<root:kimapr.net> @lza_menace: given my own experiences with matrix, it sounds completely possible

<tealshard:matrix.org> Sup niggas

<tealshard:matrix.org> Can I use XMR multisig without running my own mode?

<tealshard:matrix.org> I wanna buy drugs tonight but the blockchain is taking ages to download

<rottenwheel:unredacted.org> @tealshard:matrix.org: who told you there's XMR multisig in the first place? 🤔

<tealshard:matrix.org> @rottenwheel:unredacted.org: Darknet markets were the first mention I saw of it

<tealshard:matrix.org> But I would've figured that monero would have it anyway because Bitcoin does too

<root:kimapr.net> you can use xmr multisig without your own node, you just need to use monero-wallet-cli and specify a remote node manually

<root:kimapr.net> or at least i assume so i dunno why you wouldn't be able to use multisig that way

<gan:skhron.org> @root:kimapr.net: You're completely free to ask Matthew with this screenshot and see his reaction to determine whether if it's true 🧌

<tealshard:matrix.org> A remote node will aggregate whatever UTXOs belong using my viewkey so I have a list of spendable outputs right?

<rottenwheel:unredacted.org> @tealshard:matrix.org: 🤔

<rottenwheel:unredacted.org> "Alexa, does Monero have multisig in 2025?"

<rottenwheel:unredacted.org> Good luck with all that. web.getmonero.org/resources/user-gu…ides/multisig-messaging-system.html

<rottenwheel:unredacted.org> @tealshard:matrix.org: What about you stop larping and just use one of the popular wallets to send funds to your dnm of choice so you can restock on your xanax bars?

<tealshard:matrix.org> @rottenwheel:unredacted.org: Cause multisig sounds cool and I'm a crypto nerd and wanna give it a try

<rottenwheel:unredacted.org> @tealshard:matrix.org: Awesome, good deal. Have fun with all that. 🫡

<rottenwheel:unredacted.org> @rottenwheel:unredacted.org: Good luck going through all that then. ^_^

<tealshard:matrix.org> Bruh it's probably not that hard

<tealshard:matrix.org> @rottenwheel:unredacted.org: Oh plus if the market exit scams I can get my speed money back

<rottenwheel:unredacted.org> @tealshard:matrix.org: Ah, totes, how could I have not thought about that...

<rottenwheel:unredacted.org> When market goes belly up, you'll own more than just the one key in the obvious 1/2 multisig setup...

<tealshard:matrix.org> I can reach out to the vendor and if they're nice they'll refund me

<tealshard:matrix.org> If they're greedy I could probably negotiate getting half back

<tealshard:matrix.org> Also if the market exit scams I would rather no one get the escrow than the market getting rewarded for stealing

i wonder why there aren't many services using integrated payment addresses

instead they use subaddresses (with a counter they have to keep track of)

with sub addresses you can handle utxo's conveniently - spending from a subaddress allows you to only use outputs belonging to that subaddr (stressnet spammers do this). integrated addresses are all deposited to the same base address. CEX's may find subaddr better to comply with some generic crypto utxo anti-mixer laws and/or to keep the wallet

functional - think snet spammer - spend specific outputs within on sub addr to churn

<xmrsoul:matrix.org> mrelay.p2pool.observer/m/matrix.org/GrDAocEEonmodJQFjwiKbFoW.jpeg (ima_1642568.jpeg)

<xmrsoul:matrix.org> anyone seen this?

<datahoarder> so not decentralized. distributed

<datahoarder> it's still centralized (single multisig, single entity) but they have distributed signing.

