00:02:41 thank youuu 02:04:41 hi all 03:29:50 can anyone enlighten me here as to how Monero core developers are preparing to counter the potential attack vectors from 1 million+ multiqubit quantum computers under active development worldwide? 03:30:36 I think the Q day is still far away, because current quantum computer only has 100-200 quantum bits 03:30:55 There will be post-quantum algorithms implemented before that time comes 03:32:02 @entropyhoover:matrix.org: Mostly just media rendering scary story, even if the quantum technology do a exponential explosion, it still take quite time from the current 100 qbit toys to a real 1million machine 03:32:05 @entropyhoover:matrix.org: that's not true many underground military labs already achieved 2000+ fully functional multiqubit quantum boards 03:46:08 @zonash2099:matrix.org: Source? 03:46:08 If that’s true, we’d be on war lololol 03:49:39 @slowbeardigger:matrix.org: That I can't disclose here immediately. I play multirole assignments in the real world. 06:49:22 @zonash2099:matrix.org: asking Claude you mean 06:49:52 @slowbeardigger:matrix.org: asking Claude you mean 06:50:05 ofrnxmr taps the sign 07:51:30 nioc thanks, yep not updating every 2 mins as intended - another change required, my fork had 0conf support months ago, so i forgot updating still doesn't reflect on the front end. replacing the 'is locked' (<10 confs) with 'doesn't have unlock_time' (locked funds until a user set height) opens up 'ignore if confirmations less than 1', will forward 09:10:24 @4rkal:monero.social: do you have contact with @recanman:kernal.eu? his dismissal/replacement from his open CCS proposal will be discussed at the next community meeting https://repo.getmonero.org/monero-project/ccs-proposals/-/issues/241#note_37399 10:17:47 @plowsof:matrix.org: he used to be active in kernal room, but hasnt been seem for months 10:17:53 Seen* 10:21:35 Not sure what happened. Afaict he just disappeared 10:21:50 So hopefully he's "ok" 10:22:41 But wrt monero-integrations, i think serhack is ok with it 10:22:46 hes doing things , as of yesterday, very active even https://github.com/recanman?tab=overview&from=2026-08-01&to=2026-08-31 10:22:59 I guess he is ok :D 10:23:23 or maybe an ai kidnapped him and is using him for fuel 10:25:50 Who owns monero.com/org btw? 10:26:04 Cake seems like 10:26:35 Cake Labs LLC 10:26:38 The org one doesn't load any website 10:27:01 The org one has been squatred for like 10 years 10:27:26 It was for sale for like a million bucks 10:27:36 Rip 10:28:07 Cake could trade monero.com ? I guess this already has been discussed though 10:28:10 Monero.com says roght at the top that it is owned by cake and, and is for their monero.com wallet 10:28:22 @thomasbuilds:matrix.org: Cake paid 400k for it 10:28:29 Damn 10:28:32 Bought it from a squatter 10:28:43 Cake is rich asf then 10:29:37 Community wanted to demand that it be donated to monero, and then demand that cake sells it, both unreasonable (cake was willing to sell it, but we decided to be entitled and attack them) 10:30:02 Outcome of that? 10:30:11 cake kept it 10:30:29 Cake had already built monero.com wallet because we demanded a monero-only version of cake 10:31:05 And then after the website was launched, we attacked them because the website didnt make it clear that ir wasnt an "official" website 10:31:31 So they added info to hero etc showing links to getmonero.org and that monero.com is by cake labs 10:32:08 But then we said we should delist cake from getmonero.org if they dont give us the domain bla bla 10:32:24 OK yes very hacky stuff, I guess it fits the monero mindset though lmao 10:32:39 if i was vik i woulda said fuck yall and sold it on the market for 2 mill to whoevwr wants it 10:33:01 Monero project didnt buy .org or .com, thats not his fault 10:33:40 Who is vik 10:33:53 the ceo/founder/owner of cake 10:34:40 @ofrnxmr: unfortunately, he really likes monero 10:34:44 The fact he spent 400k of his own money and kept it out of the hands of squatters and scammers, is better than what the situation would be if he left it on the market 10:35:26 Like, why are we so caught up over .com? .org is for sale 10:35:56 And .org is the one we would be chasing if this wasnt just some loud whining 10:36:26 Trying to bully vik because that is easier than negotiating with the owner of the other tlds 11:16:52 @ofrnxmr: There are over 50 (exotic) tlds for which the monero domain is available 11:21:54 any idea for new website going live, or waitingbfor CCS too? 11:25:54 No 11:26:37 <321bob321> People need to help review it 11:35:53 code or functuality? 