<ofrnxmr[m]> "Monero matrix.to/#/#..." <- Will I ever be able to join most of those rooms? 🤔

Voldemort needs to be permanently outlawed!

<LeriaReynolds[m]> "brighteon.com/56e71e..." <- > <@common_sense2021:matrix.org> brighteon.com/56e71e66-980c-47ba-8d39-77bc89420778

MoneroTalk on Brighteon wen?

Monero content creators should move to brighteon after this gesture

<apotheon> "mlcboss: I misunderstood your..." <- yes i have two option in local monero , sell my monero to cash or direct bank transfer.

i do not want any trouble or a bank decided to restrict my account and asking me question

the monero is legal is not from drug selling or laundering , what im doing is legal and i pay taxes

The person sending you the bank transfer could be involved in all of the above ^ and now you're guilty of the same crimes until proven innocent

<plowsof11> "The person sending you the..." <- i don't get it , how does it work?

why use a bank account for doing illicit activity , isn't those are very traceable

Depends on location

why? Bcuz in nigeria they dont check for counterfeits. Or bcuz in country b only the sender is liable.

Incountry c, youre an accomplice

Would you prefer to neet ofrnxmr in an alleyway? With cash?

Thats not private at all.

cant get much more Traceable than fingerprints and physical location with literal eyes on you

ofrnxmr[m]: i usually use cash transfer service , less risky.

cash by mail is also fine but it is risky but not as meeting in person and handing the money directly

so absolutely no

First you say

> the monero is legal is not from drug selling or laundering , what im doing is legal and i pay taxes

then you say

> why use a bank account for doing illicit activity , isn't those are very traceable

Make your mind up

Leta meet up at the 3rd light lamp in the park after dark

Make sure your bot followed

s/bot/not/

mlcboss[m]: > <@mlcboss:matrix.org> i usually use cash transfer service , less risky.

> cash by mail is also fine but it is risky but not as meeting in person and handing the money directly

Yeah? Ask drug dealers how much less risjy wrench attacks are

"i usually use"... dont you mean "ive never used.. im learning"

tf lol. Btw everybody, hoarding IS investing

Afaict theres literally absolutely 0 difference

Synonyms

Note: Investing is not trading.

note2: Investors are not traders

<apotheon> "I'd say "hoarding" in its most..." <- ^

Context

Investing and hoarding have nothing to do with ROI

You dont invest for the sole purpose of selling. That would be a x term investor, or a trader

Your retirement fund is an investment.

Its fkn hoarded fir 50 years

😭😭😭😭😭 im sorry. Im ranting bcuz ppl just make shit up, trying to sound smart

Nothing i dislike more than matter-of-fact statements that wholly opinions pulled from nowhere

* statements that are wholly opinions

mlcboss: you want to swap xmr for _____

youll have drawbacks from whatever the pair is.

you cant atomic swap fiat. You need to give up privacy in any case

Bank deposit? They have your banking info, you have insurance

cash in person? They have everything if they want it

cash online? Same as bank deposit, perhaps less.

<ofrnxmr[m]> "Make your mind up" <- most of my money is on monero , i invest on it and no i don't get it from illicit activities.

i only sell them when i really needed cash to live

i currently just sell it to cash directly via cash transfer service

A) in private but must share your info

B) decentralized but in public for all to see

C) centralized and traacked at every step, but in private.

My monero comes from selling illicit goods to criminals in sanctioned countries

But i digress

ofrnxmr[m]: dammm

badman

ofrnxmr[m]: > <@ofrnxmr:monero.social> Bank deposit? They have your banking info, you have insurance... (full message at <libera.ems.host/_matrix/media/v3/do…fb63a4ab04281244c22910ee2228a1ebba2>)

ofrnxmr[m]: what does that include?

Thats more offtopic than monero

mlcboss[m]: > <@mlcboss:matrix.org> there is no privacy in fiat , you basically will get recorded

>

> atleast when using a cash transfer service my bank account will not get restricted and i get to asked a bunch of question

cash deposits and transfers are literally more anon than monero due to the possibility of it being cracked being 0 while XMR is higher theoretically

mlcboss: right. I use transfer services and force security qs etc to ensure i did my due diligence to ensure the funds arent stolen from grandma via IRS phone call

susman1[m]: 0 is false

ofrnxmr[m]: ?

More like 100

There are backdoors built into every regulated money transfer service

no not cash

it literally is not digital

monero is

the theoretical risk is higher with monero

okokokok

Youre talking about hard paper

ofrnxmr[m]: yh

But still, i can hand you fakes

fair

also they are both safe to the point of XMRs higher risk not being a problem it is only in theory

and monero is very close to it and ever better than cash in quite a few scenarios

Lolololol i just noticed bch rally

What a musky rug

80% in a week or so, now ahead of xmr

Am I the only one that nevers buy XMR directly?

I'm always buying BTC, sending it to a lightning wallet

and then doing a swap from lightning to xmr

I lose like 5% on the whole charade but I least know for a fact nobody knows I bought any Monero at all.

louissignet[m]: localmonero accept alot of payment methods and it's P2P

for fees is depends on payment method your paying

louissignet[m]: but why do you that?

i usually end up doing either ltc -> xmr from an atm or on-ramp from an exchange i can deposit to without bank fees and swap btc -> xmr. there’s almost always a nearby atm.

the nice thing about the exchange other than privacy concerns is that they pay the nasty transaction fees.

still not ideal. i would like to do it more directly

ofrnxmr[m]: The term "hoarding" has strong negative connotations and, culturally, tends to imply a lack of utility purpose. The term "saving" tends to mean it's there for a purpose such as a "rainy day fund" or building for a big purchase. Obviously, people can use words differently. To communicate effectively, one must establish meangings of terms in the present conversation, by means

somewhere between assumed common understandings or explicit agreement. You can get angry with me for trying to do that, but it's not every productive to take that attitude. If you don't want to talk to me because you like using the word "hoard" to mean "I like having two pennies to rub together as a good luck charm" or whatever meaning you keep in your head, then you have fun with that, and you

don't have to interact with me if you're just going to get pissed for no good reason.

invest =/= save

On the 'regulation talk' ArticMine made a point about the risk of a specific bitcoin UTXO being used for a crime. And that UTXO being linked back to you in the future.

That's a very important point. I summarize it as follows

I'm glad people a re figuring that out

any recommendations for email services that accept monero?

why not use some free email service like tutanota

scragglez[m]: > <@scragglez:matrix.org> any recommendations for email services that accept monero?

that's a good question. I could see an email service that I can pay monthly a small amount (couple of bucks) with XMR being useful.

otherwise you could rent a cheap vps and self host a mail server, this is the safest most private way

naphtha[m]: > <@naphtha:kyun.host> why not use some free email service like tutanota

mainly in order to avoid giving personally identifiable info, and keeping yourself fully anonymous

Yeah I don't want to do that

naphtha[m]: > <@naphtha:kyun.host> otherwise you could rent a cheap vps and self host a mail server, this is the safest most private way

quite difficult task, that requires constant maintenance and a fair bit about how mail servers work

yet

but love the avatar naphtha bang bang

there are plenty of vps providers that accept monero, including kyun, but some of our ip subnets are blocked by spamhaus, you should check spamhaus for any blacklist

i heard privex is good as well

scragglez[m]: 3huunnnnaaa

plus warming up IPs, not getting sent to spam/blocked

k4r4b3y[m]: > <@k4r4b3y:karapara.net> therwise you could rent a cheap vps and self host a mail server, this is the safest most private way

> quite difficult task, that requires constant maintenance and a fair bit about how mail servers work

>

check out docker-mailserver

it's what i've been using for years

wait, you work with kyun naphtha ?

k4r4b3y[m]: > <@k4r4b3y:karapara.net> > <@naphtha:kyun.host> why not use some free email service like tutanota

> mainly in order to avoid giving personally identifiable info, and keeping yourself fully anonymous

>

You don't have to provide any personal information to use Tutanota.

simplest method i found

scragglez[m]: i run it lol

no shitt

Maximillian[m]: > <@maxi:millian.se>

> You don't have to provide any personal information to use Tutanota.

do they allow user registrations over their tor hidden service?

Oh, I think they don't.

That's awesome man. I love it. Especially y'alls node library noderowallet. Excellent stuff naphtha

theres some free mail provider that's tor only but i forgot the name

scragglez[m]: thanks brother

oblock <3

Maximillian[m]: > <@maxi:millian.se>

> You don't have to provide any personal information to use Tutanota.

On paper, protonmail say this, too. However, in practice, it is (was) near impossible to stay completely anon and register an account on PM.

k4r4b3y[m]: > <@k4r4b3y:karapara.net> > <@maxi:millian.se>... (full message at <libera.ems.host/_matrix/media/v3/do…2b605d7b85bb5cc217ea886dce39d018cec>)

Did you do the frontend/web dev work yourself?

k4r4b3y[m]: > <@k4r4b3y:karapara.net> > <@maxi:millian.se>... (full message at <libera.ems.host/_matrix/media/v3/do…3e7024fa0fe24bd6a2caa443bda3910c2e6>)

scragglez[m]: i do everything myself lol, i work with some people but they don't do any development or sysadmin work

Maximillian[m]: > <@maxi:millian.se>

> Registration has to happen over a regular connection but they then support using the service over Tor. Not the best.

Not the best, indeed. So, here is a niche that some new email service can occupy. XMR-paid emails, with completely anon registries, no personal identifiable info required. The spam deterrent is the monthly XMR payment of couple of bucks.

I like the retro pixel style

k4r4b3y[m]: > <@k4r4b3y:karapara.net> > Registration has to happen over a regular connection but they then support using the service over Tor. Not the best.

> Not the best, indeed. So, here is a niche that some new email service can occupy. XMR-paid emails, with completely anon registries, no personal identifiable info required. The spam deterrent is the monthly XMR payment of couple of bucks.

>

_writing this down_

Yeah, email service would be fun to set up. Shouldn't be terribly difficult to set up as a service - spin up some dovecot servers

Would be a great excuse to play with: jmap.io

running it wouldn't be the hard part, having a server ran by someone you trust not to shut everything down once some retard inevitably decides to do something illegal using your service is the hard part

not that anything illegal will be allowed, but some providers don't even let you handle the problematic customer before shutting you down

meant to send this message here but does anyone know why the monero.town lemmy instance is down?

monerobull:

scragglez[m]: Under ddos afaik

:(

this is why we can't have nice things

It's dos from a Lemmy exploit

I'm in Prague for monerokon, will try and fix it on Tuesday

oh interesting, is there a CVE/bug tracker for it?

monerobull[m]: spez is working overtime

lemmy is....different

why the fuck do they have to use websockets for everything

ay yo, what's wrong with websockets

though that is surprising it's needed for a web app like that

nothing but i havent heard of anyone using them for literally everything

are sockets used to push updates to home feed? Just an open socket listening?

a chat system sure

but they use it for shit like login

chat system or game yeah

register

every action

ah that's odd

Even newcomers can end up developing complex, large applications. It may be that they learned about WebSockets and came to like them, but they don't know when not to use them.

it's like json (other reason, but it add inefficiency literally everywhere)

* it's like json (other reason, but it add inefficiency literally everywhere)

Only thing it speed up is development speed.

It happens and it's completely understandable. But we do suffer structural issues from it. 😋

websockets are great for constant data flux.

say for example, You you pull live data from exchanges.

s/You/When/

But people don't use the best tool for there application.

They use the easiest tool or the tool they know the best. Even if it's extremely inefficient to do so.... I look at you, Matrix

RavFX[m]: > <@gfdshygti53:monero.social> it's like json (other reason, but it add inefficiency literally everywhere)

> Only thing it speed up is development speed.

> Only thing it speed up is development speed.

Exactly. And it makes communication back and forth more controllable. You get to direct the flow inside a defined 'conversation'.

RavFX[m]: > <@gfdshygti53:monero.social> But people don't use the best tool for there application.

> They use the easiest tool or the tool they know the best. Even if it's extremely inefficient to do so.... I look at you, Matrix

lol whats wrong with matrix

i mean the whole event system and shit is pretty bad

i love the way revolt & discord do it

way better

naphtha[m]: Json for everything right?

A binary protocol would be extremely more efficient (on both bandwidth and client/server CPU usage)

naphtha[m]: and using xml for pretty much everything

RavFX[m]: > <@gfdshygti53:monero.social> But people don't use the best tool for there application.

> They use the easiest tool or the tool they know the best. Even if it's extremely inefficient to do so.... I look at you, Matrix

you just perfectly described my personal project development methodology

But making a binary protocol for your chat program and dealing with raw socket is too hard for most people or sonething

RavFX[m]: > <@gfdshygti53:monero.social> Json for everything right?

> A binary protocol would be extremely more efficient (on both bandwidth and client/server CPU usage)

i think the point was to make it as easy as possible to develop things for it

they seem to care about backwards compatibility as well

thats why the xml everywhere comes from i think

naphtha[m]: So many things! But I wouldn't bash it at this point. It's here to stay, and XMPP had had its chance for many years.

i mean if you use a client that allows you to view sources of matrix messages like cinny

Yeah, it's also my point.

It make it easy, and extremely inefficient.

Backward compatibility can be down when you design you're own binary protocol

s/down/done/

check the source of a reply message

Most matrix client sux

they include the whole message you're replying to in the body

like its contents

That's a major flaw with Matrix; the permanence of events.

naphtha[m]: That can be also done with a binary protocol, add a message id, and when reply, use a specific opcode for message reply that include a reply-to id somewhere in the packet

But that's about where I care. They're still working to improve it in many ways.

Maximillian[m]: Well, even if they where not, I guarantee you that there are scrapper in all Monero matrix room, would change nothing to not keep persistence

I mean that it's bound to grow in size.

Ah yeah, that's a good point

The only way to clear is to routinely create a new room and delete the old.

In stead of in-room history deprecation existing.

They are working on server-to-server sliding sync. So that not all participating servers will need to have all messages at once.

Archieve:matrix.org

DanrdarkIsnotthe: archive.matrix.org is neat.

<Maximillian[m]> "That's a major flaw with Matrix;..." <- agreed

I do think the UI should make it clearer to a member of a room what the rules are; whether it's public to join or public to view, which the participating servers are. The latter they're actually working on.

lol why did matrix hq ban their own service

naphtha[m]: @archive:matrix.org? Could be that they already suffer from a lot of traffic and this made it worse, possibly.

Probably, scrapping every room

why would they care about scrapping their own service?

isnt it scraping? lol

naphtha[m]: Scrap that. 😉

anyone used njal.la to register a domain?

no but i heard they suck

try nicevps, heard good things about them and they allow 100% anonymous registration

As long as you don't get .is domain I think it's fine

anonymous as in you don't even have to provide a fake name

but for .is they got many pirate stuff or something related they they got forced to disable them if they did not want to lose access to .is domain totally

love that naphtha obviously for actual vps will have to show kyun love

* that naphtha , obviously for

I do like kyun UI too.

It change from the others vps services lol

thank you, main reason i started it was because i was tired of every single vps provider i tried using whmcs with the default theme and not having any way of managing your vps

felt the need of doing something different

at this point might as well spin up a new js/css framework kyunUI

lmao

<scragglez[m]> "anyone used njal.la to register..." <- Yes, just worked for me.

speaking of domain registrars

epik straight up fucking scammed me out of like 20 dollars

a couple weeks ago

how so? lol

bought the domain and it never showed up in my account

no response from customer support

i opened a dispute on paypal but they allow like 2 weeks for the merchant to reply and dispute the dispute

after which you have to manually change the claim to something else i forgot what its called or else the claim gets dismissed

i forgot to change the claim of course so it got dismissed

damn, respect the hustle

lol

dont hate the player hate the game

its a sad period for free speech

poa.st getting hacked, kiwifarms forced to go tor-only despite being 100% legal under us law, epik going bankrupt

not that i ever used poa.st or kiwifarms but its still sad

never heard of either of those

poa.st landing page does seem neat though, lemmy seems promising if enough communities can get spun up

So the dispute in paypal you have to manage it yourself?

Thats stupid

scragglez[m]: poa.st is just a fediverse instance populated mostly by edgy people, kiwi farms is a forum where autists talk about other autists and make fun of them, their so-called "lolcows"

DanrdarkIsnotthe: yep

Maybe looks good for there kpi.

Dispute resolved winrar

DanrdarkIsnotthe: paypal is stupid and sucks in general

xd

<k4r4b3y[m]> "> <@maxi:millian.se>..." <- > <@k4r4b3y:karapara.net> > <@maxi:millian.se>... (full message at <libera.ems.host/_matrix/media/v3/do…f7187af262a3b750eee6b659edc1a7276da>)

<scragglez[m]> "poa.st landing page does seem..." <- just take a look at this short list of other instances blocking them to get an idea of why it got people so mad that they hacked them fba.ryona.agency/?domain=poa.st

dang that's a high score

So they(poa.st members) got mad that ontop of being blocked by many servers they were also hacked?

no, i was saying the people that blocked them got so mad that they hacked them

oh okay that makes more sense

also what are these 2001 timestamps doing

that's not when the beginning of the universe and UNIX were created

no clue

probably just the default date for missing data

Hey guys, is there need for a working randomx vanity generator with gui?

why do you need a gui for a vanity generator

I do not

read the question.

ah yeah sorry got a headache

ive been thinking of making a wasm version of mkp224o so it can be ran from a browser

<comradeblin[m]> "Hey guys, is there need for a..." <- no but there is for a email service that's privacy focused and accepts monero

I'll give you 5$/month for it

scragglez[m]: I'd need a dedicated server for that to make a mail server, and custom domain costs

I am not sure it thats worth it, but if there is enough people, I could do it.

:use me ask an "I need it" button:

<scragglez[m]> "I'll give you 5$/month for it" <- Rent a server at Kyun and install Mailu?

s/server/VPS/

our 4 euro vpses are constantly sold out 😿

cheapest offer rn is 8 eur a month

Can install you're own iso and have vnc access I think so you can also encrypt you're VPS

I recommend at least 2GB of ram for a mail VPS, if you want to AV too

yeah but full disclosure i can read the vm's ram so it's possible to get the disk encryption key

this is true for every single vps provider

naphtha[m]: true

except for google cloud with their confidential computing stuff

>tfw too stupid to understand cors

app.use(cors)

ez

literally what I'm doing

iirc safari and other webkit browsers will block cors requests sent with *

so you have to actually specify the domain

Right now everything is localhost just on different ports

just trying to get session from web app to validate it's a legit api call

<naphtha[m]> "app.use(cors)" <- lol had quickly hardcoded the fetch to have `127.0.0.1` and http was populating origin as "localhost"

i have no idea where else i could ask this

but did the exploit used by the fbi that exploited gnome videos to get the ip of some retard that was extorting children for cp through facebook back in 2020 ever get released?

the fbi having a 3 year old 0 day is kinda worrying to me

and it sounds like something even worse than what they claim because to get access to the clearweb from tails requires root

you think they just have 1?

which gnome videos doesn't have

idk man

i hope not

you happen to have a link to that?

There are probably a bunch of n-days associated with videos/codecs but not sure if that makes you feel better naphtha

thanks for the article

yeah its worrying

relevant: usenix.org/conference/usenixsecurity23/presentation/vasquez

not that i ever really cared about opsec that much i mean theres plenty of ways for law enforcement to find my identity without even touching my computer, but at the same time i'm not doing anything super illegal

Google search?

DanrdarkIsnotthe: no results for any cve

For your id!

ohh

lol no but i pay for servers and domains and shit using my real name

Honestly based on the one article it was something that exposed his IP address

yes, thats why its strange they said its an exploit with gnome videos because obviously it doesnt have root

they would've needed a privilege escalation exploit

But privilege escalation exploit are quite common.

in linux?

yes

yes, they pep quite regularly

s/pep/pop/

it could've been something very trivial

Last one I read about was about using netfilter to escalate 😂

I'd bet it was tbh

also could've been something stupid with web rtc

I would not trust any Linux if someone breach local

i mean i know privilege escalation for linux existed but not that it was common

except Qubes maybe, if it breached "local" in a VM, assuming there is no know working XEN escape available at the time of the attack

They get patched fast but there plentyfull

some of them are like >5-10 years old sometime

naphtha[m]: It's pretty common yeah

I really wonder what exploits the glowies have in there collection