cross-posted from: https://monero.town/post/3546999

> - X-Spaces Talk > > Why UTXO Matters: Security, Privacy, and Scalability in BTC Ecosystem

• X-Spaces Talk

Why UTXO Matters: Security, Privacy, and Scalability in BTC Ecosystem

• https://x.com/DarkWebInformer/status/1800557751980208231

🚨Honeypot Warning🚨In a thread posted on Dread in /d/Monero.. it's being discussed that the "Haveno-Reto" fork may be a honeypot.

You can now use LIBERECO. Your new Monero homepage.

• Https://Libereco.xyz

Libereco means "Freedom", or "Liberty" in Esperanto.

DASHBOARD > Network Stats, Price, News & Community feeds.

RESOURCES > A collection of all kinds of Monero information and knowledge

BLOGO > a Blog

https://x.com/DontTraceMeBruh/status/1797687175087350239

cross-posted from: https://monero.town/post/3145550

> Tari XTM is the new PoW asics-resistant Privacy coin by Fluffypony. This is the link for the Airdrop game. Live since May 14, 2024. > > Merge-Mining XMR has already been implemented. All you have to do is enter your Monero address with the miner.

Tari XTM is the new PoW asics-resistant Privacy coin by Fluffypony. This is the link for the Airdrop game. Live since May 14, 2024.

Merge-Mining XMR has already been implemented. All you have to do is enter your Monero address with the miner.

Video: Bitcoin is 𝚒𝚗𝚜𝚝𝚒𝚝𝚞𝚝𝚒𝚘𝚗𝚊𝚕 𝚐𝚛𝚊𝚍𝚎

• Please also visit, at least briefly, the original post on Twitter to show your interest and support.
• https://twitter.com/DontTraceMeBruh/status/1786483855890829643

Putting their heads together https://twitter.com/SimpleXChat/status/1769457715309388172 technology trailblazer's

A big thanks to tevador from TorProject Proof of Work for .onion Services https://spec.torproject.org/hspow-spec/

The overall denial-of-service prevention strategies in Tor are described in the Denial-of-service prevention mechanisms in Tor document. This document describes one specific mitigation, the proof-of-work client puzzle for onion service introduction.

This was originally proposal 327, A First Take at PoW Over Introduction Circuits authored by George Kadianakis, Mike Perry, David Goulet, and tevador.

cross-posted from: https://monero.town/post/1084048

> SimpleX is a private encrypted messenger that creates new identities for each conversation. However, as we pointed out in a previous video, when you first install the app, it’s all the developer’s own servers. This has metadata and centralization risks. We are here to help. > > SimplifiedPrivacy.com is a completely different firm than SimpleX (although we share the same first word). We just released a tutorial video with a self-host script for any Debian/Ubuntu VPS that you can use to easily self-host a SimpleX server: > https://video.simplifiedprivacy.com/simplex/ > > In the tutorial video, we taught how to use Kyun.host a Monero focused free speech provider in Romania that we recommend! However, you can use any provider. > > Here is the script on our self-hosted gitlab on Kyun with an Iceland domain: > https://git.simplifiedprivacy.is/publicgroup/simplex-self-host/ > > If you do not wish to self-host, you can add our SimpleX servers to your app for free: > > smp://BgQRXMpC_pOpm2eAWvwFAvz6o1pJMu8y6_LaxZYxAFg=@smp.simplifiedprivacy.com > > xftp://YLfpIjjRjJdOHKSPHCxhHMUmB_auPkxSIkfo76cH7F8=@xftp.simplifiedprivacy.com:5443 > > Reach out to us if you’d like our help to setup many OTHER services or complex configurations/support at SimplifiedPrivacy.com > > > > Join our SimpleX Group Chat, people discuss Monero and privacy in general: > > https://simplex.chat/contact#/?v=1-4&smp=smp%3A%2F%2Fhpq7_4gGJiilmz5Rf-CswuU5kZGkm_zOIooSw6yALRg%3D%40smp5.simplex.im%2FXVf2UZLG2NxirJJlkO-yjU3BjbnK-QBo%23%2F%3Fv%3D1-2%26dh%3DMCowBQYDK2VuAyEAy8t1QqQ_sOovdEAfXlWvWKH9dw-7kwl5menGf4JI8hU%253D%26srv%3Djjbyvoemxysm7qxap7m5d5m35jzv5qq6gnlv7s4rsn7tdwwmuqciwpid.onion&data=%7B%22type%22%3A%22group%22%2C%22groupLinkId%22%3A%225tJ0uL-PgZB4UjSIsbnyJQ%3D%3D%22%7D > > > ___

