P2Pool-main has been attacked too, today at 00:02:46 UTC - see the log p2pool.io/p2pool_main_attack.log.xz All P2Pool miners, you must update to v4.16 immediately if you don't want to mine to the attacker's wallet! Update here: github.com/SChernykh/p2pool/releases/latest

<longtermwhale:matrix.org> How much money lost so far?

the amount is limited unless sustained due to dynamic pplns window

"I did the math, and a single broadcast actually gives 0.96 XMR to the attacker (80% of 2 Monero blocks on average due to how PPLNS window is adjusted)"

on average as usual :)

If the attacker keeps it sustained, it's $1400 USD/day now

61 MH/s of hashrate are mining to the attacker's wallet (80% of the block reward)

<longtermwhale:matrix.org> dont worry people will wake up when they want to pay their bills end of month

Nothing is lost per se (not from the wallets)

<longtermwhale:matrix.org> cant you compete with the attacker so he has to split the 1400/2?

<longtermwhale:matrix.org> (and dilute him further)

We can broadcast our own malformed blocks, yes

But it's a grey area, I think

<longtermwhale:matrix.org> better than him? payout to monero general fund, donation, nobody knows who did it. affected poolers could claim later

<longtermwhale:matrix.org> otherwise some teenager keeps mining his next champagne bottle for the club

<longtermwhale:matrix.org> if the attack is ongoing anyway who cares who steals it

<longtermwhale:matrix.org> you could brand it as "recovery"

<longtermwhale:matrix.org> make the attack poc public, everybody can run it. 1000 people will steal 1$ a day. nobody profit

<longtermwhale:matrix.org> or dont and i run ai towards it in 2 days when i have free time and i will take it away from attacker for myself. 1k$ per day not so interesting for me to prioritize

<longtermwhale:matrix.org> @longtermwhale:matrix.org: everybody affected of the collective stealing should have just updated their software

it's less than that realistically from found blocks

that said there are some ancient nodes, never updated

Ok, DataHoarder will set up a node and a stratum port, we can point some hashrate there to outmatch the attacker

later today

<tomdooley:matrix.org> how much hashrate does the attacker actually need to make this work?

not much

a single share every few hours

so around 50 kh/s for p2pool-main

If anyone wants to participate in the defense, run XMRig and point it to this url: "xmrig -o stratum+tcp://p2pool-defense.p2pool.observer:3330" (for p2pool-main). For p2pool-mini, use port 3331, and for p2pool-nano use port 3332.

We are mining to this address: 42rWdYtoWxwYdDeasYiq1gRF21JKTHom3RsnqYKj1R4c643g4KBJ92qdUT3fhnDEcebcbGfmNpt2r7ufQjHWdwHdLgRxns6 - viewkey is 3500585bb0de52da0f330edb268417cef0fffd90d378bf294cd01f3a0909ccae

I am also archiving the received blocks/sidechains and afterwards attempting even distribution on non-cheated shares across all collected for people mining old versions (discounting any affected)

<ofrnxmr:xmr.mx> sech1: cc @lordx3nu:matrix.org if that defense fund isnt exhausted

<ofrnxmr:xmr.mx> Or actually, last time we tried to use p2pool it was giving issues due to minimim difficulty or smthn

this is mine

I set difficulty = sidechain difficulty

placed ports 33330-33332 for main/mini/nano with xmrig-proxy in front if you have any issues with the other ports

<lordx3nu:matrix.org> @ofrnxmr:xmr.mx: It is tapped

<r4v3r23> plowsof ive updated the CCS proposal with a 1 year support commitment

<r4v3r23> theres clear support, and ive addressed all concerns. its been 2 months, everything is ready to go, lets get this merged

where can the dev be contacted btw?

<r4v3r23> why?

<r4v3r23> they deal directly with the project, same as anonym

<r4v3r23> its irrelevant, and all this is starting to feel like gatekeeping

nitpicking and gatekeeping yes

<r4v3r23> ANONERO has consistenly deliveredm period

<r4v3r23> plowsof: yes, took you 1 sec to respond to that but not any real questions

you're insane to think these tasks require 40 hours a week or command such rates

<r4v3r23> "command such rate", go look at market rate for kotlin/jetpack compose dev

🥱

<r4v3r23> and considering a well known comany to monero community quoted 64k for a simple send/receive wallet, i think im perfectly find

<r4v3r23> luckily you dont speak or decide for monero community

<moneromavrick:matrix.org> plowsof: People love to try and fleece CCS

<moneromavrick:matrix.org> Monero.eco wanted $30,000 a year from CCS for work that could be made in a few hours

