00:46:20 Binaries for v0.18.3.3 are now available at https://www.getmonero.org 01:07:57 Does this have MRL 108/109 patch ? 01:31:02 Can whoever runs the Monero Git repository publish the latest source code? The latest version on Github is still 0.18.1.0-c8214782f. 01:34:58 Because the source code Tarball is completely useless when it comes to compiling Monero by yourself. 01:35:44 remiliascarlet: compile release branch or the tag 01:35:48 not master branch 01:36:04 That one is 3 weeks behind, just like master. 01:36:20 not sure what you mean 01:36:43 there hasn't been anything merged since 01:36:50 I mean that the `release-v0.18` branch is 3 weeks behind, same as `master`. 01:36:57 it's not behind 01:37:12 And yet a new version of Monero came out only 1 hour ago? 01:37:37 yes, it took a while to update the website and put out the release 01:37:38 And if it's not behind, then why is the compiled binary on version 0.18.1.0-c8214782f.? 01:37:54 because you compiled the master branch and not the release branch 01:38:16 master branch isn't kept up to date with version number changes 01:39:41 release-v0.18 and v0.18.3.3 tag is exactly what was released today 01:39:44 I'll check a bit later, I'm in the middle of compiling (I had to copy over the entire ./external directory from the Git repo into the source of the Tarball to get the compilation to work). 01:40:05 And since I'm compiling on a Core 2 Duo P8700 machine, it will take a while. 02:19:51 Ring Signatures for Secure Online Voting w/ Vasilii Rogin of CryptoPoll / EPI 305 (MT 305) 02:19:52 TODAY'S 🎙SHOW: Douglas Tuman interviews Vasili, a software developer from Helsinki, who has developed an application called CryptoPoll that utilizes the ring signature concept from Monero. 02:19:52 The application aims to enable anonymous voting, surveys, and whistleblowing by leveraging the privacy features of ring signatures. Vasili demonstrates how it works and explores potential use cases for CryptoPoll. 02:19:53 Watch Here (YouTube) ➡️ https://youtu.be/83ygMo5Ml4M 02:19:53 Watch Here (Odysee) ➡️ https://odysee.com/@MoneroTalk:8/ring-signatures-for-secure-online-voting:9 02:19:54 Listen Here 🎧: https://www.monerotalk.live/monerotalk-305 02:19:54 Coffee & Monero, Go to Gratuitas.org today! 02:19:55 Monerotopia23 confer vids: monerotopia.com/videos 02:19:55 FOLLOW US https://monero.town/u/monerotalk & https://mastodon.social/@monerotalk 02:19:56 Thank you to sponsors, u/cakelabs and u/Stealthex_io as well as u/sunchakr for making these interviews possible! And of course our listeners and supporters for making 02:19:56 Monero Talk possible! 02:19:57 Podcasts 🎧 : 02:19:57 iTunes: https://podcasts.apple.com/us/podcast/monero-talk/id1445930212 02:19:58 Spotify: https://open.spotify.com/show/60lQ05X8lcuXv71fhi6hl7?si=SL2rlvDPS0q68169NlCrtQ 02:19:58 If you enjoy our show please Subscribe, Like, Share, Rate our YouTube Channel & Podcasts. This will help us grow and spread Monero content! 05:47:46 selsta: OK, confirmed that what you said is indeed correct. 06:50:55 no of txs: 1445, size: 9266.54 kB 06:50:56 Cheap attacker is back 07:03:54 It looks different this time 07:04:10 A lot of 146/2 transactions - over a hundred of them 07:04:27 It's probably the previous attacker shutting down and consolidating the outputs they used 07:04:56 It's over 15k outputs if my math is correct 07:06:24 I counted ~150 transactions 07:41:29 Big whoop 07:46:40 https://github.com/monero-project/research-lab/issues/108 07:46:40 https://github.com/monero-project/research-lab/issues/109 07:46:41 Still open 08:13:04 Everyone, just a late reminder to any Australians to protest against cash being slowly removed from the system by getting some cash from an ATM. You may think "Big deal, we still got monero" but monero is not big enough yet. We must fight and buy ourselves time before cash is removed and everyones money is just a number in a corrupt companies data center. 08:13:04 We lose cash now we lose our freedom for a long time. 08:13:38 "big deal, we still have monero"? Do you realize that this would mean you'd need to carry a smartphone everywhere just for basic payment?? 08:14:01 I withdraw all my earnings immediately anyway, jokes on you! 08:43:21 BlueyHealer: "Do you realize that this would mean you'd need to carry a smartphone everywhere just for basic payment??" Order everything online to work around that problem. 08:43:48 Or maybe something like a paper-based QR-code if that's possible? 08:46:47 Are there any software for monero donations where it keeps track of all donations made to monero donation wallet address? 08:46:47 Useful for organizations 08:48:02 BTCPay supports Monero. 08:49:01 https://sethforprivacy.com/guides/accepting-monero-via-btcpay-server/ 08:50:22 I tried to set it up before, but it was a total pain in the ass. 08:51:29 Another one is Shadowchat, but it's more useful for live streamers: https://gitgud.io/greyarea/shadowchat 09:28:41 <123bob123:matrix.org> like a monero wallet? 09:30:43 relavant bounty remiliascarlet https://bounties.monero.social/posts/77/7-052m-make-btcpay-server-configuration-accessible . Monerokon used btcpayserver to run their donation rounds 09:31:22 <321bob321:monero.social> i give up its like using monero.social is on chain and matrix.org is LN 09:32:27 Woshlist (multicrypto) is somehow still functional, example here: https://rucknium.me/donate/ and theres also monerofund.org (which appears to be offline Rucknium) 09:33:13 basses: I would assume on getmonero.org 09:33:28 Matrix dot org is LN -> lol 09:34:05 plowsof: It's not just the configuration, the entire installation process is a complete pain, especially if you're like me who doesn't want to use cope containers. 09:36:06 ofrnxmr was working on a shell script to setup btcpayserver on android, in fact he succeeded 10:41:51 yep? 10:51:32 matrix.org lol 11:16:35 https://libreddit.bus-hit.me/r/Monero/comments/1btsmt3/safely_navigating_exchanges_in_2024_insights_from/# 12:17:18 Monero is tanking hard in value this week, holy fuck! 12:27:17 <321bob321:monero.social> Maybe the “usage” spammer is dumping it 13:08:04 i only saw something about this on youtube in the evening, im surprised i watched it as it was from sky news. reddit failed here. 13:12:04 reddit fails everywhere 13:16:06 damn you made me check price. well...its not the only one tho. 13:16:09 sorry jp the spammer is not back 13:16:14 please hold............. 13:31:03 Compared to? 13:31:14 https://matrix.monero.social/_matrix/media/v1/download/monero.social/FrrmlvnNcwtaERRukYuEDUZR 13:48:00 basses, thank you for the reddit post 13:48:03 @basses 14:17:49 https://github.com/keepassxreboot/keepassxc/issues/10535#issuecomment-2032146436 14:17:54 > 14:17:55 I prefer donations in a currency that can pay the bills. 14:18:07 > I prefer donations in a currency that can pay the bills. 14:26:43 So BTC/ETH and SOL (!!!) can pay the bills? 14:47:24 plowsof: Thanks. Fixed. 15:08:51 BTC can indeed pay the bills... Of whoever receives its fees! 15:25:26 >Chainalysis will continue to be a part of those efforts in partnership with our government customers in Israel, the United States, and elsewhere. We look forward to sharing more updates on these efforts when possible. 15:25:40 Spam of the day is different, A lot more imput than outputs 15:25:45 https://matrix.monero.social/_matrix/media/v1/download/xmr.mx/SuXsWfdcmaxwQThbudgAZWZh 15:25:47 https://matrix.monero.social/_matrix/media/v1/download/xmr.mx/XEmWLWFCxNhONhZuZsanEUwM 15:25:49 https://matrix.monero.social/_matrix/media/v1/download/xmr.mx/SlNPhaNWwQJpdmKFWJzQdmEW 15:27:24 You can't have a sustained spam if you have more inputs than outputs. You'll run out of inputs pretty quickly 15:27:46 I think it's just the previous spammer consolidating to get what's left of their funds 15:28:13 Yeah, really possible indeed 15:29:31 Why doesn't translate.getmonero.org work? 15:31:51 Moneroed 15:32:05 they are currently fixing it for about 1+ year 15:32:33 some real progress was happening lately to finally fix it but they got hit with matrix issues 15:47:35 thanks for the heads up 15:53:43 He is probably a bitcoin extremist 15:53:43 At the speed he closed the issue 15:54:13 A bitcoin extremist doesn't accept SOL 15:54:52 If he has enough money, the 50$ will find another use, idc 15:54:55 ohh, yeah, your are right 16:04:12 my wallet 16:04:53 send link to foss project you are working on 16:08:04 https://github.com/jermanuts/bad-opsec 16:08:10 does that count? 