06:00:00 P2Pool-main has been attacked too, today at 00:02:46 UTC - see the log https://p2pool.io/p2pool_main_attack.log.xz All P2Pool miners, you must update to v4.16 immediately if you don't want to mine to the attacker's wallet! Update here: https://github.com/SChernykh/p2pool/releases/latest 06:40:10 How much money lost so far? 06:41:10 the amount is limited unless sustained due to dynamic pplns window 06:41:16 "I did the math, and a single broadcast actually gives 0.96 XMR to the attacker (80% of 2 Monero blocks on average due to how PPLNS window is adjusted)" 06:41:29 on average as usual :) 06:41:34 If the attacker keeps it sustained, it's $1400 USD/day now 06:41:55 61 MH/s of hashrate are mining to the attacker's wallet (80% of the block reward) 06:42:05 dont worry people will wake up when they want to pay their bills end of month 06:42:06 Nothing is lost per se (not from the wallets) 06:42:45 cant you compete with the attacker so he has to split the 1400/2? 06:42:55 (and dilute him further) 06:43:08 We can broadcast our own malformed blocks, yes 06:43:14 But it's a grey area, I think 06:44:00 better than him? payout to monero general fund, donation, nobody knows who did it. affected poolers could claim later 06:44:15 otherwise some teenager keeps mining his next champagne bottle for the club 06:45:14 if the attack is ongoing anyway who cares who steals it 06:46:41 you could brand it as "recovery" 06:47:37 make the attack poc public, everybody can run it. 1000 people will steal 1$ a day. nobody profit 06:48:27 or dont and i run ai towards it in 2 days when i have free time and i will take it away from attacker for myself. 1k$ per day not so interesting for me to prioritize 06:49:26 @longtermwhale:matrix.org: everybody affected of the collective stealing should have just updated their software 06:49:31 it's less than that realistically from found blocks 06:49:46 that said there are some ancient nodes, never updated 06:53:48 Ok, DataHoarder will set up a node and a stratum port, we can point some hashrate there to outmatch the attacker 06:53:59 later today 07:13:36 how much hashrate does the attacker actually need to make this work? 07:25:23 not much 07:25:33 a single share every few hours 07:25:44 so around 50 kh/s for p2pool-main 08:48:37 If anyone wants to participate in the defense, run XMRig and point it to this url: "xmrig -o stratum+tcp://p2pool-defense.p2pool.observer:3330" (for p2pool-main). For p2pool-mini, use port 3331, and for p2pool-nano use port 3332. 08:49:26 We are mining to this address: 42rWdYtoWxwYdDeasYiq1gRF21JKTHom3RsnqYKj1R4c643g4KBJ92qdUT3fhnDEcebcbGfmNpt2r7ufQjHWdwHdLgRxns6 - viewkey is 3500585bb0de52da0f330edb268417cef0fffd90d378bf294cd01f3a0909ccae 08:58:27 I am also archiving the received blocks/sidechains and afterwards attempting even distribution on non-cheated shares across all collected for people mining old versions (discounting any affected) 09:06:46 sech1: cc @lordx3nu:matrix.org if that defense fund isnt exhausted 09:07:30 Or actually, last time we tried to use p2pool it was giving issues due to minimim difficulty or smthn 09:17:20 this is mine 09:17:28 I set difficulty = sidechain difficulty 10:48:17 placed ports 33330-33332 for main/mini/nano with xmrig-proxy in front if you have any issues with the other ports 10:50:40 @ofrnxmr:xmr.mx: It is tapped 17:42:35 plowsof ive updated the CCS proposal with a 1 year support commitment 17:43:28 theres clear support, and ive addressed all concerns. its been 2 months, everything is ready to go, lets get this merged 17:45:30 where can the dev be contacted btw? 17:46:31 why? 17:47:34 they deal directly with the project, same as anonym 17:52:50 its irrelevant, and all this is starting to feel like gatekeeping 17:53:01 nitpicking and gatekeeping yes 17:53:06 ANONERO has consistenly deliveredm period 17:53:20 plowsof: yes, took you 1 sec to respond to that but not any real questions 17:53:50 you're insane to think these tasks require 40 hours a week or command such rates 17:54:13 "command such rate", go look at market rate for kotlin/jetpack compose dev 17:54:23 🥱 17:54:36 and considering a well known comany to monero community quoted 64k for a simple send/receive