Author

Topic: [XMR] Monero - A secure, private, untraceable cryptocurrency - page 1147. (Read 4670673 times)

sr. member
Activity: 252
Merit: 250
A question about the Monero wallet: doesn't it rotatte the addresses, like HD wallets? I'm asking this because in Bitcoin this practice is strongly discouraged, not just for privacy reasons, but for security reasons. In Monero I think the reuse address shouldn't be a issue for privacy, but what about security?

Quote
Bitcoin does not, at a low level, have any concept of addresses, only individual coins. Address reuse, at this layer, requires producing multiple digital signatures when you spend bitcoins. Multiple situations have been found where more than one digital signature can be used to calculate the private key needed to spend bitcoins. Even if you spend all the bitcoins claimed by this private key at once, it is still possible to double-spend them in theft before they confirm. While the known situations for finding the private key from signatures have been fixed, it is not prudent to assume there aren't more such situations yet unknown.

In the case of spending all the TXOs in a single transaction, there is an additional risk if someone is actively monitoring the network for vulnerable transactions: upon receiving such a transaction, they can split up their double spends such that there is only one ECDSA verification per transaction (making a single transaction for each TXO); this will cause the attacker's transactions to relay across the rest of the nodes faster than the legitimate one, increasing success of a double spend.


https://en.bitcoin.it/wiki/Address_reuse

Also: http://www.nilsschneider.net/2013/01/28/recovering-bitcoin-private-keys.html
newbie
Activity: 14
Merit: 0
"impossible to counterfeit" should be a major selling point of cryptocurrencies. Not sure why this isn't advertised more.

A large part of taking credit instead of cash is because it's tough to counterfeit the value, yet identity theft/cc theft is still a reality.
legendary
Activity: 1762
Merit: 1011

Hi, I almost never post on this forum but I wanted to say that this effort is crucial and hugely appreciated, TheKoziTwo.  As soon as this guide is published I think we'll see a significant increase in implementation, from shapeshifter.io to cryptsy to marketplace and auction sites to niche sites, etc etc.


shapeshifter.io is some autodesk 3D modeling site. You meant shapeshift.io, lol. Smiley
sr. member
Activity: 264
Merit: 250
I have begun coding a script (with database) that should include all basic functions required to accept monero (deposit/purchase,withdraw/transfer,check balance).

While doing this I can also document the functions. I'm using the available pre-built libraries for development, it seems some parameters I need to make it scalable are currently not included in those, or maybe I'm missing something (asking on irc).

Once these issues are resolved I'll continue development.

To get an idea, this is what it looks like currently (and incomplete)
Click here to view a demonstration image![/img]

Feel free to give suggestions.

Hi, I almost never post on this forum but I wanted to say that this effort is crucial and hugely appreciated, TheKoziTwo.  As soon as this guide is published I think we'll see a significant increase in implementation, from shapeshifter.io to cryptsy to marketplace and auction sites to niche sites, etc etc.

Since it seems you're coding an entire example application and waiting for ideal circumstances, I wonder if someone could offer an impromptu diy guide on how to communicate with the monero daemon from a server-side scripting language, the way it's currently done on Poloniex etc., for people like me (self-taught programmers, say, who don't want to wait on core development to get this economy started).  It could be as simple as "google how to do this, this, and this, put them all together, oh, and I recommend this great book on best security practices while you're at it", or even "You idiot! Don't you know anything?  Just put ____ in ____ and write a ____ script".  That would be a starting point and I can find my way from there.


Here is my perspective Wink


Monero API .NET
API for data transmission and retrieval from Monero applications through the Microsoft .NET Framework

GitHub repository | NuGet package

This project allows developers to flawalessly access the functionailty of Monero applications through the Core assemblies' RPC services. As the software is open-source, everyone can contribute, achieving the best performance and reliability for end-users.

Why is this API necessary?
It makes the implementation of Monero extremely easy for merchants, wallet builders, and all the other developers who are interested in working with (or accepting) Monero. Also, the core developers can concentrate more on the internals (instead of spending time on the official GUI client), which means that the currency should advance faster.

Is it cross-platform?
The first 3 releases of the API were only made for desktop PCs running Microsoft .NET Framework 4.5 or higher, thus, resulting in a smaller userbase than wanted. Since v3, the project has been split into 2 subprojects, one which is responsible for communicating with the daemon and the account manager's RPC channel, and one which can manage the required processes on PC.

What kind of platforms can utilize the power of Monero API .NET, then?
Basically every device which has support for running the Microsoft .NET Portable Framework v4, and more: Microsoft is planning to provide native (C++) compilation of C# assemblies very soon, and this process can be even faster since .NET Core has been made open-source.
The project can run on PCs (Windows; Mac and Linux with Mono .NET), mobile phones (Windows Phone; Android and iOS with Xamarin), and even on video game consoles like Xbox.

How does it work?
As I have already mentioned above, the project consists of 2 parts: MoneroAPI, and MoneroAPI.Extensions. The first one is built as a PCL (portable class library) and is multiplatform, while the extensions are desktop-only and contain functions for hosting a full node. Basically, MoneroAPI is preferable for lightweight, client-only applications, and MoneroAPI.Extensions adds support for hosting the Monero Core processes with ease.
There is a demo project included in the GitHub repository for a more technical explanation.



Please consider donating to one of the addresses in my signature if you like this project or want to support its development.
legendary
Activity: 1750
Merit: 1036
Facts are more efficient than fud
donator
Activity: 1274
Merit: 1060
GetMonero.org / MyMonero.com
yeah after checking the paper i have the feeling he prefers monero Grin

I just did a quick search and the most important part on this subject is:

Quote
I am willing to do the work it takes to implement the above on any given
Cryptonote-based coin, be it ByteCoin, Monero, Boolberry, Dashcoin, etc. I am
willing to be paid in the currency itself since I believe this will greatly increase
its value. Please contact me at the email at the start of this document to discuss
further logistics, payment details, etc.

As usual, nothing comes for free...

why not make it for all cryptonote currency he think is worth investing and ask for bounty and donation, claymore made his miner for cryptonote and he have all of them.. i say maximize profit  Wink

Unfortunately there are gaping holes in the whitepaper (gmaxwell has touched on some in this thread), not to mention the blockchain bloat that will be incurred by having all assets of every class on a single chain. It's definitely a step in the right direction, but unfortunately does not meet the design goals inherent in Monero for us to consider implementing it.
legendary
Activity: 3416
Merit: 1059
yeah after checking the paper i have the feeling he prefers monero Grin

I just did a quick search and the most important part on this subject is:

Quote
I am willing to do the work it takes to implement the above on any given
Cryptonote-based coin, be it ByteCoin, Monero, Boolberry, Dashcoin, etc. I am
willing to be paid in the currency itself since I believe this will greatly increase
its value. Please contact me at the email at the start of this document to discuss
further logistics, payment details, etc.

As usual, nothing comes for free...

why not make it for all cryptonote currency he think is worth investing and ask for bounty and donation, claymore made his miner for cryptonote and he have all of them.. i say maximize profit  Wink
donator
Activity: 1274
Merit: 1060
GetMonero.org / MyMonero.com
What should I do?

2015-Feb-07 16:35:22.701076 [P2P1]Failed to connect to any of seed peers, continuing without seeds

What operating system? And are you trying to connect to mainnet or testnet?
newbie
Activity: 6
Merit: 0
I have begun coding a script (with database) that should include all basic functions required to accept monero (deposit/purchase,withdraw/transfer,check balance).

While doing this I can also document the functions. I'm using the available pre-built libraries for development, it seems some parameters I need to make it scalable are currently not included in those, or maybe I'm missing something (asking on irc).

Once these issues are resolved I'll continue development.

To get an idea, this is what it looks like currently (and incomplete)
https://i.imgur.com/1T9kDbo.png

Feel free to give suggestions.

Hi, I almost never post on this forum but I wanted to say that this effort is crucial and hugely appreciated, TheKoziTwo.  As soon as this guide is published I think we'll see a significant increase in implementation, from shapeshifter.io to cryptsy to marketplace and auction sites to niche sites, etc etc.

Since it seems you're coding an entire example application and waiting for ideal circumstances, I wonder if someone could offer an impromptu diy guide on how to communicate with the monero daemon from a server-side scripting language, the way it's currently done on Poloniex etc., for people like me (self-taught programmers, say, who don't want to wait on core development to get this economy started).  It could be as simple as "google how to do this, this, and this, put them all together, oh, and I recommend this great book on best security practices while you're at it", or even "You idiot! Don't you know anything?  Just put ____ in ____ and write a ____ script".  That would be a starting point and I can find my way from there.
XDO
newbie
Activity: 17
Merit: 0
I've found what appears to be a bug in the latest simplewallet.

My normal way of calculating the needed fees to empty my wallet is to attempt to send the entire balance without fees, then look at the fees reported in the error message. But this method seems not to work when a transaction is large enough that it needs to be split. Rather than reporting the needed fee, simplewallet always reports a zero needed fee, but it reports a completely different attempted transaction size and balance to the one used (both are roughly divided by ten), perhaps due to the splitting of large transactions? This seems to be associated with the generation of an "error::tx_too_big" in the log file.

