Post Mortem Changes Puns

A few weeks ago some Ledger Monero users got affected by a bug in the Ledger Monero code. Due to the bug, a handful of transactions were erroneously constructed and the wallet was not able to spot (and subsequently credit) the change, thereby letting the user believe their funds were lost. Fortunately, we were, in collaboration with the Ledger team, able to resolve this bug and recover the 'lost' funds of the affected users.

Monero uses two different transaction public key formats. The first format is utilized when a transaction is sent from a main address (the addresses that start with a 4) to a main address, whereas the second format is utilized when a transaction is sent from either a main address or a subaddress (the addresses that start with an 8) to a subaddress. The formats can be denoted as follows:

Format 1: R = rG

Format 2: R' = sB

Where:

• r = the private transaction key
• R = the public transaction key
• G = the Ed25519 base point
• s = additional private transaction key in case of subaddresses
• R' = public transaction key in case of subaddresses
• B = the public spend key of the recipient

The shared secret can then be denoted as follows:

Format 1: rA = aR

Format 2: sA = aR'

Where:

• a = the private view key of the recipient
• A = the public view key of the recipient

The bug was essentially that the Ledger Monero code used the first transaction public key format, whereas it should have used the second one. Therefore, the wallet was not be able to decode the change output, because it expected a different format of the shared secret. That is:

Expected: rA = aR

Actual: rA = aR'

Thus, the wallet was not be able to spot the change and could not credit it to the balance. The bug was investigated by Ledger and described to both luigi1111 and stoffu. Fortunately, luigi1111 designed a concept that would allow one to retrieve the lost funds. Subsequently, stoffu created the required manual patch (that can be seen here. Lastly, the Ledger team assisted the affected users with retrieving their funds.

Going forward, pull requests related to the Ledger Monero code will receive additional scrutiny, review, and testing. Additionally, extensive tests (similar to the ones for Trezor) will probably be added to the code. This, hopefully, will ensure no such bugs will be present in the future.

I thought it might be helpful to have a discussion thread for taking lessons from Hurricane Ida. I've got some discussion questions to start us off, but please add your own!

1. Power is out for nearly a million people, and utilities are saying it could be weeks before it is restored. How would you deal with a long-term disruption in utility service?

2. Many people couldn't afford to leave the path of Ida, or were unable to find a rental, flight, or other means of egress. How would you react if you financially or physically could not leave the path of an impending storm?

3. What do you keep putting off as a prep that would help you before, during, or after a storm like Ida?

4. What have you done that gives you the most peace-of-mind in preparing for a natural disaster like Ida?

5. Share any stories, questions, or news bits about Ida and preparations

Similar to the post-morterm that followed up by the week-1 summer skirmish and playground LTM, Epic explained what happened and what are their future plans.

after reading those posts it re-assured me that Epic knows what they are doing and plan on improving in the future.

Similar post can be applied to the recent building nerfs and weapon buffs that occurred last 5 patches.

It will give Epic a chance to explain themselves and show what they are holding for the future of fortnite, giving the player base a chance to understand what is going on instead of speculating that Epic is just catering to casuals and will overall calm everyone, because right now most of us are pretty dumb-founded and we are just looking for answers.

The Omniscient Perspective

I've posted before about my buyback experience, but this will be the $$$-specific post to wrap up everything. FWIW, my Bolt was registered in MD and I'm a resident of MD.

2019 Bolt Premier (purchased NEW), MSRP: $43,905 (~22k miles on the odometer at time of buyback approval)

Via the MSRP trade route, I selected a 2021 Chevy Blazer w/$33,795 MSRP (no incentives/discounts).

• no usage fee deducted in MD, full $43,905 MSRP trade credit given
• all fees associated with Blazer purchase were covered by GM; literally $0 out of pocket

I did not use ~$10,110 of my replacement/trade credit, so GM applied that unused credit to my existing loan balance for my Bolt (my understanding is if I had no loan balance, the unused credit would have simply been forfeited). So the balance I had to cover to complete the trade into the Blazer was my Bolt's old balance -$10,110.

