.getmonero.org/funding-required/ 16:13:11 hbs EVM atomic swaps gui is in line to be moved to funding https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/597 16:13:59 DataHoarder: Also old versions only chrck hourly, and only check 4 domains 16:14:10 and i closed a proposal which was AI slop to save everyones time. then i had an interesting back and forth with this person https://repo.getmonero.org/monero-project/ccs-proposals/-/issues/197#note_31943 , thats all my ccs updates for today thank you 16:15:10 wait, wut, that's it? 16:15:12 but how long before someone actually has to do something on the moneropulse DNS'? 16:15:23 can I shill for rick here? 16:15:28 *ruck 16:15:58 highlights of AI slop* we didnt cover the ideas yet, so you still can 16:16:16 That branch already checks moneropulse, and moneropulse (testnet) domains are being updated 16:16:38 👏 16:17:27 plowsof: is the AI slop proposal in question the uhh "federation market nodes"? 16:17:34 it's alive dig -t txt testpoints.moneropulse.net +dnssec 16:17:46 correct 16:18:23 lets cover the open CCS ideas unless there are other highlights 16:20:22 News: Monero Observer (https://www.monero.observer/) - Revuo Monero (https://revuo-xmr.com/) 16:20:44 a. MoneroOS Resurrection (https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/596) from 4rkal 16:21:03 <4rkal> I’m here btw 16:21:35 <4rkal> If anyone has any questions 16:21:40 thanks for joining 16:22:52 I came across this, not sure if helpful to your proposal: https://github.com/MineCoreLive/minecore 16:23:29 <4rkal> @plowsof:matrix.org: This proposal has been open for two months now. Monero is under attack, this could help 16:23:56 <4rkal> I’ve answered all relevant questions. I see no reason as to why it shouldn’t be merged 16:25:28 thanks for sharing pumpxmr 16:25:41 any other questions/comments 16:26:16 <4rkal> pumpxmr: Looks abandoned 16:27:12 <4rkal> Interesting nonetheless 16:28:20 thanks for joining 4rkal, i think we can move on 16:28:32 i actually tried minecore a bit 16:28:58 Excuse me gentlemen, I just joined this group...may I be reminded of its purpose and how I can contribute? 16:29:10 it's pretty bare-bones 16:29:48 @jmrdmatrix:matrix.org: Work related things. this is a meetings on CCS proposals and other community updates and ongoinga 16:30:08 this is currently a meeting. people are giving opinions on CCS proposal ideas. the agenda is here https://github.com/monero-project/meta/issues/1271 they occur every other week , Saturday 16:00UTC 16:30:20 See here^ > <@plowsof:matrix.org> meeting time https://github.com/monero-project/meta/issues/1271 16:30:47 Wow very impressive I will listen and watch... 16:30:55 Cindy did it work? xmrig downloaded + started? 16:31:08 it mines off of moneroocean 16:31:18 no p2pool 16:31:22 RIP 16:32:40 moving on 16:32:42 b. [hbs] EVM Atomic Swaps (https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/597) 16:32:47 7 updoots, time to merge 16:33:21 i was gonna work on something similar, like a super light image with nothing but a TUI program that ran xmrig 16:33:27 I'm here if there are any more questions, though I think I answered all those that were asked 16:33:38 that would be loaded via network TFTP boot by a master server (which hosts p2pool) 16:33:44 but i do't know about the interest on that 16:38:55 id reach out to actual miners with several machines already - see if they would consider switching to your proposed setup and what they would gain over their current. ive seen several posting on r/moneromining 16:39:46 moving on, thank for joining hbs 16:39:51 d. v1docq47 - monero konferenco 2025 voice-over and working on xmr.ru (https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/607) 16:39:57 open for feedback 16:42:22 c. Monero Python Maintenance (https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/598) 16:44:04 seems that a proof of concept showing the stressnet team who require multiple wallet rpc's to be running at the same time the benefits of this would be beneficial and/or dockerised. not happened yet 16:44:43 Rucknium has even considered monero-oxide (or already using?) 