It would be nice if simplewallet contained a "transfer_all" command, which sends the entire balance less fees from one wallet to another, so we don't have to worry about trying every transaction size until we find one that will empty the wallet.
full member
Activity: 308
Merit: 100
What should I do?

2015-Feb-07 16:35:22.701076 [P2P1]Failed to connect to any of seed peers, continuing without seeds

Try running it with --seed-node. Here are some currently running nodes from my log file:
Code:
bitmonerod --seed-node 80.71.13.36:18080 --seed-node 89.189.150.244:18080 --seed-node 106.186.122.39:18080 --seed-node 63.141.254.186:18080 --seed-node 37.187.75.56:18080 --seed-node 130.89.162.205:18080 --seed-node 212.129.27.81:18080 --seed-node 195.46.123.236:18080 --seed-node 182.92.105.136:18080 --seed-node 198.27.64.122:18080 --seed-node 62.210.207.219:18080 --seed-node 212.129.44.156:18080
... or you may be blocked by a firewall.

Worked. Thanks
hero member
Activity: 794
Merit: 1000
Monero (XMR) - secure, private, untraceable
What should I do?

2015-Feb-07 16:35:22.701076 [P2P1]Failed to connect to any of seed peers, continuing without seeds

Try running it with --seed-node. Here are some currently running nodes from my log file:
Code:
bitmonerod --seed-node 80.71.13.36:18080 --seed-node 89.189.150.244:18080 --seed-node 106.186.122.39:18080 --seed-node 63.141.254.186:18080 --seed-node 37.187.75.56:18080 --seed-node 130.89.162.205:18080 --seed-node 212.129.27.81:18080 --seed-node 195.46.123.236:18080 --seed-node 182.92.105.136:18080 --seed-node 198.27.64.122:18080 --seed-node 62.210.207.219:18080 --seed-node 212.129.44.156:18080
... or you may be blocked by a firewall.
legendary
Activity: 1260
Merit: 1008
What should I do?

2015-Feb-07 16:35:22.701076 [P2P1]Failed to connect to any of seed peers, continuing without seeds

first, check the OP for help forums.

There is a solution to this, I just can't find it.
full member
Activity: 308
Merit: 100
What should I do?

2015-Feb-07 16:35:22.701076 [P2P1]Failed to connect to any of seed peers, continuing without seeds
legendary
Activity: 2268
Merit: 1141
I'm missing the monthly(??) Monero Missives!

Missives will only be posted if there are significant milestones achieved. This was clarified a few weeks ago.
hero member
Activity: 658
Merit: 503
Monero Core Team
full member
Activity: 198
Merit: 100
I'm missing the monthly(??) Monero Missives!
legendary
Activity: 2968
Merit: 1198
Plenty of open groups have membership fees.

Exactly. That's what I was saying. You have to pay to join MEW to exclude votes from the enemies of XMR.

It doesn't matter what the reason might be. Such groups can and do reasonably charge membership dues, which are used to fund the operation and programs of the group. Anyone can join and the minimum membership level is quite accessible.


I'm not talking membership fee's. I thought each vote can be bought. Am I wrong? I thought I read that.

Not exactly. Yes it is like an equity share model where people with more shares get more votes, but you can't buy individual votes on a particular issue.
legendary
Activity: 3836
Merit: 4969
Doomed to see the future and unable to prevent it
Plenty of open groups have membership fees.

Exactly. That's what I was saying. You have to pay to join MEW to exclude votes from the enemies of XMR.

It doesn't matter what the reason might be. Such groups can and do reasonably charge membership dues, which are used to fund the operation and programs of the group. Anyone can join and the minimum membership level is quite accessible.





I'm not talking membership fee's. I thought each vote can be bought. Am I wrong? I thought I read that.
legendary
Activity: 1260
Merit: 1008
My thought on the daily fluctuation of the network hashrate is that there is someone or some people that are in control of a large number of nodes, be it a commercial and/or educational and/or governmental organization(s), and these nodes are typically only powered on during normal business hours. 

Could also be the exact opposite, where they are set up to mine outside of normal hours.


Very true, depending on time zone.

Or someone could have a solar powered mining equipment!!!!!! would explain the daily fluctuations and the varying magnitude (10 Mh -> 12 Mh -> 20 Mh). 20 is a realllly sunny day!

I'd love to find a way to investigate this botnet thing. Rationally, if it was a botnet, it would mine to a pool. But that would also be true of swoops hypothesis. However, swoop proposes a large number of "nodes", which would suggest individual full nodes that are solo-mining.

Regardless, the only thing that we could observe would be either a large increase in # of active nodes during the times of network hash increase.
Or an increase in the hashrate of a particular pool during times of network hashrate.

In either case, could be caused by botnet or "large number of nodes".
Jump to: