vtnerd Is there any particular plan for the src/net/resolve.* files and do they still work as intended? Do they provided any benefit over DNSResolver if I'm not using TLSA?

Hey guys, I think i may have found a bug in the monero- gui wallet

If you can fix it, PR a patch to github.com/monero-project/monero-gui. If not, file an issue at the same URL.

If you're not sure it's a bug and want to ask to make sure, you can describe what you're seeing here.

Or #monero-gui

moneromooo: exactly this. ty.

i can send screenshots here but I wanted to protect my ident and my balance of other wallets as much as possible. Long story short - i have xmr in 2 diff accounts in the same wallet and my unlocked balance (spread across two accounts) is higher than what i want to send. When i want to send the full unlocked amount of my wallet to a diff addy, the gui reports

here

my understanding is that it should sweep the xmr from a diff account (in the same wallet) into this tx- and instead it is ONLY showing the xmr in the account that i have selected.

You have accounts A with balance a and B with balance b, and you cannot send b to A ?

I can bypass this by doing 2 transactions - with 2 diff accounts in the same wallet and eat the tx fees - but I shouldn't have to -

(ignoring fees)

i have account A with 20 dollars, and account B with 40 dollars (in the same wallet) and i am trying to send 60 dollars to address C

Ah. Then it's not a bug.

and if i select account A or B and then go to send and

it says i dont have enough

my unlocked balanced is 60 dollars

so why can i not send.. 60 dollars?

Because you have 20 and 40.

stackexchange said diff.

Send two txes to C from A and B, or A to B, then 60 from B to C.

Yes, but it is the same wallet

a tx from A and B is still from the same wallet

Yes.

basically i am sweeping funds from one private key i own to another

correct?

Yes.

exactly

this says diff

It doesn't really do. You may be confusing accounts and subaddresses.

I guess it doesn't help that technically they're the same. But accounts are there to protect against commingling funds, which is what you're trying to do.

I have one wallet with diff accounts and diff sub addresses in each account.

if i have 150 dollars - across 3 accounts , account 1, 2 3 , 50 dollars each in it's value of xmr

that is

lender: A lot of people use accounts specifically to prevent themselves from accidentally doing what you're trying to do deliberately. This isn't a bug. You should stop using multiple accounts if this is what you want to do.

with 3 subaddy's / account

ah got it. i thought accounts as the stackexchange said just an organizational feature of the gui

and all of the funds (xmr in this case) are co-mingled and integrated as all of the xmr is seen as being owned by my privkeys - private spend key in this case

same in other coins - using electrum as an example. if i have 150 dollars across 3 diff btc addy's, i can spend it easily -

They are. It is technically possuble to do it. Accounts are an organizational feature which allows you to prevent it.

Rucknium[m]: as the stackexchange says " Accounts and subaddresses are merely an accounting feature. The funds are all in the same wallet. Think of it like a physical wallet with multiple sections for organizing. In a physical wallet you might have a section for daily use and a section for emergencies; but you can use funds from either section whenever you like. And funds can be received directly into either as well."

so i took it to be just a visual - abstraction (it IS a GUI after all - so people can have neat and organized xmr - management

"but you can use funds from either section whenever you like. And funds can be received directly into either as well."" - how i came to the conclusion that i should be able to spend ALL xmr in ALL accounts with diff sub addy's in the same wallet

so if one of you sent $100 EU to one sub addy in one account, and another 300 to another sub addy in a diff account, the monero wallet would let me spend the full $400 worth of xmr

as it is the unlocked balanced

If the docs that misled you are in git, feel free to PR a patch that clarifies it.

If it's something on stackexchange, you can add a comment to the post too.

and the accouts simply help me organize things. On the backend all of the xmr is still seen by the wallet as "co-mingled" in the sense that it is all merged into the same "unlocked balance" the sub-addys also

ah ok. i organized all of my wallets with this principle in mind

so what is the point of an "unlocked balance" being merged across accounts

if one cannot spend it in unison?

that is also misleading

Many people like to know how much monero they have.

let me re-read what u all are saying

so i und deeper

and ty for pointing out the co-mingling issue. that can def also be a sec risk

But "balance all" shows you how mych you have per account IIRC.

Oh, you said GUI. I don't know how hte GUI shows that info though...

i have been reading mastering monero and i also want to und the new innovations - such as Seraphis / Jamtis

however I have yet to get into the CLI

and i can't wait for multisig to be implemented either in the gui-wallet or in feather as that will finally allow me to ditch btc altogether

but that is a diff issue.

moneromooo: interesting

the account page shows the balance of each account and also the total balance of all accounts summed up

lender[m]: with other pple - as multisig works far easier with say electrum than say monero-cli - sadly. otherwise ty all for all that u do. i have the deepest respect for what you do, and u have built a damn fine system and protocol if i may say. would be an honor to join your ranks one day once i level up and und monero deeper. i work in cybersec but u all constantly push me with your excellent system engineering skills and it keeps me

sharp. So thank you all.

selsta: yes it does

ok so now that i know that the gui will not let me send funds from diff accts in the same wallet to the same addy

let me see if there is sweep function so i dont have to actually have a 2nd tx on chain.

so diff sub addresses in the same account can send funds just to confirm yes?

so account " savings" with $500 worth of xmr in subaddy 2, and 500 in subaddy 3

u can send $1000 worth of xmr to addy C

and the guil will allow that yes?

just to confirm.

yes

but if the 500 is in two diff accounts, then it is NOT just a gui abstraction

as the stackexchange said. those funds are completely compartmentalized from each other.

even tho the wallet knows the funds are there, and the priv spendkeys are obv loaded , security

and not having a statistical linkages between inbound tx and outbound tx is more imp for users than convenience

security should trump convenience every time and u want to protect users from themselves

if i had to guess as users will try to do things to undermine their own security whether knowingly or not - so you put this choice into the security design of the wallet in order to prevent potential analysis? even if stealth addys are used, ring ct, and ring signatures with key images? I find that interesting..

