--- layout: post title: Logs for the Kovri Dev Meeting Held on 2017-04-09 summary: Brief review of what has been completed since last meeting, Monero HackerOne Bounty, website discussion, and code & open tickets discussion tags: [dev diaries, i2p, crypto] author: dEBRUYNE / fluffypony --- *April 9th, 2017* ### Logs **\<anonimal>** 1. Greetings **\<anonimal>** 2. Brief review of what's been completed since the previous meeting **\<anonimal>** 3. Preparation for [96boards.org OpenHours showcase for Kovri / Monero](https://github.com/monero-project/meta/issues/46) **\<anonimal>** 4. Status of [Monero HackerOne umbrella and bounty](https://github.com/monero-project/meta/issues/39) **\<anonimal>** 5. Code + ticket discussion / Q & A **\<anonimal>** 6. Any additional meeting items **\<anonimal>** 7. Confirm next meeting date/time **\<anonimal>** Hellloooo **\<i2p-relay> {-olark}** Hello party people **\<i2p-relay> [gingeropolous]** howdy! **\<guzzi>** Hello **\<moroccanmalinois>** hi **\<rehrar>** Hi (observing excitedly) **\<i2p-relay> {-iDunk}** Hi **\* moneromooo** greets again **\<i2p-relay> [endogenic]** no excitement allowed rehrar **\<bigreddmachine>** hi **\<rehrar>** I'll see myself out then. **\<anonimal>** 2. Brief review of what's been completed since the previous meeting **\<anonimal>** For me, the past two weeks have spent focusing on 4 things: fixing the OpenBSD dynamic build, PR review/fixes/collaboration, NTCP, and RI (router info). **\<anonimal>** a. Jeff at crypto++ has not been responsive lately so my CMake fix for their dynamic OpenBSD is still sitting in PR hell. **\<anonimal>** b. Both moroccanmalinois and rakhimov have been PR'ing some great work **\<anonimal>** c. Over time I've done bits and pieces of work on the NTCP implementation but hadn't had the chance to do a full study in java I2P's implementation until recently. **\<anonimal>** Combined with more spec review (forunately, the spec is small) I've come up with 33 questions/TODOs specifically about, and for, our implementation. **\<anonimal>** Once that was done, it turned out that I couldn't move forward until I worked out any potential RI issues. **\<anonimal>** d. That lead me to the unmaintainable mess of our forked RI implementation, which has been neglected, so now at a minimum I'm working on a RI parser/reader/writer refactor. From there, unit-test *and then* back to NTCP so I can close that damn milestone issue >:| **\<anonimal>** So, that's just on my end. Anyone else? **\<anonimal>** I know guzzi is doing study for RAII refactoring. **\<bigreddmachine>** Salti's holding pattern for webextensions in FF is making progress **\<anonimal>** Oooo cool **\<anonimal>** How are they doing on that front? **\<bigreddmachine>** 1 of two issues i'm tracking are finished, second is still a ways off **\<guzzi>** Review client context implimenting raii **\<bigreddmachine>** and no dev docs yet **\<moroccanmalinois>** Looking at reload server tunnels https://github.com/monero-project/kovri/blob/master/src/client/context.cc#L321 **\<anonimal>** Excellent, that all sounds good. Anything else before we move onto 3.? **\<i2p-relay> {-olark}** I have been slowly evaluating what will be needed to replace supercop with tweetnacl **\<anonimal>** (well, I'm hoping FF will move faster but it sounds like they're at least *moving*) **\<i2p-relay> {-olark}** Can rip out all the ecdsa sig types at the same time to work towards the identity refactor work **\<bigreddmachine>** anonimal: yes. progress is progress. **\<anonimal>** olark: ok this is for #485, sounds good. Would you be able to resolve #345 in the mean time? **\<i2p-relay> {-olark}** For EdDSA **\<i2p-relay> [fluffypony]** major thunderstorm here, so if I don't respond it's because I've been struck by lightning (or my house has) **\<anonimal>** Eeek! No charred pony! **\<i2p-relay> {-olark}** anonimal: Sure **\<anonimal>** fluffypony can you see the meeting or is internet intermittent? **\<anonimal>** olark: nice! **\<anonimal>** Ok, moving forward, **\<i2p-relay> {-olark}** I will find the time. I have been neglecting kovri :( **\<anonimal>** Yes, come back soon ;) **\<anonimal>** 3. Preparation for [96boards.org OpenHours showcase for Kovri / Monero](https://github.com/monero-project/meta/issues/46) **\<anonimal>** Speaking of neglecting, I hope we don't let this opportunity slip by ^ **\<anonimal>** Does anyone know of any effect voice masking