Author

Topic: [XMR] Monero - A secure, private, untraceable cryptocurrency - page 1438. (Read 4670622 times)

legendary
Activity: 1246
Merit: 1000
103 days, 21 hours and 10 minutes.
Hahem am I the only one that think BCX's findings are worrisome?

What were the findings again?

https://bitcointalksearch.org/topic/delete-786201


[...]

* I have found very specific exploits in CN that have not been fixed that would be successful on XMR. Most are what I call annoyance attacks, that would be fixed and the coin would probably survive, but one is a coin killer. In XMR there exist a flaw involving the keyrings that under the right conditions will allow an attacker to steal your wallets and hijack your addresses. To fix this, anonymity will need to be sacrificed. These exploits are why two top exchanges who have asked for my opinion have not added XMR.

[...]


not a developer but he told about that flaw back in july, which worried me a that time. I think it is either very hard to find or non-existent in the way bitcoinexpress wants it to execute. but could be dead wrong here.

btw. he said he does not want to execute it

The door is opened up now (more so than ever before) because of his statement.  He has already hinted at the conditions, so at this point if a select few who were skilled at reading code the way BCX is is able to, they could possibly execute it as well.

Interesting to say the least.
sr. member
Activity: 471
Merit: 250

not a developer but he told about that flaw back in july, which worried me a that time. I think it is either very hard to find or non-existent in the way bitcoinexpress wants it to execute. but could be dead wrong here.

btw. he said he does not want to execute it

He does not want to execute it but as soon as he state that the flaw exist and can be exploited, people that want XMR to disappear (and we can suspect there are a few...) will try to find a way to use it.
He literally pointed his finger in the right direction on a public's forum.
hero member
Activity: 742
Merit: 500
Hahem am I the only one that think BCX's findings are worrisome?

What were the findings again?

https://bitcointalksearch.org/topic/delete-786201


[...]

* I have found very specific exploits in CN that have not been fixed that would be successful on XMR. Most are what I call annoyance attacks, that would be fixed and the coin would probably survive, but one is a coin killer. In XMR there exist a flaw involving the keyrings that under the right conditions will allow an attacker to steal your wallets and hijack your addresses. To fix this, anonymity will need to be sacrificed. These exploits are why two top exchanges who have asked for my opinion have not added XMR.

[...]


not a developer but he told about that flaw back in july, which worried me a that time. I think it is either very hard to find or non-existent in the way bitcoinexpress wants it to execute. but could be dead wrong here.

btw. he said he does not want to execute it
sr. member
Activity: 471
Merit: 250
Hahem am I the only one that think BCX's findings are worrisome?

What were the findings again?

https://bitcointalksearch.org/topic/delete-786201


[...]

* I have found very specific exploits in CN that have not been fixed that would be successful on XMR. Most are what I call annoyance attacks, that would be fixed and the coin would probably survive, but one is a coin killer. In XMR there exist a flaw involving the keyrings that under the right conditions will allow an attacker to steal your wallets and hijack your addresses. To fix this, anonymity will need to be sacrificed. These exploits are why two top exchanges who have asked for my opinion have not added XMR.

[...]

donator
Activity: 1722
Merit: 1036
Hahem am I the only one that think BCX's findings are worrisome?

What were the findings again?
sr. member
Activity: 471
Merit: 250
Hahem am I the only one that think BCX's findings are worrisome?
legendary
Activity: 2268
Merit: 1141
Regarding donations - we already have about 20% of the Monero owners joining MEW. If we get this number to about 50%, then it will be easier to fund development as a community effort because there is no free riding.

how to get in there?


a third idea and that is basically how mike hear financed his project is to convince very rich anarchists/libertarians that this project has a lot of value. finding these guys in the bitcoin environment should be easy Cheesy convincing them that there is place for a second major currency is hard. first because the person probably thinks it shoots its own leg, second because there needs to be an incentive for him. that said I think there are people who see besides their own profit, moral reasons to invest in a project like this.

