anon: full-time on daemon and fcmp is now fully funded! ccs.getmonero.org/proposals/anon-10302025.html @luigi1111

[CCS Proposals] plowsoff opened merge request #631: anon/jeffro to wip repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/631

<xlowt:matrix.org> I just shared a detailed technical analysis of the current version (v5). If you disagree, please point to specific lines of code that you consider unsafe. > <plowsof> easymonerod is unsafe AI slop

<xlowt:matrix.org> "AI slop" is not a technical argument. The code works, the security practices are correct (SSH hardening, optional RPC password, backups before modifications), and the script is clearly intended for beginners with a dedicated PC.

<xlowt:matrix.org> If you have specific concerns about the current version, I'm happy to discuss them.

<ofrnxmr:xmr.mx> I honestly don't feel like reviewing ai...slop, but as a start, you're wrong about rpc-bind-ip=0.0.0.0. The config you ship is an obvious dangerous point. I can literally, remotely, delete users of easymonerod's blockchains

<ofrnxmr:xmr.mx> As much as might usually like to help, i'm on, and have been on strike when it comes to vibe coded projects, especially with obvious and glaring mistakes

<ofrnxmr:xmr.mx> If the basics aren't done right, i feel its not my job to clean up every little (and dangerous, iirc there were many, and probably still is) mistake in a 1700 line 100% claude production

<ofrnxmr:xmr.mx> Like... why touching things that you dont understand, and then shipping it to "noobs" who are literally going to get rekt by running this

slop at best harmful at worst, and this errs towards the second

something made without deep knowledge by hallucination, aimed towards users that also don't understand it

use stuff to review, but not to build safety/privacy critical services.

<hbs:matrix.org> Rule #1, if no human spent time writing it, I'm not spending time reading it

<xlowt:matrix.org> You're right about rpc-bind-ip=0.0.0.0 without restriction. This has been fixed — restricted-rpc=1 is now added to the configuration. The RPC is now limited to read-only operations.

<xlowt:matrix.org> Thanks for pointing this out.

<xlowt:matrix.org> That said, in my country, 95% of people are computer illiterate. Your tools are too complicated for them. It's better to have an easy-to-use software that still needs improvement than a professional tool that nobody knows how to use.

<xlowt:matrix.org> At least this gets more people running nodes. Perfect is the enemy of good.

Rekt at v5 still? 😆

Is everything you are typing here ctrl+v'd from chatgpt?

Nobody who can string 2 sentences together would produce that piece of garbage surely

> That said, in my country, 95% of people are computer illiterate. Your tools are too complicated for them.

and so they will too complicated when thy get rekt by ai hallucinations that damages them permanently

More nodes in a way that has them damage the network or end up exploitable is not better. And there are already non-AI options

<ofrnxmr:xmr.mx> @xlowt:matrix.org: ./monerod isnt complicated

The option is not AI or none at all. You may even get resources provided if you have a plan to implement something properly

The issue at hand here is just throwing AI at it and expecting something out of it (you are making more from less, not less from more, as a general rule, you want stuff like this to distill, or not generate novel things)

It seems not even you understands this thing, so it's not about end users, it's approaching them with complete ignorance and just acting as a glorified messenger between whatever AI and this irc

To the point where you can't review what the AI has generated, and it's not even code, just cmdline arguments

<plowsof:matrix.org> kerlannXmr/EasyMonerod #6 -> installs vim for the noobs? 😆

<321bob321> How do you know the code is correct if you rely on ai ?

<ofrnxmr:xmr.mx> You dont

<ofrnxmr:xmr.mx> You just release it and claim that it's correct and safe

<plowsof:matrix.org> donation address, send it

<plowsof:matrix.org> now we can make the "free qr code generator v5"

<321bob321> Is the donate address real ?

<ofrnxmr:xmr.mx> which one

<ofrnxmr:xmr.mx> Theres a kuno as well, so that one must be real