start	end	text
880	2920	Alright, so next talk on the list,
2920	8960	You're Not The Money Printer, or Why We Should Separate Coinbase and Non-Coinbase Rings.
9200	14880	So, during the talk today, I mean, this talk might not take the full 30 minutes,
14880	18680	but one thing I've been really passionate about over the last few years
18680	24880	is the idea of treating Coinbase outputs differently than non-Coinbase outputs
24880	29360	because people typically spend them in different ways.
29360	32340	So, ultimately, I made the joke of You're Not The Money Printer
32340	35480	because I'll cover who actually prints these Coinbase outputs,
35480	37580	whoever handles or touches them.
37620	41200	And I'm also going to be keeping a note of the live chat,
41200	44340	so I will be able to answer questions on YouTube.
44340	46660	Hopefully, the quality is working well for everyone here,
46660	48480	and the stream is going really well.
48480	49760	Lots of really good talks today.
49760	52960	Thank you, Daniel Kim, for everything you did on the slide before.
52960	56340	So, first, let's get started about what...
57420	63080	Let's first cover, you know, what is an output period, right?
63160	66500	So, outputs are simply piggy banks.
66500	67980	I heard this example from someone else.
67980	71220	I can't take credit for considering outputs piggy banks.
71220	78380	I previously have called them pots of gold or bills or many different other things.
78380	83340	But I like the idea of you taking an amount of money,
83340	86040	you put it in a container, this piggy bank,
86040	88580	and then in order to spend this amount,
88580	91180	the receiver needs to break open the piggy bank
91180	95280	and put it in a new output, a new piggy bank.
96120	97820	They are single-use.
97820	99160	So, unlike the pot example,
99160	102040	it definitely stresses the idea of these being single-use.
102040	108300	You cannot continue to keep, you know, putting these outputs elsewhere.
108540	112960	So, as a result, an output you can think of just as a container of money.
112960	115480	It's a really horrible name, output, honestly,
115480	119800	just because, you know, there's many things that, you know,
119800	121560	else you should be referring to.
123360	125140	Sorry, I'm checking the stream again.
125480	127300	Making sure it's working just fine.
130060	132400	Sorry. Sunday live stream.
132400	133480	Okay, perfect.
133780	136860	So, the output's a bad example because the source of funds
136860	139780	could either be going in or out of a transaction.
139780	141240	So, it definitely is misleading.
141860	146160	With Bitcoin, outputs do have connections to addresses, however.
146160	149880	You would have, you know, a specific source of funds
149880	152300	that is tied to a public address,
152300	155280	and you would be able to search that on the blockchain.
155280	160860	However, for Monero, you need to not think of outputs as tied to addresses.
160860	163940	You'll see a specific output on the blockchain.
164120	169220	You should think about these having ties to the date they were created,
169220	172000	not to the address that they are associated with.
172000	177020	Because, of course, with Monero, we do not have addresses to concern ourselves with.
177020	179600	Sure, you send and receive funds with addresses,
179600	184440	but the blockchain, from a, you know, perspective of what it shares publicly,
184440	186660	does not reveal addresses anywhere.
186660	191140	They are never present, so, therefore, do not think of outputs as addresses.
191140	194420	Think of them as containers of funds that are single-use.
194480	196780	It's important that you understand what an output is
196780	199680	before I go through the rest of this presentation.
200740	203340	Okay, next, what are ring signatures?
203340	209280	Well, ring signatures are an important privacy feature of Monero
209280	211520	that obfuscates the source of funds.
211520	216160	They're often, you know, inconsiderately referred to as mixing,
216160	220700	but it really is very, very different than a Bitcoin mixing process.
220700	225400	So, the idea is, if you want to spend one of your sources of funds,
225400	228600	let's say you go to a store with a $10 bill and a $5 bill,
228600	234300	and you want to spend $11, of course, you would give the teller both bills,
234300	237040	and they would give you $4 back in change.
237540	240480	So, in this case, what you would do is you take your Monero output,
240480	243140	which contains a certain number of Monero,
243140	245740	and you would include it in a single ring,
245740	249740	and then you would include other possible outputs,
249740	252400	which we call decoys in Monero.
252400	254660	These are not money that you're actually spending,
254660	258960	but funds that you ideally convincingly seem to spend,
258960	261060	and you include them all in this one ring.
261060	262720	So, you would say, in the top example there,
262720	269880	that perhaps the Monero transaction would conceivably spend one of these 11 outputs.
269880	273060	Only one is actually spent, but the outside observer does not know
273060	275300	which source of funds is actually being spent.
275300	279760	However, granted, we're able to verify that someone is actually spending funds
279760	280740	that they have the right to.