"If you use XMR, then there isn't much anyone can do (or to help you with), as far as I know. Bitcoin can be traced, but not frozen, until you send it to a CEX."

"The key point is, you have the choice."

• Twitter

@cz_binance said it before and he will say it again:

Bitcoin is traceable. https://monero.town/post/461435

"For the sake of clarity, I am stepping down as a member of the Monero Core Team effective immediately. I have not really had any active role in the Core Team in many years, and this is in line with my stated goals since 2018.

As part of this, any remaining privileges or access I have will be handed over or revoked. It is my hope that it can be handed over to new workgroups in the coming weeks / months, instead of the Core Team continuing in a highly centralised model."

• fluffypony at GitHub

fluffypony (Riccardo Spagni) Proposal: Disband Core

Currently the Monero Core Team is responsible for a number of things that are critical to Monero, and as a result there is a great level of trust implicit in them. For instance, a malicious Monero Core Team member could hijack the domain, and serve up malicious Monero downloads right after a new release. No matter how quickly this is detected, there will be many affected downloads, and could cause massive financial and privacy-related network damage. The recent CSS wallet incident is also an example of risks that the Core Team presents.

Additionally, this has been a thankless job that the Core Team has taken on (for no compensation), although even if there were compensation and constant praise it would still be a centralising force that we should try and eviscerate.

My suggestion, and I encourage us to use this thread to iterate on it in public, is to break the Core Team up into 6 self-assembling workgroups. This is not a complicated exercise, apart from the community coming to consensus as to who should form part of the workgroups. I would suggest we aim for a January 1st, 2025, cutover date for this.

Existing Core Team members can, naturally, choose to join a particular workgroup (or workgroups), if the community agrees they should. I, personally, will not be participating in any of these proposed working groups, and will use this as an opportunity to step back from any last vestiges of administrative involvement or perceived leadership in Monero.

Open questions that we should use this thread to answer is: (1) what should we use to quickly spin up some sort of loose consensus mechanism for the workgroups (eg. Strawpoll)? (2) how many members should be part of each workgroup?

Some basics that I think should be set in stone are: given the sensitivity of these workgroups, community members that do not have a long multi-year history should simply not be considered. Community members should also be familiar with secure communications platforms, GPG, and similar. Their GPG keys should preferably be a matter of public record already, or inserted into source tree as soon as possible. Many of the roles and responsibilities aren't just technical, but require building a deep relationship with service providers who are familiar with the sensitive nature of Monero's software and support the project's mission, so it would generally require individuals in those particular roles to not be abrasive, and to be warm and understanding and friendly with the individuals they deal with at those service providers. Finally, some of these workgroups simply CANNOT have any form of multisig / ACL / group access, and by definition each individual on the workgroup can exercise complete control and abuse their position (or be wrench-attacked, or be compromised). I've tried to note that below.

General Donation Fund Workgroup This workgroup can use multisig to share control.

Responsible for determining what General Donation Funds should be spent on, and dispensing them. The download server and CDN are the primary recurring costs, and we have a whole structure setup that pays those monthly via card / wire transfer and is reimbursed by the GF. They can choose to continue to use that, or they can do their own thing.

CCS Workgroup This workgroup can use multisig on the wallet, but some other aspects might inherently be more centralised.

Responsible for managing the CCS, approving proposals, managing milestones, etc. This obviously includes dispensing funds.

IP and DNS Workgroup This workgroup can democratise some aspects of it, but ultimately there will need to have a super-administrator for both domains and DNS (this can be a shared account).

Responsible for IP (as in intellectual property) which includes domains, trademarks, copyrights, service marks, anything along those lines. They're mostly going to be responsible for renewing the domains on an annual basis, ensuring the domains aren't stolen / socially engineered (I built an extremely deep relationship with our registrar, Gandi, over the last decade to prevent these attacks which occur very frequently). For multiple reasons we use Cloudflare to handle the DNS (including their embracing and facilitating Tor routing and access from Tor exit nodes, and their exceptional DDoS prevention). Of course, this workgroup is welcome to transfer the domains somewhere else, as well as move the DNS elsewhere.

Servers and CDN Workgroup This workgroup might be able to democratise some access, but as with the previous one there is a need for some super-administrator access (this can be a shared account).

Responsible for the CDN and server infrastructure. Currently there is a single, very beefy server on a 10gbps unmetered, well-peered uplink, that serves the Monero website and the downloads. We have a well architected, hardened configuration that was designed by Gus, formerly of Tari Labs, and Dan (pigeons), from Cypherstack. The CDN is one that we specifically chose because it has a network of endpoints in China, and thus bypasses the Chinese GFW to serve the Monero website and downloads. Of course, this workgroup is absolutely entitled to move the infrastructure elsewhere, switch off the CDN, etc.

Git Workgroup This workgroup likely can't democratise much at a high level (some nuance below), and will also require a super-administrator account (this can be a shared account).

Responsible for the monero-project GitHub organisation, managing GitHub issues and pull requests, managing maintainers, and managing releases. There is some democratisation in the form of individual repo access. In other words, an individual who isn't even part of the workgroup can be given write access (ie. maintainer role) on an individual repo. They are welcome to re-run the experiment we ran with self-hosted GitLab a few years ago, but I think we've demonstrated that GitHub is fine as a platform for collaboration, knowing that we will detect any malicious activity on GitHub's part really quickly as git acts almost as a blockchain, distributing the code (and its branches and history of changes) on the computers of thousands of Monero contributors and users.

Community Channels Workgroup This workgroup can democratise some individual channels, but it will require a require a super-administrator account (this can be a shared account).

Responsible for managing the various community channels, like the Telegram groups, the subreddit, the IRC channels, etc. Obviously these channels already exist, and this workgroup might choose to fold the existing moderators of the subreddit (for instance) into the workgroup. They could also exist as a distinct workgroup, working with those moderators and letting them handle changes to their moderation team. They would generally be expected to maintain some of the guidelines and standards we have for community channels (eg. no price talk in most channels / forums, there are specific places for that) and ensure that these guidelines are largely accepted and enforced where relevant. They would also be responsible for some more sensitive things like controlling the Monero namespace on Libera (the IRC server we use), which is an elevated level of access that allows the workgroup to take over any channel that starts with "monero" (useful for channels that are trying to scam or impersonate).

• fluffypony at Github

cross-posted from: https://monero.town/post/934733

> SimpleX Chat > > Private and Secure messaging platform without user IDs > > Will this new messenger replace Signal? > > Watch on Youtube > > by Evgeny Poberezkin

SimpleX Chat

Private and Secure messaging platform without user IDs

Will this new messenger replace Signal?

Watch on Youtube

by Evgeny Poberezkin

Seraphis wallet development, 1 year report

TL;DR: A group of Monero devs is busy implementing "next generation" technologies for Monero called Seraphis and Jamtis that will bring solid improvements. After about 1 year passed since project start they did not yet get very far unfortunately but do have some interesting results to show, and speed will likely pick up considerably soon. Still, the corresponding hardfork is years out, and the design of those technologies is not yet fully settled nor fully reviewed for security.

