[XMR] Monero Speculation

[Hueristic]

There's a hard fork in less than a week and no binaries have yet been released ?!

Any binary that is v0.9.x is compatible. So, the first compatible version was released in December I believe.

Batter Swings and misses Again! About 6 months before you can get your participation trophy primer.

Watching Vanilla Scam and Dash Scam get pumped while Monero stays even for the day.   

Worked out for me! But I have no faith in BTC so I cashed it out the last few months and cannot accure more without using otb or us getting a pairing. Anyone wants to do a OTB sale to me can PM. As you can see I will only buy in the dips.


Just for SlapHappy as requested. BTW slap you can pm me when you want to act like an adult and I'll consider your words on whether to remove you from ignore. Questioning my integrity and calling me a liar is pretty much a line you don't come back from.

If I understood correctly (bear in mind that this rarely happens ) fluffypony was referring to the possibility of MITM attacks.

In part yes, but also malware on your computer. There is no substitute for cold storage, paper wallets, good hardware wallets, etc.

So, afaik, there is nothing less secure with the wallets created with mymonero (discounting the 13 vs 24 word mnemonic).

If you, for whatever reason, used mymonero to create a coldish wallet, and never login again, you should be pretty safeish.

That is true assuming you are completely sure that nothing was compromised when you created it. Hard to really know that.

Well, what I wanted to convey is that, if one has already created the wallet for cold storage in mymonero, either the coins are already gone or they are still there.
Therefore, accessing mymonero just to transfer the coins to another cold storage may in fact worsen your chances of getting hacked. It would be safer to wait for the code to restore short mnemonic seeds to be available for offline use. Either through simplewallet or a third party client.

I'll just speculate here, but I believe what was ultimately referred to was the vulnerability of MITM when accessing mymonero via Tor because outproxies are essentially just "men in the middle" and anyone using them is trusting that they are benign. I'm pretty sure that if you see the https in standard clearnet, things are encrypted end to end so noone in the middle can read your stuffs. This doesn't prevent malware on your end from swiping your stuffs though. Keyloggers I guess would be the main thing. Or if your text input into the mymonero login is stored temporarily in any fashion. But ultimately I don't really know what I'm talking about, I'm just piecing together what I've gathered so far.

What concerns me is the amount that was stolen. That had to have been one of the larger if not the largest wallet on there. That says to me someone either targeted him specifically or had/has access to that info. I would not consider MyMonero safe for other than pocket change. And expect that someday every one of those accounts will be emptied. The Odds of only his account (specifically such a large one) going through a poison Tor node are So extremely low I can't even entertain the thought of that being the method of compromise.

[dEBRUYNE]

I am considering getting a Trezor. I have little interest in BTC at the moment (though multi-coin capability may be handy), so this would be based on the expectation that XMR compatible Trezor firmware will be fully functional going forward. Reasonable assumption?
Q

It already works
http://weuse.cash/2016/03/07/trezor-for-monero-first-impressions/

Just consider it beta until it's merged with the official Trezor firmware

Yeah, I guess I mean is it a good bet that this will get official. I would be looking to use this for more than testing. Not really sure how bg a deal the viewkey transmission is.

Anyway, I prefer the idea of Trezor to paper wallets, so I hope it happens. Thanks to NoodleDoodle for doing the groundwork on this. 
Q

There is a guide/example here:

"Generate simplewallet based on MyMonero 13 word mnemonic seed"

https://github.com/moneroexamples/mymonero-simplewallet

[dEBRUYNE]

I am considering getting a Trezor. I have little interest in BTC at the moment (though multi-coin capability may be handy), so this would be based on the expectation that XMR compatible Trezor firmware will be fully functional going forward. Reasonable assumption?
Q

It already works
http://weuse.cash/2016/03/07/trezor-for-monero-first-impressions/

Just consider it beta until it's merged with the official Trezor firmware

Yeah, I guess I mean is it a good bet that this will get official. I would be looking to use this for more than testing. Not really sure how bg a deal the viewkey transmission is.

Anyway, I prefer the idea of Trezor to paper wallets, so I hope it happens. Thanks to NoodleDoodle for doing the groundwork on this. 
Q

One of the trezor founders was asking for testers, so most likely it gets merged upstream (and thus signed by Trezor) once the code is finalized. See:

https://twitter.com/AlenaSatoshi/status/709837766150983680

[dEBRUYNE]

If I understood correctly (bear in mind that this rarely happens ) fluffypony was referring to the possibility of MITM attacks.