Suit yourself: https://bitcointalksearch.org/topic/monero-economy-workgroup-the-mew-thread-776479
hero member
Activity: 742
Merit: 500
Regarding donations - we already have about 20% of the Monero owners joining MEW. If we get this number to about 50%, then it will be easier to fund development as a community effort because there is no free riding.

how to get in there?


a third idea and that is basically how mike hear financed his project is to convince very rich anarchists/libertarians that this project has a lot of value. finding these guys in the bitcoin environment should be easy Cheesy convincing them that there is place for a second major currency is hard. first because the person probably thinks it shoots its own leg, second because there needs to be an incentive for him. that said I think there are people who see besides their own profit, moral reasons to invest in a project like this.
donator
Activity: 1722
Merit: 1036
Regarding donations - we already have about 20% of the Monero owners joining MEW. If we get this number to about 50%, then it will be easier to fund development as a community effort because there is no free riding.
donator
Activity: 1274
Merit: 1060
GetMonero.org / MyMonero.com
Also obviously this would have to be temporary. The devs would need to commit to weaning off of such a system after given features are implemented or a given period of time.

I would suggest exhausting all possible external options for raising funds before building something into the software. I think going this other route would be more scandalized and trolled than you're considering.

I don't think that it's fundamentally bad to build something into the software. Not sure if you saw the Missive, but in the last wizard screenshot there's an idea for an auto-donation system we want to implement: https://i.imgur.com/ACDmOFJ.jpg

The basic idea is that it's completely user-selectable, based on a % of your tx fee (cumulative to avoid adding dust outputs) that is added on top of the tx fee, so it'll never have a major impact. In the GUI we'd most likely have it on at 50% by default.
sr. member
Activity: 471
Merit: 250
Did you see this? https://bitcointalksearch.org/topic/delete-786201


[...]

* I have found very specific exploits in CN that have not been fixed that would be successful on XMR. Most are what I call annoyance attacks, that would be fixed and the coin would probably survive, but one is a coin killer. In XMR there exist a flaw involving the keyrings that under the right conditions will allow an attacker to steal your wallets and hijack your addresses. To fix this, anonymity will need to be sacrificed. These exploits are why two top exchanges who have asked for my opinion have not added XMR.

[...]

hero member
Activity: 538
Merit: 500
I guess ill go ahead and bring up my idea of crowd funding again. Tell us how much it will cost to have the database finished. Tell us when it will be completed if you do raise the funds. Then I will hold peoples funds in escrow until enough is raised. The moment the funding goal is reached i will deliver the funds to the devs as per the arrangement. If the funding goal is not reached than I will refund everyone’s money.

See rep thread in signature if you are concerned about whether I am qualified for this task.

Wouldn't it be better to do it on kickstarter or the like?  Wider audience.  BTCT is a ghetto.


Yes, this is the way to go.

Anon136 idea of forking in order to give 1% of mining reward to dev team is bad and will only bring confusion. If that would to occur xmr would become worthless. Forking is violent way of doing things.

Kickstarter idea works in real world. Devs (or maybe MEW?) only need to create page where they or any other interested party could publish ideas for xmr changes/projects. Of course they will have to make a good arguments in layman terms why this changes would be beneficial and how much would it cost. Distinguished members or multisig wallet or donators vote will decide if job is finished.
legendary
Activity: 1596
Merit: 1030
Sine secretum non libertas
What about the Mike Hearn 'alternative to the BTC foundation' project, that is supposed to combine community decision making with fundraising? Any ETA on that, and whether it'll be usable by alts?

MEW does this for XMR.  An open cross-currency foundation would command a pathetically limited kingdom, because they are so often at each other's throats (often irrationally).


legendary
Activity: 1596
Merit: 1030
Sine secretum non libertas
[...consensus enforced reward share...]

When considering such options, please be careful not to poison XMR's image.  I would rather pay 50% out of pocket voluntarily than 1% involuntarily - because I think an involuntary payment will degrade the value of the currency by more than 50%.  It would be a value-destroying option.  [Note that no one is proposing a brute tax here - just brainstorming.]

BBR's method is less damaging to the currency than a brute tax:  It is default opt-in, IIRC, which is not so bad.  It doesn't press a one-sided change in contract. 

legendary
Activity: 1470
Merit: 1007
plus 1 for classical fundraising, minus... a lot for a forkraiser. As if we don't have enough detractors, just imagine what will happen if we build a payout into the protocol.

