-
MohammedMujahid[
Please help me. I have withdrawn XMR From binance to my gui wallet but still it has not come please help
-
-
dEBRUYNE
-
rbrunner
Interesting view on testnet: Somebody tries out big transactions :)
testnet.xmrchain.com
-
sethsimmons
<rbrunner> "Interesting view on testnet..." <- 3TX per block ๐
-
sech1
They could've made bigger transaction with this simple wallet2.cpp change...
-
rbrunner
Stress tests always welcome, I guess
-
nikg83[m]
Can they do the same on mainnet?
-
sethsimmons
Similar tactic was used on mainnet not too long ago, could be prep for another "attack" or just someone playing around.
-
rbrunner
Yesterday was difficulty adjustement day, because mining went from about 8 kH/s to about 2 kH/s, and difficulty still has not yet fully adjusted
-
Rucknium[m]
In all honesty, we may want to examine maximum tx size. Having only 3 tx in a block may be a problem for decoy selection, not to mention verification times
-
rbrunner
Lol. Professional hazard: Immediately seeing statistical problems everywhere :)
-
rbrunner
(Just joking)
-
Rucknium[m]
That's...why I'm here ;)
-
sethsimmons
Rucknium[m]: This isn't the max, it would adjust over time.
-
MohammedMujahid[
-
sethsimmons
Oh, you mean limiting TX size further
-
merope
Is there any relistic scenario in which a user might need a tx with 194 inputs?
-
Rucknium[m]
sethsimmons: Right. Maybe we should consider its implications.
-
sethsimmons
merope: Yes, sweeping p2pool payouts.
-
sethsimmons
Can speak from experience ๐
-
merope
Hmmm, didn't think of that
-
Rucknium[m]
But frankly they could do that with a series of smaller txs.
-
sethsimmons
Obviously that could be broken up into more transactions, but that's not uncommon for those mining p2pool with smaller hashrates.
-
sethsimmons
I already had to split out into multiple transactions...
-
merope
Those are coinbase transactions though, so they could be treated as an exception? (Assuming they're not already)
-
sethsimmons
merope: Hmm, that would be an interesting exception.
-
merope
Do we already have some statistics on tx count vs input number? Perhaps we could introduce a 50-100 input limit per transaction
-
Rucknium[m]
On Townforge, there is still a limit to the number of coinbase outputs that can be consolidated. It might not be a number limit; maybe a total tx size limit.
-
sech1
"Yesterday was difficulty adjustement day, because mining went from about 8 kH/s to about 2 kH/s" that's the answer. Someone was mining on testnet for a long time and is now consolidating
-
Rucknium[m]
merope: neptune could help with that.
-
merope
That way if a pool or an exchange need to consolidate lots of input they still can, while leaving some room in the block for more transactions
-
Rucknium[m]
I mean I could help with that too. What stats do you want, exactly?
-
merope
I think a simple histogram of the number of inputs per transaction would suffice (not sure what to choose as a starting point for the window)
-
Rucknium[m]
It's discrete, so we can just have a table.
-
Rucknium[m]
What time period? Between which block heights would you want?
-
merope
Sorry, my stats language is a bit poor xD
-
merope
Perhaps since block 2210000? The advent of CLSAG
-
Rucknium[m]
Ok. Coming right up...
-
merope
Or maybe 2210720, to exclude the last mlsag stragglers
-
Rucknium[m]
neptune 's database stops in Sept I think, since it was last built to examine the summer tx volume anomaly.
-
merope
That would mean ~11 months worth of transactions - should be rappresentative enough, right?
-
Rucknium[m]
There are 5 txs with 1245 inputs. More stats incoming...
-
merope
woah, that's massive
-
Rucknium[m]
That seems like it may be the max. Here's what the bottom of the table looks like
-
Rucknium[m]
973 1
-
Rucknium[m]
1047 1
-
Rucknium[m]
1243 1
-
Rucknium[m]
1245 5
-
Rucknium[m]
I can try to track down the hash of one of those txs....
-
Rucknium[m]
Check out block 2006386. There's two 1245in txs, plus coinbase, and that's it. Actually that was before your time window. One sec..
-
Rucknium[m]
ec646bdcfa905358209abd486de4fbabfe50cb1e83f8375058a3f7a69650a1f5
-
Rucknium[m]
^ Not RingCT, though
-
merope
Yeah, neither are the two from block 2006386
-
Rucknium[m]
29eb6e840f9b41a0f659b43b0dcad36f368d2b021109f3e31e15d33f8aceae47
-
Rucknium[m]
^ Another non-RingCT ๐ค
-
Rucknium[m]
I checked all 5 of those 1245in txs, and none of them are RingCT
-
Rucknium[m]
The 5 that are in the >= 2210720 block height time window, that is
-
merope
Aside from these few massive ones, what's the distribution like for the others? For instance, how many transactions have more than 100 inputs relative to the total?