People have written wallet implementations that undermine user privacy. We've seen evidence of it in the blockchain data.

but i will respect the decision and trust in the judgment.I do not have a knowledge or competence of monero enough to understand the security implications of co-mingling funds even with the opaque blockchain and ringct and other security features that you do so i am certain that there is just cause and sound logic for why you did this. you all are probably the most competent system engineers and sec folks i have seen in public FOSS

systems, and i am of a similar mind. When I first started studyinghow monero works i was blown away, and I am a longtime veteran in the crypto field. I have spent 18hr days diving deep into the protocol on many levels and it makes me feel like a novice all over again :D. A wonderful feeling to be around people / a community who enjoys pushing the envelope of security and doesn't settle or compromise for mediocrity or for $. So ty for

answering the q, and also i can't wait for multisig to be more easily adopted in the GUI.

Rucknium[m]: yes, I have been reading about this as well.

i have also been testing each wallet for the same reason. cake wallet, monerujo, as well as feather and the wallet-gui to review them

and so i mainly trust the official wallet, although feather is lighter in many ways.. but tor alone can be a risk as tor network usage can flag isp's or others that sth is going on and that stands out...

lender[m]: blockchain data that is opaque

without transaction id's

?

still.. any holes in the armor undermine overall user security

complacency leads to compromise..

and a few devs that are too relaxed, and make weak / incompetent system design decisions can affect not just those who adopt their wallet but anyone who interacts with anyone who uses their wallet. " The only difference between a bug and a backdoor is intent" , and so i am inclined to agree with you.

Thank you again.

Also do any of you good folks have any resources that i have not read already about seraphis and jamtis? Also im fascinated by how you will deploy the upgrade or rollover people + how backwards compat works for those who will ofc not pay attn or upgrade their wallets for 3-6 months.

from a sec and engineering POV im fascinated. i also wondered where i could get test coin so i can also study more of monero on your testnet as seraphis and jamtis really needs to be stress-tested hard obv b4 you all deploy

lender: For Seraphis/Jamtis, go to #no-wallet-left-behind:monero.social . There is a text meeting there at 18:00 UTC (5 hours from now)

as you are doubling the addreses (which have a public view key / public spend key as well as other details that slip my mind) and ur also increasing the ring signature size and increasing other things. Also

doubling the pubkey size from 98 chars to 200 if mem serves

*

Rucknium[m]: thanks!

For testnet coins, just mine, difficulty should be very very low.

idk how u all would facilate say exchanges all being able to switch to the new protocol without hiccups, or disruption or say sweeping funds from the old spend keys to import the value into new, and then everyone ofc has to regenerate addys.. the other thing i was thinking about was this

Seraphis meeting today at 18:00 UTC in Matrix room--No Wallet Left Behind.

so if this is true, how do you future-proof the protocol and other sub-systems

from quantum computing or the ability of say SIGINT actors or nation-states or other groups who will ofc want to target this and other cryptocurrencies? I am sure that is also part of the logic of deploying seraphis and jamtis. you all are far from stupid

and ofc adversaries actual crypatanalysis / SIGINT capabilities are never fully known as i am sure you are all too aware.

hence your security hygiene/ posture. the new updates are fascinating and i also wondrered if there was any plan in the future to have a Nlocktime style feature for xmr

as that def has uses.. either for say a time delay feature, or say for trusts. or to go by say the block height - but then again xmr does use variable block sizes so that perhaps isnt as cut/dry as for btc. You all have definately gone back to the drawing board and gotten many things right and i apologize for gushing, however i am in awe as i have spent the last few months deep into xmr and understanding it and losing sleep was worth

it. So i just wanteed to say again - thank you .

<moneromooo> "For testnet coins, just mine..." <- ah ok. ty. Also my mining system had a weird glitch after an update. will troubleshoot that issue before i bring that to the relevant # here.

<lender[m]> "hence your security hygiene..." <- in the gui to be clear. it exists - getmonero.org/resources/moneropedia/unlocktime.html

but only in the CLI if my understanding is correct.

sorry to bother you. I will shutup, listen and watch now and figure out /where i can help if needed.

Monero's unlock time has a different semantics that Bitcoin's, just FYI.

(that is, don't use it unless you know what it does)

moneromooo: i have to learn how the cli works first. both with softwallets and with hardwar.

hardware. I am sure it is just a few flags. I am far from competent enough to start that just yet. But yes, noted. and ty.

#monero:monero.social #monero-offtopic:monero.social

.merge+ 8745 8746 8743

Added