• existing loan balance amount paid down by GM: $10,110

I decided to park the Blazer in a nearby storage lot until the title came in, as the plan was to sell it to the highest bidder. Ended up requesting a duplicate title as it was taking forever for the original one to arrive.

• storage payments for 2 months: $103
• duplicate title fee: $38
• 2 months of insurance paid on Blazer while waiting for the title: $84

While waiting ~6 weeks for the title to arrive, I shopped numerous used dealers to find the best price for my Blazer. Contacted all the online dealers (Carvana/Vroom/ALgo, Driveway, etc), several dealers around town (local Nissan/Toyota/Chevy/CarMax), but a dealer I had never heard of CarBuyer USA) offered the highest price (by $600). Reviews looked decent enough, and they ended up being (mostly) legit.

• Sale price of Blazer: $34,600 (click here for my CarBuyer USA selling experience). That is $800 MORE than MSRP of the Blazer (and $3,300 more if you factor in the $2,500 cash rebate on the hood just about all '21 Blazers are eligible for currently). Insanity!

So while this entire buyback experience was at times hellish (8 months including the time to sell the Blazer), in the end it was worth it as I came out waaaaay ahead financially. For a comparison on if I had simply broke down and sold my Bolt to the highest used dealer back in the spring, best quote I got over the months was $22k from Vroom. A final breakdown:

• $43,905 MSRP swap credit received from GM
  • acquired $33,795 Blaz

https://thevictorianbookofthedead.wordpress.com/2021/10/20/a-post-mortem-room-ghost/

A Blunt Force Korma

Is there a post-mortem by the OB1 team? It would be nice hear what they thought worked, what didn't work, and what they would do differently. It seems to me that there is still a need for something like Openbazaar. Maybe someone else can pick up where OB1 left off and fix the issues that caused OB1 to fail.

Match Thread: United States vs Mexico | International Friendly

#90'+4': United States 0-3 Mexico

Mexico scorers: Javier Hernández (21'), Érick Gutiérrez (78'), Uriel Antuna (82')

Venue: MetLife Stadium

Auto-refreshing reddit comments link

LINE-UPS

United States

Zack Steffen, Aaron Long, Walker Zimmerman (Miles Robinson), Sergiño Dest (Daniel Lovitz), Reggie Cannon, Alfredo Morales (Jackson Yueill), Wil Trapp (Sebastian Lletget), Christian Pulisic, Tyler Boyd (Jordan Morris), Gyasi Zardes (Joshua Sargent), Weston McKennie.

Subs: Sean Johnson, Tim Ream, Cristian Roldan, Paxton Pomykal.

^____________________________

Mexico

Jonathan Orozco, Héctor Moreno, Diego Reyes, Jesús Gallardo (Fernando Navarro), Jorge Sánchez, Héctor Herrera, Andrés Guardado (Érick Gutiérrez), Carlos Rodríguez (Orbelín Pineda), Javier Hernández (Alexis Vega), Roberto Alvarado (Uriel Antuna), Jesús Corona (Hirving Lozano).

Subs: Marco Fabián, Guillermo Ochoa, Jonathan dos Santos, Raúl Jiménez, Carlos Salcedo, Edson Álvarez.

MATCH EVENTS | via ESPN

21' Javier Hernández Goal - Header

45' Aaron Long Yellow Card

58'

58'

58' Alfredo Morales Yellow Card

58' Jorge Sánchez Yellow Card

67'

68'

70'

74' Javier Hernández Yellow Card

76'

77'

77'

78' Érick Gutiérrez Goal

82' Uriel Antuna Goal

87'

87'

88' Joshua Sargent Penalty - Saved

89'

90'+2'

^(Don't see a thread for a match you're watching?) ^(Click here) ^(to learn how to request a match thread from this bot.)

https://www.reddit.com/r/MLS/comments/d0pg4v/match_thread_united_states_vs_mexico/

Another event comes to a close. The wacky, screwball antics of the Totally-Not-A-Saber-Or-Altria MHX take a back seat to the more serious tone once more and it comes once again to look back and reflect on these last two weeks in a rerun of what was my very first post-mortem waaaaaaaay back in the day!

And I'm not gonna sugar coat this: Fuuuuuuuuck this event.