16:10:10 unfortunately no, but I also see no XMR address on that profile 16:10:54 (joke) 16:12:23 might add later in general 16:15:34 divestos, grapheneos, non google appstores 16:16:11 I just realized how most FOSS projects got VC funding or Gov funding (OTF for example) 16:16:48 also Signal 16:17:51 signal is sus 16:21:33 Consider most foss project backdoored and act accordigny. Been saying that since forever because I know how easy it is. 16:21:34 For XZ i think it's no fed but just dude wanting to make money selling 0day on dnm 16:23:22 And wen someone find a backdoor, it become a bug and it get fixed. 16:49:45 According to your logic, consider all software backdoored 16:49:52 https://matrix.monero.social/_matrix/media/v1/download/kernal.eu/TbjcovGTBDzPGTcZwDsvjlNn 16:50:44 According to my logic, consider all software safe from backdoors 👍️👍️👍️ 16:51:00 (my logic = no computer) 16:51:19 if you can choose between "assumed backdoored" and "assumed backdoored without the ability to check" one should still obviously pick the former 16:51:39 SimpleX is much better but already VC funded 16:51:55 I prefer Signal UX/UI 16:52:05 I am concerned about probably 99% of Simplex messages going through the central servers. 16:52:12 conspiracy 16:52:21 and both are better then whatsapp or telegram. don't let perfect be the enemy of good 16:52:40 Like, you can selfhost, but chances are most of your conversations would still go through the central servers. 16:52:41 It's end to end encrypted, without IDs, and you can use it through Tor. I wouldn't be so concerned. 16:53:10 syntheticbird, I HATE UX/UI of Signal. I want to use it without a smartphone, and it doesn't like being used this way. 16:53:21 https://jermanuts.vercel.app/posts/secure-apps/ 16:53:28 You have to use Signal-Cli, which is inconvenient AF. 16:53:36 Still probably better than Electron app tho 16:53:42 you're right. Signal UX on desktop is shit 16:53:55 syntheticbird, yes, indeed, but it's still effective centralization. 16:54:39 That was easy, even Telegram had this! How much would it cost to just have a little box for the SMS registration code? But "fuck you, go eak your conversations to a smartphone first lolol" 16:57:30 I would not mind TUI, but this is not it. You type the command evety time you want to send or receive a message, which is annoying as fuck. 16:58:24 Assume proprietary software (Say windows) is backdored by Microsoft and the NSA 16:58:25 Assume FOSS is backdored by the Glowies if over 100 countries 16:58:25 So yeah, Assume everything is backdoored, it's easier lol 16:59:14 It's what I do. 16:59:14 My only safe machine is my 486 running on DOS 16:59:37 what outcome of that assumption? 17:01:39 It's extremely easy for a proper agency to backdoor foss. 17:01:39 1 - You pull the git 17:01:39 2 - You get your team to stufy the code and work a backdoor 17:01:40 3 - You pull les of contributor with commit access 17:01:40 4 - You run your intelligence on these peoples to know who is the best canditate for bribery 17:01:41 5 - You contact the contributer, tell him about the .patch you made, give him 2M now and another 2M after it get commited in the code. 17:03:10 Microsoft won't allow backdoor that are not necessary (hence probably NSA only) The risk is too hard, if everyone can push backdoor in microsoft code and it get leaked, you can short Microsoft... The cost of doing stupid is very high. 17:03:11 why bother with money if you can just threaten him with death 17:03:11 You can't short Glibc or XZ... 17:03:45 Plus, unlike Linux code (Not specifically the Linux kernel but all the kitchen sink that get included in distribution) is barely audited. 17:03:58 You'll get cancelled from the whole job market and possibly internet as the contributor (unless you were anonymous, it's actually rare to be that outside of Monero dev). Not sure if it's worth 4 million. 17:04:00 why bother with hacking if you can just threaten people with death 17:04:38 Risk of leaking way higher. 17:04:38 Just give him half of the money, the high he will get from the digit hitting his account will make him push the patch without even looking 17:04:59 lool 17:05:06 What is the worse outcome? 17:05:17 no one uses Windows cuz backdoored? 17:05:29 man I'm starting to suspect all the anti-FOSS posting this week is an IC op 17:05:34 nope 17:05:35 Then everyone use Linux even if more backdoored 😂 17:05:55 I'm not anti foss, I actually find that a better development model in general 17:06:12 But you can't just assume foss is better and more secure, most foss project don't get proper audit 17:06:13 Linus bullied bad code multiple times 17:06:33 And even proper audit can't detect well made backdoor 17:06:40 proper audit? 17:07:02 cuz it's expensive and most devs do it for free 17:07:03 unless you want to sponsor security audits 17:07:04 You think glowies will produce bad code? They have the capacity to provide good qualoity code with a small surprise in it 17:07:08 for them 17:07:18 But you just said it, who audit Linux? Only Linus? 17:07:25 NSA contributes to Red hat 17:07:39 if you can't assume a codebase that is capable of being reviewed publicly is on average more secure than a codebase that cannot receive any public scrutiny then you should just defenestrate all your computers and go live in the woods 17:07:49 also made Ghidra 17:08:02 Windows can backdoor whatever they want and deny it happened. 17:08:13 who audits any software, with your logic 17:08:23 Do you have an example of a project that went through a code audit that had a backdoor in it? 17:08:28 Do you know that microsoft developement is segmented, dev don't access to whole code. Onde dev working on X is done with a patch, another dev working on same X look at the code and if approved, the suppervisor who is also auditor for the group working on X also audit the code. 17:08:28 So every piece of code in Windows is double audited 17:09:07 okay Ballmer 17:09:45 bruh lol 17:09:46 https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html 17:09:46 Siren 17:09:54 If you count Linus audit as proper audit of course 17:10:42 This is not a backdoor 17:10:49 Prove it 17:11:33 Like I said, most found backdoor are very likely to be dismissed as "bugs" 17:11:40 thx for the link. 17:13:25 FOSS so great that backdoor stay in the code for 15 years 17:13:26 Yay, people can all read the code, we are all safe... 17:13:54 this kind of rhetoric results in nothing but fearmongering among technological illiterates 17:14:04 What about that classic one? https://www.csoonline.com/article/562859/the-heartbleed-bug-how-a-flaw-in-openssl-caused-a-security-crisis.html 17:14:04 How much time that "bugs" did stay in openssl? 10 years or something like that if I rememnber 17:14:16 if you care this much, audit some code yourself. otherwise you're just doing the IC's work for free 17:14:34 presumably 17:14:34 How many audits did monero have 17:14:40 quite a few 17:14:45 for protocol 17:14:49 At least one per hard fork implementation 17:14:52 Can you audit the code yourself, really? 17:14:53 For every bloaty libs you have installed on your system, and everytime one get updated? 17:15:08 Full code audit 17:15:10 plus like a said, it's apparenly easy to pass audit with C/C++ code 17:15:23 For every like of code that was added ? 17:15:36 nah. Cryptography and consensus code. 17:15:59 even the best developer in the entire world is incapable of auditing every single line of code on each layer of their own systems 17:16:02 Monero have better audit than most of what's in Linux afaik 17:16:18 None afaik. But core team have good coding practices. vulnerabilities are very rarely severe. You can check HackerOne to see some of them 17:16:18 you clearly know nothing so that statement isn't worth much 17:16:33 Hence assume everything is backdoored, make it easier for you to manage your security model 17:16:43 so why are you on a computer? 17:16:50 yeah 17:16:53 touch grass 17:16:58 Everyone use computers today lol 17:17:00 if everything is backdoored, you should be using stone tablets and a chisel 17:17:01 (I like windows) 17:17:07 https://news.ycombinator.com/item?id=37702491 17:17:10 so you're just full of shit 17:17:11 Stone can be backdoored 17:17:36 Hacker one bounty is so low 17:17:38 https://news.ycombinator.com/item?id=36773242 17:18:57 this chatroom is backdoored, BETTER SIGN OFF NOW BEFORE THEY GET YOU 17:19:05 too late now i own all ur momos 17:19:09 Glowies are listenig for sure 17:19:21 put down the bong dude 17:19:34 https://nvd.nist.gov/vuln/detail/CVE-2021-22555 17:19:34 Attack vector: Local 17:19:35