hfondmanager

joined 10 months ago
[–] hfondmanager@monero.town 1 points 5 months ago

DHT is needed. The problem arises when people try the most para settings possible. Retro is private even with most relaxed settings.

Go to Settings->Server and change config to "Public: DHT and Discovery" (wont expose your IP)

Add me ("aaa"): ABBfKWSD8saPgtQ+nA2PeyZrAxS8KLRy7UmQBzWlsouNKMQGVuq0AwEDYWFhkwYBAAB/PDoEAzcmnA==

if pub key needed:

-----BEGIN PGP PUBLIC KEY BLOCK----- Version: OpenPGP:SDK v0.9

xsBNBGZRqFsBCACiXn6Tl9fs/nJXTyWIwfcCFgwcasgOfAMxt0ST8SksEBMfa3m+ FUM1TlNsWDV9p0K75ST9QBfBH8EJwBU+hUPLVrIq5VLI+SIpHirEzeE2rPHRS7QB GPCwVilObIH82a5DKRfbhVVCIGWXtcnHRm4H6X0ObQqoiRa1ayX+zYATJf1/0AKH YA6g0UuQEuf4pXI+PDuOMp1ioehZJ0sFHpZQfnmV/qF9j62N9W9td2ilIph8fTJe u0m1E6BTWlD9A1JD+nfIOaefIbJFlglH9N+tg5Wvu/UStC7NoKLWvBWWHzqhbAOv vjKqYdhhCOUjchsNtlDqQE5iwp2teP/xw3k3ABEBAAHNIGFhYSAoR2VuZXJhdGVk IGJ5IFJldHJvU2hhcmUpIDw+wsBfBBMBAgATBQJmUahbCRCNKMQGVuq0AwIZAQAA rLEIAJ/ShQu5hQUM8tINakewPNgD65TG+up92g8CGTsrqWRTMRmEFBmqZxHDiaeD KNs1v75ei9wDQu8hUqIVJvhN92sstpezao877iXOBkIaN3DVVd17QGapOHcLgSRT +2fQAxg+U8HWsw4kch/N3y9NNdxwITXNM7yqwrYTMyf6kD/WVqM9TMGyR4SgVjV3 nhEmC/sWoT7BoOynvunNxckmD9gQW4AErDpp2KqD6/sSTgXmuhipx6qW/6bhqq9l iWtK5qCxBTh0vNy4ihZHa+bryb3Sgx082cjrx0vd2pViiaHsTXYF1uFQJXwUD2d/ Z7YT1TIPzHTGN1gMIw8Nbin42JI= =JsQH -----END PGP PUBLIC KEY BLOCK-----


I'll be online in 3hrs for, say 2 hrs. No need to sign my pup key.

[–] hfondmanager@monero.town 1 points 5 months ago* (last edited 5 months ago)

He needs to share his certificate. ID is not enough. Standard is you become friends (see below) first. Then you'll see his chat lobbies, forums, etc.


Try this on a test account, Do not systematically sign or authenticate your friends' keys. Use DHT mode on clearnet to test.

Retroshare ID is not enough to connect. Share your certificate (PGP public key) with your friend and request the certificate from your Friend. This is normally done in person or any other secure trusted channel. Both need to ACK each others pub key.

Moreover both need to be online to find each other.

https://retroshare.readthedocs.io/en/latest/user-guide/first-steps/#first-friend


First... our beloved friends from the 3 letter agencies are the first to create groups. They fork Haveno. Post "help" videos. etc. etc. Pretend that we censor them when we call out their honeypot website ads in here.

Second... people don't understand that "creating a new group" is not enough. They need to share their public PGP key (or hashed version). SimpleX makes this easy in the form of a http:// link to onboard new users. Even this process is too difficult to understand for most noobs.


We'll keep it up.

ps. torrc is in ~./retroshare/tor/

[–] hfondmanager@monero.town 1 points 5 months ago (3 children)

In the buildup phase of a true p2p network its necessary that nodes keep running idle to enable the gossip protocol. To collect peers.

This might seem inconvenient, but relying forever on "seednodes" makes the p2p net centralized. It is necessary for resilience as full nodes are for Monero. Same goes for Haveno.

The difficult part is to stick to running your node before the network effect kicks in - by then you can freely connect and disconnect to the p2p network. This bootup phase is crucial to understand. The app needs storage on your machine to remember the peers it finds.

Look at the network graph in retroshare: are you well connected to other peers?

[–] hfondmanager@monero.town 1 points 5 months ago (1 children)

to use retroshare-tor, simply do NOT start tails-tor on OS startup.

To run 2 instances of tor and avoid conflict:

tor -f /etc/tor/torrc.1
tor -f /etc/tor/torrc.2

Some hacking is needed for tails persistant storage also.

[–] hfondmanager@monero.town 5 points 5 months ago (3 children)

asking for trouble... why not go p2p with i2p or retroshare?

SimpleX TOS:

We reserve the right to remove such links from the preset servers and disrupt the conversations that send illegal content via our servers, whether they were reported by the users or discovered by our team.

[–] hfondmanager@monero.town 2 points 8 months ago

Get the full guide w/ dope groups to join, including Monero focused ones (reddit)

typical smear campaign trying to link Monero to drug users und drop outs. Last time I called you out you just created a new sock puppet. I wonder what happens next.

[–] hfondmanager@monero.town 3 points 8 months ago* (last edited 8 months ago)

[–]rbrunner7XMR Contributor 10 points 2 days ago

Where does this come from? https://github.com/AtomicSwapLabs/AtomicSwapWallet/blob/main/public/monero_wallet_full.wasm

Answer: idk will ask devs.

[–]rbrunner7XMR Contributor 18 points 2 days ago

Thanks for the info.

A bit unfortunate that you list "open source" as one of your key features in your post, but the single most critical part is just a large binary blob where I have to trust you that you didn't doctor it from woodser's original ...

and then... reddit account and all posts deleted.

[–] hfondmanager@monero.town 1 points 8 months ago

Looks like it. The 2000 staking nodes are maintaining a tor/i2p network with secure messaging built-in. That seems to be the idea. (if the whitepaper still holds) Thats is too bad.

[–] hfondmanager@monero.town 3 points 8 months ago* (last edited 8 months ago) (3 children)

Sure. First I'm not promoting any project. Test and play and report your findings.

if you want to contact someone you need some kind of reference or ‘ID’

Thats the general problem of key exchange, unavoidable. You have to meet in person or establish trust any other way. Snail mail, key signin, etc. A good protocoll lets you create as many ID's as you wish and doesn't tie that to your phone or google ID. Like SimpleX supports GrapheneOS and linux.

why also do you differentiate ‘trust in servers’ from what you do in session?

Trust is not a dirty word. I do trust SimpleX servers, for example, say 75% and trust is needed in any case, whatever you do. You, for example don't trust me blindly. Thats good.

Session is different, incentivized not by FIAT and the p2p net is not run by the developers but 1959 miners. Latest whitepaper states it is PoW with a PoS overlay. I would say less than 100 peers should not be called a p2p network, not resilient enough. P2P is superior because metadata analysis is harder for an attacker. Particl's secure messaging protocoll is another good example. Using RingCT is the key here.

I offered my time and had a quick look at the code. Almost all of the crypto code is 1:1 from monero-core. That convinced me. I also like the idea to monitor the health of the network using a blockexplorer


TL;DR You can use the same tech as Monero not to send money, but also to send messages.


[–] hfondmanager@monero.town 1 points 8 months ago* (last edited 8 months ago) (5 children)

SimpleX:

users place a degree of trust in servers. This trust decision is very similar to a user's choice of email provider;

Threema: trust in servers + creates digital ID + requires Android 5.0

[–] hfondmanager@monero.town 2 points 8 months ago* (last edited 8 months ago) (7 children)

Don't use Signal, use Session. A Monero based p2p net

https://getsession.org/download


80% of information is in metadata. What we want is to prevent opponents from even knowing that we communicate or what tools and protocolls we use.

[–] hfondmanager@monero.town 2 points 8 months ago* (last edited 8 months ago)

As you can see in my post on overlay networks I'm all in on DeFi. I just want to do it in a way that doesn't ruin Monero in the process. Blind merge mining and hashlock escrows are NOT the way to implement it correctly. Twiddle sees the problems clearly and points them out, if you dare to read. (He got paid very little and invested a lot of time, so please read.)

I would implement dApps or scripting, first, not on monero core. One-way atomic swaps is all you need! BasicswapDex and Oxen are less known examples.

TL;DR: blind merge mining and hashlock escrows are an attack vector for monero security on the consensus layer and an entry point for trojan horses. We CAN have all the DeFi we want without compromising security.


https://yewtu.be/watch?v=9ZdWe5VZRuo [Kewde - BasicSwap: Increasing Monero's Resiliency using BasicSwap DEX] https://www.monerotalk.live/104 [Creating L2 & Proof of Stake Infrastructure on Cryptonote w/ Kee Jefferys (Oxen)]

view more: ‹ prev next ›