software? Military grade (if there is such a thing). **\<anonimal>** \*effective **\<i2p-relay> [fluffypony]** anonimal: nothing I know of, but I also don't know if that would be worthwhile or weird **\<i2p-relay> \* fluffypony** tries to convince anonimal to come out the pseudonymous closet **\<i2p-relay> {-pigeons}** yeah its annoying as hell to listen to **\<i2p-relay> {-pigeons}** mouthful of marbles works ok though **\<anonimal>** I hear that Barry Manilow recently came out of the closet. **\<guzzi>** Pennies **\* anonimal** not that I'm a fan, nor am I in that sort of closet **\<anonimal>** Well, I'm curious to hear the public's opinion on whether I should de-anon. Thoughts? **\<i2p-relay> [endogenic]** yes! **\<anonimal>** moneromooo ^ #monero-dev **\<i2p-relay> [endogenic]** i will be your bodyguard **\<anonimal>** lol awesome! X) **\<i2p-relay> [fluffypony]** anonimal: only reason I suggest it is because Kovri does need a voice, but ultimately it's your call **\<i2p-relay> [gingeropolous]** weren't you already on the monero missives? **\<i2p-relay> [fluffypony]** gingeropolous: no, that was jeff **\<moneromooo>** What ? What's in #monero-dev ? **\<i2p-relay> [endogenic]** anonimal: just thinkā¦ we can hang out at meetups and such :) **\<i2p-relay> {-olark}** Ultimately your choice anonimal. **\<i2p-relay> {-olark}** Don't feel pressured to come out becuase people want you to ;) **\<sgp>** ^ seconded **\<anonimal>** gingeropolous: ^ not Jeff at crypto++, Jeff a former problem contributor who, as he said, has family in U.S. intelligence. **\<i2p-relay> [gingeropolous]** he's satoshi. **\<anonimal>** moneromooo I meant 'what's your opinion if any?' **\* anonimal** and also threw question at #monero-dev in same line, sorry **\<i2p-relay> [gingeropolous]** my apologies. I obviously know whos who here. **\<moneromooo>** Of whether you should de-anon ? I wouldn't want to influence you to. **\<anonimal>** Oh np, just clarifying since I said "Jeff" earlier. **\<moneromooo>** My view is that the more people actively keep their privacy, the less the massive pressure on everyone else to shed their privacy is. **\<anonimal>** Hmm, good point. **\<moneromooo>** Not really related to this particular case, but having 99% of people not care about their privacy means that companies and everyone can just screw privacy and not get any noticeable blowback. **\<i2p-relay> [endogenic]** think only anonimal's in the position anonimal's in as kovri lead tho **\<moneromooo>** So I use Tor for random run off the mill browsing partly for that reason too. **\<i2p-relay> [fluffypony]** moneromooo: yes, but this is about his status as a contributor and maintainer **\<i2p-relay> [fluffypony]** after all, things get really boring if I'm the only one talking at conferences **\<moneromooo>** Well, his choice, and I don't want to interfere in it. But thanks for asking :) **\<i2p-relay> [endogenic]** \<3 **\<i2p-relay> [endogenic]** i wouldn't go that far fluffy **\<i2p-relay> [gingeropolous]** you could just "hire" a spokesperson to be your IRL talking head **\<i2p-relay> [gingeropolous]** and they *just* happen to know a *whole* lot about everything **\<i2p-relay> [endogenic]** rent-a-body **\<anonimal>** Ok, so I'm hearing that if I de-anon I get a free(?) bodyguard and can freely promote more-so than what I can do now. I'm also hearing that no one wants to put that kind of pressure of a decision on me. **\<anonimal>** I have to say though, I'm wearing more than 1 cap at any given time. Maybe one-too-many? It was a relief to finally sit down and write some code this week. It had been way too long since I've done that and I'm ALWAYS HERE working on kovri! **\<iDunk>** I think gingeropolous suggested you should invent an alter ego for public appearances :) **\<i2p-relay> [endogenic]** you can choose when to do talks and when to reply to ppl imo **\<i2p-relay> [endogenic]** and i bet others will jump in to help **\<i2p-relay> [fluffypony]** "I'm fluffy...errrr...fluffynonimal, and I'm a Kovri developer" **\<i2p-relay> [endogenic]** just a question of letting us know how we can help **\<i2p-relay> {-pigeons}** even if you do come out, still consider the marbles for talks **\<i2p-relay> [gingeropolous]** well iDunk now its ruined **\<iDunk>** Damn **\<anonimal>** lol, I'll just show up with marbles in my mouth. **\<anonimal>** I must say that, adding public-relations, I love the thought, but I do