-
Rucknium[m]
Should I exclude RingCT txs to answer your question?
-
Rucknium[m]
I mean NON-RingCT txs
-
merope
Hmmm... I say let's include them: there might still be some old pre-ringct outputs that might need conversion, so we could still see some massive txes like that in the future. If there's a significant portion of transactions like that, it might justify a higher input limit
-
Rucknium[m]
This analysis is being conducted on gingeropolous 's server, by the way. Thanks, gingeropolous !
-
neptune
Rucknium[m]: try table "tx_attribute_2489999", each row is a transaction, there is a column "tx_n_inputs" for number of inputs, and it goes up to block 2489999.
-
Rucknium[m]
neptune: Thanks! All columns or no?
-
Rucknium[m]
Ok, I will load all the columns. R shall eat zee RAM.
-
neptune
Rucknium[m]: all columns for what? if they're not part of your histogram I wouldn't SELECT them
-
Rucknium[m]
Too late.
-
Rucknium[m]
endor00: See
-
Rucknium[m]
-
rbrunner
In moneromooo 's Pay for RPC system it costs COST_PER_BLOCK = 0.05 to fetch a single block from the daemon over RPC, but 10 times more COST_PER_TX = 0.5 to get a single tx
-
rbrunner
For the per-tx cost it does not matter whether it comes from the blockchain or the pool
-
rbrunner
As `wallet2` gets most of the txs currently in the pool at every refresh, that must get terribly expensive
-
rbrunner
Any idea why fetching txs should be so expensive in Pay for RPC?
-
rbrunner
(I am aware that it's hardly used, if at all, but I don't want to be the one to break it with changes I currently do connected with fetching of pool txs.)
-
gingeropolous
from what i remember, the cost is proportional to the actual computational resources used to perform the actions
-
rbrunner
Yes, that's also my understanding of the situation, and that's why I wonder: I claim it's nowhere 10 times more resource-intensive to get a tx from the blockchain than a full block
-
rbrunner
And imagine the wallet syncing, needing one block, and seeing 100 tx in the pool: Cost is 0.05 for the block and 50 to fetch those pool txs ...
-
rbrunner
Maybe I will initiate the greatest cost reduction in the history of Monero: Fetching txs over RPC ten times cheaper now :)
-
merope
Is there a way to measure (more or less accurately) the actual resources consumed by each request? (cpu cycles, ram, i/o, whatever)
-
rbrunner
Hmmm, I guess there must be. But I imagine that's not simple, e.g. because so much is happening at the same time, within multiple threads within the daemon
-
atomfried[m]
from my experience, messuring memory while running is a real pain in the ass...
-
rbrunner
The current costs look like guestimates, but as moneromooo almost always delivers solid work I am pretty sure there is an "idea" behind txs being expensive.
-
rbrunner
Maybe they will chime in later, taking a break from Townforge ...
-
sethsimmons
So what are we waiting on for scheduling 0.18 HF? Would it be best if I start up a new meta issue to finalize discussion of the key items?
-
Rucknium[m]
That sounds fine. It seems that no one(s) have taken the initiative to determine scheduling, so you could take such initiative :)
-
luigi1111
March?
-
sethsimmons
I don't have much free time but will try to hash out some details in an issue we can use moving forward.
-
sethsimmons
ANd yes, I think an early-Spring HF is ideal.
-
sethsimmons
What are the main features being included outside of ring size increase and view tags? ANything else worth mentioning? Was there a decoy selection change from jberman?
-
rbrunner
Yeah, maybe their "simple binning" wallet-side is so good that we want that in
-
rbrunner
That was jberman, right? Not sure
-
Rucknium[m]
Seth For Privacy: Keep in mind that, generally, changes to the decoy selection algorithm do not require a hard fork since it is a wallet-level feature.
-
Lyza
BP+?
-
Rucknium[m]
Binning has not yet been vetted by a statistician.
-
sethsimmons
IIRC there was something specifically that would be best done as part of a HF.
-
sethsimmons
Lyza: Yes, thanks
-
sethsimmons
And fee changes
-
Lyza
yeah decoy selection via wallet doesn't need to be doned via HF but there was concern about having people using different selection algos
-
Lyza
fee changes very important ya
-
Rucknium[m]
Seth For Privacy: It's true that bundling decoy selection changes with hard forks can be useful since a HF is a forced upgrade.
