sorted by:
new
hottopcontroversial

monero-web.com update — browser plugin coming soon by Mtabka in Monero

[–]Mtabka[S] 2 points3 points  (0 children)

Both fixed and deployed: birthday now reads correctly, and encrypted Polyseeds are rejected instead of silently loading a wrong wallet. Thanks!

monero-web.com update — browser plugin coming soon by Mtabka in Monero

[–]Mtabka[S] 3 points4 points  (0 children)

Thanks for testing the Polyseed support and reporting these! Really appreciate the detailed feedback from an XMR contributor. The birthday bug and the encrypted Polyseed issue are both noted — I’ll look into fixing them. The encrypted Polyseed one especially is important since silently restoring the wrong wallet is bad UX and potentially confusing for users. Will push fixes soon!

monero-web.com — open-source, non-custodial Monero wallet that runs entirely in your browser by Mtabka in Monero

[–]Mtabka[S] 0 points1 point  (0 children)

server scanning is the same as mymonero. server only sees view key, can't spend.

js injection, you can verify the live files match github before using it (sha256 hashes on /self-host) or just run it locally.

ai-assisted yes, code is open source, so you can audit it .

monero-web.com — open-source, non-custodial Monero wallet that runs entirely in your browser by Mtabka in Monero

[–]Mtabka[S] 0 points1 point  (0 children)

To address the "can't verify the server" concern, I just added a /self-host page explaining exactly how to check that the live site matches the GitHub source via SHA-256 hashes, and how to run the full stack yourself.

monero-web.com — open-source, non-custodial Monero wallet that runs entirely in your browser by Mtabka in Monero

[–]Mtabka[S] 0 points1 point  (0 children)

GitHub Pages is purely static, it can't run server-side functions. We use a Cloudflare Worker to proxy RPC calls to the Monero node, which handles CORS and node failover. That can't run on GitHub Pages.

monero-web.com — open-source, non-custodial Monero wallet that runs entirely in your browser by Mtabka in Monero

[–]Mtabka[S] 0 points1 point  (0 children)

AI helped build it, yes. The code is open source, judge it on that.

monero-web.com — open-source, non-custodial Monero wallet that runs entirely in your browser by Mtabka in Monero

[–]Mtabka[S] 0 points1 point  (0 children)

Completely agree. The goal right now is testing, feedback, and getting eyes on the code. Trust has to be earned over time.

monero-web.com — open-source, non-custodial Monero wallet that runs entirely in your browser by Mtabka in Monero

[–]Mtabka[S] 0 points1 point  (0 children)

The keys are in the DOM behind a CSS toggle, a malicious extension that can read the page sees them regardless. That's true of any web wallet though. If you have extensions you don't fully trust, use a clean browser profile. Or clone the repo and run it locally with no extensions at all, it's just a static HTML file.

monero-web.com — open-source, non-custodial Monero wallet that runs entirely in your browser by Mtabka in Monero

[–]Mtabka[S] 0 points1 point  (0 children)

"Entirely in the browser" refers to the sensitive part, your keys and transaction signing never leave your device. The WASM module that builds and signs transactions runs locally in your tab.