Author

Topic: [XMR] Monero - A secure, private, untraceable cryptocurrency - page 818. (Read 4671660 times)

legendary
Activity: 1596
Merit: 1030
Sine secretum non libertas
Any thoughts, criticisms, or suggestions?  

Your principal vulnerabilities stem from your network interface.  On your live network host:  Disable and in fact remove physically everything that opens a port except for sshd, bitmonerod.  iptables should block all but 2 essential ICMP types, your sshd tcp port, DNS udp, and bitmonerod.  You want rules to prevent fingerprinting as well.  Use a kernel from TAILS.  Physically disable bluetooth and IR.  I recommend against wifi, in favor of copper ethernet.

https://medium.com/message/everything-is-broken-81e5f33a24e1
sr. member
Activity: 379
Merit: 250
Erik Voorhees response to my Tweet:

https://twitter.com/ErikVoorhees/status/630747435459948544

@XMRpromotions @ShapeShift_io Thanks for the kind words Smiley I'm no expert on Monero, but I respect any coin that enhances financial privacy


Good to hear! Smiley
sr. member
Activity: 336
Merit: 250
Erik Voorhees response to my Tweet:

https://twitter.com/ErikVoorhees/status/630747435459948544

@XMRpromotions @ShapeShift_io Thanks for the kind words Smiley I'm no expert on Monero, but I respect any coin that enhances financial privacy
legendary
Activity: 2968
Merit: 1198
Disadvantages:
1. Change is bad?

As you found in the paper, there are some questions what tricks exist that could be exploited.

Quote
Edit2: it looks like it may be worse for GPUs by a bit, so anyone with money invested in GPUs for mining Monero would likely be opposed.

If that were the concern, a pretty easy solution is to schedule the change say 2-3 years in advance. Any current equipment would likely be obsolete, worn out, and/or otherwise close to the end of its useful life, and anyone thinking about buying new equipment would consider the upcoming switch over. Assuming the change weren't being made for some "emergency" reason, that should be fine.

Quote
The search for the "perfect" POW continues?

Indeed
legendary
Activity: 1105
Merit: 1000
...
As far as modifying PoW that is not on any active agenda. We've always open to the possibility and we've looked at cuckoo cycle and some other things but there aren't any current plans to change it.

That cuckoo cycle is interesting reading but from what I can tell it doesn't actually change the cryptography or am I having a comprehension failure? When I read the other thread I'll probably get the answer to that question. Smiley

Well it's "just" a POW, so has nothing to do with EdDSA, etc. It would replace Cryptonight.

Advantages:
1. Easy to verify
2. Huh
3. Cool name

Disadvantages:
1. Change is bad?

Change is inevitable. This hurts my brain. Smiley
http://www.cs.cmu.edu/~dga/crypto/cuckoo/analysis.pdf

The one thing this coin can never do is lose it's anonymity so being prepared and as future proof as possible should certainly be a focus.

Hmm, I hadn't seen that paper. I didn't read it fully, but it looks like he "broke" it to an extent at least.

The search for the "perfect" POW continues? Tongue
legendary
Activity: 3836
Merit: 4969
Doomed to see the future and unable to prevent it
...
As far as modifying PoW that is not on any active agenda. We've always open to the possibility and we've looked at cuckoo cycle and some other things but there aren't any current plans to change it.

That cuckoo cycle is interesting reading but from what I can tell it doesn't actually change the cryptography or am I having a comprehension failure? When I read the other thread I'll probably get the answer to that question. Smiley

Well it's "just" a POW, so has nothing to do with EdDSA, etc. It would replace Cryptonight.

Advantages:
1. Easy to verify
2. Huh
3. Cool name

Disadvantages:
1. Change is bad?

Change is inevitable. This hurts my brain. Smiley
http://www.cs.cmu.edu/~dga/crypto/cuckoo/analysis.pdf

The one thing this coin can never do is lose it's anonymity so being prepared and as future proof as possible should certainly be a focus.
legendary
Activity: 1105
Merit: 1000
...
As far as modifying PoW that is not on any active agenda. We've always open to the possibility and we've looked at cuckoo cycle and some other things but there aren't any current plans to change it.

That cuckoo cycle is interesting reading but from what I can tell it doesn't actually change the cryptography or am I having a comprehension failure? When I read the other thread I'll probably get the answer to that question. Smiley

Well it's "just" a POW, so has nothing to do with EdDSA, etc. It would replace Cryptonight.

Advantages:
1. Easy to verify
2. Huh
3. Cool name

Disadvantages:
1. Change is bad?

Edit: I *do* like the idea of a quicker to verify POW (while maintaining the other properties of Cryptonight [at least as I understand it in my very limited study]). Perhaps it could be added along with a change to 2 (or 4) minute block targets, which I'm personally in favor of.

Edit2: it looks like it may be worse for GPUs by a bit, so anyone with money invested in GPUs for mining Monero would likely be opposed.
legendary
Activity: 3836
Merit: 4969
Doomed to see the future and unable to prevent it

edited to add: oh, you mean the cryptography thats harder to crack by quantum computers. Yeah, if the "new difficulty algorithm" means new POW function, then yeah - these random polynomials would be interesting.  If the new diff means just changing how the difficulty is adjusted....

edited to add: you might enjoy posting stuff in the monero improvement technical discussion thread I started.
https://bitcointalksearch.org/topic/xmr-monero-improvement-technical-discussion-1139756

I heavily moderate that thread, so stuff doesn't get lost in the "talk" portion of bitcointalk.

Nice thread, I didn't even know it existed! Looks like I have alot of reading to catch up on.

...
As far as modifying PoW that is not on any active agenda. We've always open to the possibility and we've looked at cuckoo cycle and some other things but there aren't any current plans to change it.

