00:44:20 Join us TMR morning (09/07/24) at 11AM-EDT/5PM-CET with special #MoneroTopia24 speaker Crypto Sowle of Zano Project! Price Report 📈 w/ Bawdy Anarchist, News 🗞️ w/ Tony Huszar & MORE! 00:44:20 JOIN US ON STAGE HERE ➡️: 00:44:22 streamyard.com/b4bujf8zuw 00:44:24 WATCH THE SHOW HERE via YOUTUBE ➡️: 00:44:26 https://www.youtube.com/live/idPHYl1TUI8?si=cmZQgFJTBZuZwnnu 00:44:28 WATCH THE SHOW LIVE HERE via TWITCH ➡️: https://www.twitch.tv/monerotalk 00:44:30 (The videos will be synced onto Odysee (https://odysee.com/@MoneroTalk:8) about an 1/2 hour or so after it premieres LIVE for those who want to watch there afterwards ;)) 00:44:32 FOLLOW US ON https://monero.town/u/monerotopia & https://mastodon.social/@monerotopia 00:44:34 Guest segment, Report & News segment sponsored by 🍰 u/cakelabs, u/ Wizardswap.io & Exolix.com 09:27:47 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:27:48 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:27:48 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:27:49 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:27:49 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:27:50 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:27:50 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:27:52 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:27:54 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:27:56 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:27:58 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:28:00 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:28:02 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:28:04 nigger 09:28:06 nigger 09:28:08 nigger 09:28:10 nigger 09:28:14 nigger 09:28:15 plowsof ^ 09:28:16 https://files.catbox.moe/8htyfk.mp4 09:28:19 yeah i hate niggers 09:28:22 https://files.catbox.moe/8htyfk.mp4 09:28:23 https://files.catbox.moe/8htyfk.mp4 09:28:28 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:28:29 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:28:29 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:28:30 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarranthttps://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:28:33 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:28:35 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:28:37 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:28:39 nigga nigga nigga nigga 09:28:41 lol 09:29:09 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:10 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:11 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:12 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:12 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:12 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:14 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:16 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:18 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:20 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:22 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:24 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:26 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:28 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:30 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:32 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:34 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:36 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:38 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:40 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:42 black live matter nigger 09:29:46 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:48 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:50 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:52 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:54 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:56 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:29:58 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:32:47 [@Banhammer](https://matrix.to/#/@banhammer:matrix.org) 09:32:57 LOL 09:33:07 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:33:07 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:33:08 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:33:34 Lol /ban mrelay (jk 09:36:00 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:36:00 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:36:01 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:36:01 