Avatar
mister_monster
dd2057556f88a64cacd075d007f1be480f949c91fd6d0c4d593baccdb2aabde2
I do not recognize anyone’s right to one minute of my life. Nor to any part of my energy. Nor to any achievement of mine. No matter who makes the claim, how large their number or how great their need. My public bookmarks are like a pseudo blog, check them out to see what I have to say. I don't post every day, think of me as a high SNR oracle, when I show up in your feed it's probably going to be interesting. I do private contracting for personal server setups and automation scripts. Feel free to contact and inquire about that if you need something put together. xmpp, deltachat and email: mister_monster@disroot.org pgp fingerprint: 16b1f268d3a01afdf4194b87868bc00fa8740dac 8C2H9HbnwamDs2EkZroPNbdrUJB8hguQsjSNUKgg1fNvB7tAsETHMWhdWYG9aKAZzMRJMb3pw6J46T4wnSNyfZR863nYyEd White noise npub1ga5usrfkrue6qeekzhrcylserwx5cuw903vhrn4ftrdj549vscesdr2kds (until white noise supports amber, for security purposes) 09F911029D74E35BD84156C5635688C0

Even then, it doesn't work. It damages your soul and turns you into a fraud.

Well... It's proprietary, closed source, and in violation of the haveno license right now, and people are still installing it. I'm actively recommending against it right now.

If they release the source for the desktop application and the apk then I'll probably chill out, but right now this looks incredibly suspicious.

https://github.com/KewbitXMR/haveno-plus/issues/6

Apparently this is not related to the bounty from what others have told me. It is potentially malicious code, I wouldn't run it until the developer releases it under a FOSS license and releases the source code, especially the desktop application.

Replying to Avatar mister_monster

https://github.com/KewbitXMR/haveno-plus/blob/main/LICENSE.md

It's proprietary code, and the repo has nothing but the license (linked) and readme.

I wouldn't touch this at all, looks like a way to scam people out of money.

This is also in violation of the license for haveno https://github.com/haveno-dex/haveno/blob/master/LICENSE which is AGPL, distributing binary releases containing haveno code without distributing source and under a proprietary license is a violation of the license. Expect a cease and desist.

https://github.com/KewbitXMR/haveno-plus/blob/main/LICENSE.md

It's proprietary code, and the repo has nothing but the license (linked) and readme.

I wouldn't touch this at all, looks like a way to scam people out of money.

Uh, wow. Is this actually part of the reto project? I'm not exactly trusting of something popping up like this, but this is a very important step in development that is really exciting. Anybody using this with reto/real money?

Yeah, I think, it's probably a good idea to use some of the tips we get to offer bounties on garnet. I mean, the developer has enabled the entire Monero community on nostr to send each other Monero. Asking him to do more for free is kind of like, not tipping the one guy we should be tipping most lol. Bug reports are fine, but we should put a bounty in any issue we open on garnet that is a feature request.

Alright dude just as an FYI, not to be rude, but you should learn a bit more about information security. Why broadcast the key? Why not just generate the key from the nsec, that way anywhere you have your nsec you have your Monero key? No sending required. Sending it gets you nothing and potentially compromises your security. Then, you said encrypt it, encrypt it with what key? You still need a side channel to share that key.

Rule of thumb: find the simplest solution to your problem and never overcomplicate it.

So, what you want actually kind of already exists. Garnet generates a 25 word Monero mnemonic from your nsec. You can export that seed to any wallet you like. Theoretically any Monero wallet could use the same scheme garnet uses and allow you to import nsecs as Monero keys, but I don't think that's a good idea, seed export from nsec in Garnet works fine.

Generally it's not a good idea to use the same keys for different things like this. I will never use my garnet seed for this identity for anything other than xmr tipping on nostr.

I was actually thinking of putting in a feature request for something like that, like it's orange if they can and grey if they can't get tips. Purple is probably better since orange is already used to show you've zapped em. Only reason I didn't do it is because I already have 2 open issues and I don't want the dev to he overwhelmed too quickly. You should totally put in a feature request on the github!

I'd go with trezor personally. Trezor safe 3 or the new trezor 5 should do great.

OK...

Those not uber paranoid people can keep using their keys then even when they broadcast a message they shouldn't have. The feature you want is, first for uber paranoid people in the first place and second, it's not possible.

A scheme to request deletion is fine. But it's always going to be a request. And the relay can always lie to you.

I'm not talking about how nostr should be. What I'm telling you is, there is no scheme whatsoever in any protocol that can ensure that a message you've sent to another machine is deleted by that machine and/or not relayed elsewhere. Event deletion requests for a key that youre trying to remain anonymous with is nothing more than a false sense of security. If you're not uber paranoid then it makes no difference to you, you're still going to use the key. If you are, it makes no difference to you, you're still not going to use the same key if you screw up. You can choose to use relays that honor deletion requests (or at least say they do, again, you can't enforce it or know for sure), and that's a nice thing if they do, but it gets you no guarantees as far as your security is concerned.

Replying to Avatar Ch!llN0w1

Looks like something Europeans would wear.

Yeah, that's not the app tracking XMR transactions, that's the app deliberately sending a note to relays to show them publicly. You can decide when you send xmr with garnet whether you want it to do this. You can send them private too if you want, which would just be sending an XMR transaction and no note to a relay.

I send them private sometimes, but I like to publicize them most of the time because it helps people see that XMR tips are actually flowing around and gets people excited and encourages everyone to do it also.

What's with people giving themselves laser eyes in their avatars? Laser eyes are like nicknames, you don't give them to yourself. They are bestowed upon you by others.

Hey nostr:npub12h358ejcjpeaxyhu4vcqwhjtg6qndxm9gk007d48utlylzq2e5dsdmk3mr why do you and your btcframe account nostr:npub1gkkahxwca30rf2td22u9p3jnmlh79dylgmm2et0kykftle6tdcysj4zden randomly emoji react to stuff I publish like the second it hits a relay? Are you testing out a bot or something? If youre trying to promote your product, it's off putting and a lot of people are going to block you as spam. Could you take me off whatever list you have me on with your autoreact software?

Well, kind of. Such an attack would grind the network to a halt for a time. But in the end yes, the miners would own all the capital they spent on it and their currency would be much weaker, they'd hurt themselves much worse long term for a short term attack.

It's all incentives, game theory. The main reason they really don't have a blank check is because of the way their fiat money works, and not due to how XMR or BTC work. They don't have a blank check to do anything, they have to manage their resources.

But yeah, the fee market is designed to deter spam of any kind at any scale. Every now and then you get someone that wants to burn a bunch of money but for the most part these blockchains are spam free.