01:00:03 anon: full-time on daemon and fcmp is now fully funded! https://ccs.getmonero.org/proposals/anon-10302025.html @luigi1111 01:37:14 [CCS Proposals] plowsoff opened merge request #631: anon/jeffro to wip https://repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/631 17:11:59 I just shared a detailed technical analysis of the current version (v5). If you disagree, please point to specific lines of code that you consider unsafe. > easymonerod is unsafe AI slop 17:11:59 "AI slop" is not a technical argument. The code works, the security practices are correct (SSH hardening, optional RPC password, backups before modifications), and the script is clearly intended for beginners with a dedicated PC. 17:11:59 If you have specific concerns about the current version, I'm happy to discuss them. 17:37:52 I honestly don't feel like reviewing ai...slop, but as a start, you're wrong about rpc-bind-ip=0.0.0.0. The config you ship is an obvious dangerous point. I can literally, remotely, delete users of easymonerod's blockchains 17:39:04 As much as might usually like to help, i'm on, and have been on strike when it comes to vibe coded projects, especially with obvious and glaring mistakes 17:42:00 If the basics aren't done right, i feel its not my job to clean up every little (and dangerous, iirc there were many, and probably still is) mistake in a 1700 line 100% claude production 17:43:08 Like... why touching things that you dont understand, and then shipping it to "noobs" who are literally going to get rekt by running this 17:56:25 slop at best harmful at worst, and this errs towards the second 17:56:54 something made without deep knowledge by hallucination, aimed towards users that also don't understand it 17:59:27 use stuff to review, but not to build safety/privacy critical services. 18:29:02 Rule #1, if no human spent time writing it, I'm not spending time reading it 18:50:24 You're right about rpc-bind-ip=0.0.0.0 without restriction. This has been fixed — restricted-rpc=1 is now added to the configuration. The RPC is now limited to read-only operations. 18:50:24 Thanks for pointing this out. 18:50:24 That said, in my country, 95% of people are computer illiterate. Your tools are too complicated for them. It's better to have an easy-to-use software that still needs improvement than a professional tool that nobody knows how to use. 18:50:24 At least this gets more people running nodes. Perfect is the enemy of good. 18:54:12 Rekt at v5 still? 😆 18:54:42 Is everything you are typing here ctrl+v'd from chatgpt? 18:55:33 Nobody who can string 2 sentences together would produce that piece of garbage surely 19:00:22 > That said, in my country, 95% of people are computer illiterate. Your tools are too complicated for them. 19:00:43 and so they will too complicated when thy get rekt by ai hallucinations that damages them permanently 19:01:30 More nodes in a way that has them damage the network or end up exploitable is not better. And there are already non-AI options 19:04:14 @xlowt:matrix.org: ./monerod isnt complicated 19:05:22 The option is not AI or none at all. You may even get resources provided if you have a plan to implement something properly 19:06:15 The issue at hand here is just throwing AI at it and expecting something out of it (you are making more from less, not less from more, as a general rule, you want stuff like this to distill, or not generate novel things) 19:07:29 It seems not even you understands this thing, so it's not about end users, it's approaching them with complete ignorance and just acting as a glorified messenger between whatever AI and this irc 19:08:01 To the point where you can't review what the AI has generated, and it's not even code, just cmdline arguments 19:09:31 https://github.com/kerlannXmr/EasyMonerod/issues/6 -> installs vim for the noobs? 😆 19:12:41 <321bob321> How do you know the code is correct if you rely on ai ? 19:20:35 You dont 19:20:52 You just release it and claim that it's correct and safe 19:21:08 donation address, send it 19:21:32 now we can make the "free qr code generator v5" 19:22:00 <321bob321> Is the donate address real ? 19:22:24 which one 19:22:42 Theres a kuno as well, so that one must be real