<syntheticbird> me doing free marketing in.

<syntheticbird> phoronix.com/news/Ubuntu-Rust-Coreutils-Audit

<syntheticbird> Zellic found 44 CVEs in rust coreutils. No really when it comes to code no one beats them and I hope they will end up auditing FCMP++[... more lines follow, see mrelay.p2pool.observer/e/1JusifwKZGxDS2lM ]

<321bob321> Use ai its cheaper

<jpk68:matrix.org> That whole thing was a huge mess

<jpk68:matrix.org> Wasn't their grep clone like 400% slower or something

<321bob321> Ubuntu is a mess

<syntheticbird> thx god uutils wasn't related to ubuntu by any shape or form

<jpk68:matrix.org> Why would you even use that over battle-tested code with no known issues

<jpk68:matrix.org> Seems like a solution in search of a problem to me

<syntheticbird> you are wrong. Rust is always good. You must embrace Rust. Rust software are always better than C software. Also its ubuntu's fault for pushing in production a software that WAS ADVERTIZED AS NOT READY.

<syntheticbird> Canonical just decided to make uutils the default knowingly and now uutils is getting all the hate in the world

<syntheticbird> yeah no shit, its not ready for production yet. It doesn't pass all the tests. A lot of known bugs are no fixed yet.

<321bob321> Syn sponsored by Rustc

<yiannisbot:matrix.org> > <@rucknium> I am sorry to hear that another entity previously used your open source code without contributing back. But keeping code closed source because you are afraid of it being leveraged for commercial purposes is not the Monero way. Couldn't you release it under the AGPL license and avoid the problem?

<yiannisbot:matrix.org> Hi @rucknium:monero.social and everyone, sorry I had to leave last night. Thanks very much for the thoughts. We understand the concerns raised regarding open-sourcing the crawler code. As Dennis mentioned earlier, we generally always operate under FOSS as can be seen at: github.com/orgs/probe-lab/repositories.

<yiannisbot:matrix.org> After internal discussion we'd like to suggest releasing the Monero extension under the PolyForm Noncommercial license (polyformproject.org/licenses/noncommercial/1.0.0). This means anyone in the community can read, audit, reproduce, and build on the code for research or non-commercial purposes, which covers everythin [... too long, see mrelay.p2pool.observer/e/l46imfwKYVJyQWli ]

<yiannisbot:matrix.org> [... more lines follow, see mrelay.p2pool.observer/e/l46imfwKYVJyQWli ]

<kiersten5821:matrix.org> i think it's important to have short typeable addresses as many users type them often

<ofrnxmr> I always type mine manually, just to make sure that i have a typo

<kayabanerve:matrix.org> I think typing addresses is a very uncommon use-case, PQ addresses will be of such length that use-case becomes infeasible regardless, so we can actually go as far as we want with their lengths until like, the length of other things start to break (QR codes, IRC messages, copy/paste buffers, etc.). For visual comparisons, we r [... too long, see mrelay.p2pool.observer/e/jOSqqvwKT0VlMm5i ]

<kayabanerve:matrix.org> Note: The proposed license above is not FOSS. That isn't to say I'm against its usage or reasoning for it, but I want to clarify that if there's a requirement for FOSS (e.g. by the CCS), that is insufficient unless an exception is granted (however that would happen).

<syntheticbird> > i think it's important to have short typeable addresses as many users type them often

<321bob321> Copy pasta and double check

<kayabanerve:matrix.org> It wasn't claimed to be FOSS, I just want to be clear it doesn't check the "FOSS" box in case that matters as some people may not immediately understand that.

<syntheticbird> > I think typing addresses is a very uncommon use-case, PQ addresses will be of such length that use-case becomes infeasible regardless

<kayabanerve:matrix.org> (Sorry if this feels like a drive-by, it isn't, I just get very specific about FOSS licensing)

<syntheticbird> THE DUALITY OF MAN

<syntheticbird> I hate monero.social

<jpk68:matrix.org> As it happens, the length of proposed Jamtis addresses are such that a different encoding approach might make the difference between addresses being able to fit into a bio/text field or not, etc.

<syntheticbird> The instance is dying and it ruined my joke

<jpk68:matrix.org> Base62 (even with keeping the prefix in Base32) would mean a 94-char reduction. Just saying ;)

<321bob321> Reminds when sites strict password characters length

<kiersten5821:matrix.org> > <@kayabanerve:matrix.org> I think typing addresses is a very uncommon use-case, PQ addresses will be of such length that use-case becomes infeasible regardless, so we can actually go as far as we want with their lengths until like, the length of other things start to break (QR codes, IRC messages, copy/paste buffers, etc [... too long, see mrelay.p2pool.observer/e/m-mmrPwKbDBrbjJC ]

<kiersten5821:matrix.org> typing is the most secure and private transmission between two nearby computers, the alternatives are you have to go over the internet, or plug in a webcam plus other software to read the qr code, or stick a usb or other storage media into both. it's just not clean. typing is very important. even 100-200 chars is fine for typing but 1000 chars is reaching

Just type 200 chars, 5 times

<jeffro256> Recipient IDs allow sending the full arbitrary long address over an insecure channel, and confirming it with ~26 characters of typing

<jeffro256> Just FYI

I updated the details table with address sizes for a hybrid base32+base62 encoding. monero-project/research-lab #151#issuecomment-4281932714

Unfortunately, I had to add an extra ECDH key to option B addresses, otherwise FilterAssist tier becomes impractical for light wallets. BC1024 is 568 chars.

jeffro256: The recipient ID has been rebranded to "visual checksum", but it's basically the same thing. Wallets are only supposed to show the first 30 chars of addresses for manual comparison purposes.

<jberman> Update: we've decided on Quarkslab (Vendor 4) for Phase 1 of the FCMP++ integration audit

<jberman> They indicated that they can start ASAP (end of Apr, early May), and so we would expect it to be complete by early July, which should not end up blocking the FCMP++ timeline.

<jberman> Repeating, Quarkslab committed to 400 man-hours of work and estimated a 6-8 week timeline from start to finish, at a rate of $50,000. Here is some of their relevant xp:

<jberman> blog.quarkslab.com/security-audit-of-monero-bulletproofs.html

<jberman> blog.quarkslab.com/security-audit-of-dalek-libraries.html

<jberman> blog.quarkslab.com/audit-of-the-mim…le-integration-inside-litecoin.html