01:07:14 ⚠️ Mandatory BasicSwap Update (v0.16.4+) 01:07:14 It adds a security fix that protects you against poisoned secret-hash atomic swaps where a peer running a modified client could under-fund their side of a trade. 01:07:14 The client now detects this and aborts the swap before any funds are committed. 01:07:14 [... more lines follow, see https://mrelay.p2pool.observer/e/5Myqm4sLY3NXb0Uw ] 02:25:43 https://support.ledger.com/article/360006352934-zd 02:25:43 If you guys have a ledger, DO NOT UPDATE. 02:25:43 Not only they broke monero in the last release (can't spend) But they removed the code to extract the monero 24 words list. 02:25:43 [... more lines follow, see https://mrelay.p2pool.observer/e/u4bKnYsLa2lSVnVW ] 02:25:45 https://mrelay.p2pool.observer/m/xmr.mx/oOMxkPtmOdOVVoUykfzZJJDa.png (clipboard.png) 02:25:45 https://mrelay.p2pool.observer/m/xmr.mx/jnceOIcbhfANOvycoXiwNgrV.png (clipboard.png) 02:26:26 Still nofix after more than a day or releasing a broken update, what a joke 03:29:29 ledger in 2026 😂 03:47:02 @kiersten5821:matrix.org: Any recommandation for a wallet that is not on a internet connected computer? 04:11:52 So far I know 04:11:52 Ledger : They fucked up 04:11:52 Trezor : Pain for devs and they changed there protocol for the new one for some reason[... more lines follow, see https://mrelay.p2pool.observer/e/oOXOoIsLb2xlbVVH ] 05:03:59 Having integrated Tor support is cool but forcing it like this is weird, first time hearing about this 05:05:37 You can't even get the thing without tor 05:06:22 It's enforced Torrification :D 05:07:02 You can setup an alternate proxy to use your tor/i2p 05:07:15 <321bob321> Hosted in Germany ? 05:13:31 Cakewallets cupcake? > <@ravfx:xmr.mx> So far I know 05:13:55 @monerobull:matrix.org: Cakewallets is an online only wallet no? 05:14:05 Nope 05:14:10 Cupcake companion app 05:14:27 https://cupcakewallet.com/ 05:15:51 thanks. 05:15:51 I was trying that anonero stuff, and the think crashed when it finished syncing (it took 30 min to sync a fresh wallet) 05:15:51 And it want to sync back to 0 ! 05:16:38 Ah, so it does support i2p at least, that's good 05:17:10 But can you not use the node on your local network? Wtf? 05:17:57 Well, I ditched it anyway. 05:17:57 Can't trust something that crash on fresh new wallet initialy sync, sorry 05:18:25 I did like the UI for the amount of time I tried it 14:13:11 using a computer that's not internet connected > <@ravfx:xmr.mx> Any recommandation for a wallet that is not on a internet connected computer? 14:15:49 You still have to be able to sync and transact. 14:15:49 Other than hardware wallets, there is only cake+cupcake and Anonero so far. I wish anonero did work lol. 14:16:57 qr code or sd card or whatever 14:17:52 Yeah, that is what is used with the one I mentioned. 14:18:34 Qr code 14:19:02 Imajin having to do an sdcard dance every time I needed to transact lol 14:21:22 But all theses are phone based. (You need two phone on which one of them don't have WiFi/mobile 14:22:09 Its still technically inferior to a device with a proper secure element but at least the app data are encrypted 14:23:28 Ideally you have two grapheneos devices but then you endup having an > 1000$ hardware wallet 14:27:37 To be fair, mine was $300. Still very expensive though 14:27:49 $500 is a laptop price, not a phone one, wtf 14:30:23 Here, google phone are mostly non existent. Used one are expensive and risky (you can get one that can't be oem-unlock). 14:30:23 Retail shops don't carry them 14:30:23 Only solution is a new one online if you can find one (and add like 20% on top) 14:31:09 6a are like 400$ 14:31:28 doesn't monero gui/cli support offline signing 14:31:37 can use cheap computer + sd card 14:32:29 In my city Pixels are decently popular, but they are not officially imported, so that's kinda surprising. 14:32:54 I was referring to the prices dropping over time as new models come out. $300 is still pretty hefty for a phone, what you are saying is egregious. 14:33:19 @kiersten5821:matrix.org: I don't think so (in relatively convenient way). If you transact a lot its going to really get in the way 14:33:22 6a where I bought mine is $200 now. Yeah, seeing we're in different situations. 