<monerobull:matrix.org> @xmrsoul:matrix.org: PSA: these guys are very likely scammers

<monerobull:matrix.org> potentially the same people that are running the crow/malgo/goblin swap campaign

you can't make a wrapped token (with an incompatible chain) that's decentralized

someone HAS to hold the bag (the underlying supply behind the wrapped token)

datahoarder: what's the point of multisig when you're in control of all parties

<monerobull:matrix.org> yeah and these guys will very likely run away with it

<monerobull:matrix.org> @monerobull:matrix.org: it doesnt even look like their goal is to make money

<monerobull:matrix.org> instead its targeted at creating the most damage to monero possible

Same entity but could be distributed to different key holders

Protects the entity itself more than you

Say single rogue admin

<monerobull:matrix.org> do not give these guys any credibility :P

checking the twitter account, they don't say who they are

or whether they even have more than one person behind it

<monerobull:matrix.org> check the blockchain and you will find they've done this before ;)

sure :P

<plowsof:matrix.org> 14th november xmrsoul asks soulxmr about zerofi and will dive deeper into it

<plowsof:matrix.org> libera.monerologs.net/monero/20251114#c611255

<plowsof:matrix.org> libera.monerologs.net/monero/20251114#c611358

<monerobull:matrix.org> they have direct exposure to phishing wallets

you have to trust the people behind the wrapped tokens, and if they end up stealing all your XMR

<monerobull:matrix.org> they will

plowsof: why are they this desperate to advertise

<plowsof:matrix.org> 10th december plowsof is asked for his opinion on the "most important project" libera.monerologs.net/monero/20251210#c624677

are they looking for people dumb enough to take the bait?

this makes it pretty suspicious

also their twitter account "Joined October 2025"

and talks exclusively about zXMR

<monerobull:matrix.org> its obviously a scam guys

no shit sherlock

<plowsof:matrix.org> banning for shilling scam more than once per week?

i like how many buzzwords this post has

<monerobull:matrix.org> > rate limited RPC, slow connections, etc.

<monerobull:matrix.org> they dont even run their own nodes lmfao

don't tell me all they're running are the wallet RPC nodes

they should team up with this scam swapper moneros.exchange/exchange.php?mixID…99999999999999999999999999999999999

999999999999999999999999999999999&from=USDT-TRC20&to=XMR&wallet=this+is+a+scam

what the absolute fuck is that URL

sorry lol

i love when i open up view source

i see JS comments written in russian

<monerobull:matrix.org> they also got monero.black, a fake review site to push their scam services

<monerobull:matrix.org> LMFAO

<monerobull:matrix.org> mrelay.p2pool.observer/m/matrix.org/lXaTqtToGajoYGHTVWHBxeSk.png (image.png)

<monerobull:matrix.org> HAHAHAHA

<monerobull:matrix.org> this is fucking hilarious

yep

similar one i seen "someone recovered billions from changelly using <scamservice ,com>" its common

<monerobull:matrix.org> mrelay.p2pool.observer/m/matrix.org/URvpwielZAFZwgWyefRYIjyi.png (image.png)

<monerobull:matrix.org> lol at the goblinswap ref link

<monerobull:matrix.org> are they doing this to track the effectiveness of their fake news site? is this a third party scammer? crypto is never boring haha

all of this blogposts look AI-generated

including the mining one

<monerobull:matrix.org> mrelay.p2pool.observer/m/matrix.org/QZUCHELetIXaKwUWLzMkzbiX.png (image.png)

<monerobull:matrix.org> they put up a fake onion for retoswap

<monerobull:matrix.org> mrelay.p2pool.observer/m/matrix.org/EMLeFfjhLFbaYguFJzalowbX.png (image.png)

<monerobull:matrix.org> is it ai generated as well? lmao

am i on drugs rn or am i realizing that like

all the posts end with "final thoughts"

<monerobull:matrix.org> the one for trocador is fake as well

the goblinswap post doesn't look AI-generated

<basses:matrix.org> "requires JS" lmao > <@monerobull:matrix.org> mrelay.p2pool.observer/m/matrix.org/QZUCHELetIXaKwUWLzMkzbiX.png (image.png)

i mean, two of the goblinswap posts

<monerobull:matrix.org> they also made a fake subreddit

<basses:matrix.org> ai generated

<monerobull:matrix.org> filled with bot accounts making "normal" comments

but the rest are like AI generated with "final thoughts"

<basses:matrix.org> basically vibe coded

<monerobull:matrix.org> all of this screams k3wbit lol

this wrapped token has got to be one of the most dumbest scam i've seen

i don't know if i should feel bad if they end up rugpulling the supply behind the wrapped token

