14:02:20 <br-m> <jeffro256> @tevador re https://github.com/jeffro256/carrot/pull/16#issuecomment-6372088894: would it be an acceptable change to Jamtis to have s^ctx_sr bind to enote_type, and not have k_a bind to it?
15:05:15 <br-m> <jpk68:matrix.org> Was this already known?
15:05:15 <br-m> <jpk68:matrix.org> https://github.com/monero-project/monero/issues/11586#issuecomment-6381396369
23:52:29 <br-m> <jeffro256> Yes, if I understand it correctly. 
23:53:32 <br-m> <jeffro256> The mitigation is to reject making an OutProof to an address which shares your main view pubkey, but doesn't share the spend pubkey (i.e. isn't your address)
23:54:09 <br-m> <jeffro256> The code doesn't reject this yet, but this was on my TODO when tackling this 
23:55:14 <br-m> <jeffro256> Oh wait, this is slightly different 
23:55:57 <br-m> <jeffro256> The mitigation here would be this https://github.com/jeffro256/carrot/pull/16