[-] Saki@monero.town 2 points 1 year ago

Actually, Proton + your local key = don’t work very good. Usually you’ll have to use a key pair generated by Proton—sharing your sec with the provider is not good.

Nevertheless, Proton is 100 times better than Google to be sure. Those who are trying to ditch Google, Proton and Tuta are two good options to consider, also recommended by PrivacyGuides. For those who had ditched Big Tech and now starting to wonder if Proton is okay… that’s a bit tricky, still I say Proton is nod bad. I had recommended Proton to my friends until the French activist incident, followed by a few more bad incidents. Yet it’s understandable that Proton must obey it if they get a valid court order… If you’re a normal, daily user, Proton is good enough (if not the best), albeit a bit overpriced.

[-] Saki@monero.town 2 points 1 year ago

That’s a good point. One of the two biggest weak points of a so-called e2e provider/platform is, the e2e provider itself.

The only true e2e is e.g. Alice does gpg -ea on an offline computer, copy-pastes ascii and sends it to Bob via an online computer, who copy-pastes this ascii to his offline computer and does gpg -d there. Their seckeys are airgapped from the communication channel. Sharing your sec with a provider is especially ridiculous (e.g. Proton). At least that’s what I think.

[-] Saki@monero.town 2 points 1 year ago

The SimplyTranslate front end has many languages, translate engines selectable: Google | DeepL (Testing) | ICIBA | Reverso | LibreTranslate. Some instances are Tor-friendly, even onion. The project page seems to be https://codeberg.org/SimpleWeb/SimplyTranslate

Refusing to use Google is just common sense. LibreTranslate itself is decent (at least not Google), except a website hosting it may have some opaque JS or Google things (Font, Analytics, TagManagers, etc.)

Either way, translation can’t be super-private in general. For example, if you use it to write a private message or love letter in a foreign language… even including real names and physical addresses…

Also, metadata like “a Danish-speaker is reading this German text about X” can’t be hidden, and if the language pair is uncommon and/or if text to be translated is specialized (not generic), the engine provider may easily guess “this request and that request yesterday may be from the same user”, etc. if they want to. A sufficiently powerful “attacker” might de-anonymize you, helped by other info about you, already gathered. In practice, maybe not a big concern, if you’re just translating generic, non-sensitive text, not showing your real IP, and clearing cookies frequently.

[-] Saki@monero.town 2 points 1 year ago

Just fyi: recently EFF is creating Privacy Badger browser add-on and GNU also has LibreJS. They’re technically not ad-blockers, though; apparently a tracker-blocker and a non-free-script-blocker, respectively.

[-] Saki@monero.town 2 points 1 year ago

That might be a good point :)

[-] Saki@monero.town 2 points 1 year ago

Never seriously checked these stats. As of writing this, !monero@monero.town = 1.05K subscribers and only 8 users / day, that’s the largest community here if I’m not mistaken; whereas !technology@lemmy.world = 47.1K subscribers, 974 users / day—roughly 100 times bigger, they’re a whale compared with monero.town. It seems our 2nd largest community is !privacy@monero.town: only 260 subscribers, 1 user / day. I (Saki) seem to be one of “privacy” mods, whatever it means. Is this a status automatically given after you created a certain number of new posts?

Anyway, I was assuming that most general people were seeing crypto negatively (because crypto-related posts tend to be automatically downvoted, even if it’s just an innocent joke as in memes, or a normal post like “Use p2pool, it’s zero-fee”), and was surprised to see those positive comments from “outsiders” (?). Apparently there are quite a few people who know Bitcoin was originally not like a “get rich quick” scheme, but it was experimental with some deep philosophy; and that Monero is in a way its spiritual successor.

Then again, many people in !technology@lemmy.world are probably Linux-using geeks. As such they’re tech-savvy, not representing “general people“.

[-] Saki@monero.town 2 points 1 year ago

Thank you very much. You pointed out there: "Nobody really used it, so it ended up being unstable and full of problems" and there was a reply, saying you “can't really force anybody to use something”.

I’d like to add another point of view. With reliably working multisig, we can have our own Bisq-esque DEX (at least in principle), and many people would love to use it, once it’s really available, right? For example, one might be able to sell and buy XMR in a safe and reliable way. Or eventually, though this might sound like a pipe dream but at least in theory, we might have a P2P proxy-store, where basically anyone can offer doing any shopping they can do for you. Just like on Bisq, both send securities first to discourage any cheats. When the seller ships whatever you’re buying, they “confirm” (or sign). When you receives it and everything is fine, you confirm too. Then, and only then, your security will be back and the seller will receive the locked xmr you initially deposit, and everyone will be happy. Multisig seems necessary (if not sufficient) for this to work.

we had become complacent because everything had "worked just fine" for so long.

This comment of fluffyponyza is also understandable. Generally, a programmer doesn’t want to change things when it’s working fine. “If it ain’t broke, don’t fix it.” In this case, something was (easy to) broken, though. Hindsight is 20/20.