<monerobull:matrix.org> its natural selection tbh

<monerobull:matrix.org> but unless you really know your shit, it would be hard to tell if its legit or a scam

<monerobull:matrix.org> so newbies could fall for it

yeah, if you don't know how wrapped tokens work, you could fall for it

i bet if you try to swap back, it'll be like "sorry, due to issues with our RPC nodes, we could not complete this swap. please try again later"

<monerobull:matrix.org> they made a new fake monero subreddit

no way

what's the subreddit

It directly preys on the people that want to hold something instead of using it

As usual speculation and degen is the target

<lza_menace> wagmi

DataHoarder: moonboys as always

<rottenwheel:unredacted.org> @lza_menace: y u delete xitter ser?

<lza_menace> @rottenwheel:unredacted.org: got tired of doomscrolling. saw a series of disturbing things and just didn't find any value from having it around overall, mostly people arguing, spam, and porn. my life is better without it.

I got Twitter in 2022 for memes and fandoms, deleted in 2023 after they loginwalled the entire site. so audacionusly awful.

Funny how I deleted Reddit at the very same time.

<eddie:oblak.be> On twitter I only got into "fights" so I stopped logging on to it, an only used it to lurk her and there

tbh I never had such an experience.

twitter has become a cesspool of crypto and AI

<eddie:oblak.be> That just depends what you are using it for

<eddie:oblak.be> It's a filter bubble

<eddie:oblak.be> Sometimes I use nitter to follow a link someelse posts, but for everything else I am good bantering a bit in matrix rooms, I guess

I use nitter now too. Crazy how it's basically required now.

<pcre> Reddit has turned into a woke Bolshevik shithole.

<lza_menace> agree

<lza_menace> the major online institutions have shifted outwards towards the extremes

i always felt like reddit was full of powertripping mods

<lza_menace> it was

<eddie:oblak.be> I thought Reddit was for incells

<pcre> A long time ago.

<eddie:oblak.be> And wrong computer advice

i fucking hate shadowbanning in online platforms

this applies to reddit, twitter, and even github

<pcre> It's a shame about GitHub. In five years' time, it will probably no longer be usable due to some policy or other.

shadowbanning in github happens a lot more than you think

I got shadowbanned on Reddit. I didn't even post anything that usually triggers that.

and they're pretty secretive about it

In five years' time, it will probably no longer be usable due to some policy or other <- I haven't noticed any usability-related policies, but I am concerned about them probably training AI on user submissions.

even when you ask people about it, they're like "oh, that's what happens when your profile is set to private, dumbass"

but my profile isn't set to private..

<eddie:oblak.be> oh gee corporations being asshole, surprise

<pcre> Shadow banning on GitHub!? That's news to me. What effect does that have?

pcre: your repos, issues, pull requests, and user profile are visible to you when you're logged in

but when you're not logged in, it's all 404

even issues or PRs on other repos

they don't even show up

<eddie:oblak.be> BlueyHealer: luckily there's a self-hosted federated alternative for about each platform. They mostly lack the network effect, but as long as people are obedient to the github/youtube/reddit policies that will never change

<pcre> okay.

<eddie:oblak.be> Cindy_: are you sure you didn't set "visibility" to private 🤣 it's a feature not a ban

bruh

<eddie:oblak.be> joking

lol

the annoying part is how arbitrary it is

they could shadowban you for any reason, and you have to contact support to figure out why

it's either, they didn't like your email address or they think you live in a sanctioned place

or whatever bullshit reason

<eddie:oblak.be> yeah, I repeat, private corporation, can do what they want

<eddie:oblak.be> it's like a club with a bouncer. And your shoes are not white enough

<eddie:oblak.be> Maybe next time bring a girl, if you want to get in

eddie, with git the network effect at least seems less noticeable. I see non-Github git repos pretty often in the apps I use.