<moneromavrick:matrix.org> It’s important to gatekeep funds tbh

how about someone cheaper does it for free and makes PR's adding the features

<r4v3r23> plowsof: how about all CCSs work like that then

<r4v3r23> instead of you gatekeeping for petty personal reasons

<r4v3r23> the proposal has clear support

<r4v3r23> merge it

the fact that people support this 60 + 10% 40 hous a week is concerning

to implement some wallet api stuff

<r4v3r23> thats not your call

<r4v3r23> plowsof: "wallet api" lmao

yes

<r4v3r23> yeah, show me where decoy, stealth, and duress, and new ui are wallet api

<r4v3r23> nitpicking as usual

"decoy wallet" -> so innovative

<r4v3r23> this is none of your business

enter a pin and open another wallet. or delete the current wow so brave

<r4v3r23> your a janitor, not a judge

<r4v3r23> everyones supported it

whats next, a calculator app that opens anonero if you enter 42069?

<r4v3r23> only for you

<r4v3r23> airgap txs is "only api"

<moneromavrick:matrix.org> Anonero is kinda useless

<r4v3r23> lmfao

<moneromavrick:matrix.org> How is it different from cupcake by cakewallet

<r4v3r23> thats why people did it before

<r4v3r23> @moneromavrick:matrix.org: cupcake wouldnt exist without anonero

who mentioned airgap? that was done by another dev, and was innovative at the time

<r4v3r23> who are you? you have no idea what youre talkinga bout

<r4v3r23> ofline ts are "just api

<r4v3r23> as well

the project doesnt use pull requests, nor update its monero deps

<r4v3r23> anyway, i dont need to justify anything

<r4v3r23> plowsof: literally the first wallet to be on v0.18.5

<r4v3r23> gatekeep harder

<moneromavrick:matrix.org> Not a single tweet on the X account in two years > <@r4v3r23> who are you? you have no idea what youre talkinga bout

<r4v3r23> @moneromavrick:matrix.org: lmao

<r4v3r23> that accounts been dead

<r4v3r23> try looking at a repo sweety

<moneromavrick:matrix.org> @r4v3r23: Try fleecing more funds sweety

<moneromavrick:matrix.org> 😘😘

what version of open ssl are you shipping?

<r4v3r23> @moneromavrick:matrix.org: yeah, you literally know nothing

i need to speak to the dev

<r4v3r23> plowsof: who said anyhting about open ssl?

<r4v3r23> why dont you go to the fucking repo and check yourself

<r4v3r23> before talking shit

<r4v3r23> no you dont

<r4v3r23> you clearly arent objective and have something against the project

<moneromavrick:matrix.org> Very professional

i've checked the repo, of course i have,

<moneromavrick:matrix.org> 🥸

<r4v3r23> tell me about it

<r4v3r23> community "manager" who gate keeps independent projcets

what do you mean by independant?

<ofrnxmr:xmr.mx> sorry to interrupt -- haveno might be getting exploited atm

<ofrnxmr:xmr.mx> if you have offers up on haveno, take them down

<r4v3r23> not corporate

<r4v3r23> no CEOs or for-profit

<r4v3r23> literally grassroots depending on community

60$+10% @ 40 hours is non profit yeah

<r4v3r23> no pay-for-posts

what infra do you pay for?

build server? fdroid? flatpak server? anything

<r4v3r23> you know it costs money for constant developemnt?

did you have 8 euros spare from the orev ccs?

<r4v3r23> that previous CCS went over budget, that wallet need money to sruve?

any infra at all?

no donations?

<r4v3r23> go find the going rate for jetpack/kotlin dev

<r4v3r23> before you yawn again

<r4v3r23> if i did, you think id open another one?

<r4v3r23> some, not enough for full on dev work like this

<r4v3r23> this is anonero 2.0

<moneromavrick:matrix.org> plowsof: Ive been in the community for 5 years and never heard of anonero

<moneromavrick:matrix.org> Dead X page and nobody talks about them on reddit or X where a majority of people are 😭

<r4v3r23> go check > <@r4v3r23> go find the going rate for jetpack/kotlin dev

<r4v3r23> @moneromavrick:matrix.org: then you havent been for 5 years

<r4v3r23> and know nothing about xmr lmao

the "going rate" is when you have to compete in the open job market vs people with talent

<r4v3r23> your prob paid by cake tbh

<moneromavrick:matrix.org> @r4v3r23: Ngl you sound like a fucking retard

<r4v3r23> plowsof: go look up the market rate

<r4v3r23> ill wait

<r4v3r23> in the meantime, merge. it has clear support, and you have no right to gatekeep

<r4v3r23> if no one cares, then no one will fund

<r4v3r23> @ofrnxmr:xmr.mx got anything to say? i dint know ccs became whatever plowsof feeling were