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarranthttps://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:36:02 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:36:03 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:36:04 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:36:06 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:36:08 https://files.catbox.moe/8htyfk.mp4 #christchurch #mosque #edit #massshooting #shooting #freebrentontarrant 09:40:19 .blacknigga (test) 09:40:27 blcaknigga 09:40:30 blacknigga 09:42:01 test 09:42:04 oh this guy's back 09:42:04 blacknigga 09:42:33 why did you enable invite only mode? 09:43:11 on monero.social 09:47:02 soy 10:03:21 trace https://github.com/monero-project/monero-gui/issues/4014#issuecomment-1224339036 10:03:32 https://undelete.pullpush.io/r/monerosupport/comments/zqs0b7/monero_gui_wont_launch_in_new_tails_58_update/j11am12 10:11:36 <321bob321:monero.social> Ask in gui 10:42:00 not on the website sir? 10:42:06 room link 11:24:58 now then 12:13:50 y'all fw my dashboard? 12:13:51 https://matrix.monero.social/_matrix/media/v1/download/nyxmr.top/OzWkZmzTCncnjCDjePLiLtus 12:28:39 Why can't I trust Centralised Exchanges, and random Monero nodes ? 12:28:40 https://blog.nowhere.moe/opsec/chainalysisattempts/index.html 12:31:06 chainalysis uses node IPs as a part of their strategy to correlate transaction data 13:03:23 update 13:03:25 https://matrix.monero.social/_matrix/media/v1/download/nyxmr.top/MxzPiOXcplNARxORZCIpbDHJ 13:05:41 kayabanerve https://twitter.com/kayabaNerve/status/1831135604622422401 just so you know, gag orders can prevent you from updating canaries that might deem it suspicious or anything like that.. 13:06:25 surprised no one mentioned it tho, looks like EFF and other orgs marketed this snake oil very well 15:02:34 That's the point of a canary. It stops being updated upon incident. 15:22:47 Seems like somebody didn't listen to me, and blocked nope.chat on Matrix, so the spammer moved to IRC to spam from here. Genius... 15:42:08 what happens afterwards? people will speculate a lot of thing. 15:45:16 <321bob321:monero.social> Thats monero media department issue 15:46:32 If someone has a canary, and it stops being updated, the point is for people to speculate that the canary's statement is no longer true. 15:47:14 I didn't make a canary. I made a tweet I should have one and a comment on my past thus far. 15:47:32 <321bob321:monero.social> You can bs 15:47:54 <321bob321:monero.social> No requests made here is todays newspaper 16:14:23 <321bob321:monero.social> Thats why ivpn do third party no log audits and infrastructure audits 16:14:34 <321bob321:monero.social> Proof 16:24:30 i like ivpn 16:25:56 but mullvad and proton are technologically superior (Wireguard over X, shadowsocks) 16:26:13 well not shadowsocks because ivpn have it too 17:10:46 proton is infected with CBDC and bitcoin maxis + someone or a group from WEF? 17:11:22 i like both ivpn and Mullvad but dont know if mullvad is as trustworthy as ivpn 17:11:32 i like both ivpn and mullvad but dont know if mullvad is as trustworthy as ivpn 17:21:22 i think most agrees on the fact that mullvad is more trustworthy than ivpn 18:14:00 Interesting, a set of fed run nodes are deployed on quadranet.com and have matching open ports. Another possibility is that this hosting provider MITMs nodes and provides data to feds. https://libreddit.privacydev.net/r/Monero/comments/1f9h7rw/xmrnodecom_is_very_sus 18:21:53 is it possible to access my v1 wallet via monero gui? 18:31:28 These are not even nodes. They are just reverse proxies that MiTM traffic. Its cheaper to run 18:31:28 ``` 18:31:30 9000/tcp open ssl/cslistener? 18:31:32 | ssl-cert: Subject: commonName=node2.monerodevs.org 18:31:34 | Subject Alternative Name: DNS:node2.monerodevs.org 18:31:36 | Not valid before: 2024-07-02T12:22:44 18:31:38 |_Not valid after: 2024-09-30T12:22:43 18:31:40 ``` 18:31:42 node.moneroworld.com for example proxies to node2.monerodevs.org 18:31:44 Which is plowsof 18:33:12 Imo we should create a reverse proxy that detects unusually high amount of incoming txs per ip and ban them. 18:33:19 I think there was an XMR load balancer project, you can fork off of that code 18:33:22 Imo we should create a reverse proxy that detects unusually high amount of incoming txs per ip and ban them or spit them out for further analysis. 