<eddie:oblak.be> of course, there are many reasons to not use github

<eddie:oblak.be> Maybe next time bring a girl, if you want to get in <- That could get you confused for a lesbian

XD

<eddie:oblak.be> corporations didn't really use github until microsoft bought it

eddie, I do have an account, but if I were to develop, I'd pick somewhere else to publish. Preferrably selfhosted because I know people who set an instance up and it's manageable.

eddie: that is, if you're lucky that they respond to your tickets

<pcre> I've had radicle.xyz on my radar for quite some time. It could be an alternative.

:P

<eddie:oblak.be> what I meant essentially is that I hear a lot of time people saying "i hate to use platform XYZ, but I have to use it because everyone else does" > <BlueyHealer> eddie, with git the network effect at least seems less noticeable. I see non-Github git repos pretty often in the apps I use.

sometimes they even ghost your shadowban ticket, and leave you hanging forever

What are the "many reasons" for you? For me it's the concern that the owners are very invested in the AI games and this makes me very suspicious that they are not letting this treasure trove of code go to waste.

so yeah, they can do whatever they want

<eddie:oblak.be> you gotta pay for it, lol. I just recently had a very good experience with github enterprise support > <Cindy_> eddie: that is, if you're lucky that they respond to your tickets

eddie, my point is that with social media at least it's waaay more pronounced than with Git.

<eddie:oblak.be> BlueyHealer: before github had the feature to make repo's private, companies would flock to bitbucket and gitlab for that

<eddie:oblak.be> but bitbucket is dead now afaik

>GitHub has the right to suspend or terminate your access to all or any part of the Website at any time, with or without cause, with or without notice, effective immediately. GitHub reserves the right to refuse service to anyone for any reason at any time.

very legal :P

if github hears you cough the wrong way, they'll banish you to the shadow realm without any hesitation

and they won't tell you why

<eddie:oblak.be> No business is obligated to provide services to anyone

OOH I remember now, my uni used to use it before switching for something independent. Onenon-crucial but important feature was locked behind a paywall.

Cindy_, what are the examples of the "wrong way"?

<eddie:oblak.be> There was this debacle with youtube-dl

eddie: "with or without notice" may be a violation of EU's DMA

<eddie:oblak.be> Cindy_: yeah I am not a lawyer so I don't know

BlueyHealer: literally anything ranging from being in a sanctioned country, someone from your IP range doing bad stuff on the internet, etc. etc.

it's pretty board

<eddie:oblak.be> I do know if you want to enforce that you will have to spend big bucks on laywers to prove them wrong

eddie, oh, so Github was involved? i'll look it up.

<pcre> Git itself is already very decentralised. GitHub simply offers convenience.

My guess was "making tools evading enshittification".

<eddie:oblak.be> BlueyHealer: Yeah they removed their repo's iirc

Cindy_, I think my location may have been the reason for Reddit shadowban. That or the custom email domain (or the specific TLD).

i got shadowbanned from github for using an obscure email domain

<eddie:oblak.be> what, lol

<eddie:oblak.be> that's bad, i agree tehre

i didn't realize it until i had cookies auto-wipe and realized that my user profile was inaccessible

<pcre> They will also be the first to make a digital ID mandatory.

when i was logged out

but when i logged back in (expecting a ban notice or something)

it showed my user profile again

To be fair, it was a TLD with a bad reputation, I just had no idea at that moment. I'll be more careful next time, but I am prepared for some discrimination based on the custom domain.

<eddie:oblak.be> Well, Github == Microsoft nowadays, what did you expect

pcre, wouldn't surprise me one bit. I am surprised they don't already require at least a phone number...

<pcre> GitHub was lost when Microsoft bought it. It was only a matter of time.

github shadowbans are super annoying

i wouldn't be surprised if they like

merged github with M$ accounts

like they did with minecraft

They literally did this with Minecraft, that would be very expected for them!

oh nvm you beat me to it lol. Wish I could type this fast.

see how aggressively they're pushing M$ accounts :P

<pcre> I did make a prediction, that the Monero Project will move away from github to radicle in the year 2020. I even wrote it on the Monero blockchain as proof.