In part yes, but also malware on your computer. There is no substitute for cold storage, paper wallets, good hardware wallets, etc.

So, afaik, there is nothing less secure with the wallets created with mymonero (discounting the 13 vs 24 word mnemonic).

If you, for whatever reason, used mymonero to create a coldish wallet, and never login again, you should be pretty safeish.

That is true assuming you are completely sure that nothing was compromised when you created it. Hard to really know that.

Well, what I wanted to convey is that, if one has already created the wallet for cold storage in mymonero, either the coins are already gone or they are still there.
Therefore, accessing mymonero just to transfer the coins to another cold storage may in fact worsen your chances of getting hacked. It would be safer to wait for the code to restore short mnemonic seeds to be available for offline use. Either through simplewallet or a third party client.

I'll just speculate here, but I believe what was ultimately referred to was the vulnerability of MITM when accessing mymonero via Tor because outproxies are essentially just "men in the middle" and anyone using them is trusting that they are benign. I'm pretty sure that if you see the https in standard clearnet, things are encrypted end to end so noone in the middle can read your stuffs. This doesn't prevent malware on your end from swiping your stuffs though. Keyloggers I guess would be the main thing. Or if your text input into the mymonero login is stored temporarily in any fashion. But ultimately I don't really know what I'm talking about, I'm just piecing together what I've gathered so far.

What concerns me is the amount that was stolen. That had to have been one of the larger if not the largest wallet on there. That says to me someone either targeted him specifically or had/has access to that info. I would not consider MyMonero safe for other than pocket change. And expect that someday every one of those accounts will be emptied. The Odds of only his account (specifically such a large one) going through a poison Tor node are So extremely low I can't even entertain the thought of that being the method of compromise.

Highly unlikely it was a targeted attack. Also, fairly unlikely that it was a Tor MITM attack. Even if it was, it probably was a driveby attack instead of a targeted one. MyMonero doesn't have a .onion link and therefore it is fairly easy to perform an MITM attack for a tor exit node (I think fluffypony stated that they already had earlier cases of TOR MITM attacks on MyMonero). Same happened to blockchain.info before they had a .onion address. Lots of threads about people that had their BTC stolen.

It is more likely malware/trojan/rootkit/virus etc. that somehow stole his XMR, i.e. acquired his seed somehow.

[dEBRUYNE]

There's a hard fork in less than a week and no binaries have yet been released ?!

Did you miss this? Also, any 0.9.x version is fine in advance of the hardfork. The first 0.9.x version was released on 31 December 2015.

Monero v0.9.2 - Hydrogen Helix - released! (Urgent and important bug fixes for the upcoming hard fork)

https://github.com/monero-project/bitmonero/releases/tag/v0.9.2

<fluffypony> will do shasums / gpg signed mesage tomorrow

Information from Github:

This has urgent and important bug fixes to 0.9.0 Hydrogen Helix

• Major performance and size improvements to the LMDB database implementation
• Urgent and important bug fixes for the upcoming hard fork
• Huge bug fixes to the database hard fork handling
• New simplewallet flag to restore from keys
• Initial work on a wallet library / API
• Updated in-source block headers

General hardfork information:

Background:

https://forum.getmonero.org/4/academic-and-technical/303/a-formal-approach-towards-better-hard-fork-management

What are the change(s) with the upcoming hard fork on the 20th of March?

• Blocktime is bumped from 1 to 2 minutes. See:

https://forum.getmonero.org/20/general-discussion/2401/increasing-the-block-time

• Minimum blocksize is bumped to 60 KB. See:

https://forum.getmonero.org/20/general-discussion/2409/increasing-the-minimum-block-size

A big advantage of this is that current individual transactions that sometimes won't go through (because they are a bit above the median due to many outputs (e.g. dust), or the daemon / MyMonero rejects them for some reason) can easily be included in the block without incurring a penalty. Above is a bit of a blunt explanation, I am sure one of the core-team members / developers could give you a more detailed explanation.