280740	283460	They're not just pretending to spend other people's money,
283460	284780	because that would be absurd.
286160	288740	So, if a transaction is trying to spend two bills,
288740	291040	like I described in the $10 and $5 case,
291040	292680	there would be two ring signatures.
292680	293880	Two independent amounts.
293880	296840	They're each spending one of these piggy banks, let's say.
297120	301320	And for each piggy bank, we grab 10 other piggy banks,
301320	302880	and we say, hey, that might be a source.
302880	304640	That might be where the money is coming from.
304640	308820	And an outside observer, ideally, would not know any better.
308820	311640	However, a ton of Monero research and history has shown
311640	316560	that in many cases, people are able to learn information
316560	320820	more than what we expect, based off how these inputs are selected.
320820	325020	One of these is whether or not outputs are coin-based outputs or not,
325020	327700	which is an additional point of metadata that you can use
327700	333380	to determine whether or not an individual is convincingly spending certain outputs.
333380	337340	So, what are coin-based outputs?
337340	340140	And of course, just to get it out of the way,
340140	344860	I should very clearly state that coin-based outputs, in this example,
344860	351360	are not in reference to outputs that are associated with coin-based decentralized exchange.
351360	352780	Not at all.
352780	360120	Coin-based outputs refer to the idea of money that is from the block reward.
360120	363480	So, if you are taking coins and you successfully...
363480	367020	Sorry, not taking coins, but if you successfully mine a block, let's say,
367020	372500	you have the right to make yourself a coin-based output that consists of a few things.
372500	375280	It consists of the block reward.
375280	377840	This is basically money that's coming out of thin air,
377840	382300	but it's coming out of thin air according to a very set, regulated process
382700	384420	that the network agrees on.
384620	388080	Dr. Daniel Kim talked about this in the earlier talk, of course.
388080	392060	And then, of course, you are able to pull in the transaction fees
392060	395660	that people say that you're entitled to include if people mine them.
395660	398260	Of course, fees are included as an incentive for people
398260	401920	to choose certain transactions over others.
401920	403600	And of course, in Monero's case,
403600	406940	they help compensate for the decreased block reward
406940	411320	if you are putting in a substantial number of transactions.
411380	413600	So, those are coin-based outputs.
413600	416480	Again, not coin-based the exchange.
416480	422380	Coin-based outputs refer to outputs that are generated with the mining process.
422380	425940	If a coin, let's say, used proof-of-stake or something,
425940	427880	it would be through the staking process.
427880	431860	But really, you can think of it as coins that are generated new into the system
431860	437160	or based off whoever the person who is authorized to sign the transaction,
437160	441080	in this case, sign the block, sorry, which would be the miner.
441280	445040	So, you can see I have sets of piggy banks going through here
445680	447500	just to try and simplify things.
447500	452420	But on the left there, that's the initial source of funds in the piggy bank.
452420	454200	Those are generated from the block reward.
454200	455920	They are highlighted, that yellow there.
455920	460260	And then the funds, in all actuality, are passed along further.
460260	462780	Their histories are no longer coin-based outputs.
462780	466260	They're other outputs, non-coin-based outputs, let's say.
466800	471260	Of course, just because Monero is Monero,
471260	473060	and we obfuscate all this information,
473060	477020	you don't necessarily know that there's this nice, lovely, straight line going through.
477020	479780	In all actuality, it looks super, super messy
479780	482560	and really looks like this nonsense,
482560	486140	where transactions may appear to go a bunch of different ways, of course,
486140	488060	but that's not the point of this talk.
488640	491780	Instead, we're going to talk about who the actual money printers are.
491780	496320	Who has the ability to print money in Monero?
496320	498080	Those are the miners.
498220	500820	Here is a chart showing who the miners are.
500820	505860	You can see that minexmr and supportxmr are the two dominant pools on the Monero network.
505860	507020	But you have a few others.
507020	513020	You have ones like xmrpool, f2pool, nanopool, smallpools, 2miners.
513120	517740	Smallpools consists of a substantial number of really small pools
517740	520920	that, in sum, equal 7% of the total network.
520920	524160	And then you have that 5% of unknown.
524340	530800	So this is something that minexmr is not able to associate with a specific mining pool.
530800	532880	These can be solo miners.
532880	535160	These can be private pools.
535200	540820	Ultimately, it's just network hash rate that's coming out of an unknown situation
540820	544440	from people that might either just not bother sharing information publicly
544440	547380	or care about mining privately or who knows what.
547880	551380	So these are who the money printers are in Monero.
552380	556640	And a lot of them reveal a lot of information for quite a few reasons.