2020 is 5 years ago

<pcre> Thats when i predicted it.

predicted?

but they're still using github

<pcre> yes. prediction didn't come true yet

<eddie:oblak.be> they also use gitlab, the reason for using gitlab (as was told me) is to profit from the free build time

<eddie:oblak.be> which makes sense to me

<pcre> fair enough. The prediction might fail

Better selfhost gitlab tho

<pcre> Ahh, i found it: my old documentation: github.com/nonie-sys/monero-timestamp How to make a timestamp Proof of existence on Monero Blockchain.

pcre: "With Bitcoin the hash is stored on the blockchain itself. Monero wont allow this"

actually it does

you can use tx_extra

provided you modify monerod yourself

<pcre> Ah ok, did not know

tx_extra has a size limit, i don't know how much exactly

i think it was 1KB

go over that, your transaction won't get validated or mined

<pcre> 1KB is a lot.

<pcre> I think i made another mistake. One piconero is 10^12 not 2^12, isn't it?

well it used to be unlimited

but someone uploaded a 126KB PDF file to the blockchain abusing tx_extra

so they did this: monero-project/monero #8733

<pcre> cool

<lza_menace> remember the mordinals? lol

<lza_menace> had to lock that down

<321bob321> Thanks mbll

1060 bytes is good enough for timestamping

<pcre> 100%

then you wouldn't even need to make a brand new wallet :P

you could send yourself some monero, set the tx_extra to the hash of the document (probably keyed/encrypted in some way for it to not be observed or searched up easily)

<pcre> XD -true. Hey, you have a choice. Both methods work.

you'd just lose some tiny amount of money to the fee

true :P

Yo, after learning about spy nodes, I spun up a monero node on a vps, running over tor. Now I wanna mine with that same machine using p2pool. I'm not super familiar with the p2pool node ecosystem. Can I connect to my own monero node via tor liek when I've got a wallet pointed at my node

?

It's best to run p2pool node at the same vps

but yes, you can connect to monerod via tor

if you provide the socks5 proxy, p2pool can connect to .onion domains

Gotcha, reading up on some docs rn. I am planning to run p2pool on the same vps

<eddie:oblak.be> if you're mining on a vps don't expect to much of it

<321bob321> Shared CPU

I may have to double check how my monero node is configured, but the way I have it, the restricted rpc connects to 18089 over tor while the p2p is on a nondefault port, but I think I need to explictly write the nondefault port I used 18084. On that note, does it even matter that I am running it on a nondefault port? I was just told to do this in a guide.

I

I'm not expecting to make money through the mining, just contribute hash and availability as a p2pool node I guess

<pcre> It is also very likely that the hosting provider will shut you down. There is bound to be something in the terms and conditions that prevents mining on a VPS.

hmm that makes sense. well at least I want to get the pool node up and running. God willing in the future I can do some mining on my own (better) hardware and I know I've got my nodes running

<eddie:oblak.be> just don't max out the cpu and it should be fine

<eddie:oblak.be> but it's probably better imho to buy your own machines to mine than renting

<eddie:oblak.be> but the vps route is a good way to learn the basics, and improve from there

thanks for the advice

<pcre> You could try mining under the radar. Solo mining. Generate alternating load.

<pcre> 1 thread, max for 1 min, back to 1 thread.

<pcre> Normally, you share the Server with many people who simply run a mail server. Most of them do not require a lot od CPU or a lot of RAM. It is fair use policy.

moomoo777: ask your hosting provider if they're fine with it

they're probably not gonna be fine with mining if it's on a VPS

but if it's dedicated, you got better chances

back the daemon though: I need a little clarification on whats going on with the p2p port. So, I have an alternate port specified for the Tor p2p, but I have no clearnet p2p, I believe. I am also curious what the ZMQ is

I'm probably not gonna mine on this vps btw. Although, I tried mining with the daemon real quick to see the hashrate: 160 H/s

<pcre> wow. my raspberry pi ist stronger

if you run p2pool and monerod on the same server, you don't need to specify host, rpc-port and zmq-port in p2pool's command line