Next month it will be 1 year that a number of Monero devs formed something like a workgroup with the goal to develop a wallet for the upcoming Seraphis and Jamtis based Monero and I took on the job to care about the project management side. It's therefore a good time for a report about what happened so far.

You find general info about Seraphis, Jamtis and the workgroup here on our wiki. The Seraphis and Jamtis FAQ linked there may be especially useful.

A word of caution here: Regardless of any implementation work, Seraphis and Jamtis as cryptographic designs still need a review by at least 1 competent independent third party, and so-called security proofs developed for them wherever possible. Efforts to find such a party are under way.

The Seraphis wallet workgroup does not build a new wallet app, like Cake Wallet or Monerujo are wallet apps. We build a new component within the Monero core code that most of those apps will rely on internally once reworked for Seraphis. For lack of a good and unambiguous term we also call that component wallet.

I admit right away that we don't yet have many hard results to show, i.e. very little actual reviewed code that has a chance to become part of the final Monero software, and no prototype of any sort yet, despite the almost full year that passed.

Personally, I have mixed feelings about that but wouldn't call it an outright failure. I see several factors that resulted in this still modest result.

When UkoeHB, the designer / inventor of Seraphis, set out about 2 years ago to implement Seraphis and Jamtis as designed by Tevador, the idea was that he would crown his dev work with a prototype of a wallet that we other devs would then flesh out and improve until it reached production quality and finally became ready for a hardfork.

Unfortunately building a wallet prototype turned out to be out of reach within his work. What he finally built was "only" a general-purpose Seraphis and Jamtis library that could be used to implement, among other things, a wallet. The good news however: That library turned out to be a marvel of solid software engineering and a very good base for our work.

In the first weeks we had so many devs showing interest in contributing work that I started to worry about coordination and finding enough reasonably independent parts of the wallet to work on concurrently. Alas, this never developed into a real problem: For the people without knowledge yet about the Monero codebase the challenge mostly proved to be too daunting, and the people with such knowledge had many additional Monero things on their hands at the same time and couldn't concentrate on the wallet alone.

Still, I can report some pretty good results:

u/j-berman wrote a scanner, a piece of software that reads through the blockchain starting at a specified height and finds all enotes / outputs that belong to a given Monero address - a core part of every wallet. He was using the Seraphis library to do so because that has full "read support" for pre-Seraphis transactions. The encouraging result: The scanner, although still at an early "version 1" so to say, is already faster than the true-and-tried scanner inside the current component called wallet2, up to a surprising 40% when using a remote node.

u/dangerousfreedom1984 originally set out to write something like a frame for a wallet prototype. The bad news: That is still work in heavy progress. The good news: He wrote some nice so-called proofs on the way. For example, the basic code that allows to construct a proof that it was your wallet and not any other that made a particular Seraphis transaction exists already.

jeffro256 joined the workgroup a few months ago. He wrote a new component to read today's wallet files that is fully independent from code that will be retired after getting superseded by the Seraphis library and the Seraphis wallet, which will be essential for a seamless migration. It's nice to have that settled already, but on the other hand this did not further the wallet proper yet.

So, how will things probably continue? I see again a mix of good news and bad news.

All 3 devs mentioned above know their way around the Seraphis library now and are able to productively write code that will be relevant for the switch to Seraphis and Jamtis. I think right now we have more dev capacity working on Seraphis related stuff than other, more general Monero stuff.

On the other hand there are surprising developments on the design front over the last few months. For quite some time it looked as if the designs of Seraphis and Jamtis were complete and set, and we "only" had to implement them.