wallet, i think im perfectly find 17:54:46 luckily you dont speak or decide for monero community 17:55:05 plowsof: People love to try and fleece CCS 17:55:05 Monero.eco wanted $30,000 a year from CCS for work that could be made in a few hours 17:55:12 It’s important to gatekeep funds tbh 17:55:22 how about someone cheaper does it for free and makes PR's adding the features 17:55:35 plowsof: how about all CCSs work like that then 17:55:45 instead of you gatekeeping for petty personal reasons 17:55:55 the proposal has clear support 17:55:58 merge it 17:56:02 the fact that people support this 60 + 10% 40 hous a week is concerning 17:56:12 to implement some wallet api stuff 17:56:16 thats not your call 17:56:20 plowsof: "wallet api" lmao 17:56:36 yes 17:56:48 yeah, show me where decoy, stealth, and duress, and new ui are wallet api 17:56:53 nitpicking as usual 17:57:02 "decoy wallet" -> so innovative 17:57:12 this is none of your business 17:57:13 enter a pin and open another wallet. or delete the current wow so brave 17:57:22 your a janitor, not a judge 17:57:34 everyones supported it 17:57:40 whats next, a calculator app that opens anonero if you enter 42069? 17:57:48 only for you 17:58:02 airgap txs is "only api" 17:58:04 Anonero is kinda useless 17:58:08 lmfao 17:58:11 How is it different from cupcake by cakewallet 17:58:12 thats why people did it before 17:58:20 @moneromavrick:matrix.org: cupcake wouldnt exist without anonero 17:58:33 who mentioned airgap? that was done by another dev, and was innovative at the time 17:58:41 who are you? you have no idea what youre talkinga bout 17:58:56 ofline ts are "just api 17:58:56 as well 17:59:12 the project doesnt use pull requests, nor update its monero deps 17:59:17 anyway, i dont need to justify anything 17:59:29 plowsof: literally the first wallet to be on v0.18.5 17:59:35 gatekeep harder 17:59:36 Not a single tweet on the X account in two years > <@r4v3r23> who are you? you have no idea what youre talkinga bout 17:59:44 @moneromavrick:matrix.org: lmao 17:59:55 that accounts been dead 18:00:07 try looking at a repo sweety 18:00:45 @r4v3r23: Try fleecing more funds sweety 18:00:48 😘😘 18:00:51 what version of open ssl are you shipping? 18:01:02 @moneromavrick:matrix.org: yeah, you literally know nothing 18:01:23 i need to speak to the dev 18:01:29 plowsof: who said anyhting about open ssl? 18:01:33 why dont you go to the fucking repo and check yourself 18:01:36 before talking shit 18:01:37 no you dont 18:02:05 you clearly arent objective and have something against the project 18:02:14 Very professional 18:02:25 i've checked the repo, of course i have, 18:02:26 🥸 18:02:28 tell me about it 18:02:45 community "manager" who gate keeps independent projcets 18:03:11 what do you mean by independant? 18:03:30 sorry to interrupt -- haveno might be getting exploited atm 18:03:35 if you have offers up on haveno, take them down 18:03:43 not corporate 18:03:54 no CEOs or for-profit 18:04:07 literally grassroots depending on community 18:04:12 60$+10% @ 40 hours is non profit yeah 18:04:13 no pay-for-posts 18:04:19 what infra do you pay for? 18:04:40 build server? fdroid? flatpak server? anything 18:04:42 you know it costs money for constant developemnt? 18:04:53 did you have 8 euros spare from the orev ccs? 18:05:08 that previous CCS went over budget, that wallet need money to sruve? 18:05:09 any infra at all? 18:05:18 no donations? 18:05:32 go find the going rate for jetpack/kotlin dev 18:05:45 before you yawn again 18:05:49 if i did, you think id open another one? 18:06:00 some, not enough for full on dev work like this 18:06:05 this is anonero 2.0 18:07:02 plowsof: Ive been in the community for 5 years and never heard of anonero 18:07:02 Dead X page and nobody talks about them on reddit or X where a majority of people are 😭 18:07:09 go check > <@r4v3r23> go find the going rate for jetpack/kotlin dev 18:07:29 @moneromavrick:matrix.org: then you havent been for 5 years 18:07:31 and know nothing about xmr lmao 18:07:41 the "going rate" is when you have to compete in the open job market vs people with talent 18:07:48 your prob paid by cake tbh 18:07:54 @r4v3r23: Ngl you sound like a fucking retard 18:07:58 plowsof: go look up the market rate 18:08:00 ill wait 18:08:41 in the meantime, merge. it has clear support, and you have no right to gatekeep 18:09:40 if no one cares, then no one will fund 18:11:20 @ofrnxmr:xmr.mx got anything to say? i dint know ccs became whatever plowsof feeling were 18:12:24 not atm, aside from theres no rush and if other community members want to push it through, they should join the convo 18:12:40 theyve already expressed support 18:12:53 you said you wanted 1 year support, its there now 18:13:01 (always was, but now in writing) 18:13:03 i only saw a few names that i recognize, and some that ive never seen anywhere 18:13:18 in meetings its also had support 18:13:34 with no clear onjections, expect plowsofs obvious personal bias 18:14:28 yeah, i think the proposal is better after the latest changes, but what plowsof is talking about wrt deps, is that anonero hasnt updates the build deps since pulling in moneujos build script 18:15:07 @ofrnxmr:xmr.mx: nitpicking again. why hasnt he said anything this entire time if its such a big deal 18:15:22 could have easily pinged me here 18:15:46 and does that nullify all the wokr the projects done in 4 years? 18:16:05 if you want someone to not update deps and bump monero - i can do it for free , after i update torrents 18:16:11 he could have easily signed up to repo and wrote an isuse 18:16:31 plowsof: sign up to the repo, youre more than welcome 18:17:12 no, buti think it means that monerujo and anonero are both running code with multiple CVEs 18:17:26 @r4v3r23: response to this 18:18:13 again, that doesnt nulligy all the work and the quality of the project 18:19:52 anyway, one of our whales just got robbed again for the 2nd time in a month 18:20:36 @ofrnxmr:xmr.mx you said youd +1 with 6-12 months support, its there 18:20:46 can i get some sane pushback against plowsofs game 18:22:10 @ofrnxmr:xmr.mx: fuck was 512xmr again? 18:22:23 last time was 4400xmr 18:22:36 from one user 18:22:42 ctrl+o 18:22:50 terrible 18:23:10 :( 18:23:12 Openmonero and haveno been brutally raped this year 18:23:27 i dont (https://monero-orderbooks.com/) 18:23:36 https://monero-orderbooks.com/ 18:23:45 you can see here that the orderbook was indeed wiped 18:23:54 theres are no btc-xmr offers available anymore 18:24:06 No hate towards anyone, but I find it a bit hard to say I support this CCS anymore. OP seems to be having a hard time taking some criticism 18:24:19 does monero-orders have an archive of the order that existed this morning? maybe we can calculate how much was cleared out 18:24:29 bisq looks empty too 👀 18:24:43 @tomdooley:matrix.org: possibly... probably not though 18:24:50 cc @b4n6_b4n6:matrix.org: 18:25:38 @jpk68:matrix.org: im totally open to criticism, and have modified the proposal multiple times to alieve concerns 18:25:56 but plowsof is just moving the goal posts constantly, and not with good intentions 18:26:35 hes been like this towards ANONERO for some reason since the first CCS got approved 18:27:50 I think insulting people is not doing you any favours. Not updating your dependencies is also a huge concern 18:28:07 The most recent release of OpenSSL had like 20+ bugfixes related to memory safety, etc. 18:28:12 @jpk68:matrix.org: who am instulting? have you read the whole convo? 18:29:06 @jpk68:matrix.org: no problem, itll get fixed 18:30:26 also, i dont think that include folder is supposed to be there 18:30:58 http://git.anonero5wmhraxqsvzq2ncgptq6gq45qoto6fnkfwughfl4gbt44swad.onion/ANONERO/ANONERO/src/branch/main/external-libs/include 18:30:58 supposed to be generated by the build iiuc from monerujo's docs 18:31:17 it IS generated by the build 18:31:48 so then it shouldnt be shipped on the repo 18:32:09 anyone building from source would overwrite 18:32:20 but ok that can be ignored by git 18:32:36 again, these minor things dont disqualify the whole project 18:34:09 im not talking abt the ccs rn, just letting you know about a couple things 18:34:27 its been like that for 3.5 years 18:34:39 yeah, never noticed until plowsof commented on it 18:34:51 its really not that big a deal 18:34:57 we can fix these things tomorrow 18:35:20 do you have any objections to current ccs? 19:09:22 Oh my!