• Finally, the recommendations from the MRL team stated in MRL-0004, of which the minimum mixin >= 3 is probably the most salient. See:

https://lab.getmonero.org/pubs/MRL-0004.pdf

P.S. Due to variance the hard fork will likely be on the 21th or 22th of March. A specific block height was determined for the hardfork, not a specific date. The specific blockheight for the hardfork can be found here:

https://github.com/monero-project/bitmonero/blob/master/src/cryptonote_core/blockchain.cpp#L83

// version 2 starts from block 1009827

[dEBRUYNE]

Instructions for building Win32 binaries of v0.9.2 - Hydrogen Helix:

https://forum.getmonero.org/5/support/2510/building-monero-v0-9-2-on-win32Monero

[dEBRUYNE]

"The Complete Guide to Using Bitcoin Anonymously Around the Web" - Monero mentioned:

https://99bitcoins.com/complete-guide-using-bitcoin-anonymously/

[americanpegasus]

I just really hate this XMR bully whale.  I watch as he/she/it ruthlessly works the stack for profit, using their hundreds of thousands of Monero to (try to) force holders to capitulate their positions, all the while scraping the asks and picking up cheaper ones - before releasing their price suppression walls just long enough to bully down any new exuberance.  
  
You say consolidation is good, but what is not good is when a community can't even discern something's true price because it constantly gets forcefully manipulated.  I just long for the day when one of the Bitcoin whales decides to make a grand entry into Monero and soaks up every single XMR being used for price suppression for good.  
  
Until then the only answer is for HODL'ers not to give these tactics a single inch.  Buy every spot Monero you can afford, attack fake ask walls when you see them, and never try to flip out of a position to get a lower price.  If we as a community show these asses that these tactics aren't profitable, they'll stop.

[piebeyb]

say your little speculation to me, your predictions about the price of the highest monero this year

[americanpegasus]

say your little speculation to me, your predictions about the price of the highest monero this year

Well if the rumors I hear about Azure integration and a possible Ethereum-esque DAPP layer on top of Monero are true, then $5 to $20 is not impossible.

[griffen1102]

say your little speculation to me, your predictions about the price of the highest monero this year

Well if the rumors I hear about Azure integration and a possible Ethereum-esque DAPP layer on top of Monero are true, then $5 to $20 is not impossible.

Azure integration you say....

[piebeyb]

say your little speculation to me, your predictions about the price of the highest monero this year

Well if the rumors I hear about Azure integration and a possible Ethereum-esque DAPP layer on top of Monero are true, then $5 to $20 is not impossible.

yeah that's cool, at least I do not feel hesitant holding the bag for monero, cheers

[dnaleor]

I am considering getting a Trezor. I have little interest in BTC at the moment (though multi-coin capability may be handy), so this would be based on the expectation that XMR compatible Trezor firmware will be fully functional going forward. Reasonable assumption?
Q

It already works
http://weuse.cash/2016/03/07/trezor-for-monero-first-impressions/

Just consider it beta until it's merged with the official Trezor firmware

Yeah, I guess I mean is it a good bet that this will get official. I would be looking to use this for more than testing. Not really sure how bg a deal the viewkey transmission is.

Anyway, I prefer the idea of Trezor to paper wallets, so I hope it happens. Thanks to NoodleDoodle for doing the groundwork on this. 
Q

I did some further testing. The viewkey is not really a big deal if you run a node yourself:
When you synced your wallet and disconnect your trezor, a file for each wallet is left on the PC. This is needed for when you reconnect your trezor.
But you can delete the file if you want. The only disadvantage is that you need to scan the whole blackchain again with your viewkey. I don't know if the viewkey is actually stored in this file, I should ask NoodleDoodle about it. But it at least seems to store which txo's are owned by your wallet.

What I'll probably will do is the following, have at least 3 wallets:
1) a passwordless spending wallet with a low amount. I'll keep the file on the PC. Easy to spend, easy to access, easy to prove the existence of the wallet.
2) a password protected "medium storage" wallet. If you don't want people to see you own a second wallet, you can encrypt and move the wallet-file to somewhere else and not keep it locally. When you need to access your medium storage, you get the file, decrypt it, and put it in the correct folder. You open the wallet, do your thing, and then encrypt and move the wallet file again. Harder to access, but still pretty fast process, difficult to prove the existence of the wallet.
3) a password protected wallet for long term storage. You delete the file to erase any prove that it exists. When you want to access it, you need to scan the blockchain again. Hard to aaccess, will take a while before you can spend it, impossible to prove the existence of the wallet.

You can keep for example 1% of your XMR in (1), 10% in (2) and 89% in (3)

I'll put all this in a manual once everything is considered "stable" alongside the basic "how to use trezor woth monero"

[dEBRUYNE]

Testing the horizontal support zone again:



Ask side until 275k is relatively flat.