Given that multisig is already available (just not yet well-tested), let’s stop joking like “We should keep our Monero in some other coin,” and try to think a bit more positively. At the very least it has been clearly demonstrated that Monero is so private that even core developers can’t trace it…

Troddit version links (a Tor-friendly instance) https://troddit.esmailelbob.xyz/r/Monero/comments/17m6w9e/psa_ccs_wallet_incident/k7mj2he - Onion -> http://troddit.esmail5pdn24shtvieloeedh7ehz3nrwcdivnfhfcedl7gf4kwddhkqd.onion/r/Monero/comments/17m6w9e/psa_ccs_wallet_incident/k7mj2he

[-] Saki@monero.town 2 points 1 year ago

It is interesting that it took nine transactions to empty the CCS wallet. Is that indicative of somebody new to monero?

Not sure but perhaps they weren’t able to send it in one go for technical reasons (like byte size limit), as inputs would have been too many (a lot of relatively small coins, originally received from many supporters)?

Firstly relatively small 23527 B. They did a small “test”? https://localmonero.co/blocks/search/ffc82e64dde43d3939354ca1445d41278aef0b80a7d16d7ca12ab9a88f5bc56a

Then bigger like 101 KB https://localmonero.co/blocks/search/08487d5dbf53dfb60008f6783d2784bc4c3b33e1a7db43356a0f61fb27ab90cc https://localmonero.co/blocks/search/4b73bd9731f6e188c6fcebed91cc1eb25d2a96d183037c3e4b46e83dbf1868a9 https://localmonero.co/blocks/search/8a5ed5483b5746bd0fa0bc4b7c4605dda1a3643e8bb9144c3f37eb13d46c1441 etc.

[-] Saki@monero.town 2 points 1 year ago

I’d like at least this place (Monero.Town) to be friendly to everyone, including children, girls, guys, and others. Previously, like a year or half a year ago, creating something like “Monero Garden” (or “kindergarten”?) was suggested perhaps based on a thought like that. I don’t mean a “safe place” heavily monitored and moderated, though.

When I had posted “Undisputed Champion” in Monero Meme a few days ago, I couldn’t help but feeling that the guy depicted was too rude — not for political correctness or something but based on my intrinsic feelings, while also assuming that guys would probably feel nothing off about this… That is to say, freedom of speech is such a core value for me that I accept in principle, and even affirmatively support, expressions that are rude, insulting to me or ourselves.

I know what you mean and can totally relate to what you pointed out; on the other hand, it’s just an identifier — e.g. “Gaki“ from kyun or “CockMail” are also pejorative or inappropriate if you know the language yet what really matters is not the name of a variable, but what is pointed-to by it.

What’s in a name? That which we call Monero By any other name would work as well…

[-] Saki@monero.town 2 points 1 year ago* (last edited 1 year ago)

Yes, currently Tor is much more convenient, no argument there :)

The # of exit nodes is relatively so small and the list is public, anyone that wants to block Tor traffic can do so easily. Plus, for good or for bad, I think the Tor project is US centerd, funded by various American governmental agencies. Bridges, snowflake… they’re more like P2P, but snowflake works via a monopolistic “broker“ that is Google (of all things…?). So in theory, it may be relatively easy to shut down snowflake or selectively block communications via Tor in general.

That said, if we do use hidden services, then exit nodes are irrelevant and everything may be fine (hopefully). I2P is relatively new; Tor vs. I2P is yet inconclusive—probably both have their own forte. I’d like to experiment (play with) both to get better intuition/understanding. Thanks for you insightful comments.

[-] Saki@monero.town 2 points 1 year ago* (last edited 1 year ago)

@VolunTerry Sorry I didn't reply sooner. I was waiting for the OP to answer first. What they wrote in that webpage might be relevant in some unusual situations, and if so, I'd like to learn about that.

@ShadowRebel Sorry again, my 1st comment here was unfocused and poorly-written, I'm afraid I upset you. I meant Coin Control, but didn't explain it properly. IMO Important points of Feather include (1) Electrum-like GUI & (2) Coin Control. (1) is the definitive feature in the sense that I'd recommend Feather to someone new to XMR, if they're familiar with Electrum. "Embedded Tor" is not that important because equally possible with Official GUI: please see https://monero.town/post/402343

If @ShadowRebel doesn't reply, perhaps too busy, I'll write about (1)(2) here so we can share various point of views, exchange opinions. Ideally, we can improve their web pages, correcting minor misunderstanding if any, so that that resource may become more useful for the community; and they can have more traffic to their business site too, which should be win-win. Obviously there are many things I don't yet know and I'd like to learn more, corrected if I'm misunderstanding something. I hope the feeling is mutual.

view more: ‹ prev next ›

Saki

joined 1 year ago
MODERATOR OF