also love writing code. **\<anonimal>** And people love targets, so that's always something to concern myself with. **\<sgp>** You can still do both. Choose the proportion you want **\<anonimal>** "just a question of letting us know how we can help" \<-- thanks endogenic. I think what will help are 2 things: **\<anonimal>** sgp good point **\<i2p-relay> [fluffypony]** anonimal: I think that there's probably less scope to talk about Kovri at conferences right now anyway, but it would be nice for someone to do some podcasts etc. in future **\<i2p-relay> [endogenic]** podcasts are a great idea. i honestly doubt most ppl who want to use something like tor even know tor needs an alternative **\<i2p-relay> [endogenic]** and i'd enjoy learning more about the kovri tech in that format **\<anonimal>** What would help: 1. more people get more familiar with kovri technology so they can answer questions and promote too. And 2. maybe everyone present can give me a solid "yes" or "no" on if they want me to de-anon (i.e., putting aside any other thoughts and responding purely on instinctual feelings) **\<anonimal>** bigreddmachine: ^ re: podcast, my decision sooner than later will effect that **\<i2p-relay> [gingeropolous]** just go full Mr. Robot. Loose touch with reality, veer into psychosis, and then even *you* don't know who you are. **\<anonimal>** lololol gingeropolous X) **\<sgp>** I just started watching that show. 1 season in. No spoilers please! **\<ArticMine>** To de-anon should be personal chice in my opinion **\<anonimal>** Ok I'd say we're on a tangent for point 3 but this kind of needs to be done IMHO. **\<ArticMine>** choice **\<anonimal>** All in favor of me de-anoning: yay or nay? **\* anonimal** don't be shy! **\<i2p-relay> [endogenic]** i personally agree it must be personal too. sry to be difficult. there are tradeoffs for sure **\<sgp>** Pros: can talk about it more openly, attract new talent with greater outreach, better inform community about developments. Cons: more likely to be a target, maybe you're really ugly **\<i2p-relay> [endogenic]** it's a kind of burden i think **\<sgp>** (just kidding on second con) **\<i2p-relay> [fluffypony]** anonimal: I don't know if we should vote for that, it's your call **\<anonimal>** lol sgp maybe I'm missing a face entirely... **\<anonimal>** fluffypony ok **\<anonimal>** So resolving 3., fluffypony + pigeons, how's your schedule lately? **\<i2p-relay> [fluffypony]** pigeons is down my side of the world for a couple of weeks, so we can make time around that **\<anonimal>** Oh neat! Should I contact Robert to schedule a definitive date now? **\<i2p-relay> [fluffypony]** well it depends on if you want to do me + pigeons or you + pigeons **\<bigreddmachine>** anonimal: soory, was afk. re the podcast bit, if you do decide to de-anon yourself, i'd be happy to host your coming out of the closet party! but garbling voice is doable too. **\<i2p-relay> [fluffypony]** or all 3 of us **\<anonimal>** fluffypony: I would think either all 3 (or at minimum just you 2). bigreddmachine I'd like to hear/learn more about any garble tech available, even if it's annoying. **\<i2p-relay> [fluffypony]** anonimal: ok let's talk afterwards, and we can schedule it with them **\<anonimal>** Ok will do **\<anonimal>** bigreddmachine: I'll PM you later too **\<anonimal>** Anything else on 3.? **\<moneromooo>** Voice garbling sounds very reversible (unless it's voice recogniation plus text to speech). **\<bigreddmachine>** TTS certainly would work. **\* anonimal** considered TTS, maybe I should learn to type faster first **\<anonimal>** (or prepared statements?) **\<anonimal>** (defeats the fun of interviews/speeches/conferences?) **\<anonimal>** Ok, we'll talk more later. **\<i2p-relay> [endogenic]** hehe seems a little creepy **\<anonimal>** 4. Status of [Monero HackerOne umbrella and bounty](https://github.com/monero-project/meta/issues/39) **\<moneromooo>** Copy and "paste" words from movies, paste them one by one to make up sentences. Like the old words cut off from a newspaper :D **\<anonimal>** lol moneromooo, not serial-killer-like in any way whatsoever... **\<anonimal>** re: 4. We have hackerone.com/monero ! **\<i2p-relay> [fluffypony]** anonimal: has anything for 4. been written up in the style of an FFS proposal or not yet? **\* anonimal** grabs only FFS for 4. **\<anonimal>** Links is in the meta issue, one