[XMR] Monero - A secure, private, untraceable cryptocurrency

[Anon136]

and it would suck tax wise if I am not able to proof the date I got the coins.

maybe it would be good. you could say you got them for a higher price than you did and protect yourself from a portion of the extortion.

[Anon136]

bad Tor exit nodes

How could a bad tor exit node learn your private key? mymonero.com is https encrypted.

[pablitos]

Hello, can someone tell me, as I make a withdrawal XMR in Bter exchange. Paste the address Monero first, spacing, and paste the address Monero Payment ID
 (47sghzufGhJJDQEbScMCwVBimTuq6L5JiRixD8VeGbpjCTA12noXmi4ZyBZLc99e66NtnKff34fHsGR oyZk3ES1s1V4QVcB c149b93acd8adb62ebbdb203c357cc73ea9db94e81cdf3c7ed955a725b579789)

and I'm still waiting, and nothing comes. sorry no speack english.


https://p12.zdusercontent.com/attachment/494969/cFYu2Q3tqh40FQ6IaEGQ4wMuU?token=eyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..PbnJEbHP1hjT_M4CQb3hRg.ZSTfmQrnhgbrKWkfHFdCvFl4ZDmNWyNv_EE4gfYPPRJ8pEgOizFmAR2bK9wvcATVklMD6IIEvGESd8I5dTL8zLGZFBQD_0GPdP14oaQN4TuxBrKYy5w1ogCaBxXE0b-P7X6jYZjpiP-SWE1FufjOneIU6HSO7-yuVprNfSy-Yz4wyEuSwbnG8ftFaq1-EIlz0kZkAzRtBcww-bWFqt0u8VFVyyE1LFIwIrtdlnyCy5APRt9Oz-2OquI_R9UiMx88JzUbqaNgdkoD1asBJ7mt-2-NGdmwmAzvAXw9Cw62kb8.rfSEiwD05Rn074NmJvci3w



https://p12.zdusercontent.com/attachment/494969/4C6ePMZLkiycThczxNCV0jZCS?token=eyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..yXT26WgyX3L3Tnkv3B_s7g.4Hqk1gRX7fLPdMow0WpWran4I_1hkpu45nt45X7UApvtrHt1TnM_wvq1lP7pdxM73iMPSGoQgALXN6Lawwtri3dZyZ-SQV4aqfzx1ggS5HhcmoWMCTQuDnY94EtsTPlRO3JQkLRrdCJ1LJSZF5gWcHSw7Lz2jzz6e1CzoiV1XxOQIP2LALnXXM83IjyY8ma5Keafy7CwGvPYjIW_03H7k13-uerP65tstiyXjHzxu8PufxvGQ07ka7OD2uvlBQNm03hXnIivKV5qUlXPcMCRoGwJ5ML75DFR5O1aLiYLhic.bhXRFkySJryv-_v3mis_fQ



ID 152886
Address/TxID 

47sghzufGhJJDQEbScMCwVBimTuq6L5JiRixD8VeGbpjCTA12noXmi4ZyBZLc99e66NtnKff34fHsGR oyZk3ES1s1V4QVcB

c149b93acd8adb62ebbdb203c357cc73ea9db94e81cdf3c7ed955a725b579789

e857ddcc83bc18cfe5841b4d2a72cdf722138bef4bd014070ae53fa1c5d870e1

Amount 0.5   

Date    Operation 2016-08-27 18:29:43

[cryptospreader]

Hello, can someone tell me, as I make a withdrawal XMR in Bter exchange. Paste the address Monero first, spacing, and paste the address Monero Payment ID
 (47sghzufGhJJDQEbScMCwVBimTuq6L5JiRixD8VeGbpjCTA12noXmi4ZyBZLc99e66NtnKff34fHsGR oyZk3ES1s1V4QVcB c149b93acd8adb62ebbdb203c357cc73ea9db94e81cdf3c7ed955a725b579789)

and I'm still waiting, and nothing comes. sorry no speack english.


https://p12.zdusercontent.com/attachment/494969/cFYu2Q3tqh40FQ6IaEGQ4wMuU?token=eyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..PbnJEbHP1hjT_M4CQb3hRg.ZSTfmQrnhgbrKWkfHFdCvFl4ZDmNWyNv_EE4gfYPPRJ8pEgOizFmAR2bK9wvcATVklMD6IIEvGESd8I5dTL8zLGZFBQD_0GPdP14oaQN4TuxBrKYy5w1ogCaBxXE0b-P7X6jYZjpiP-SWE1FufjOneIU6HSO7-yuVprNfSy-Yz4wyEuSwbnG8ftFaq1-EIlz0kZkAzRtBcww-bWFqt0u8VFVyyE1LFIwIrtdlnyCy5APRt9Oz-2OquI_R9UiMx88JzUbqaNgdkoD1asBJ7mt-2-NGdmwmAzvAXw9Cw62kb8.rfSEiwD05Rn074NmJvci3w



https://p12.zdusercontent.com/attachment/494969/4C6ePMZLkiycThczxNCV0jZCS?token=eyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..yXT26WgyX3L3Tnkv3B_s7g.4Hqk1gRX7fLPdMow0WpWran4I_1hkpu45nt45X7UApvtrHt1TnM_wvq1lP7pdxM73iMPSGoQgALXN6Lawwtri3dZyZ-SQV4aqfzx1ggS5HhcmoWMCTQuDnY94EtsTPlRO3JQkLRrdCJ1LJSZF5gWcHSw7Lz2jzz6e1CzoiV1XxOQIP2LALnXXM83IjyY8ma5Keafy7CwGvPYjIW_03H7k13-uerP65tstiyXjHzxu8PufxvGQ07ka7OD2uvlBQNm03hXnIivKV5qUlXPcMCRoGwJ5ML75DFR5O1aLiYLhic.bhXRFkySJryv-_v3mis_fQ



ID 152886
Address/TxID  

47sghzufGhJJDQEbScMCwVBimTuq6L5JiRixD8VeGbpjCTA12noXmi4ZyBZLc99e66NtnKff34fHsGR oyZk3ES1s1V4QVcB

c149b93acd8adb62ebbdb203c357cc73ea9db94e81cdf3c7ed955a725b579789

e857ddcc83bc18cfe5841b4d2a72cdf722138bef4bd014070ae53fa1c5d870e1

Amount 0.5   

Date    Operation 2016-08-27 18:29:43

It may take up to one day to see the coins transfer successfully. How long have you been waiting?. Wait atleast 24 hours. I once got it after 8 hours.

[Anon136]

Hello, can someone tell me, as I make a withdrawal XMR in Bter exchange. Paste the address Monero first, spacing, and paste the address Monero Payment ID

You probably don't need a payment id if you are sending to yourself.

[pablitos]

   
Payment_ID can be entered after the address separated by a space, format: Address Payment_ID

https://i.imgur.com/pDikYEN.png

[bbc.reporter]

Why does the light wallet not save the state after it has fully synced? After syncing I close the light client and the opened it again and it was syncing again starting from 0.

can u provide more info? light client? version number? os?

I used version 0.2 that I have downloaded here https://getmonero.org/getting-started/choose

I am using Windows 7 64bit. Do you have any idea what is going wrong with it?

You have to exit simplewallet gracefully by typing

Code:

exit

as command. If you don't do this the "state" will not be saved into the wallet cache.

You mean to say when I use the light wallet I would also have to open simplewallet.exe in the console at the same time? I do not get it. I thought you only open the light wallet and do everything from there.

[fluffypony]

Perhaps implementing 2 factor would mitigate some of this.  Is the code on github?

Not entirely feasible - everything is client-side, MyMonero never knows your spend key. Ostensibly the spend key could be encrypted with some 2FA, but I'd be very wary about the ability to recover the actual key in the event of a 2FA failure or lost device or some such. It also doesn't solve the problem of an MITM attack.

[fluffypony]

bad Tor exit nodes

How could a bad tor exit node learn your private key? mymonero.com is https encrypted.

No DANE support in browsers, and no wide DNSSEC support, means that downgrade attacks are trivial. Even then, you should only ever use Tor exit nodes if you happen to have the TLS fingerprints saved somewhere to verify your connection. MyMonero has HSTS on, but even if we were in the HSTS preload list it's a half-baked solution and is just a band aid till the next POODLE comes along.

[jwinterm]

...

You mean to say when I use the light wallet I would also have to open simplewallet.exe in the console at the same time? I do not get it. I thought you only open the light wallet and do everything from there.

Lightwallet uses simplewallet behind the scenes, but you shouldn't have to do anything special to get it to save. After it completes the sync it will issue a save command every few minutes, or there is a button to save it on the wallet tab. Initially it says "Not saved " in red, but should change to something green when it successfully stores the wallet.

[sweet bird]

correctly... two things see same,.. It was confusing for me even at the beginning

[TechSharesteam]

XMR instead of ETH become No.1 in Poloniex.

[dloghwak]

and it would suck tax wise if I am not able to proof the date I got the coins.

maybe it would be good. you could say you got them for a higher price than you did and protect yourself from a portion of the extortion.

It's tax free if I hodl the coins for 1 year, no need to tell a wrong price.

[Isolani159]

XMR instead of ETH become No.1 in Poloniex.

Bullish is still the main Monero trading trend now. Monero will be the No.1 for a long time. It's hard for Etherium to recover now.

[aminorex]

Our aim is to replace lots of components (eg. the web server used for JSON RPC API access) with standard, well-known, secure libraries.

Why?

Because epee is *not* known-good, *not* well-reviewed, *not* used anywhere except Monero. It is much higher risk to keep epee around, or to roll our own stuff, than to replace it with stuff that is widely reviewed.

Rolling your own can be better if you are talking about complexity getting dragged in with the standard component.  If you need something simple, it is often possible to achieve exceptional levels of confidence in the correctness if the component when you control it.  You can use declarative systems which are provable, and compile into c++, for example.  The upstream being uncontrolled adds a maintenance issue, but it is a much lower-order factor.

What is the preferred venue for such threads?

[aminorex]

I suggest that we all refrain from prompting anyone to act in a prima facie unlawful manner.  If one errs in such a way, it is reasonable to delete comments to correct the record, or to amend the comments with a clarification.

[Anon136]

See SafeCurves for details: https://safecurves.cr.yp.to

The bottom of this web page says it's funded by the "NWO"

[fluffypony]

See SafeCurves for details: https://safecurves.cr.yp.to

The bottom of this web page says it's funded by the "NWO"

DUN DUN DUN DUN:)

[fluffypony]

Our aim is to replace lots of components (eg. the web server used for JSON RPC API access) with standard, well-known, secure libraries.

Why?

Because epee is *not* known-good, *not* well-reviewed, *not* used anywhere except Monero. It is much higher risk to keep epee around, or to roll our own stuff, than to replace it with stuff that is widely reviewed.

Rolling your own can be better if you are talking about complexity getting dragged in with the standard component.  If you need something simple, it is often possible to achieve exceptional levels of confidence in the correctness if the component when you control it.  You can use declarative systems which are provable, and compile into c++, for example.  The upstream being uncontrolled adds a maintenance issue, but it is a much lower-order factor.

What is the preferred venue for such threads?

We're talking about components that require some complexity and extensibility. We're currently so heavily reliant on the Boost libraries that we literally can't get more complex by using other components.

We're also not talking about components used by one project - issues in something like Boost or 0MQ or netcpplib would affect thousands and tens-of-thousands of projects, and so they handle their efforts with care. We take similar precautions by statically compiling these in, and not updating to potentially broken versions until they're reasonable to consider safe.

There's no fixed venue, if you have a concern about a choice that the dev community has made then open a GitHub issue. That said, the contributors (ie. those that have actually submitted pull requests) are generally in the best position to know the code, so if you want your opinion to matter and not be discarded then you need to start pushing code;)

Attending the dev meetings every second week would also go a long way towards that. Opinions on design decisions from non-contributors are not discarded, but they typically won't be considered as strongly precisely to prevent interference by the sort of third-parties you'd be worried about. It's much easier for someone to make a lot of noise about a decision than to push code, which leads to loud-voices-from-non-contributors simply not being enough to affect design and architectural decisions.

[5w00p]

I suggest that we all refrain from prompting anyone to act in a prima facie unlawful manner.  If one errs in such a way, it is reasonable to delete comments to correct the record, or to amend the comments with a clarification.

To err is human, that is our refrain.