That has changed on two fronts at once.

jeffro256 started an initiative to fix a weakness of Jamtis that plays a role in connection with possible future third-party blockchain scanning services, somewhat similar to what MyMonero servers are doing today, but much more privacy-friendly. The already long and quite technical discussion starts here. Personally, I would love to see that weakness gone, but it's also a bit disturbing that quite deep changes are on the table for something that looked rock-solid already, and if this gets accepted it means more delays of course.

u/kayabanerve started an even bigger "attack" on the current design of Seraphis: He set out to once and for all get rid of the weakest of Monero's privacy technologies, the rings, by using so called full chain membership proofs. Info about this story can be found here.

On the one hand it would be fantastic to see it implemented, or at least prepared to avoid the potential logistical nightmare of people having to change all their Monero addresses twice. On the other hand this alone may push the hardfork to Seraphis and Jamtis a full year further out, and as a more immediate consequence it will absorb a big chunk of u/j-berman 's capacity while he connects kayabanerve's code with the Seraphis library to test the feasibility of the technology.

Do we have to worry that Seraphis and Jamtis are still years away? If you ask me, Monero as of today stands pretty solid. For all we know, currently we don't have exploits, we don't have spam attacks, and the privacy holds up quite well. This does not look like an emergency of any kind to me.

Still, of course we will try to move much faster in our second year than we did in our first. The signs that we will be able to look good.

If you are a dev and could imagine to become part of this adventure, read our "job offering" page here.

- Reddit -

cross-posted from: https://monero.town/post/444500

> Your data is YOUR data! > > An iPhone or an Android smartphone collects several megabytes of your personal data every day to Google Servers, even when it is inactive. > > Murena smartphones have been designed to offer a different approach to users who care about privacy and data-hungry handsets. > > Those smartphones are running the open-source “/e/OS” operating system, which is fully “deGoogled”: by default it doesn’t send any data to Google and it’s been designed to offer a great and natural user experience. > > /e/OS is paired with carefully selected applications. They form a privacy-enabled internal system for your Murena smartphone. And it’s not just claims: open-source means auditable privacy. > > > https://murena.com > > > https://e.foundation >

cross-posted from: https://monero.town/post/444500

> Your data is YOUR data! > > An iPhone or an Android smartphone collects several megabytes of your personal data every day to Google Servers, even when it is inactive. > > Murena smartphones have been designed to offer a different approach to users who care about privacy and data-hungry handsets. > > Those smartphones are running the open-source “/e/OS” operating system, which is fully “deGoogled”: by default it doesn’t send any data to Google and it’s been designed to offer a great and natural user experience. > > /e/OS is paired with carefully selected applications. They form a privacy-enabled internal system for your Murena smartphone. And it’s not just claims: open-source means auditable privacy. > > > https://murena.com > > > https://e.foundation >

Your data is YOUR data!

An iPhone or an Android smartphone collects several megabytes of your personal data every day to Google Servers, even when it is inactive.

Murena smartphones have been designed to offer a different approach to users who care about privacy and data-hungry handsets.

Those smartphones are running the open-source “/e/OS” operating system, which is fully “deGoogled”: by default it doesn’t send any data to Google and it’s been designed to offer a great and natural user experience.

/e/OS is paired with carefully selected applications. They form a privacy-enabled internal system for your Murena smartphone. And it’s not just claims: open-source means auditable privacy.

> https://murena.com

> https://e.foundation

cross-posted from: https://monero.town/post/422188

> The Mullvad Browser is a privacy-focused web browser developed in collaboration with Mullvad VPN and the Tor Project. It aims to eliminate data collection and provide user-centric browsing services, ensuring online activity remains private and secure. The browser has the same fingerprinting protection as the Tor Browser, but connects to the internet without Tor Network or VPN instead. The Mullvad Browser provides anti-fingerprinting protections. > > The idea is to provide one more alternative – beside the Tor Network – to browse the internet with more privacy. To get as many people as possible to fight the big data gathering of today. To free the internet from mass surveillance. > > Here: >> mullvad browser official <<