moment. **\<anonimal>** https://forum.getmonero.org/6/ideas/87597/monero-bounty-for-hackerone **\<anonimal>** Is that what you mean? **\<i2p-relay> [fluffypony]** ok - do you want me to move that to Funding Required in its current form? **\<anonimal>** Eek, I should update? **\<anonimal>** The prop looks unclear as-is **\<i2p-relay> [fluffypony]** probably worthwhile **\<anonimal>** We decided on 500 to start **\<anonimal>** Ok, I'll edit after the meeting or do you need me to do that now? **\<i2p-relay> [fluffypony]** no after is fine **\<anonimal>** Ok **\<anonimal>** So for 4, I still have to PR VRP's to the various repos. **\<anonimal>** Also invite the appropriate people to H1. But fluffypony I think you'll want to do that? **\<i2p-relay> [fluffypony]** sure **\<anonimal>** moneromooo is already in there. luigi is not yet though. **\<anonimal>** Alright. From there we should raise the funds first and *then* start inviting hackers on H1. **\<anonimal>** Any agreements/disagreements? **\<sgp>** I agree **\<anonimal>** Btw, many hackers are already *on* H1, by invite I mean invite to start looking at our projects. **\<anonimal>** Ok. Anything else on 4.? **\<anonimal>** 5. Code + ticket discussion / Q & A **\<i2p-relay> [fluffypony]** nothing else from my side on 4 **\* anonimal** takes peek **\<anonimal>** re: website issue, is ajs here? **\<ajs>** present **\<anonimal>** Hi! **\<anonimal>** Any news the website front? **\<i2p-relay> {-pigeons}** No I am the holdup there **\<anonimal>** Ok. ETA on resolving any holdups? **\<bigreddmachine>** shoot, i was just about to ask about that. didn't realize we had monero-project/kovri-site. how can i help? **\<ajs>** have backed up work that has been done and waiting for access to a server **\<anonimal>** Btw rehrar popped in recently and said him and/or his wife would give a try a logo redesign. **\<rehrar>** Hi. Yes. :D **\<i2p-relay> {-pigeons}** i'll try to set something up in 24 hours or so **\<anonimal>** Wow, that fast? Cool. **\<i2p-relay> [pero]** so what happened to the logo i did **\<anonimal>** pero: it was NACK'ed. This was clearly stated in github issue that I posted in the previous meeting. **\<rehrar>** I'd also like to give the Kovri website a go, pending on the logo and branding. :) **\<i2p-relay> [pero]** why? **\<anonimal>** pero: I don't have the files though if that's what you mean. **\<anonimal>** fluffypony: ^ **\<i2p-relay> [pero]** you were sent the files **\<i2p-relay> [pero]** so as i see it, a contributor contributed a bunch of time and spiffied up the previous logo **\<anonimal>** Not anymore. Tis' the magic of deleted emails. **\<i2p-relay> [pero]** the community was involved too... **\<i2p-relay> [pero]** then it unilaterally 'nack'd' **\<anonimal>** Yes. This was all clearly stated in the github PR. **\<anonimal>** Where is your logo work PR? **\<i2p-relay> [pero]** wow what a shitty way to waste contributor's time **\<anonimal>** You PR'd nothing. Community opinion does not equal final decision. **\<anonimal>** Off you go pero, the resident troll. **\<i2p-relay> [pero]** lol? **\<anonimal>** You knew from the start that fluffypony and I would make a final decision. Do I really need to bring up logs from months ago? **\<i2p-relay> [pero]** the logo assets were emailed to you and pony **\<i2p-relay> [pero]** there was no request to pr anything **\<ajs>** rehrar bigreddmachine - I made a very basic Jekyll site.. files at: https://github.com/anonimal/kovri-site **\<i2p-relay> [pero]** the request was for the files to be emailed **\<i2p-relay> [pero]** and your 'troll' remark is uncalled for and rude? **\<i2p-relay> [pero]** wtf is that **\<anonimal>** pero you have two options: 1. being kicked from this channel for disrupting a meeting or 2. venting into https://github.com/monero-project/kovri/pull/488 for all the world to see. **\<i2p-relay> [bigreddmachine]** ty ajs. will this be affected by the re-design that rehrar is doing? **\<rehrar>** Well, I think ideally the redesign that is done for getmonero.org should have an influence on the Kovri website (just influence, not dictate) **\<rehrar>** and the logo redesign I will propose (just a proposal) I think definitely should have a larger influence on the website **\<i2p-relay> [pero]** whats so hard about contacting the person that did the work? **\<anonimal>** rehrar: that sounds good **\<rehrar>** So before I start working on anything Kovri website related, we're going to try to get a logo to you guys before this week is over. **\<rehrar>** I'll drop it on here and the Kovri repo as an issue to look over when it's done. **\<rehrar>** And it is obviously open to suggestions or tweaks when we show it **\<i2p-relay> [bigreddmachine]** ty rehrar - but from a content standpoint, the re-design is sort-of content agnostic, right? as in, i could write a page and the formatting might change but if it's in a markdown file jekyll will just ingest it and reformat, right? **\<rehrar>** for Kovri, not getmonero.org, right? **\<anonimal>** Did you have any plans to re-use material from monero site (as to save time, etc.)