-
MaddieKalanc:frei.chat idk but stormycloud is a realativly new player with an okay reputation.
-
m-relay<plowsof:matrix.org> PSA for p2pool miners who use --socks5 proxy and a 3rd party (malicious) node nodehttps://www.reddit.com/r/Monero/comments/1757ms3/psa_for_p2pool_miners_curls_cve202338545_can/ , is Monero effected?
-
m-relay<anarkiocrypto:matrix.org> gingeropolous - About old.reddit.com/r/Monero/comments/17…every_time_you_need_to_make/k4d6omd
-
m-relay<anarkiocrypto:matrix.org> I wrote about a skip sync feature here: codeberg.org/anarkio/ideas/src/branch/main/monero-skip-sync.md (Also: bounties.monero.social/posts/79/0-1…kip-sync-feature-to-a-monero-wallet)
-
m-relay<anarkiocrypto:matrix.org> It's possible with current commands (auto_refresh = false, refresh(current_blockheight), scan_tx), just not implemented in a wallet yet.
-
m-relay<anarkiocrypto:matrix.org> Syncing 1 month in Feather Wallet in Whonix Worktation (10+ year old laptop, slow and limited internet, remote node) takes 30~ minutes and 500~ MB. Multiple times I needed to copy my TXIDs, restore the wallet from seed (with today as the restore height) and import each input with scan_tx (mainly to save mobile data, waiting 30 minutes is not bad). Skip sync (+ scan_tx to import kn<clipped message>
-
m-relay<anarkiocrypto:matrix.org> own TXIDs) would help a lot.
-
plowsofthanks anarkiocrypto, iirc after you raised this suggestion it was put onto feathers todo list by tobtoht. as long as the wallet stores a list of "blocks we didnt scan" (for UX) it should work perfectly
-
sech1plowsof afaik, Monero node and cli/gui wallets don't use curl
-
plowsofah thanks sech1. hopefully hinto can get to updating GUPAX asap
-
sech1gupax just downloads the latest p2pool release when it's available
-
plowsofoh, nice
-
sech1but I looked into this CVE further, and I think p2pool is not vulnerable to CVE-2023-38545 because it doesn't enable HTTP redirects (they're disabled by default)
-
plowsofworst case scenario is that "people will update p2pool to the latest version" so its a win-win
-
sech1and yet another reminder to run your own node
-
plowsoftfw you are a 3rd party node enabler :( please forgive me for my sins
-
m-relay<monerobull:matrix.org> so this curl cve just enables people to trigger updates or what is going on?
-
m-relay<karano:poddery.com> hello
-
m-relay<karano:poddery.com> where does workgroup meeting happen ? how to join from matrix side ?
-
gingeropolousanarkio, thats awesome.
-
gingeropolousyeah storing which blocks were skipped for future scanning would be a must. but if you need to transaction immediately, then you can load wallet and do it. and then as the wallet idles it can scan the backlog
-
m-relay<anarkiocrypto:matrix.org> Scanning the backlog would waste limited mobile data, so there should also be an option to use only 1) scan_tx or 2) sync a specific range of blocks only (e.g. October 1 - October 3) and skip the rest.
-
gingeropolousindeed