-
rbrunner
UkoeHB 's more robust multisig wallet construction, and some other PR still on the way to prevent an attack, as per Wednesday's MRL meeting
-
sethsimmons
Does that require HF or will that be part of a point release/
-
rbrunner
Not sure, but seems to me the best time to put something like that into service is a HF, like for decoy selection changes
-
rbrunner
Maybe there are smaller things that only went into master so far, but not the 0.17 release branch. Don't have an overview, selsta may know more. Maybe more like improvements and optimizations
-
Rucknium[m]
ArticMine suggested that the ring size increase be leveraged to gather additional statistical information for OSPEAD development. I agreed, so as of now about 1/3 to 1/4 of the tail end of OSPEAD work will take place after the HF.
-
sethsimmons
-
sethsimmons
Please let me know if I missed anything, and we can start using that as a reference while planning.
-
sethsimmons
Friendly reminder that we have a release checklist, but it could probably use some updates/more review:
github.com/monero-project/monero/bl…ob/master/docs/RELEASE_CHECKLIST.md
-
sethsimmons
We can use that for the v0.18 release that enforces v15 hard-fork.
-
merope
> <@rucknium:monero.social> endor00: See
-
merope
-
merope
Thanks!
-
merope
Looking at the cumulative frequencies, I'd say that limiting transactions to 100 inputs should be fine
-
merope
-
merope
It covers (almost) 99.9% of all transactions within our sample
-
monerobull[m]
merope: Sad p2pool miner noises
-
merope
And almost all of the ones excluded are the few thousands of 185-194 inputs
-
Lyza
looking at more recent data would give a better accounting of p2pool users
-
merope
monerobull[m]: Actually, now that I think about it, p2pool would not be affected at all. We're talking about inputs here, not outputs
-
Lyza
yeah but p2pool miners often have many outputs to consolidate
-
merope
"Many" - more than 100?
-
merope
And even if so, it would take at most a couple of transactions to do that
-
monerobull[m]
Well we're not going to get big players to join p2pool if sending coins to a private wallet becomes a full-time job
-
monerobull[m]
I needed to send 3 separate transactions to get 10$ worth of xmr out of my mining wallet
-
Lyza
p2pool pays out every block and there's a block ever 2 minutes if you're 1/3 of the hashrate that's 240 outputs per day
-
merope
How many inputs did those have in total?
-
nero-cultist[m]
Monero's Algo kinda makes it pointless to mine for 99% of users
-
nero-cultist[m]
And botnets amplify this
-
merope
nero-cultist[m]: That has nothing to do with the algo, nor the discussion at hand
-
nero-cultist[m]
Sure maybe the 1% of users with a Ryzen CPU can enjoy it
-
monerobull[m]
Saying "we shouldn't care about miners" is not really helpful
-
nero-cultist[m]
...
-
nero-cultist[m]
Okay what ever
-
nero-cultist[m]
Continue without my complaints
-
Lyza
could we do something to make consolidating coinbase outputs more efficient?
-
Lyza
compared to normal TX
-
Rucknium[m]
monerobull: Let's write a little script to do multiple consolidation txs
-
merope
monerobull[m]: Never said that - I'm asking you to quantify how many inputs did you have to consolidate, to get a better idea of the issue at hand
-
Rucknium[m]
Huge txs may be a threat to user privacy due to decoy selection issues
-
merope
That was the whole point of getting tx data in the first place - see how many transactions would be affected by a given input limit
-
monerobull[m]
merope: I had like 200 incoming transactions after mining for a month and i am a thousand times smaller than the big miners
-
Lyza
what is the first spend of a coinbase TX just didn't use ring sigs. the amount and stuff is already transparent right? so the first spend of a coinbase TX become a sort of blinding TX then you use it normally afterwards
-
Lyza
what if*
-
monerobull[m]
Doesnt p2pool send out payments the block after a block is found?
-
Lyza
nah it pays out in the coinbase tx
-
Lyza
splits the coinbase reward into a bunch of outputs
-
Rucknium[m]
Lyza: That doesn't address the decoy selection issues. The decoy selection issue is that when there are huge txs, they can fill up the whole block, which drastically reduces the number of decoy outputs that can be pulled from that block
-
sethsimmons
No, in the block you find.
-
sethsimmons
Yeah
-
Lyza
<Rucknium[m]> would the transactions not be much smaller without ring sigs attached?
-
sethsimmons
Rucknium[m]: Feather already automates sending multiple TXs if the coins being swept are too large for one.
-
sethsimmons
Max seems to be ~194 inputs for whatever reason.
-
sethsimmons
Lyza: Yes
-
Rucknium[m]
Lyza: I don't think coinbase txs have any ring sigs.
-
Rucknium[m]
Aren't coinbase tx amounts transparent?
-
Lyza
I'm suggesting to take away ring sigs from transactions that use only coinbase outputs as inputs
-
Lyza
yes they are
-
monerobull[m]
This is getting too technical for me. Just wanted to make a point how restrictions like these can really harm the project in the future through ways one might not even think about
-
sethsimmons
They still use rings, sgp_ has suggested for a while not using rings for coinbase outputs, or using only coinbase outputs in coinbases rings.
-
merope
monerobull: so with an 100 input limit, it would take you 2 transactions to consolidate all your mining inputs
-
Rucknium[m]
sethsimmons: That would make especial sense with p2pool use rising.
-
monerobull[m]
merope: I get like 1 share every two days if in lucky
-
monerobull[m]
But the big guys who get like 10 or more shares per 12 minute interval would need many, many transactions
-
sethsimmons
As long as the wallet software can automatically handle splitting 100s of outputs into multiple TXs, the limit doesn't really matter TBH.
-
sethsimmons
Feather already does this, not sure on GUI/CLI.
-
Rucknium[m]
Those big guys should write a script. This may be a user privacy issue, which should take priority over miner UX issues.
-
monerobull[m]
The guy didn't even tell me what the problem was
-
sethsimmons
Lets move this convo to #monero-research-lounge:monero.social, though, not really dev related.
-
Rucknium[m]
Or, as Seth indicates, use a wallet like Feather.
-
monerobull[m]
Rucknium[m]: Youre not going to get p2pool adoption if it's way easier to just stay in centralized pools
-
sgp_
<Rucknium[m]> "That would make especial sense..." <- in what way is this especially necessary with p2pool use rising?
-
Rucknium[m]
sgp_: More small coinbase payouts
-
sgp_
Rucknium: number of coinbase outputs are consistent though. p2pool miners and pool miners alike get C+1 outputs though
-
sech1
sethsimmons maximum of 194 inputs comes from wallet2.cpp tx size limitation, it can be changed in the code
-
sech1
not a part of consensus
-
Rucknium[m]
sgp_: Looks like I'm wrong, then. What is C+1?
-
sech1
max transaction size that monerod will accept is 1,000,000 bytes
-
sgp_
1 sec let me look more closely
-
Rucknium[m]
sech1: What is the max tx size enforced by consensus?
-
sech1
1e6 bytes
-
sech1
#define CRYPTONOTE_MAX_TX_SIZE 1000000
-
Rucknium[m]
sech1: Current max block size?
-
sech1
300kb
-
sech1
so it won't be mined even if it's in mempool
-
sech1
until blocks increase in size
-
Rucknium[m]
To me, this is a privacy problem since decoy selection needs recent outputs to include in rings as decoys.
-
Rucknium[m]
If blocks are full of just a few huge txs, decoy selection will be off kilter
-
Rucknium[m]
And we saw this happen a month or two ago when we saw low-resource nodes struggling to keep up with those blocks that had a few huge txs. Seth For Privacy and others were reporting on it.
-
luigi1112
few huge or many small shouldn't be particularly different for low resource nodes
-
Rucknium[m]
Did we ever get to the bottom of why nodes were struggling with those txs?
-
UkoeHB
Maybe the threadpool in `verRctNonSemanticsSimple()` got too slammed.
-
-
sgp_
is this accurate?
-
sethsimmons
sgp_: Looks correct to me.
-
sgp_
given that as correct, there's no incremental concern with coinbase outputs with p2pool
-
sgp_
if anything, it makes the selection of C+1 outputs more convincing as decoys
-
nero-cultist[m]
Can we get back to talking about random x?
-
nero-cultist[m]
There's a chip shortage making buying random x hardware near ASIC territory
-
nero-cultist[m]
2 mobos
-
nero-cultist[m]
2 high end cpus
-
nero-cultist[m]
It's nearly profitable or viable for people trying to support the network at a loss
-
nero-cultist[m]
What could be the cause ?
-
nero-cultist[m]
Botnets ?
-
nero-cultist[m]
The Algo it's self preferring new cpus from a specific manufacturer
-
nero-cultist[m]
?
-
sgp_
mining is supposed to be a boring commodity, especially when CPUs can be spun up or turned off on a whim
-
sethsimmons
Not the room for that, use #monero-pow:monero.social.
-
sgp_
yeah
-
sethsimmons
Or #monero:monero.social.
-
nero-cultist[m]
??????
-
nero-cultist[m]
I'm suggesting a change to the developers
-
sgp_
when you have a specific change you can suggest it here, the current discussion is just about mining
-
UkoeHB
What change exactly?
-
nero-cultist[m]
A bottle neck for CPUs especially older ones is the cache
-
sethsimmons
A new algo that fits his needs ๐
-
nero-cultist[m]
sethsimmons: I have access to a Ryzen CPU
-
nero-cultist[m]
??????????
-
sethsimmons
Go to one of the rooms mentioned, please.
-
nero-cultist[m]
Our coin isn't infallible you know.
-
sethsimmons
This convo has nothing do with active development or any specific proposal.
-
nero-cultist[m]
....
-
sgp_
Seth is right, start there and come back when you have a specific spec change or something
-
nero-cultist[m]
I did
-
sethsimmons
We will gladly discuss it elsewhere, stop cluttering this room please ๐
-
nero-cultist[m]
A scratch pad size change.
-
nero-cultist[m]
Along with reductions to cache usage
-
nero-cultist[m]
Think like randomwow
-
luigi1111w
take it to #monero-pow or #monero
-
nero-cultist[m]
Kk
-
luigi1111w
thanks
-
sethsimmons
luigi1111w has the power, I guess ๐
-
Rucknium[m]
endor00: I think we should make a GitHub issue exploring a reduction in the max input number and/or tx size. I'm not sure if its better as a /Monero issue or or /MRL issue
-
sethsimmons
MRL, I would imagine, as it needs further research and reasoning.
-
nioc
luigi1112> few huge or many small shouldn't be particularly different for low resource nodes <<>> yet it does
-
nioc
*is
-
sethsimmons
Yes, it crashed one of my nodes and ate 100% CPU and 100% RAM on the other till processed when we had the flood of large TXs.
-
sethsimmons
I believe the issue was fixed since, though, selsta would know.
-
wfaressuissia
"Yes, it crashed one of my nodes and ate 100% CPU and 100% RAM on the other till processed when we had the flood of large TXs." there is 100MB limit for packet size
-
wfaressuissia
max number of connections of in/out connections should be chosen properly in order to have enough memory in the worst case (100MB * 2 * (in + out) + ... < RAM)
-
wfaressuissia
it's stupid to touch (limit number of in/out) consensus where it can be solved with better code without any hf
-
Rucknium[m]
wfaressuissia[m]: Better code doesn't solve the potential privacy issue.
-
wfaressuissia
your reply isn't concrete, what do you mean ?
-
Rucknium[m]
If consecutive blocks are filled with a few large transactions, that could mess up how the decoy selection algorithm is supposed to protect privacy.
-
sethsimmons
<wfaressuissia[m]> "max number of connections of in..." <- is this done automatically, or still need to be done?
-
Rucknium[m]
Since there will be few outputs to choose from in recent blocks
-
wfaressuissia
"is this done automatically, or still need to be done?" number of out peers is fixed by default, number of in peers is unlimited by default. These connection limits should be set manually by user
-
sethsimmons
Would anyone here be able to run a meeting around HF planning?
monero-project/meta #630
-
sethsimmons
Meetings are tricky for me with day job, so would be best if someone else could.
-
wfaressuissia
There are many other problems in monerod that can't be mitigated with more resources dedicated to monerod. It requires almost complete rewrite with another design
-
wfaressuissia
Current p2p network is working only due to ~5 large mining pools that are being operated by humans 24/7
-
wfaressuissia
If someone want to remove big mining pools then firstly write software properly so that in can work automatically without human in the loop
-
wfaressuissia
"If consecutive blocks are filled with a few large transactions, that could mess up how the decoy selection algorithm is supposed to protect privacy." it's problem with implementation of decoy selection
-
wfaressuissia
general purpose implementation should work with any number of txs per block
-
Rucknium[m]
No, because decoy selection is based on economic behavior. We shouldn't try to bend decoy selection around a "features" that a tiny, tiny proportion of users use.
-
Rucknium[m]
Decoy selection is critical for user privacy. User privacy is Monero's #1 feature.
-
wfaressuissia
"We shouldn't try to bend decoy selection around a "features" that a tiny, tiny proportion of users use." proof
-
Rucknium[m]
wfaressuissia[m]: I produced proof a mere 4 hours ago:
-
Rucknium[m]
-
carrington[m]
Don't we often get empty blocks with no transactions anyways?
-
carrington[m]
So "big transaction mean fewer transactions" is part of a broader problem with decoy selection
-
Rucknium[m]
carrington[m]: I don't think so. I could check though.
-
carrington[m]
Although I agree there should be some sensible limit on transaction size. P2pool does seem to complicate things
-
Rucknium[m]
If I understood the conversation earlier, max tx size is now three times larger than max block size.
-
nioc
effective tx size is 1/3 blocksize
-
nioc
empty blocks can happen when blocks are a few seconds apart
-
sethsimmons
<sech1> "#define CRYPTONOTE_MAX_TX_SIZE 1..." <- Yes, this is 1/3 current median block size limit
-
sethsimmons
You can see this from the recent testnet blocks with only 3 TX + coinbase in them.
-
sech1
it's not 1/3
-
Rucknium[m]
Oh, oops my mistake, that is 1/3 and not 3/1.
-
sech1
it's 1 million bytes
-
sethsimmons
Which equates to ~1/3 right now?
-
sethsimmons
I know it's not coded as 1/3
-
wfaressuissia
no
-
sethsimmons
Oh
-
sethsimmons
I misread
-
wfaressuissia
300KB blocks size limit, actual block can be up to 2x300KB with reward penalty, txs size limit is 1MB
-
sech1
tx size limit is calculated as (block_size_limit / 2 - 600) * 2/3
-
sech1
in wallet2.cpp
-
sech1
which equates 99600 bytes currently
-
UkoeHB
that is just a wallet barrier, not consensus
-
sech1
consensus is 1,000,000 bytes
-
sethsimmons
-
sethsimmons
Ahhh
-
sech1
the limit in wallet2 is soft - it can add more inputs above 99,600 bytes to pay fees
-
sethsimmons
Got it
-
Rucknium[m]
UkoeHB: Yes, that's what I am concerned about. What if someone spams huge txs and mines them, or can just broadcast them and nodes accept them.
-
wfaressuissia
<rucknium[m]> "No, because decoy selection is..." <- What's the difference if in both cases (number of inputs * number of txs) will remain constant and will leak the same information ? Also single aggregate tx is cheaper and smaller ?
-
sethsimmons
So with "official" clients max is `(block_size_limit / 2 - 600) * 2/3`, but consensus will allow up to 1,000,000 bytes.
-
sethsimmons
Got it.
-
sethsimmons
And the current limit equates to ~100kb ATM.
-
wfaressuissia
rucknium[m]: it isn't spam, it's expected behaviour
-
Rucknium[m]
wfaressuissia[m]: Why do you have to be so contrarian all the time? I don't get it. Yes, we had an apparent spam incident earlier this year. It was with small txs though.
-
wfaressuissia
"Yes, we had an apparent spam incident earlier this year. It was with small txs though." it isn't spam, it's allowed behaviour by code therefore it should be expected
-
sech1
that's more of a philosophical dispute
-
wfaressuissia
This system in the end should allow to do cheap private txs. if you are fighting with spam then increase fee so that no one will do txs and report that privacy is perfect now
-
Rucknium[m]
I believe that the original definition of technological spam was in email, where the email systems technically allowed it but it was harmful to its operation. So, yes, spam.
-
UkoeHB
wfaressuissia: large transactions are a bit more useful to a passive observer, who knows that one member in each ring is from the same person. If the large tx is split, then the observer only knows there are clumps of inputs, but there might be multiple tx authors.
-
koe000[m]
wfaressuissia: large transactions are a bit more useful to a passive observer, who knows that one member in each ring is from the same person. If the large tx is split, then the observer only knows there are clumps of inputs, but there might be multiple tx authors. (bridge is depressingly unreliable)
-
koe000[m]
solid 5 minutes to show up, nice
-
UkoeHB
However, if you make more tx without churning, to further combine small tx, then graph analysis will make up at least part of the difference.
-
wfaressuissia
Sudden peak of txs vs sudden 1 huge tx, what's the difference ?
-
wfaressuissia
koe000[m]: are you writing via #monero-dev:libera.chat or via matrix room ?
-
Rucknium[m]
wfaressuissia[m]: Other transactions can get in those blocks. With huge txs, those other txs are pushed out and cannot be used as decoys from those blocks.
-
koe000[m]
There is a non-zero margin of plausible deniability added with small tx. My koe000 account is in the matrix room, my UkoeHB account is in libera.chat.
-
wfaressuissia
All txs are owned by the same entity, that means all of them can be revealed to public
-
Rucknium[m]
wfaressuissia[m]: What proportion of view keys are publicly available at the moment?
-
wfaressuissia
I didn't count
-
Lyza
not to be like a squeaky wheel but, if the only use case we have for large numbers of inputs is significant #s people consolidating coinbase outputs due to p2pool, why not make an exception specifically for those outputs? they are identifiable, they could be constructed without rings and be a ton smaller, I think without harming privacy
-
Lyza
seems like if you're consolidating a bunch of coinbase outputs it's going to be obvious and the rings aren't actually obscuring anything anyway
-
wfaressuissia
"... I think without harming privacy ..." proof
-
Lyza
it's a suggestion for consideration; I don't have proof except for what I already said, that it seems like the consolidation would already be obvious. and anyway you can always send to yourself again after consolidating
-
botcoinnotbot[m]
Lyza: you would just be making it easier for people to distinguish p2pool consolidations instead of forcing them to guess
-
Lyza
yes on the basis that guessing is already trivial, which Idk is maybe an incorrect assumption
-
Lyza
you got 100+ inputs and every single ring contains a coinbase output in it, I mean.... that seems unlikely to be random chance
-
Lyza
unless coinbase outputs become a large proportion of all outputs I guess
-
Rucknium[m]
Lyza: Which is not great for user privacy.
-
botcoinnotbot[m]
"that it seems like the consolidation would already be obvious", proofs please
-
botcoinnotbot[m]
due to random chance there has probably been many transactions which look like consolidations which are not, if you were to make a special class of transaction for consolidation any regular transaction that included many coinbases by chance would be affected
-
Lyza
"if you were to make a special class of transaction for consolidation any regular transaction that included many coinbases by chance would be affected" <--- regular transactions would not include coinbase outputs in rings, under this suggestion
-
nioc
p2pool will significantly increase consolidation txs but they have always existed
-
Lyza
doesn't CLI warn you that combining large numbers of outputs is bad for privacy? thought this was well known. and obvs it would be worse for consolidating coinbase outputs
-
Lyza
and if we did this, we could limit inputs for other transactions to something very reasonable like idk 16 instead of 100, which might be a win for privacy as well
-
Rucknium[m]
Keep in mind that there have been a lot of "nice features" in Monero that have later been recognized as a threat to privacy and had to be removed.
-
nioc
with p2pool you can get many txes that are temporarily close and yhe CLI warns you when they are
-
Lyza
yeah I'm really not trying to make any ahrd claims just putting it out there to be considered
-
Lyza
I guess another option is making it so there can only be one coinbase output but I think we like p2pool
-
Rucknium[m]
Lyza: In case it wasn't clear, I was supporting your point.
-
Lyza
cool :)
-
wfaressuissia
"I believe that the original definition of technological spam was in email, where the email systems technically allowed it but it was harmful to its operation. So, yes, spam." there is no difference between spam and demand
-
Rucknium[m]
By "nice feature" I was implying that consolidating a huge number of outputs in a single tx was a nice feature.
-
wfaressuissia
Any demand can be marked as spam to justification for poorly designed system
-
wfaressuissia
* ... to justify ...
-
Rucknium[m]
In my view decoys and ring signatures are a suboptimal system, but they are the best thing we have at the moment, given that other solutions rely on cryptography that has not been battle tested. So, yes, the system is not well designed but there is no other viable way at the moment.
-
nero-cultist[m]
^
-
nero-cultist[m]
Is increasing ring signatures simply just a bandaid for a bigger problem
-
sethsimmons
An increase in ring sizes in the next network upgrade is a stop-gap until much larger ring sizes via Seraphis.
-
MohammedMujahid[
Monero community please help me
-
-
MohammedMujahid[
Kindly please help me๐ญ
-
louipcm
does the transaction appear in the blockchain?
-
Rucknium[m]
nero-cultist: If you are interested in further reading on weaknesses with the ring signature model, you can read this piece by a Zcash Foundation member. Keep in mind that most of these attacks require you to interact with large nefarious entities:
-
Rucknium[m]
-
louipcm
also this is the wrong channel
-
sethsimmons
This channel is not for support, please use #monero:monero.social and refer to the help you were already linked to earlier.
-
Rucknium[m]
Mohammed Mujahid: This is not the correct room. Please go elsewhere. This is for development discussion.
-
MohammedMujahid[
<louipcm> "does the transaction appear in..." <- No sir
-
wfaressuissia
"... Keep in mind that most of these attacks require you to interact with large nefarious entities:" if your statistical solution will work then it should increase cost (amount of resources) required for these ways of deanonymization
-
Rucknium[m]
wfaressuissia[m]: Right. That's part of the point of increasing the ring size and developing a better decoy selection algorithm. An adversary would need even more information about a target after the decoy issues are improved.
-
wfaressuissia
"An adversary would need even more information about ..." I mean your statistical solution can be tested (this test can be written even before your research) by anyone against those attacks
-
wfaressuissia
and there will be concrete numbers how much it helps or not doesn't help
-
Rucknium[m]
Yes, you are correct
-
nero-cultist[m]
> <@rucknium:monero.social> nero-cultist: If you are interested in further reading on weaknesses with the ring signature model, you can read this piece by a Zcash Foundation member. Keep in mind that most of these attacks require you to interact with large nefarious entities:
-
nero-cultist[m]
-
nero-cultist[m]
Do you think we could apply similar concepts to Monero?
-
nero-cultist[m]
The best of both worlds ?
