-
hyc
was discussed recently, the CVE is due to flaws in an implementation based on 32bit ints. Ours uses 64bit ints and cannot overflow
-
hyc
kayabanerve[m]: that CVE has no relevance for us
-
kayabanerve[m]
Yep, was pinged to the discussion in research. I checked here for discussion before sending, yet that's why I missed it :p Thanks for chiming in :)
-
hyc
ah right it was in reesearch-lounge
-
stretch1
i would like to inspect the data.mdb file. it is a
lmdb.tech/doc
-
stretch1
is there a readable dump like sql_export in postgresql?
-
moneromooo
mdb_dump
-
moneromooo
Make sure you use the same lmdb version as the one monerod uses. Easiest is to build the one from external/db_drivers/liblmdb
-
stretch1
<moneromooo> "mdb_dump" <- interesting, is it possible to use mdb_dump/load for porting a lmdb?
-
moneromooo
Define "porting a lmdb".
-
stretch1
moneromooo: does lmdb have node identifying information when exposing the node on the network? the bitmaps of the file sure identical partially, but how does it appear online?
-
moneromooo
The only things I can think of that are fingerprintable and stored in the db are:
-
stretch1
* identical partially (if one were to make a copy, but
-
stretch1
* identical partially (if one were to make a copy), but
-
moneromooo
- the pruning seed (9 possible values)
-
moneromooo
- the txpool, the contents of which will vary slightly with time and connections
-
moneromooo
Various things can fingerprint a node that aren't in the db. I do not understand thew second questoin.
-
moneromooo
If that's what you're after, there's no unique node id.
-
stretch1
moneromooo: if there is no pruning, there is no such seed?
-
stretch1
can the txpool be flushed?
-
stretch1
* such seed? also it seems to be 0 ` virtual uint32_t get_blockchain_pruning_seed() const = 0;` can the
-
stretch1
* if there is no pruning, there is no such seed? also it seems to be 0 ` virtual uint32_t get_blockchain_pruning_seed() const = 0;`
-
stretch1
can the txpool be flushed?
-
moneromooo
If there is no pruning, there is an absence of seed.
-
moneromooo
The txpool can be flushed. The txpool being empty is fingerprintable information.
-
moneromooo
Assuming the idea of flushing the txpool is meant as a defence against fingerprinting, it's likely to do the opposite of what you think.
-
moneromooo
If Eve looks at nodes' txpool states and some of them regularly empties, chances are it's the same one.
-
moneromooo
There are 8 possible pruning seeds. I said 9 possible values because not using pruning is also fingerprintable information.
-
ghostway[m]
> <@stretch1:matrix.org> if there is no pruning, there is no such seed? also it seems to be 0 ` virtual uint32_t get_blockchain_pruning_seed() const = 0;`
-
ghostway[m]
> can the txpool be flushed?
-
ghostway[m]
This is a virtual method, it would make an error if a class that inherits from this class doesn't implement this (something about a deleted function)
-
stretch1
moneromooo: thank you, yet it is the common 0. so no good discriminator
-
moneromooo
I do not understand that sentence either.
-
stretch1
> <@moneromooo:libera.chat> There are 8 possible pruning seeds. I said 9 possible values because not using pruning is also fingerprintable information.
-
stretch1
* thank you, yet 0 is the common case, so it is no good discriminator to gather more info
-
ghostway[m]
stretch1: Hmm?
-
moneromooo
Ah, you mean most people do not use pruning ? Possibly.
-
stretch1
does the txpool state influence the decoy sampling?
-
stretch1
i assume not, since txpool is unspent
-
moneromooo
No.
-
stretch1
correct?: the internal structure of the lmdb file is not exposed to other nodes (not the state, but how it is layed out)
-
stretch1
so eve has no received info on her node that could make her identify lmdb.file in case she had it
-
moneromooo
Correct... though I suppose timing variations on spinning disks *might* be detectable at a push.
-
stretch1
same as mem acces, but i assume no: the network jitter too big
-
stretch1
please integrate monero to
app.thorswap.finance/swap !
-
RavFX[m]
I use to hodl there coin until they prioritized privacy coins after the tornadocash incident
-
RavFX[m]
and since that it damped a lot 😄
-
RavFX[m]
I ment, de-priorized
-
RavFX[m]
* I ment, de-prioritized