16:48:22 moving on 16:48:22 e. Revuo Monero Maintenance (2025 Q4) (https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/610) 16:50:26 speaking of newsletters, should https://cyphergoat.com/blog/twim-3 be added to the meeting agendas? 16:51:20 <4rkal> @plowsof:matrix.org: Would be greatly appreciated! 16:51:43 you joined the meeting so its the least we can do 16:51:59 thanks for the newsletter 16:52:27 recanmann is the author? and will continue for the foreseeable future? 16:52:36 <4rkal> Yes 16:52:40 <4rkal> Btw the newsletter is also available via email 16:52:49 <4rkal> If anyone is interested 16:53:18 how does that work? subscribe to the list and receive text only version? 16:54:06 <4rkal> It’s a pretty html version 16:54:17 im blind, its right there "Stay updated - Get new posts via email" 16:54:45 Subscribed successfully. 16:54:47 ok lets move on 16:55:07 f. Boog900 full time work on Cuprate (3 months) (https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/611) 16:55:38 boog will be back on Monday 👍️ 16:56:51 with some time left i believe nioc wishes to shill something during any other business 16:57:05 is there any plas to make a lightweight monero library 16:57:12 that doesn't depend on the monolith of the official monero program 16:57:31 i'd like to eventually write one in C, mostly for embedded environments 16:58:00 Rucknium has been doing a tremendous amount of work recently and has this page up https://rucknium.me/donate/ 16:58:21 I would be willing to match donations given 16:58:51 generous offer, thank you nioc 16:58:57 i support nioc's shilling 16:59:07 It's time for the sponsored segment 16:59:42 Cindy i do not know, i would ask jeffro256 perhaps... this sounds like something hardware wallets are currently using. what features would you require? decoding outputs / signing transactions? 17:00:03 DH may have a address on the p2pool site :) 17:00:15 DataHoarders website with images https://blocks.p2pool.observer/ 17:00:15 Or OpenAlias p2pool.observer 17:00:27 generating wallets would be the core part 17:00:31 i miss the low quality images which gave me quake2 nostalgia but they are high quality now 17:00:43 perhaps decoding outputs and signing would be side-features 17:01:05 yes, DataHoarder really up'd the image qualities 17:01:26 Thanks to Cindy for making the simple p2p SVG logo 17:01:40 It still has none officially but it's a good display 17:01:58 it was inspired by the original very low quality p2pool logo 17:01:59 For any small pool operators that want their logo shown please make one and don't just use Monero logo lol 17:02:06 ohh thanks 17:02:15 i noticed something 17:02:24 No idea where that logo was for either 17:03:40 did you take it from mining pool stats? 17:04:00 what about the likely AI slop generated thing for the nintendo64 Cindy? this is also C https://github.com/bowler-bear/retro-crypto 17:06:22 Yes, Cindy. 17:07:06 this looks like a mish-mash of stuff taken from other projects 17:08:10 (also the creator shows screenshots of the... linux build instead of the N64 build) 17:08:34 but i'll see if i could salvage parts from it 17:08:37 and anybody who has seen a QR code before knows what monospacing looking like 17:08:58 from this bounty https://bounties.monero.social/posts/168/4-022m-gamepad-controlled-cryptographic-multitool-with-offline-wallet-address-generator 17:09:07 i actually hope monero doesn't use AES at all 17:09:10 it would be crippling 17:11:36 an open end here, thanks all for attending 17:13:48 I didn't check in detail, is the bounties site view key public? I assume so somewhere 17:15:28 we can get that yes 17:17:33 also i like how the bounty lists "vanity generation" as one of the functions 17:17:51 i uhh.. have doubts that'll be efficient 17:19:19 vannity address options : Would you like an address that begins with 4? or 8? 17:23:57 thanks plowsof