That said, I'm kinda out of the loop here: is there a Bitcoin accepting Kickstarter-like site in the wild?

What about the Mike Hearn 'alternative to the BTC foundation' project, that is supposed to combine community decision making with fundraising? Any ETA on that, and whether it'll be usable by alts?
legendary
Activity: 1722
Merit: 1217
It's kind of sad... Monero has attracted some of the smartest minds I've seen in cryptocurrencies and cryptography, but we don't have enough money to pay to developed even 1/4 of the things we need to. It costs about $100-150 an hour to contract a decent programmer to hack (and please don't start on the value of third world programmers, if you're talking about that you've probably never used them), or $800-1200 a day. I would estimate that ByteCoin put in about a half million USD to get their project off the ground, which is probably why they've been trolling us so hard. But, the fact of the matter is, we're either paying out of pocket or (like me) working completely for free.

Monero is about a lot more than pumping and dumping -- it uses many of the features that have been desired from core devs over time like privacy and faster/more secure EdDSA (which uses Schnorr signatures). But there are major, major architectural overhauls to the core code that need to be done to give it even a fraction of the usability of BTC, and I fear we won't be able to afford that. I suspect we need at least 0.25-0.50M USD per year to keep things moving along smoothly, and we're not getting close to $21K USD a month in donations.

At present, we mine about 20k XMR a day, 1% of that is 200 XMR or about $400. Can we make the the block reward to pay 1% of coins to a wallet controlled by developer? As the value of XMR increases, the reward will also decrease, making the payment almost constant or higher if XMR appreciate faster.

Thats actually a brilliant idea. Release a fork that pays part of the mining rewards automatically to the devs. If people dont like it than they dont have to use that fork. If the network splits into two, one where we have all of the devs being properly compensated and devloping appropriately, and another fork where its just some stubborn guys who dont like the proposal hording and sitting on coins that arnt being developed, than i think we know which would win out in the long run. If they want to fork and get their own devs and follow a more traditional funding model, than great we will have 2 competing cryptos that would both be pretty interesting. I might throw some capital into both.

I obviously understand the drawbacks. We would be assailed for having an element of centralization. But i really think that when you weigh the costs and the benefits against each other, atleast superficially, we get to a point where we really really really should be atleast talking about this.

Also obviously this would have to be temporary. The devs would need to commit to weaning off of such a system after given features are implemented or a given period of time.

I would suggest exhausting all possible external options for raising funds before building something into the software. I think going this other route would be more scandalized and trolled than you're considering.

well there is the crowd funding idea that i mentioned a few posts back. we could always try that first.
legendary
Activity: 1762
Merit: 1011
It's kind of sad... Monero has attracted some of the smartest minds I've seen in cryptocurrencies and cryptography, but we don't have enough money to pay to developed even 1/4 of the things we need to. It costs about $100-150 an hour to contract a decent programmer to hack (and please don't start on the value of third world programmers, if you're talking about that you've probably never used them), or $800-1200 a day. I would estimate that ByteCoin put in about a half million USD to get their project off the ground, which is probably why they've been trolling us so hard. But, the fact of the matter is, we're either paying out of pocket or (like me) working completely for free.

Monero is about a lot more than pumping and dumping -- it uses many of the features that have been desired from core devs over time like privacy and faster/more secure EdDSA (which uses Schnorr signatures). But there are major, major architectural overhauls to the core code that need to be done to give it even a fraction of the usability of BTC, and I fear we won't be able to afford that. I suspect we need at least 0.25-0.50M USD per year to keep things moving along smoothly, and we're not getting close to $21K USD a month in donations.

At present, we mine about 20k XMR a day, 1% of that is 200 XMR or about $400. Can we make the the block reward to pay 1% of coins to a wallet controlled by developer? As the value of XMR increases, the reward will also decrease, making the payment almost constant or higher if XMR appreciate faster.

