16:59:06 Meeting in 1 hour 18:00:24 Meeting time. Hello! https://github.com/monero-project/meta/issues/1408 18:00:29 Hey 18:00:58 waves 18:01:23 Howdy 18:01:24 Hello 18:02:38 Ok, what is there to report from last week? I myself went through most of the Polyseed PR comments from selsta and @jeffro256:monero.social 18:02:40 Finally got all the functional tests working with the wallet-rpc based on Wallet API, just want to double check my TODOs before I make the PR. 18:02:43 And started to work on a new branch based on fcmp++-beta-stressnet which includes 1. Updated Wallet API 2. wallet-cli based on Wallet API and 3. wallet-rpc based on Wallet API. 18:02:43 There were a lot more conflicts than last time I checked, but I got it to build and at least was able to generate a new wallet, haven't tested more than that so far. There are some lines I just commented out and need to investigate and if no one has strong arguments against it or better ideas, that would be my next thing to focus on, apart from resolving review comments. 18:02:53 I'm thinking, sooner or later the FCMP++/Carrot and the Wallet API work need to get merged. So I'm hoping that when looking at this, it may help make decisions for the Wallet API related PRs (thosee on monero master branch) to keep future changes smaller. Also I have the hopes, that through this, I'll get a little familiar with some of the new FCMP++ and Carrot code. 18:02:53 I would hope to be able to make a PR to the seraphis-migration repo (soonish), and even if not for an official stressnet release, maybe someone is willing to help out testing it. 18:04:07 I think working towards merge with FCMP++ and Carrot can't be a bad idea. 18:04:24 Got I2P SAM working, finally. It can now broadcast transactions to remote nodes 18:04:31 me: working on documentation and implementing feedback from j-berman and UkoeHB 18:05:08 me: mostly Carrot/FCMP++ hot/cold wallet PR review, and some final phase 1 audit tasks (still expecting the final report any day now, just followed up again) 18:05:49 Did finally somebody at the hardware wallet companies take note about what's coming? 18:07:18 Not sure, maybe @jeffro256:monero.social reported he was in contact with somebody 18:08:56 Hmmm, maybe Matrix servers are slow today to propagate messages? 18:09:41 Messages seem to arrive fine for me 18:09:57 I keep bugging them. Recently my contacts at Ledger and Trezor have made more promising comments about actually getting development proposals started 18:10:13 But AFAIK, no development has actually taken place 18:10:27 Ok, at least that 18:11:50 @sneedlewoods_xmr:matrix.org: Ideally, I think that we should get the wallet API changes merged in soon, and maybe it could make it into the hypothetical v0.19.0.0 release 18:13:44 by that I mean a release whichs forks from master, uses GUIX, but doesn't include FCMP++ code 18:13:45 I was hoping to get more testers through stressnet, because I assume I haven't found every bug and (functional-/unit-/etc-)tests still far away from covering everything, though there could be issues with stressnet which are not present on master 18:14:29 Getting testers is often difficult ... 18:15:27 Review comments have a bit stagnant, but I think with the final piece, the wallet-rpc, out, there should be no more big changes, except bugs found or review comments ask for it. 18:15:50 s/have a bit/have been a bit 18:16:07 I lost track a bit - is the Wallet RPC code ready for review? 18:16:39 not PR'd yet, will hopefully do so tomorrow, just fixed the final failing tests last week 18:17:08 (or maybe Wednesday 🙈) 18:18:04 If we are through with the reports, I would like to come back to last week's subject for a moment: Storing Polyseed passphrases in .keys files, and also re-displaying them from there with commands like seed in the CLI wallet app 18:18:39 I carefully went through the meeting log again to read about the various opinions, and also had quite some own thoughts about that subject 18:18:56 I finally landed in the "do not store, do not display" camp. 18:19:29 Me: reviewing carrot_impl 18:20:22 For me, it's one of the "core value propositions" of passphrases, at least as used in the Monero CLI wallet app, that they are an additional secret that you are free to add, free to write down yourself or memorize, and free to apply when you restore. The wallet should not take matters into its own hands and insist on displaying it along with the seed. 18:21:17 If nobody can be found to strongly oppose, I will "operate out" passphrase storage and re-display from my PR 18:22:26 Also one factor in my opinion building: I checked that it's possible without a lot of effort and code to keep the now-stored passphrases in wallets written by the monero_c library intact. 18:23:01 And make them available as a member of account_keys, to offer some nice upgrade path if wallet app writers want that. 18:23:20 The Monero core software would otherwise totally ignore that. 18:24:07 The name would change from m_passphrase to e.g. m_monero_c_passphrase to make that clear. 18:25:20 That sounds good to me, if other projects can use another system they prefer 18:25:41 Yeah, after all this room is called "no wallet left behind" :) 18:25:50 Does Feather store passphrases in the keys file? Is it done in the same way? 18:26:19 It goes into the wallet cache if I remember correctly, as "wallet attributes". 18:27:20 So, no, not the same way. monero_c based wallets could switch to Feather's attribute system, with the upgrade being "Take it from m_monero_c_passphrase and convert it to an attribute" 18:29:46 Ok, maybe we will get some more opinions from people reading this later. Of course people can also review and comment the PR if they want. 18:31:00 Alright, something else to discuss today? 18:32:29 small reminder to please help reviewing the remaining PRs here so that we can put out the release: https://github.com/monero-project/monero/issues/10545 18:32:43 they are ordered most to least important, 10774 could be delayed 18:33:30 > <@rbrunner7> For me, it's one of the "core value propositions" of passphrases, at least as used in the Monero CLI wallet app, that they are an additional secret that you are free to add, free to write down yourself or memorize, and free to apply when you restore. The wallet should not take matters into its own hands and insist on displaying it along with the seed. 18:33:30 tbc, you'll still store the private spend key, so a user doesn't have to input their seed passphrase every time they open the wallet? And also, you'd store the original mnemonic as well, so that if the user wants to see their original seed, they can see it? 18:33:38 So 4 PRs left to review there? 18:34:01 10779 is already reviewed, so 3 basically 18:34:33 @jberman:monero.social: Yes. No drastic change in behavior, just dropping the passphrase storage and display 18:35:07 Will review 10774 today, good change 18:35:39 No "encryption at rest" for the Polyseed either, but maybe that could get added later, with a new switch 18:36:10 Beyond normal wallet encryption by password of course, as discussed, with some minor confusion :) 18:37:22 10598 is an edge case where when the node goes into "target height decreases" branch safe sync mode could stay false, which means during power outage there could be corruption 18:37:27 Anyway, just my humble proposal, people are free to comment and also oppose in the PR. Will write a dedicated comment there about this my proposal. 18:39:15 I will review #10781 today 18:40:17 Looks like we are through now, thus let me close the meeting. Thanks everybody for attending, read you again next week! 18:40:29 Thanks everyone, see ya