[XMR] Monero Speculation

[phishead]

Destroying your printer is a little extreme in my opinion. As long as the printer is still in your possession, you can be comfortable. In fact the older the printer, probably the better. There's just a chance that on some newer printers, printed files are stored in memory or HD. So to be entirely sure, don't give the printer away if you still have funds stored on the wallets printed by it. If you get a new printer and want to dispose of the old one, then destroy it.

Even better, don't use a printer at all. Just write out the mnemonic seed, that's what it's for.

Plus I have no idea how many viruses/malware I might have on my computer because it's a pretty old one that has seen better days.. (2005-2006ish XP).

This is the more important thing. If you boot from a live CD such as Tails to generate a cold storage wallet, you can be certain no malware is monitoring your activity, and no data is being stored on persistent media (HDD).

Well I just bought a cheap USB that I was going to download Ubuntu too and upload that as my new operating system, but maybe if I just test it out first and the first thing I do is go on moneroaddress, disconnect from the Internet, then write down everything and store it away I'll be good?

Monero v0.9.2 - Hydrogen Helix - released! (Urgent and important bug fixes for the upcoming hard fork)

https://github.com/monero-project/bitmonero/releases/tag/v0.9.2

<fluffypony> will do shasums / gpg signed mesage tomorrow

Information from Github:

This has urgent and important bug fixes to 0.9.0 Hydrogen Helix

• Major performance and size improvements to the LMDB database implementation
• Urgent and important bug fixes for the upcoming hard fork
• Huge bug fixes to the database hard fork handling
• New simplewallet flag to restore from keys
• Initial work on a wallet library / API
• Updated in-source block headers

General hardfork information:

Background:

https://forum.getmonero.org/4/academic-and-technical/303/a-formal-approach-towards-better-hard-fork-management

What are the change(s) with the upcoming hard fork on the 20th of March?

• Blocktime is bumped from 1 to 2 minutes. See:

https://forum.getmonero.org/20/general-discussion/2401/increasing-the-block-time

• Minimum blocksize is bumped to 60 KB. See:

https://forum.getmonero.org/20/general-discussion/2409/increasing-the-minimum-block-size

A big advantage of this is that current individual transactions that sometimes won't go through (because they are a bit above the median due to many outputs (e.g. dust), or the daemon / MyMonero rejects them for some reason) can easily be included in the block without incurring a penalty. Above is a bit of a blunt explanation, I am sure one of the core-team members / developers could give you a more detailed explanation.

• Finally, the recommendations from the MRL team stated in MRL-0004, of which the minimum mixin >= 3 is probably the most salient. See:

https://lab.getmonero.org/pubs/MRL-0004.pdf

P.S. Due to variance the hard fork will likely be on the 21th or 22th of March. A specific block height was determined for the hardfork, not a specific date. The specific blockheight for the hardfork can be found here:

https://github.com/monero-project/bitmonero/blob/master/src/cryptonote_core/blockchain.cpp#L83

// version 2 starts from block 1009827

Amazing guys! Seems like there is something to always smile about every month or so now and days in Monero world... The core team's dedication to this project is some kind of cool

Edit: sorry for quoting the entire message... I'm on mobile.

[dEBRUYNE]

Destroying your printer is a little extreme in my opinion. As long as the printer is still in your possession, you can be comfortable. In fact the older the printer, probably the better. There's just a chance that on some newer printers, printed files are stored in memory or HD. So to be entirely sure, don't give the printer away if you still have funds stored on the wallets printed by it. If you get a new printer and want to dispose of the old one, then destroy it.

Even better, don't use a printer at all. Just write out the mnemonic seed, that's what it's for.

Plus I have no idea how many viruses/malware I might have on my computer because it's a pretty old one that has seen better days.. (2005-2006ish XP).

This is the more important thing. If you boot from a live CD such as Tails to generate a cold storage wallet, you can be certain no malware is monitoring your activity, and no data is being stored on persistent media (HDD).

Well I just bought a cheap USB that I was going to download Ubuntu too and upload that as my new operating system, but maybe if I just test it out first and the first thing I do is go on moneroaddress, disconnect from the Internet, then write down everything and store it away I'll be good?

Going to quote myself again, but why not try this guide?

https://www.reddit.com/r/Monero/comments/48cgmd/an_extensive_guide_for_securely_generating_an/

The guide ensures that the only way your coins can get stolen is physical access, which is extremely rare. It might take you a few hours to get familiar and comfortable with, but in the end it brings ease to the mind.

[americanpegasus]

Watching Vanilla Scam and Dash Scam get pumped while Monero stays even for the day.   

[25hashcoin]

Roughly 6.5 days until the hard fork

Anything someone running the CLI wallet needs to do?

[jwinterm]

Roughly 6.5 days until the hard fork

Anything someone running the CLI wallet needs to do?

I think as long as you're on v0.9.x you are fine.

[Dotto]

Pretty big triangle closing in less than 12h, visible in 2h. If done right we could be reaching .0035-.004 area. If gone wrongside, we could face .002 arena... Thoughts?

[nioc]

Pretty big triangle closing in less than 12h, visible in 2h. If done right we could be reaching .0035-.004 area. If gone wrongside, we could face .002 arena... Thoughts?

You use TA and I use my subconscious.  Seems like something is brewing.  I don't think .002 or .0035-.004 is possible for the time frame you are talking about.  Too much support to allow 0.002 and too much resistance until accumulation is finished.  When will that be finished?  NFC.  Good luck   For now that leaves nowhere...........

https://www.youtube.com/watch?v=AWtCittJyr0

[papa_lazzarou]

I have coins stored on wallets created with mymonero.com. Are they less secure than a paper wallet created with moneroaddress.org?

Unfortunately yes, fluffypony discourages storing any relatively large amounts there because webwallets always bring an additional layer of risk. Therefore, I would recommend to use https://moneroaddress.org to create a paper wallet. Alternatively, if you are fairly paranoid, use this guide:

https://www.reddit.com/r/Monero/comments/48cgmd/an_extensive_guide_for_securely_generating_an/

The guide ensures that the only way your coins can get stolen is physical access, which is extremely rare. It might take you a few hours to get familiar and comfortable with, but in the end it brings ease to the mind.

If I understood correctly (bear in mind that this rarely happens ) fluffypony was referring to the possibility of MITM attacks. So every time you access mymonero you are incurring the risk of getting your coins stolen. So, afaik, there is nothing less secure with the wallets created with mymonero (discounting the 13 vs 24 word mnemonic).

If you, for whatever reason, used mymonero to create a coldish wallet, and never login again, you should be pretty safeish. And instead of logging in to transfer your funds to a proper cold address/account, you'd be better off not to. Wait instead for the short mnemonic seed to be supported by simplewallet.


Guys in the know: amirite?


EDIT: Adding context
https://www.reddit.com/r/Monero/comments/491gbj/i_lost_some_monero_that_i_had_on_mymonerocom/d0ocdpm

[smooth]

If I understood correctly (bear in mind that this rarely happens ) fluffypony was referring to the possibility of MITM attacks.

In part yes, but also malware on your computer. There is no substitute for cold storage, paper wallets, good hardware wallets, etc.

So, afaik, there is nothing less secure with the wallets created with mymonero (discounting the 13 vs 24 word mnemonic).

If you, for whatever reason, used mymonero to create a coldish wallet, and never login again, you should be pretty safeish.

That is true assuming you are completely sure that nothing was compromised when you created it. Hard to really know that.

[primer-]

There's a hard fork in less than a week and no binaries have yet been released ?!

[jwinterm]

There's a hard fork in less than a week and no binaries have yet been released ?!

Any binary that is v0.9.x is compatible. So, the first compatible version was released in December I believe.

[papa_lazzarou]

If I understood correctly (bear in mind that this rarely happens ) fluffypony was referring to the possibility of MITM attacks.

In part yes, but also malware on your computer. There is no substitute for cold storage, paper wallets, good hardware wallets, etc.

So, afaik, there is nothing less secure with the wallets created with mymonero (discounting the 13 vs 24 word mnemonic).

If you, for whatever reason, used mymonero to create a coldish wallet, and never login again, you should be pretty safeish.

That is true assuming you are completely sure that nothing was compromised when you created it. Hard to really know that.

Well, what I wanted to convey is that, if one has already created the wallet for cold storage in mymonero, either the coins are already gone or they are still there.
Therefore, accessing mymonero just to transfer the coins to another cold storage may in fact worsen your chances of getting hacked. It would be safer to wait for the code to restore short mnemonic seeds to be available for offline use. Either through simplewallet or a third party client.

[griffen1102]

today or tomorrow.

[Dotto]

ETH going to hell. Monero waiting. We could be be in decoupling time.

[GingerAle]

If I understood correctly (bear in mind that this rarely happens ) fluffypony was referring to the possibility of MITM attacks.

In part yes, but also malware on your computer. There is no substitute for cold storage, paper wallets, good hardware wallets, etc.

So, afaik, there is nothing less secure with the wallets created with mymonero (discounting the 13 vs 24 word mnemonic).

If you, for whatever reason, used mymonero to create a coldish wallet, and never login again, you should be pretty safeish.

That is true assuming you are completely sure that nothing was compromised when you created it. Hard to really know that.

Well, what I wanted to convey is that, if one has already created the wallet for cold storage in mymonero, either the coins are already gone or they are still there.
Therefore, accessing mymonero just to transfer the coins to another cold storage may in fact worsen your chances of getting hacked. It would be safer to wait for the code to restore short mnemonic seeds to be available for offline use. Either through simplewallet or a third party client.

I'll just speculate here, but I believe what was ultimately referred to was the vulnerability of MITM when accessing mymonero via Tor because outproxies are essentially just "men in the middle" and anyone using them is trusting that they are benign. I'm pretty sure that if you see the https in standard clearnet, things are encrypted end to end so noone in the middle can read your stuffs. This doesn't prevent malware on your end from swiping your stuffs though. Keyloggers I guess would be the main thing. Or if your text input into the mymonero login is stored temporarily in any fashion. But ultimately I don't really know what I'm talking about, I'm just piecing together what I've gathered so far.

[Quicken]

I am considering getting a Trezor. I have little interest in BTC at the moment (though multi-coin capability may be handy), so this would be based on the expectation that XMR compatible Trezor firmware will be fully functional going forward. Reasonable assumption?
Q

[dnaleor]

I am considering getting a Trezor. I have little interest in BTC at the moment (though multi-coin capability may be handy), so this would be based on the expectation that XMR compatible Trezor firmware will be fully functional going forward. Reasonable assumption?
Q

It already works
http://weuse.cash/2016/03/07/trezor-for-monero-first-impressions/

Just consider it beta until it's merged with the official Trezor firmware

[dnaleor]

today or tomorrow.

I prefer a log chart, makes more sense, imho:

[birr]

If I understood correctly (bear in mind that this rarely happens ) fluffypony was referring to the possibility of MITM attacks.

In part yes, but also malware on your computer. There is no substitute for cold storage, paper wallets, good hardware wallets, etc.

So, afaik, there is nothing less secure with the wallets created with mymonero (discounting the 13 vs 24 word mnemonic).

If you, for whatever reason, used mymonero to create a coldish wallet, and never login again, you should be pretty safeish.

That is true assuming you are completely sure that nothing was compromised when you created it. Hard to really know that.

Well, what I wanted to convey is that, if one has already created the wallet for cold storage in mymonero, either the coins are already gone or they are still there.
Therefore, accessing mymonero just to transfer the coins to another cold storage may in fact worsen your chances of getting hacked. It would be safer to wait for the code to restore short mnemonic seeds to be available for offline use. Either through simplewallet or a third party client.

Another option is to do the conversion from 13 to 25 words.  Who has link(s) to how you do that?  I'm very interested.

[Quicken]

I am considering getting a Trezor. I have little interest in BTC at the moment (though multi-coin capability may be handy), so this would be based on the expectation that XMR compatible Trezor firmware will be fully functional going forward. Reasonable assumption?
Q

It already works
http://weuse.cash/2016/03/07/trezor-for-monero-first-impressions/

Just consider it beta until it's merged with the official Trezor firmware

Yeah, I guess I mean is it a good bet that this will get official. I would be looking to use this for more than testing. Not really sure how bg a deal the viewkey transmission is.

Anyway, I prefer the idea of Trezor to paper wallets, so I hope it happens. Thanks to NoodleDoodle for doing the groundwork on this. 
Q