Thats actually a brilliant idea. Release a fork that pays part of the mining rewards automatically to the devs. If people dont like it than they dont have to use that fork. If the network splits into two, one where we have all of the devs being properly compensated and devloping appropriately, and another fork where its just some stubborn guys who dont like the proposal hording and sitting on coins that arnt being developed, than i think we know which would win out in the long run. If they want to fork and get their own devs and follow a more traditional funding model, than great we will have 2 competing cryptos that would both be pretty interesting. I might throw some capital into both.

I obviously understand the drawbacks. We would be assailed for having an element of centralization. But i really think that when you weigh the costs and the benefits against each other, atleast superficially, we get to a point where we really really really should be atleast talking about this.

Also obviously this would have to be temporary. The devs would need to commit to weaning off of such a system after given features are implemented or a given period of time.

I would suggest exhausting all possible external options for raising funds before building something into the software. I think going this other route would be more scandalized and trolled than you're considering.
legendary
Activity: 1596
Merit: 1030
Sine secretum non libertas
I guess ill go ahead and bring up my idea of crowd funding again. Tell us how much it will cost to have the database finished. Tell us when it will be completed if you do raise the funds. Then I will hold peoples funds in escrow until enough is raised. The moment the funding goal is reached i will deliver the funds to the devs as per the arrangement. If the funding goal is not reached than I will refund everyone’s money.

See rep thread in signature if you are concerned about whether I am qualified for this task.

Wouldn't it be better to do it on kickstarter or the like?  Wider audience.  BTCT is a ghetto.
legendary
Activity: 1722
Merit: 1217
It's kind of sad... Monero has attracted some of the smartest minds I've seen in cryptocurrencies and cryptography, but we don't have enough money to pay to developed even 1/4 of the things we need to. It costs about $100-150 an hour to contract a decent programmer to hack (and please don't start on the value of third world programmers, if you're talking about that you've probably never used them), or $800-1200 a day. I would estimate that ByteCoin put in about a half million USD to get their project off the ground, which is probably why they've been trolling us so hard. But, the fact of the matter is, we're either paying out of pocket or (like me) working completely for free.

Monero is about a lot more than pumping and dumping -- it uses many of the features that have been desired from core devs over time like privacy and faster/more secure EdDSA (which uses Schnorr signatures). But there are major, major architectural overhauls to the core code that need to be done to give it even a fraction of the usability of BTC, and I fear we won't be able to afford that. I suspect we need at least 0.25-0.50M USD per year to keep things moving along smoothly, and we're not getting close to $21K USD a month in donations.

At present, we mine about 20k XMR a day, 1% of that is 200 XMR or about $400. Can we make the the block reward to pay 1% of coins to a wallet controlled by developer? As the value of XMR increases, the reward will also decrease, making the payment almost constant or higher if XMR appreciate faster.

Thats actually a brilliant idea. Release a fork that pays part of the mining rewards automatically to the devs. If people dont like it than they dont have to use that fork. If the network splits into two, one where we have all of the devs being properly compensated and devloping appropriately, and another fork where its just some stubborn guys who dont like the proposal hording and sitting on coins that arnt being developed, than i think we know which would win out in the long run. If they want to fork and get their own devs and follow a more traditional funding model, than great we will have 2 competing cryptos that would both be pretty interesting. I might throw some capital into both.

Its not forcing people to pay you either. You provide some code, built in is what you guys want to be compensated for it, and only people who value your code more highly than what you are charging will decide to use it. Its totally fair. Just like a store putting a price tag on a product that they are selling. You either buy it or dont depending on how you feel about the price.

I obviously understand the drawbacks. We would be assailed for having an element of centralization. But i really think that when you weigh the costs and the benefits against each other, atleast superficially, we get to a point where we really really really should be atleast talking about this.

Also obviously this would have to be temporary. The devs would need to commit to weaning off of such a system after given features are implemented or a given period of time.
legendary
Activity: 1762
Merit: 1011

It is kinda frustrating to see other projects raise hundreds and thousands of BTC based on a whim and a promise...but then again, it does change the dynamic as respects the integrity of the project. If we're perpetually in the negative there's nobody's money we can run away with:-P

Those other projects usually have prettier websites and make use of other PR techniques. While I personally like the fact that the devs here are focusing on the fundamentals of the backend, I've come to the conclusion that I'm in the minority on that.
Jump to: