New to Lemmy. A privacy advocate. Interested in number theory.

  • 5 Posts
  • 19 Comments
Joined 2 years ago
cake
Cake day: July 17th, 2023

help-circle
  • Try not to take things too personally. Tails devs explicitly said they were making it for regular people (activists, journalists, domestic violence victims, etc.) and mainly not for advanced users. So by design it’s a normie-friendly OS (a user is not even expected to know how to use pgp); as such, one might generally assume its users may not be “geeks”. Nothing personal there.

    While asking questions and exchanging ideas are wonderful, one can also enjoy the freedom to study (one of the four essential freedoms), guessing, narrowing down a problem by trial and error. An attempt at solving the problem on one’s own is often of great value, a great way to learn, even if it’s unsuccessful; after that, one might be able to ask an even better question, which could be helpful for more people too. Either way, I think that most Monero users can happily agree with each other that we want a better version of bisq :) (Sorry if this comment is uncalled for.)

    Maybe this is why no one ever posts here.

    Imho (quite) a few users ditched monero.town when they had started blocking Tor.


  • The nature of Monero address is public (it can be used publicly to receive xmr), and you don’t want to use a public string as a secret password. Practically, though, if it’s possible for you to keep it absolutely secret and safe, you’re free to do so at your own risk.

    If it’s the main address starting with “4” and later you happen to decide having fun p2pooling using the same address, then obviously that’s not good. To avoid unnecessary worries, perhaps making it a random string, like @Unkn8wn69 said, is a good idea.

    Technically, since the string length of a monero address (hence the name space) is finite, it’s not guaranteed to be unique, though the probability of collision is vanishingly small and this won’t be a real concern at all.




  • Saki@monero.towntoMonero@monero.townCaring community
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    2 years ago

    Apparently their fundraising (in xmr) having been successful to some extent, the person got medical care (perhaps, otherwise too expensive). While there may be fake charity donation scams too, if Monero genuinely did save someone’s life, that is a good thing — not just for them but also for public relations.

    You’re welcome (though I’m not a donor…). Get well soon. / 不客气 快点好起来




  • @VolunTerry Sorry I didn’t reply sooner. I was waiting for the OP to answer first. What they wrote in that webpage might be relevant in some unusual situations, and if so, I’d like to learn about that.

    @ShadowRebel Sorry again, my 1st comment here was unfocused and poorly-written, I’m afraid I upset you. I meant Coin Control, but didn’t explain it properly. IMO Important points of Feather include (1) Electrum-like GUI & (2) Coin Control. (1) is the definitive feature in the sense that I’d recommend Feather to someone new to XMR, if they’re familiar with Electrum. “Embedded Tor” is not that important because equally possible with Official GUI: please see https://monero.town/post/402343

    If @ShadowRebel doesn’t reply, perhaps too busy, I’ll write about (1)(2) here so we can share various point of views, exchange opinions. Ideally, we can improve their web pages, correcting minor misunderstanding if any, so that that resource may become more useful for the community; and they can have more traffic to their business site too, which should be win-win. Obviously there are many things I don’t yet know and I’d like to learn more, corrected if I’m misunderstanding something. I hope the feeling is mutual.



  • Sorry, I forgot to write the most important thing. You can safely use Feather even if you’re already on Tor.

    Feather doesn’t use its own Tor (in the config folder) when Tor is already running and listening to 9050, be it on Windows or on Linux. So “double routing through Tor” doesn’t occur. What happens is: 1) either an external Tor is already running and listening to 9050, which Feather uses; OR 2) an external Tor is not running or (running but) not listening to 9050 (as in Tor Browser), when Feather uses its own Tor binary. [On Tails, Tor is listening to localhost 9050.] So, I think the article is unnecessarily complicated, confusing (or “impressing”) an unsuspecting reader, with inaccurate knowledge. In fact, there is an official AppImage specifically prepared for Tails / Whonix, which (afaik) doesn’t come with its own Tor binary inside (because Feather doesn’t need its own Tor when running on Tails etc.).

    I’m not criticizing the said web site. I think it’s good and informative. Generally speaking, though, one should not assume any info, including this comment of mine, as absolutely correct (especially if it’s coming from someone who wants to sell something, or who wants to get more traffic to their website for a business reason). So please don’t take this personally and do correct me if I’m wrong, thank you!


  • If an inveterate Monero addict (lol) created this kind of wallet list, they’d likely to note: “If you use p2pool (and you should!), you may need Feather or CUI too, because blah blah”

    I mean, although many articles on https://simplifiedprivacy.com/ are nice and informative, the web site seems to be for-profit, selling privacy-related products and services; which is okay, but this conflict of interest (COI) is not necessarily transparent there:

    To promote and sell their products, naturally they tend to slightly over-emphasize the danger of “non-privacy-oriented” tools and rather quick to say, “This is too difficult for normal users. Let us help you!” even for something trivial like using Linux or using command lines. For example, a neutral party might say, “Command lines are fun, and sometimes much more convenient (and you get a long battery life too). Let me explain some basics. If you type ls (or dir on Windows) blah blah…” but when you’re selling tech support, it’s kind of better for you if the customer doesn’t know that. As another example, Proton, a supposedly privacy-oriented webmail provider, also over-complicates things by only providing HTML-mail view, proudly saying “We block tracking images for you!” Honestly, just provide Plain Text mail view like others do, and such heuristic blocking is not necessary to begin with. I think there can be COIs like that between privacy-as-philosophy and privacy-as-business; a privacy-oriented but for-profit website/service should be seen with that in mind. This doesn’t mean that the said website is useless, though. Just a thought.



  • I can see your point + I know nothing about this OnionKet thing. Generally, though, afaik, Dōjinshi is not a kid porn, abusing real-life, existing children. Those stories are typically based on manga/anime, where characters are totally fictional, unrelated to real-life children at all (thus no real victims, except ethical questions are still possible). In some countries, drawings of non-existing (fictional) persons may be still illegal. In some other countries, they’re legal (as in Finland, maybe). That’s what I think, though not too sure and I’m not a dōjinshi writer/reader at all. Honestly, not sure how “bad” they are.

    But generally, it’s a nice thing that creators try something new, something experimental, fighting back against excessive, censorship (not to say, it’ll be absolutely good, though).

    @onionket_staff@mitra.anon-kenkai.com よく分からないけど、うまくいくといいですね^^ 弾圧の口実を与えないように、あまりにアレなのは排除した方がいいかもみたいな気もするけど。。。とりあえずグッドラック♪











  • Assuming that you’re not joking… what you’re wondering is actually very important: the difference between so-called custodial wallets (aka hosted wallets, web wallets) and non-custodial wallets (aka unhosted wallets, self-hosted wallets). I think at least a few people have their Monero in so-called custodial wallets with CEX, and they do have that risk you’re talking about.

    Mathematically, a “wallet” is just a secret key. It’s a random-looking big number (better known as seed words). If you’re familiar with PGP or SSH, it should be obvious for you that you don’t share your secret key (private key) with anyone else. You’ll generate your key pair locally, and only share your public key. If you do that, no one but only you can control your key. It’s like a password. The same is true about cryptocurrencies. You’re not supposed to share your secret key (your “wallet”), be it Bitcoin or Monero. There may be some exceptions, but normally it’s cryptographically absurd to let someone else “host” your secret key while you don’t have “your” own key. In such a situation, “your” wallet is not even yours to begin with.

    On the other hand, if you have your own secret key (as you should), then it’s computationally secure, meaning it’s believed to be hard to “crack” your wallet.

    Being computationally secure does not mean it’s absolutely secure. In real world, there are non-mathematical attacks too (e.g. physical, political, legal). So you’re right. Anything is not perfectly secure. But if you have your own key and no one else even knows that you have some Monero (i.e. no-KYC), then you see it’s not easy for anyone to steal or freeze your Monero. This comment has nothing to do with whether or not I support AllArk.