[RAJSALLIN]

On mobile so can't look but have we fallen bellow the 4h wedge yet?

[luigi1111]

There is a guide/example here:

"Generate simplewallet based on MyMonero 13 word mnemonic seed"

https://github.com/moneroexamples/mymonero-simplewallet

I assume you were replying to this?

If I understood correctly (bear in mind that this rarely happens ) fluffypony was referring to the possibility of MITM attacks.

In part yes, but also malware on your computer. There is no substitute for cold storage, paper wallets, good hardware wallets, etc.

So, afaik, there is nothing less secure with the wallets created with mymonero (discounting the 13 vs 24 word mnemonic).

If you, for whatever reason, used mymonero to create a coldish wallet, and never login again, you should be pretty safeish.

That is true assuming you are completely sure that nothing was compromised when you created it. Hard to really know that.

Well, what I wanted to convey is that, if one has already created the wallet for cold storage in mymonero, either the coins are already gone or they are still there.
Therefore, accessing mymonero just to transfer the coins to another cold storage may in fact worsen your chances of getting hacked. It would be safer to wait for the code to restore short mnemonic seeds to be available for offline use. Either through simplewallet or a third party client.

Another option is to do the conversion from 13 to 25 words.  Who has link(s) to how you do that?  I'm very interested.

Note this isn't possible (well there's a ~6% chance it's possible). dEBRUYNE's link above can create a .keys file for you from a MyMonero seed (if I understand it correctly from a quick glance), but the latest simplewallet can now also restore from spend and view private keys (get the from MyMonero or http://xmr.llcoins.net/).

The best option for people looking for compatibility as new wallet users is to create a 25-word seed from one of the many places and log into MyMonero with that.

[bitebits]

Instructions for building Win32 binaries of v0.9.2 - Hydrogen Helix:

https://forum.getmonero.org/5/support/2510/building-monero-v0-9-2-on-win32Monero

Did I miss something, is there already a release 0.9.2? On getmonero.org the latest binaries are 0.9.1

[GingerAle]

Instructions for building Win32 binaries of v0.9.2 - Hydrogen Helix:

https://forum.getmonero.org/5/support/2510/building-monero-v0-9-2-on-win32Monero

Did I miss something, is there already a release 0.9.2? On getmonero.org the latest binaries are 0.9.1

Yeah, Debruyne has been spreading the word on the various channels. It isn't up yet on getmonero.org, but the github has it:
https://github.com/monero-project/bitmonero/releases/tag/v0.9.2

[bitebits]

Certainly there is interest here. I think XMR is looking like a solid alt in many early adopters minds. When the GUI is out I think more will step on board and then we will have a more reasonable valuation.

The GUI could greatly serve traders (especially the Alt-agnostic ones) in at least easily and temporarily getting their XMR safely of the exchanges. That is I think one clear example of where the GUI really adds value to the adoption and usage of Monero.

safe? The command line wallet is as safe as the GUI... It can still be hacked.
Only safe solution is paper wallet or Trezor.

I really hope Trezor will be integrated with GUI, so a lot of people will use this option to easily store their moneroj safely

With safe I meant not having your XMR on the exchange. But safest option is indeed storing them in a paper wallet or Trezor.
Still I think that the GUI will serve as convenient and intermediate solution, especially for those not planning on saving (aka 'hodling').

[smoothie]

I just really hate this XMR bully whale.  I watch as he/she/it ruthlessly works the stack for profit, using their hundreds of thousands of Monero to (try to) force holders to capitulate their positions, all the while scraping the asks and picking up cheaper ones - before releasing their price suppression walls just long enough to bully down any new exuberance.  
 
You say consolidation is good, but what is not good is when a community can't even discern something's true price because it constantly gets forcefully manipulated.  I just long for the day when one of the Bitcoin whales decides to make a grand entry into Monero and soaks up every single XMR being used for price suppression for good.  
  
Until then the only answer is for HODL'ers not to give these tactics a single inch.  Buy every spot Monero you can afford, attack fake ask walls when you see them, and never try to flip out of a position to get a lower price.  If we as a community show these asses that these tactics aren't profitable, they'll stop.

Would you say the same thing if there was a XMR bully bull whale?

PirateAt40 got burned because he thought he could hold the BTC price down in 2012.

I look at it as there is no manipulation if they bought their XMR legitimately. The price of XMR is what the price is right now.

Just my TWO 0.02XMR.