18:33:25 I think there was an XMR load balancer project in Go, you can fork off of that code 18:33:40 I can just have chatgpt write this in 10 seconds 18:33:43 Very interesting 18:33:50 Oh, ok 18:34:02 Kek 18:34:18 we need to count IPs per POST /sendrawtransaction 18:34:22 https://github.com/unyieldinggrace/monerod-proxy 18:35:36 If anyone is running high traffic nodes. I would be interested in working with them to count these reverse proxy leeches 18:35:37 and report them to monero.fail 18:39:02 Interesting, a set of fed/chainanalysis run node proxies* are deployed on quadranet.com and have matching open ports. https://libreddit.privacydev.net/r/Monero/comments/1f9h7rw/xmrnodecom\_is\_very\_sus 18:41:04 timestamp in video where this screenshot is from 28:46 19:41:35 https://github.com/digilolnet/monero-sendrawtransaction-counter 19:42:32 Is having reverse proxy leeches a problem? Isn't that the point of a public RPC node? 19:43:30 why is that? i though ivpn is a big fan of monero? 19:43:32 What Chainanalysis does is get the cheapest VPS in OVH and setup a reverse proxy to some real nodes. Then they advertise it on monero.fail etc. And use to trace TXs 19:43:45 What Chainanalysis does is get the cheapest VPS in OVH and setup a reverse proxy to some real nodes. Then they advertise it on monero.fail etc. And use it to trace TXs 19:43:52 What Chainanalysis does is get the cheapest VPS in OVH and setup a reverse proxy to some real nodes. Then they advertise it on monero.fail etc. And use it to trace TXs to IPs 19:44:32 I see. So they see the tx. It looks to the wallet like it's a real node, but they are just relaying traffic 19:44:49 Yep 19:45:32 And if their fake node proxies end up on majority of peoples devices and they don 19:45:40 And if their fake node proxies end up on majority of peoples devices and they dont use Tor well bad things happen 19:46:42 My idea is to deploy this https://github.com/digilolnet/monero-sendrawtransaction-counter and then let node operators analyze the abusers. Check if they have node ports open etc. 19:51:07 <321bob321:monero.social> ™️digilol grants? 19:52:11 <321bob321:monero.social> I was going to run a node and only allow selsta’s ban list 19:52:30 60% of the tool was written by DuckDuckGo free AI 19:53:42 If anyone is interested in running it on their node contact me privately and we will figure it out. 19:54:59 my ban list likely does not contain any Chainalysis fake nodes 19:55:41 mine contains nodes from fireice and a second entity 19:57:26 in the video they are shown logging this endpoint https://www.getmonero.org/resources/developer-guides/daemon-rpc.html#send_raw_transaction 19:57:58 https://matrix.monero.social/_matrix/media/v1/download/kernal.eu/LqYLPCtWTHzazAAoMpovPxlG 19:59:20 better question gingeropolous how do they have access to your logs? 20:03:44 https://matrix.monero.social/_matrix/media/v1/download/kernal.eu/ZFsbpYxNyhcYqQracxZKXbrD 20:04:23 I believe he is a malicious party. Why would he not use CNAMEs otherwise. 20:04:24 ``` 20:04:26 node.moneroworld.com. 60 IN A 100.14.73.50 20:04:28 node.moneroworld.com. 60 IN A 37.187.74.171 20:04:30 node.moneroworld.com. 60 IN A 192.99.8.110 20:04:32 ``` 20:04:34 it was pointing to a chainanalysis node, and the victim accessed it by node.moneroworld.com hence the Host header 20:04:36 “Oops” 20:04:50 Are they not grepping their own MITM logfiles? After sneaking their way onto the "list"? 20:05:00 Highly recommend to not use node.moneroworld.com 20:06:25 yes I also think these are their own logs and not gingers 20:06:32 <321bob321:monero.social> We need to do what happened in the movie “the departed” insert someone in the irs 20:06:54 There’s probably a way to mess up their rpc tracing stuff if you can figure out a node is compromised 20:07:40 If I was a doing chainanalysis I would not run my own node but reverse proxy to well known ones. This way I dont need to manage the mess monero node is also dont need to worry about upgrades. 20:07:43 <321bob321:monero.social> Is that node http? 20:08:22 It could be that he didn't know better but I find his attitude a bit concerning here https://matrix.to/#/!WzzKmkfUkXPHFERgvm:matrix.org/$XIDCP1Qa7axvWMUuIi9LFDMa1XEVjawJ1LjGn43oXtI?via=matrix.org&via=monero.social&via=libera.chat 20:09:10 actually nah you can't load balance CNAMEs like that 20:09:33 all that link does is invite me to join matrix :) 20:09:53 <321bob321:monero.social> Yeah its a link to previous convo 20:10:22 that much I figured, meow 20:11:57 maybe I'm missing something but /sendrawtransaction kinda shows that they do this reverse proxy thing and not have access to ginger's logs directly 20:12:12 because this RPC endpoint isn't used in normal wallet usage 20:14:56 so they chose moneroworld as en endpoint because it's the most well known node, not because it's compromised 20:15:14 I use that endpoint to ask nodes "did you update lol?" So pls forgive me for high requests per ip 20:16:03 >because this RPC endpoint isn't used in normal wallet usage 20:16:04 Weird. They only show two transactions in the video which have RPC info and for both it's that endpoint 20:16:50 tobtoht i think its unrelated to feather specifically but multi broadcast uses thensendrawtx endpoint? 20:16:59 which endpoint is used by wallets? 20:17:11 ugh 20:17:18 maybe I'm wrong and it's used 20:17:55 I usually remember this endpoint from exporting the tx as hex and manually submitting it 20:17:59 selsta: most likely moneroworld pointed at a chainanalysis node at some point, honest mistake and the logging was done in their end 20:18:34 Also I just got IP banned from all of the nodes behind node.moneroworld.com 😆 20:19:14 --disable-rpc-bans and free stnby 20:20:29 <321bob321:monero.social> Naughty corner 20:21:25 According to the video, Chainalysis deploys at least some nodes (or something that participates in the P2P network) since they collect tx broadcast data too. It can't be all from proxies. 20:21:36 How do node operators run monerod without logs 20:22:16 Actually I will take a wild guess and say that at some point node.moneroworld.com pointed at at least 2 chainanalysis nodes, because look the "source" number. This is #003. 20:22:18 I bet all XMR I have that they run revere proxies. Eben if they have a lot of money a business will not run their own node :D 20:22:19 I guess that would leave system network logs somewhere still 20:22:30 I bet all XMR I have that they run revere proxies. Even if they have a lot of money a business will not run their own node :D 20:22:34 https://matrix.monero.social/_matrix/media/v1/download/kernal.eu/GeNhnoMbHllnhzGgyGnhbVyk 20:22:51 You might be able to get a rough estimate of the number of nodes they run, at a snapshot, by their timing data they display. They have data on the time between seeing the same transaction the first and second time. 💡 20:22:53 and this is source #140, also showing node.moneroworld.com in the Host header 20:24:34 plowsof: log level 0 is basically with no logs. You can also point logs to /dev/null. If you are using NGINX or something you have to turn off NGINX IP logging. AFAIK 20:25:45 Thanks 20:26:08 But if you have a spy that can read your RAM, then the spy can get info of course. 20:26:10 Loglevel 0 isnt logs 20:26:34 A best effort then 20:26:36 Log_level=ofrn is no logs 20:26:40 try `set_log ofrn` if you dont believe me :P 20:26:56 Loglevel 0 isnt no logs 20:27:25 Seriously. 20:27:57 The IP address here is not residential and virustotal shows that it's related to ransomware and other malware possibly. This might explain why it was making RPC calls not used in regular wallets. 20:27:58 https://www.virustotal.com/gui/ip-address/85.248.227.164/relations 20:28:57 and also why chainanalysis is interested in this tx, it's related to cybercrime 20:30:36 same goes for this one https://www.virustotal.com/gui/ip-address/185.220.100.252/detection 20:35:05 <321bob321:monero.social> Mitm with no https biatches! 20:37:53 Wouldnt you be using the mitm's certs and https wouldnt help? 20:38:29 this one is a tor exit node https://www.virustotal.com/gui/ip-address/185.220.100.252/detection 20:39:32 <321bob321:monero.social> Depends if your doing what stnby is saying 20:40:39 If the wallet validates cert or fingerprints ? How does fdroid avoid mitm ? 20:50:26 By mitm I meant 20:50:26 L4 level 20:50:28 imagine such Caddy config 20:50:30 ``` 20:50:32 node.shitserver.com { 20:50:34 reverse_proxy xmr-node.cakewallet.com:18081 https://xmr.bunkerlab.net nodex.monerujo.io:18081 20:50:36 } 20:50:38 ``` 20:50:48 By mitm I meant 20:50:48 L4 level 20:50:50 imagine such Caddy config 20:50:52 ``` 20:50:54 node.shitserver.com { 20:50:56 reverse_proxy xmr-node.cakewallet.com:18081 https://xmr.bunkerlab.net nodex.monerujo.io:18081 20:50:58 } 20:51:00 ``` 20:51:49 By mitm I meant 20:51:50 L4 level 20:51:52 imagine such Caddy config 20:51:54 ``` 20:51:56 node.shitserver.com { 20:51:58 reverse_proxy xmr-node.cakewallet.com:18081 https://xmr.bunkerlab.net nodex.monerujo.io:18081 20:52:00 } 20:52:02 ``` 20:55:05 <321bob321:monero.social> There is a monero proxy github somewhere 20:58:28 Ginger uses one of these :) 20:58:31