14:34:23 Yeah, price (and risk of getting used) mean if you want one here you have to import a new one yourself 14:34:57 Oh, that sucks 14:35:34 If you get used import on amazon it might be OK (can return if you can't OEM unlock) but other way of import mean you only get a new one 14:36:04 If one phone doesn't have wi-fi or mobile, would Graphene really be required? Like, just a degoogled OS in general just to not be spooked? 14:36:57 Honestly no idea how big of a risk there is to get a non-unlockable one. I was so nervous when buying because the return policy of the place was not that great (which is something unofficial importers have in common). 14:37:49 It should be OK in most situation. As the data are encrypted and all. But could still be vulnerable to steal the phone, extract data and decrypt later kind of scheme (if you are targeted) 14:40:27 Depend where you get it from. If you get it from USA you can endup with a Verizon locked one. Canada, Telus/Bell. They allow you to change carrier after you pay for the phone and ask them, but you still don't own the phone (no OEM unlock). 14:40:28 I have no ideas about Import from EU 14:41:09 Ah, fair enough. If you have so much that a dedicated wallet makes sense, targeted thieves are indeed a very big concern. 14:42:34 I had a Japanese one, that ended up having no problem. I'll ask my friend that got an American one. 14:43:47 Normal thieves is fine (phone gone? get seed and move funds.) 14:43:47 If your targeted and they manage to get to your place and dump the phone locally so you don't notice, that's where the pixel is nice 14:48:42 Not that a ledger/trezor will protect you more if you are targeted. Thinking about that, how hard it is to make a trezor/ledger replica with a WiFi transmitter. Go to mark place, find device and replace with replica. User "unlock" it, attacker get the code and replica could display some error or something. User might be lazy and "restore it later" 14:49:13 I wonder how likely such a threat actor even is? Like, a lot of such determined people resort to social engineering because it's easier, safer and more reliable, and the really determined ones just kidnap people :/ 14:49:36 factory's reset an old phone. keep it offline and try monerujo 'sidekick' > <@ravfx:xmr.mx> Any recommandation for a wallet that is not on a internet connected computer? 14:50:25 Like, THE Bybit hack was tricking people into installing malware and approving transactions, and iirc they did use hardware wallets... 14:50:55 BlueyHealer: True, no need to even kidnap, you can get butane powered soldering iron for like 20$ 14:51:20 @pw:xmr.mx: https://www.monerujo.app/sidekick.html 14:54:37 BlueyHealer: Yeah. They also don't protect you if you enter the seed in a "support page" to "verify your account" 14:55:53 @ravfx:xmr.mx: many half a braincell individuals would be caught out there then 14:56:44 There are indeed lowest-hanging fruit scams out there, but I just hope you don't think you wouldn't be able to be scamed like this in general. 15:43:13 cold storage isnt meant to transact a lot > <@ravfx:xmr.mx> I don't think so (in relatively convenient way). If you transact a lot its going to really get in the way 15:44:05 btw after playing with multisig in this coin 15:44:07 99.99% nobody uses multisig here 15:44:20 the basic tooling was a little bugged out 15:47:19 Yeah, I never touched the multisig stuff, yet 15:50:35 I tested most of the wallet option so far. 15:50:35 * Anonero (crash after Nero sync) 15:50:35 * Sidekick (crash when I open the wallet, to discover devices) 15:50:35 * Cake seam to work, is it really the only one that the app actually work?!? really?[... more lines follow, see https://mrelay.p2pool.observer/e/2cfNtIsLRU44bkxu ] 15:50:54 (Well, until a few days ago for Ledger) 16:02:11 The problem is that the new update intoduces SO many security fixes. The old software is also broken in that respect. I wouldn't use your Ledger until they figure this out > <@ravfx:xmr.mx> https://support.ledger.com/article/360006352934-zd 16:02:58 I can't use my ledger until they figure it out. Can't downgrade! 16:04:49 So my funds are "Frozen", until I run the script they removed to convert the 24 seed to a 25 seed (can do in a console, on an airgapped computer). 16:04:49 I was looking for an alternative as to where to import the converted sed! 16:09:27 They all crash, except for maybe feather 16:09:31 bad luck 23:58:00 see xns.rocks, DNS alternative based on Monero.