merope:

"what's the point of having accounts *and* subaddresses?" >> Different use cases. Accounts are used to disconnect your online identities. Payment requests are used to identify payments under the same identity (replacing payment id).

"the output construction requires the generation of a random scalar t" >> This is no different from the current addressing scheme. If the same scalar is reused for the same subaddress, only one of the outputs can be spent because they will have the same linking tag.

Are random user wallets used to mix monero coin? Or does it only create fake wallets to do it?

tightlover565[m]: Explain how you think ring signatures and decoys work, and we can tell you if you are correct.

ok

Uhhh, ring sigs are probably some sort a Numbers signed by wallets as proof they witnessed a transaction. The ring size could be the amount of wallets the coins could be routed to, the wallets would also be transferring the same amount of money you are, and the wallets could possibly be fake wallets created by a program in the network, or using random wallets from real users too by limiting the amount of "spendable" monero

they can use? Or combining both.

Short answer: no

pls explain which parts and exact as you can

A transaction must prove that it is spending funds that already exist. This is what I call a ‘membership proof’ (proof that e-notes spent are members of the ledger, analogous to bank notes). A ring signature is a kind of membership proof where you say ‘in this small group of enotes (which can be found in the ledger), I am spending one of them’.

But the ring signature does not reveal which one, in that small group, is being spent.

All the non-real-spends in the group are called decoys.

A ‘wallet’ is just a thing that keeps track of all the unspent enotes that a person owns.

tightlover565[m]: This is not a good channel for explaining how Monero works. A better channel is #monero-community:monero.social . Detailed explanations of how ring signatures work are available in the books _Mastering Monero_ and _Zero to Monero_, available free of charge as PDFs.

Unrelated to ring sigs.

Rucknium[m]: I think this is the best channel for that lmao

UkoeHB: Ok fine. 😃

rucknium[m]: ok

UkoeHB: In that case, I have a ring sig question: If practical quantum computers actually become reality, would they be able to eventually determine which ring member is the real spend and which are decoys, from breaking some sort of cryptography?

yes

after they steal satoshi's bitcoin they might do that next