? **\<i2p-relay> [bigreddmachine]** well, both i suppose, but kovri specifically **\<ajs>** bigreddmachine: site design is rudimentary and could be easily changed if need be **\<rehrar>** The content is going to be restructured for getmonero.org, I'm not going to do a lot of work on copy, unless people think it's really needed. **\<i2p-relay> [bigreddmachine]** (sorry, i got us off topic) **\* anonimal** whatever is easiest to maintain IMHO **\<rehrar>** Pages will be shuffled around, and some things within pages will be shuffled around (all of this will be submitted in designs prior to everything being built) **\<rehrar>** as for Kovri, it won't have nearly as much content yet, so I don't think it'll be a huge issue. **\<rehrar>** does that answer your question? **\<rehrar>** If not, the short answer is yes, it should be content agnostic, and I will work with you guys in the rare cases where it is not. **\<i2p-relay> [bigreddmachine]** not entirely but close enough, thanks. **\<i2p-relay> [bigreddmachine]** ahh, yeah that last bit helps **\<rehrar>** great! **\<anonimal>** Question: **\<anonimal>** rehrar: IMHO, from the work of yours I've seen, since you're an actual designer/creator/implementer, I'm wondering if you, bigreddmachine, ajs and pigeons would consider being the 'website team' to get this up-and-running. I can move the repo when we're online. Does this sound fair or something of interest? **\<anonimal>** It sounds like you're already doing that, I'm just wondering for my own piece of mind (e.g. do I need to re-schedule my work load for website work, etc.) **\<i2p-relay> [endogenic]** But not both! **\<rehrar>** That sounds fine with me. Pardon me for my ignorance, but what will be bigredmachine, ajs, and pigeons roles? **\<i2p-relay> [bigreddmachine]** i'm happy to help with some content, as i am trying to learn about the tech anyway so documenting it is an obvious step. **\<anonimal>** endogenic too, hop on the site train! **\<rehrar>** if you can focus more on Kovri, I would do it. **\<anonimal>** rehrar: re: bigreddmachine ajs and pigeons, let's chat after the meeting since we're out of time **\<i2p-relay> [bigreddmachine]** design-wise, i can give my two cents but i'd like to be hands off there. just more of a feedback guy, like "hey, this isn't intuative" or whatever **\<rehrar>** I don't think any of us have a problem bugging you if we need something. **\<rehrar>** I'm not able to stick around for much longer, actually. **\<rehrar>** We can set up a meeting time for alter this week? **\<rehrar>** \*later **\<anonimal>** rehrar: just pop in anytime if you want to make an official website meeting **\<rehrar>** sounds good **\<rehrar>** gotta split. Seeya homes. **\<i2p-relay> [bigreddmachine]** i can't, but just summarize discussions on github issue and tag me **\<anonimal>** bigreddmachine: that's right, you're not always irc'able. **\<i2p-relay> [fluffypony]** Can I take the bot down? I'm in a YouTube show mow **\<i2p-relay> [fluffypony]** Now **\<i2p-relay> [bigreddmachine]** anonimal: i try to stay off during week to stay focused on my job. **\<i2p-relay> [endogenic]** anonimal: oh no not me, i was just trolling about "fair or of interest" **\<i2p-relay> [bigreddmachine]** meow\* **\<anonimal>** Ok, moving on 6. Any additional meeting items **\<anonimal>** None from me. guzzi said like 2 lines. **\<i2p-relay> [endogenic]** I think pero could be of help on the site too as i think he has lots of exp there **\<anonimal>** 7. Confirm next meeting date/tim **\<i2p-relay> [bigreddmachine]** just that i'll keep tracking FF proxy and looking for alternatives. **\<i2p-relay> [bigreddmachine]** 23 Apr? **\<anonimal>** Yes, same time in two weeks. **\<i2p-relay> [fluffypony]** Yep **\<anonimal>** Thank you everybody!