I genuinely don't remember this being so bad two years ago. In fact I am surprised we managed back in the day. Our second ladder event in as many months, thread bare shop, and a story that I personally found so forgettable I didn't even bother trying to watch the damn thing this time around. Another ladder grind and a mediocre shop didn't help much either...

But, as usual, I'm more interested in you guys. Did you clear the ladder? The shop? Did you like the story or did you find it as unbearable as me? But most importantly are you as relieved as I am that we don't have another event like this for awhile?

Take a load off, Masters. Celebrate, lament, get it all off your chest. Because as we all know Chaldea rarely gets a moment's rest, but there are more pressing matters at hand. The Shadow Border is closing in on the first Lostbelt. The Crypters have Chaldean blood on their hands and in this instance blood for blood is fair game. And so we charge into the Lostbelt. Our target: Kadoc Zemplus. Member of Team A and Master of the servant who froze Chaldea over. And more than that remember this.

It's not NTR to summon Anastasia no matter what you say because we canonically summoned her first~!

(Sorry for the short post mortem, but seriously, fuck this event.)

I can't find any of the post-mortem streams on either channel, and I couldn't find any announcement from Abi about deleting them either.

Are they just gone (which I totally understand if she doesn't feel comfortable with them) or is my remaining brain cell just not looking at the right place?

Time to discuss which dicks to suck for correctly spilling T and publicly shame the liars.

Discuss the finale, but keep it cute and don't be a wad towards Queens or other users..

Is this common for cats being spayed she was in good health all the jabs routine checkups all the time never a single problem before.

So concludes a tale that may or may not have happened. A story of humans, Servants, oni, and the woman that was simultaneously all three. The tower burns from the fire of Tomoe's arrow, Chaldea returns home, and perhaps the minds of both Shuten and Tomoe can rest a bit easier having had a heart-to-heart in a place we could not go. The food and alcohol is gone and it at last comes time for Master and Servant to leave the hot springs and reflect over the last week.

Well this was certainly an interesting change of pace. A combat-oriented event where the only limiting factor was your number of combat-ready servants. No shop, no AP management, just a full-on brawl up 200 floors. Consequentially my normal post-mortem format doesn't really work here, does it? At least not entirely because there are still a few questions worth asking.

Did you make it to the top? Clear the challenge quest? Who were your MVPs in this tower where everybody got their shot? Did you discover any new strategies and synergies? Perhaps some new appreciation for a servant that you didn't have before? What floors did you difficulty on and what did you do to overcome them?

And then there's the story. A story where we had an unusually candid moment with Shuten in which she dropped her act and asked questions that may or may not have been plaguing her for a good long time to a woman who may or may not have had the answers she sought. Could humans and oni have found some sort of Harmony between one another? Could Chaldea be an example or is it merely the exception that shows why it wouldn't work? Maybe the answer doesn't even matter in the Modern Age where oni are no more. Ah well...

Take a load off, Masters. Celebrate, lament, get it all off your chest. Because as we all know Chaldea rarely gets a moment's rest. No sooner do we return to the home front are we greeted with the smell of fresh chocolate. Valentine's appears to have crept up on us while we were busy in that tower. And Lord knows how occupied a master's schedule can be when they are giving or receiving chocolates!

Have fun and try not to get fat off of that chocolate. We're going to be Marathon running for the next few months.

(PS: Sorry for no DaVinci rerun post-mortem. I was out of town and by the time I was back I felt my window had passed!)

https://preview.redd.it/krwbhme5u2c31.jpg?width=6094&format=pjpg&auto=webp&s=e22b6c0274ac49f48010f41f5ed4b97e9e13454c

Our latest Dev Blog takes a look back at the recent exploits and their impact on the community. We discuss the Global Ordering fix we implemented for the recent exploits, as well as our improvements to better address such exploits in the future with the Operator and loadout kill-switches on the live servers.

We also shed some light behind the scenes on the efforts the team took at each step as we worked to resolve the exploits.

For the full article: ubi.li/xZgwf

Even the hockey mods have abandoned us...

Does this sub do postmortem threads? We need a serious chat about what to do next.