-
wfaressuissia
"That's part of the point of increasing the ring size" it makes system better in the worst case and doesn't rely on any assumptions except working cryptography
-
wfaressuissia
"... and developing a better decoy selection algorithm." don't know how useful it will be but it relies on many assumptions about usage pattern
-
Rucknium[m]
If and when there is a better solution with acceptable tradeoffs that is battle-tested and requires no trusted setup, then probably Monero would adopt it.
-
wfaressuissia
and isn't ideal solution for decentralized system
-
Rucknium[m]
wfaressuissia[m]: So the ultimate goal would be to have a dynamically-adjusting decoy selection aglorithm that matches the current usage pattern at every point in time.
-
wfaressuissia
It's more interesting to have test (that can be run by anyone) that will show cost for all known attacks on privacy. And this test doesn't require solution for the attacks. But for some reason it looks like this test will not be even written by you.
-
Rucknium[m]
wfaressuissia[m]: Where's that thing you promised at the MRL meeting?
-
wfaressuissia
which one ?
-
Rucknium[m]
-
wfaressuissia
"Where's that thing ..." in my head yet
-
Rucknium[m]
wfaressuissia[m]: I suggest you spend time trying to figure out how to move it from your head to the real world instead of being such a nag.
-
rock[m]
Woah, easy there Ruck.
-
wfaressuissia
"I suggest you ..." fortunately there is at least something in my head to move, unlike in others
-
Rucknium[m]
wfaressuissia[m]: Yeah, who are you talking about? Who others? Out with it!
-
Rucknium[m]
wfaressuissia[m]: You snipe at other and contribute nothing. Prove me wrong.
-
Rucknium[m]
Prove me wrong by doing something.
-
rock[m]
Fellas, it's Friday. We're all nerds here. Let it go
-
frak0197[m]
<rock[m]> "Fellas, it's Friday. We're all..." <- speak for yourself! im a dork ๐
-
luigi1111w
nerds dorks geeks
-
botcoinnotbot[m]
how hard would it be to add a config file option to add/exclude your node from using networks.
-
botcoinnotbot[m]
e.g. --network-exclude ipv4/6 --network-use i2p/tor?
-
botcoinnotbot[m]
for those who wish to have all node communications specifically through i2p/tor?
-
botcoinnotbot[m]
bitcoin config file has the option for onlynet=tor
-
botcoinnotbot[m]
onlynet=i2p, something I think would be worth porting over to monero :)
-
wfaressuissia
"porting command line arg" awesome idea. It also makes sense to port command args "--enable-sybil-resistance --enable-decentralized-mining --enable-high-throughput --enable-high-privacy"
-
botcoinnotbot[m]
wfaressuissia[m]: why so toxic, I am well aware that this is more than just adding a command
-
wfaressuissia
"clearnet: mandatory, all packets, --p2p-bind-ip/--p2p-bind-ipv6, i2p/tor: optional, only txs, `--tx-proxy/--anonymous-outbound/--anonymous-inbound`" these options are already doing, so you didn't even check `monerod --help` ?
-
wfaressuissia
"... I am well aware that this is more than just adding a command" there are a lot of problems in current code even with clearnet p2p network (add to this problems with anonymization network support)
-
wfaressuissia
also bitcoin is not the best reference of project with good p2p network
-
wfaressuissia
and it isn't task that can be described as "porting over"
-
botcoinnotbot[m]
wfaressuissia[m]: if you actually read the docs you would know that this does not make your node exclusive to that network, nor is there a command to do that
-
botcoinnotbot[m]
wfaressuissia[m]: you are making assumptions about what I am saying and then attacking your own assumptions. wownero has a dedicated port for i2p of 34565, how hard would it be to just block all connections except for the assigned i2p port. I said nothing about porting bitcoin node code
-
wfaressuissia
clearnet isn't working, i2p/tor support is even more funny, there is nothing inside to configure with command line options
-
wfaressuissia
what things will be transmitted over that imaginary dedicated i2p port ?
-
botcoinnotbot[m]
wfaressuissia[m]: what are you smoking? i am running my node over i2p tor and ipv4 with 500 incoming connections right now
-
wfaressuissia
Why did you mention 500 ?
-
botcoinnotbot[m]
wfaressuissia[m]: to tell you that the networking is fine and can handle many connections fine
-
selsta
botcoinnotbot[m]: can you link that wownero commit?
-
selsta
as far as I know wownero doesn't have anything that isn't a thing in monero
-
wfaressuissia
"... to tell you that the networking is fine and can handle many connections fine" anyone can send simultaneously 500 packets to your node it will occupy 100MB * 500 RAM at the same time
-
wfaressuissia
do you have so much memory ?