11:37:52 Code 11:38:16 The parts that matter are tested and work today 11:38:34 You can use the beta website to grab new binaries etc. 11:39:03 Torrents still need hosting from core 11:39:26 Wdym? This is a static website right. There's little point reviewing the CSS? > <@ofrnxmr:xmr.mx> Code 11:40:44 with a kabillion dependencies 11:42:34 Its not the static part that needs more eyes, its the dependency graph and deployment. Core isnt going to audit before deployment, but also is likely to be reluctant to host it if it isnt well reviewed. Having conpromised binaries on the website has happened before 11:43:16 also have had bad donation addresses on it 11:43:17 OK will do it 11:44:04 Everything I need is in monero site repo? 11:44:40 Ya 11:44:42 Beta branch 11:44:51 Yup 11:46:17 im not sure if it is possible, but it would be nice to minimalize the number of deps 11:46:46 It is imo 11:47:13 Gut feeling btw 11:47:31 Freezing them is all good, but with how often things are exploited, its not a good idea to run frozen deps if they are vuln. and keeping up with too many is also hard, when people are introducing backdoors every other day 11:47:33 Will check later 11:48:21 Dependabot is set? 11:50:22 No 11:50:33 We dont use it on site. Deps are frozen 11:50:50 Current site doesnt have many 11:54:22 Theres also this https://github.com/monero-project/monero-site/pull/2237 (non-beta) 13:12:23 repo.getmonero.org is down? 13:15:00 just checked, unable to connect 13:16:02 ty 13:23:00 its a test. never give up 13:24:09 you just plowsofted the thing 13:24:10 is working now 13:24:15 magic 13:24:26 @ofrnxmr:xmr.mx: dependabot spots vuln in deps and prompts for update when it is, it's in security & quality github tab 13:25:21 https://mrelay.p2pool.observer/m/matrix.org/CqpBQRaNMgGbWchbThvPUoIV.png (Screenshot from 2026-09-09 15-25-02.png) 13:29:12 why not have this? 13:29:13 I guess we need core to turn on that setting (we dont have access to settings panel) 13:29:42 Only dependabot we use = on docs via workflow 13:30:26 github enables it automatically iirc? https://github.com/monero-project/monero-site/tree/dependabot/bundler/google-protobuf-3.25.5 13:32:40 idk it's pointed at master right now, it would be nice it opens PRs when dep is vulnerable 13:34:47 https://mrelay.p2pool.observer/m/matrix.org/KCjpiycJARnqjrXnZTrMcaTN.png (Screenshot from 2026-09-09 15-34-23.png) 13:35:14 hopefully they are enabled, also when we switch branches I think it needs to be reconfigured for pnpm? 13:37:02 @plowsof:matrix.org: Ive seen random dependabot prs, but always thought it was just a bug 13:47:47 If I remember correctly pnpm isn't supported by dependabot, it can't auto open PRs. I might be wrong though 13:51:57 unist-util-visit and htmlhint seems unused @redsh4de:matrix.org , ima open PR to remove them? 13:52:24 Is it used in the linter? 13:52:41 Idk what those are anyway 13:53:40 nope 13:54:05 unused 13:57:05 @thomasbuilds:matrix.org: The pr will build/deploy automatically 13:57:23 So feel free to open the pr. If it breaks, we'll know 13:57:45 CI used to use htmlhint to verify that the built static output contains no JS, was dropped at some point from the looks of it - we should prob add that back 13:58:13 unist-util-visit can be purged, was one of the packages i was thinking of using for the moneropedia plugin but then did without it 14:30:23 imo there's cleaner way to do that than look for js in PRs 14:30:31 also reviewers should be able to spot it 15:00:00 unfortunately not natively possible but this could work, what you think @redsh4de:matrix.org ? 15:00:01 --- a/astro.config.mjs 15:00:01 +++ b/astro.config.mjs 15:00:01 @@ -6,6 +6,9 @@ import { defineConfig } from "astro/config"; 15:00:01 import { defaultLocale, locales } from "./src/i18n/config";[... more lines follow, see https://mrelay.p2pool.observer/e/7Lq4gakLLU54ZlZS ] 15:02:57 in astro.config.mjs 15:05:45 messed up the code formatting for matrix my bad, now fixed 15:43:16 best for #monero-site 17:21:53 https://github.com/monero-project/monero/pull/11248#discussion_r3961856813 17:21:56 Would anyone be able to confirm this? 17:22:05 cc @jberman:monero.social 17:25:03 @jpk68:matrix.org: https://github.com/monero-oxide/monero-oxide/blob/fcmp%2B%2B/rust-toolchain.toml 17:25:47 Yes, but I meant, is the monero-oxide version the same one used in the main repo? 17:25:57 The code is a bit different, I think 17:27:51 berman doesnt frequent this channel, ask in nowallet, dev, or research channels