<ofrnxmr:xmr.mx> not atm, aside from theres no rush and if other community members want to push it through, they should join the convo

<r4v3r23> theyve already expressed support

<r4v3r23> you said you wanted 1 year support, its there now

<r4v3r23> (always was, but now in writing)

<ofrnxmr:xmr.mx> i only saw a few names that i recognize, and some that ive never seen anywhere

<r4v3r23> in meetings its also had support

<r4v3r23> with no clear onjections, expect plowsofs obvious personal bias

<ofrnxmr:xmr.mx> yeah, i think the proposal is better after the latest changes, but what plowsof is talking about wrt deps, is that anonero hasnt updates the build deps since pulling in moneujos build script

<r4v3r23> @ofrnxmr:xmr.mx: nitpicking again. why hasnt he said anything this entire time if its such a big deal

<r4v3r23> could have easily pinged me here

<r4v3r23> and does that nullify all the wokr the projects done in 4 years?

if you want someone to not update deps and bump monero - i can do it for free , after i update torrents

<r4v3r23> he could have easily signed up to repo and wrote an isuse

<r4v3r23> plowsof: sign up to the repo, youre more than welcome

<ofrnxmr:xmr.mx> no, buti think it means that monerujo and anonero are both running code with multiple CVEs

<ofrnxmr:xmr.mx> @r4v3r23: response to this

<r4v3r23> again, that doesnt nulligy all the work and the quality of the project

<ofrnxmr:xmr.mx> anyway, one of our whales just got robbed again for the 2nd time in a month

<r4v3r23> @ofrnxmr:xmr.mx you said youd +1 with 6-12 months support, its there

<r4v3r23> can i get some sane pushback against plowsofs game

<tomdooley:matrix.org> @ofrnxmr:xmr.mx: fuck was 512xmr again?

<ofrnxmr:xmr.mx> last time was 4400xmr

<ofrnxmr:xmr.mx> from one user

ctrl+o

<tomdooley:matrix.org> terrible

<redsh4de:matrix.org> :(

<moneromavrick:matrix.org> Openmonero and haveno been brutally raped this year

<ofrnxmr:xmr.mx> i dont (monero-orderbooks.com)

<ofrnxmr:xmr.mx> monero-orderbooks.com

<ofrnxmr:xmr.mx> you can see here that the orderbook was indeed wiped

<ofrnxmr:xmr.mx> theres are no btc-xmr offers available anymore

<jpk68:matrix.org> No hate towards anyone, but I find it a bit hard to say I support this CCS anymore. OP seems to be having a hard time taking some criticism

<tomdooley:matrix.org> does monero-orders have an archive of the order that existed this morning? maybe we can calculate how much was cleared out

<ofrnxmr:xmr.mx> bisq looks empty too 👀

<ofrnxmr:xmr.mx> @tomdooley:matrix.org: possibly... probably not though

<ofrnxmr:xmr.mx> cc @b4n6_b4n6:matrix.org:

<r4v3r23> @jpk68:matrix.org: im totally open to criticism, and have modified the proposal multiple times to alieve concerns

<r4v3r23> but plowsof is just moving the goal posts constantly, and not with good intentions

<r4v3r23> hes been like this towards ANONERO for some reason since the first CCS got approved

<jpk68:matrix.org> I think insulting people is not doing you any favours. Not updating your dependencies is also a huge concern

<jpk68:matrix.org> The most recent release of OpenSSL had like 20+ bugfixes related to memory safety, etc.

<r4v3r23> @jpk68:matrix.org: who am instulting? have you read the whole convo?

<r4v3r23> @jpk68:matrix.org: no problem, itll get fixed

<ofrnxmr:xmr.mx> also, i dont think that include folder is supposed to be there

<ofrnxmr:xmr.mx> git.anonero5wmhraxqsvzq2ncgptq6gq45…c/branch/main/external-libs/include

<ofrnxmr:xmr.mx> supposed to be generated by the build iiuc from monerujo's docs

<r4v3r23> it IS generated by the build

<ofrnxmr:xmr.mx> so then it shouldnt be shipped on the repo

<r4v3r23> anyone building from source would overwrite

<r4v3r23> but ok that can be ignored by git

<r4v3r23> again, these minor things dont disqualify the whole project

<ofrnxmr:xmr.mx> im not talking abt the ccs rn, just letting you know about a couple things

<r4v3r23> its been like that for 3.5 years

<ofrnxmr:xmr.mx> yeah, never noticed until plowsof commented on it

<r4v3r23> its really not that big a deal

<r4v3r23> we can fix these things tomorrow

<r4v3r23> do you have any objections to current ccs?

<m2049r:matrix.org> Oh my!