That cuckoo cycle is interesting reading but from what I can tell it doesn't actually change the cryptography or am I having a comprehension failure? When I read the other thread I'll probably get the answer to that question. Smiley
legendary
Activity: 2968
Merit: 1198
I can't find the post you're referencing, and I just searched your recent posts. New diff algorithm - I *think* they mean the algorithm for modifying the difficulty, not the proof of work function.

Yes that's what was meant. I think its on the development/research goals document.

As far as modifying PoW that is not on any active agenda. We've always open to the possibility and we've looked at cuckoo cycle and some other things but there aren't any current plans to change it.

legendary
Activity: 1260
Merit: 1008
...
Good point.

Being a programmer I have thought about what use cases in the real world Ethereum would be good for...

I haven't really came up with anything yet as I do find the platform far too limiting. I figure I just wasn't smart enough! Apparently the founder of Ethereum is meant to be a genius so there may be real world use cases that I just can't think of?

I spent some time looking into this and got afa the current project list and found deception as well as no tangible prototypes. The bulk of all the Projects were nothing more than IPO schemes. If any of these projects actually produces something functional and the deception in the list of partners is not removed or substantiated then this coin is dead to me.

Also considering under the Monero currently being researched heading there is "New Difficulty Algorithm" I would have thought my last post would be contributory. But considering the lack of responses to links I drop in this thread I don't think anyone even clicks them. Just an FYI alot of times I don't use the keyboard and just use pointing device to communicate. Makes my life easier.

I can't find the post you're referencing, and I just searched your recent posts. New diff algorithm - I *think* they mean the algorithm for modifying the difficulty, not the proof of work function.

and people click man, I click. I just don't have much to say or I get distracted.

edited to add: oh, you mean the cryptography thats harder to crack by quantum computers. Yeah, if the "new difficulty algorithm" means new POW function, then yeah - these random polynomials would be interesting.  If the new diff means just changing how the difficulty is adjusted....

edited to add: you might enjoy posting stuff in the monero improvement technical discussion thread I started.
https://bitcointalksearch.org/topic/xmr-monero-improvement-technical-discussion-1139756

I heavily moderate that thread, so stuff doesn't get lost in the "talk" portion of bitcointalk.
hero member
Activity: 770
Merit: 504
स्मृति सहायक 642342108

conde tyd mense spin garen biblioteke onderkant waarheid kan liefde koop nie
[random dudes]
 
 
Please go kick off Cicada 2015 somewhere else.  k thx
donator
Activity: 1274
Merit: 1060
GetMonero.org / MyMonero.com
Even the Amish love Monero!! Grin

[Brilliance]


These are very amusing.   Cheesy Cheesy Cheesy 
 
We need a nude girl with a bitcoin tattoo trying to cover herself while a woman in a Monero bikini/clothes gives her a superior look.

It's an ooooold joke...smooth had "botnet" autocorrected to "bonnet" once, and I made the Monero bonnet picture:)
hero member
Activity: 770
Merit: 504
Even the Amish love Monero!! Grin

[Brilliance]


These are very amusing.   Cheesy Cheesy Cheesy 
 
We need a nude girl with a bitcoin tattoo trying to cover herself while a woman in a Monero bikini/clothes gives her a superior look.
jr. member
Activity: 157
Merit: 1
Even the Amish love Monero!! Grin


full member
Activity: 201
Merit: 100
...

Hang on...one sec...

...sorry, one more moment...

Ok, now I'm ready.

Ready for what?
jr. member
Activity: 157
Merit: 1
full member
Activity: 122
Merit: 100
additionally, I made an exhaustive video tutorial on cold wallet creation using the moneroaddress.org generator in an offline live USB linux.

https://www.youtube.com/watch?v=GJQ5prfNfZQ

I was following the instructions provided by fluffypony, but then switched to using moneromoo's generator because those old binaries are apparently a pain to get working on a fresh live offline linux.

edited to add: it'd be great to get some feedback on this from those that are familiar with all these security approaches.

Thank you. This should help lots of people
legendary
Activity: 3836
Merit: 4969
Doomed to see the future and unable to prevent it
...
Good point.

Being a programmer I have thought about what use cases in the real world Ethereum would be good for...

I haven't really came up with anything yet as I do find the platform far too limiting. I figure I just wasn't smart enough! Apparently the founder of Ethereum is meant to be a genius so there may be real world use cases that I just can't think of?

I spent some time looking into this and got afa the current project list and found deception as well as no tangible prototypes. The bulk of all the Projects were nothing more than IPO schemes. If any of these projects actually produces something functional and the deception in the list of partners is not removed or substantiated then this coin is dead to me.

Also considering under the Monero currently being researched heading there is "New Difficulty Algorithm" I would have thought my last post would be contributory. But considering the lack of responses to links I drop in this thread I don't think anyone even clicks them. Just an FYI alot of times I don't use the keyboard and just use pointing device to communicate. Makes my life easier.
legendary
Activity: 2268
Merit: 1141
Spotted this gem on the Monero Github, encrypted payment ID's:

https://github.com/monero-project/bitmonero/pull/361
legendary
Activity: 1442
Merit: 1000
Antifragile
Sadam - Thanks for the design goals. Looks great. Would be nice if they can break it down for the wallet, unless they want to surprise us.

GingeAle - I suggest others to look at your video. I already did the wallet generating and didn't check my steps. (Yeah, I'm now (not in the past) a great example of the type of person who doesn't want to get into the nitty gritty.) I'm trying to leave most of my IT background behind me. But from what I saw of your video - Excellent, great job.

Not trying to come across as a stickler, really just an average guy not wanting to jump through all the tech hoops. That said, we are all extremely early adopters and when the wallet is ready I think we still will be early adopters.

IAS
Jump to: