20:20:35 <plowsof> should bulletproofs++ still be listed on getmoneros roadmap? if yes, "ongoing", "upcoming" "proposed"? cc jberman kayabanerve
21:56:49 <br-m> <neptunian:unredacted.org> Hey all. This isn't as related as I want it to be, however, this is important. Please read.
21:56:49 <br-m> <neptunian:unredacted.org> Github Workflows are soon to be exploited. The fix is to temporarily turn off pull requests with workflows. It can drain env variables to a tunnel via the workflow.
22:01:16 <br-m> <neptunian:unredacted.org> That or have pull-requests not be approved by default. It works when the workflows yaml file includes
22:01:16 <br-m> <neptunian:unredacted.org> "on: pull_requests"
22:03:59 <selsta> afaik it does not run for new accounts anyway
22:06:39 <br-m> <vtnerd> Yeah luckily many (most?) don't have secrets for on pull request actions
22:53:29 <br-m> <sgp_> plowsof: afaik no, it can be removed
22:53:40 <plowsof> 👍 thanks
23:55:46 <br-m> <chaser> does/could Carrot do away with the issue that the tx_extra betrays (via ADDITIONAL_PUBKEYS) when a multi-out transaction involves at least one subaddress?
23:55:46 <br-m> <chaser> https://github.com/monero-project/monero/issues/9351