ZMQ is required by p2pool

read p2pool.io/mini/#help

mining on VPS is not recommended, but running Monero and P2Pool nodes and connecting to P2Pool stratum from other machines should be fine

moomoo777: i wouldn't be surprised if they're throttling your CPU usage

<derjohn:matrix.org> Who runs the getmonero gitlib server ? It uses an invalid HELO when senduing mails, and therefor they get blocked: Dec 11 20:45:52 xxxx postfix/smtpd[24707]: NOQUEUE: reject: RCPT from static.7.96.63.178.clients.your-server.de[178.63.96.7]: 504 5.5.2 <Ubuntu-1804-bionic-64-minimal>: Helo command rejected: need fully-qualified [... too long, see mrelay.p2pool.observer/e/kqH1xNEKNlNfZGQ3 ]

<eddie:oblak.be> I reported this before

<eddie:oblak.be> they rather fix your account manually (they did with mine) than fixing the root cause

<eddie:oblak.be> oh well :-)

<derjohn:matrix.org> WUT? They can't wte a HELO in their MTA ? Where did you report ?

<eddie:oblak.be> here

<eddie:oblak.be> a month ago or so

I guess I "run" it. I installed it and update it from time to time.

Would be nice to pass it on to someone active though.

No idea what MTA it's even using :D

Oh, postfix. It's in the log line.

<rottenwheel:unredacted.org> @lza_menace: was?

<derjohn:matrix.org> moneromoooo: Nope, mine (receiver) side ist the postfix.

<derjohn:matrix.org> Now I have to allow-list their Ip in out provider-wide postfix main.conf go get my iniitisl verficstion mail through.

<derjohn:matrix.org> As there is no imprint or contact on the mail , I just don't know who's is the right contact. I willing to help out managung the gitlab instance.

Oh lol ofc

You need to have a history of trustworthiness to maintain this. It comes with write access to gitlab repos.

s/lab//

<derjohn:matrix.org> fair ;) But still s/o should make the e-mail work correctly.

<derjohn:matrix.org> And: You can meet me in person to on 39c3 if you happen to be there.

I'll be one on all fours with horns.

I'll have a look now, but can't promise to fix.

I've not touched a MTA config in like 20 years. If not more.

<derjohn:matrix.org> do you run the helm chart variant for gitlab ?

No clue what that even is. I just volunteered for the work of install/update IIRC.

We run the 'ee' version, if that answqers your question.

<derjohn:matrix.org> helm chart package manger for kubernetes, if the gitlab is running on k8s

I'm not going to give details on what virt stuff is being used for now, out of an abundance of caution.

Might be fixed now. Unexpectedly quickly if so...

<eddie:oblak.be> If you need some help just ask > <moneromoooo> I've not touched a MTA config in like 20 years. If not more.

<eddie:oblak.be> moneromoooo: Oh I hadn't read that, good!

<eddie:oblak.be> Also, if the mailserver runs on Ubuntu-1804-bionic-64-minimal, it's maybe time to upgrade. It will only get security patches if it's a pro license

<eddie:oblak.be> otherwise maintenance has stopped 2 years ago

<eddie:oblak.be> you would want to upgrade to at least 24.04 , and then you can sit back relax until 2029

Ugh. OK.

I found how to to upgrade ubuntu, I'll get that done if someone with hypervisor access backs it up first (it's in the pipeline somewhere).

<derjohn:matrix.org> I suspect the MTA config was created with ubuntu 18.04 and the ubuntu has been ungraded meanwhile (But the hostname is still in the config)

<derjohn:matrix.org> Dec 11 23:10:44 xxx postfix/smtpd[14341]: NOQUEUE: reject: RCPT from static.7.96.63.178.clients.your-server.de[178.63.96.7]: 504 5.5.2 <Ubuntu-1804-bionic-64-minimal>: Helo command rejected: need fully-qualified hostname; from=mailto:gitlab⊙rgo to=xxxx proto=ESMTP helo=<Ubuntu-1804-bionic-64-minimal>

<derjohn:matrix.org> still not fixed, I allow-listed it on out servers for now

OK :/

<lza_menace> @rottenwheel:unredacted.org: *is