Alright. When emulating mobile phones on desktop i would see the desktop layout of the page. If it works on people's phone good. I'll leave mobile support as it is and just fix where needed

How are users going to authenticate the generator page?

If compromised, it presents a similar catastrophic risk as using compromised binaries.

But all binaries are signed

And if they use a hash to download the generator page, verify and run it, is it realistically doable on a phone?

Good point. I was thinking to not include the signature for the page (for the verification), but if it's preferred for security reasons it can be done. Only downside i see is that it will need to be signed again at every edit

Hmm I think it's too much blindly trusting that getmonero.org server is never compromised. I don't think it's a sensible risk design. Compromised entropy in generator could go unnoticed for a long time and be a disaster

But I don't think me signing for every little edit is doable in practice either

How often do we want to edit this? If we don't beautify it at all, we probably don't need to touch it ever?

website has problem

resolving to a prohibited ip?

yes

ccs is fine though. reg the generator - the original file was modified 2 years ago, seems to be 'set in stone'

checking

cloudflare complaining, but we haven't changed any conf recently. I don't see anything particular.

fluffypony should be able to have a look in an hour

thanks!

seems fine now

yeah looks good for me too. Might have been a cloudflare hickup

weird

yeah must have been

<binaryFate> "How often do we want to edit..." <- yeah we would mostly only lose the possibility of making it multilingual.

so, i'm updating the text, fixing some minor css issues and adding other things like headers and links back to getmonero.

the only thing that might need to be changed would the links, so the problem of edits should be avoided

no multilingual is ok. I'd prefer a barebone tool that does the job and can be deployed and used securely, rather than a more good looking security nightmare...

maybe an alternative would be to host it at github monero-project and simply link to it from getmonero.org/generator. With signed commits.

agree. We can also have a dedicated repo if that's seen as useful, but adding the standalone page to jekyll is not an issue

it's not about being "good looking" btw (i would also be the worst choice for working on it in that case), more about making it more accessible as possible, but yeah i see how for security reasons is better to keep it barebone.

<plowsof11> "ErC i did not think about this..." <- Opening the link from mobile now. Looks the same of what i was seeing on desktop. I does work, but it's not really mobile friendly. Text and buttons are very small

The issue right now isnt presentation, but a fast removal/replacement of the bad link

Shouldn't have had links on website being blocked by ____

Bad* links

anyone is free to already pr the removal of the old references if deemed urgent. Since this is something that needs to be stable and changed as little as possible, better do it once but do it right

i don't consider changing the link so urgent because they point to mymonero, not a random website

I had started a pr to remove. Planned to link to only the zip. Since its intended to be used offline anyway, I didnt care about the online HTML link. And easier for translations.... (full message at <libera.ems.host/_matrix/media/v3/do…5a2cbada14f9355f577577bd002b42a46f3>)

Moneroaddress.org or whatever isnt anybody we know, and mymonero isnt a paper wallet.

That link should not be there. Mymonero being the destination is a terrible justifcstion for someone who is reading an "official" source for how to _securely store monero_