556640	559640	We have a breaking Monero episode about public mining pool data
559640	561980	that I strongly recommend you watch.
562080	566540	But supportxmr, for example, they show the list of all the blocks that they mine.
566540	576720	So if someone appears to spend a coinbase output that you know was mined by supportxmr,
576720	580580	the only convincing way that that output could have actually been spent in that transaction
580580	584600	is if it was supportxmr actually spending it.
584600	590880	So if your friend, for example, sent you a transaction that spent funds
590880	594580	that supportxmr publicly describes as mining,
595180	602800	your friend either better run supportxmr or they are not actually sending you that money.
602800	605480	That's a fake decoy and it's known to you to be fake
605480	608780	given the information that the public mining pool publishes.
608780	613960	So I put it red there because it does reveal a pretty substantial amount of metadata.
614780	617640	Most pools will show the blocks they mine.
617640	622240	I only looked up supportxmr, minexmr, and nanopool because they're the largest,
622240	624840	but this continues for many pools.
624840	628160	Minexmr also shows the blocks mined, so does nanopool.
628340	633300	And then a few also reveal information about what transactions they make to users.
633300	642640	And as I show in other talks, this allows outsiders to pretty reliably form a list
642640	646860	of all transactions, really all outputs that the pool has controlled.
646860	651420	So as a result, supportxmr does not actually show the specific payouts
651420	654520	as far as the transactions are concerned.
654520	657680	They don't say, this is the specific transaction we sent.
657680	660780	Instead they say, we sent this much money,
660780	663560	which is much better than revealing the exact transactions,
663560	665240	it makes things much more difficult,
665240	672580	but it still likely incurs possible limitations related to timing attacks,
672580	676500	where, okay, well, what if it's the only transaction that gets mined
676500	677640	around this time period?
677640	679220	Well, then it would be more visible.
679220	682240	It still reveals more information, but it's not as bad.
682340	685560	Nanopool, for example, shows all payout details.
685560	688280	You can see who the specific miners are.
688280	692040	You can see how the payments are specifically made.
692040	695360	You can see the exact Monero transactions that go to these users.
695360	697840	So they reveal a ton of information.
697840	702400	So within, you know, Nanopool, they are making a lot of information public.
702720	706800	Minexmr is only showing payouts to users that are the actual miners.
706800	708540	You have to put in your mining address first,
708540	711940	and then it will show what payouts were made.
711940	715460	This makes it more difficult for someone who's trying to track
715460	718200	this sort of information, reveal a lot of information,
718780	723460	learn a lot about pool-held outputs.
724400	726480	So this is really who the money printers are.
726480	728480	But of course, you also have this unknown portion here
728480	730920	that I talked about, like who these potentially could be.
730920	734040	Well, we really do not, to all intents and purposes,
734040	736280	know anything about who's mining these funds.
736280	740140	But at the maximum, this unknown refers to, again,
740140	744560	the maximum amount of solo miners or private miners
744560	746360	that might be potentially impacted
746360	750460	if we start meddling with Coinbase outputs,
750460	753820	because clearly these mining pools don't really care
753820	755220	about revealing information publicly,
755220	758680	because they have done so for ages and continue to do so.
758680	761060	So the only people that do care about their privacy
761060	763120	from this perspective happen to actually be those
763120	767660	that are mining in unknown pools or solo mining, right?
768340	772580	So we need to talk about who actually owns these outputs.
772580	774780	Who is the one that's actually likely to spend,
774780	776760	control, et cetera, these outputs?
776760	781940	Well, Coinbase outputs are only spent by two groups of people,
781940	785240	mining pools or people that are solo mining
785240	787320	or mining on a private pool.
787460	790320	And there's only about 10 total mining pools
790320	794360	that consistently mine blocks.
794600	797480	And for solo miners, there aren't that many of those either.
797480	800460	There's a relatively small number, let's say.
801460	803780	Well, there's also the next set.
803780	807740	So instead of just funds that come from Coinbase,
807740	811580	there's also, okay, what's the from Coinbase outputs, let's say?
811580	813980	The next set. Once they're spent from Coinbase,
813980	818020	who convincingly may actually hold these outputs?
818020	821700	Well, it's still the mining pools, because mining pool mines a block,
821700	825780	they send a transaction to someone, the Coinbase output,
825780	829760	and then they receive change back to the mining pool.
829760	831640	So they still will hold on to these blocks.
831640	836020	So they are convincing holders of the from Coinbase outputs.
836720	839780	But solo miners are still also convincing holders.
839780	843740	But really, the extra layer of protection for users comes in the idea
843740	847220	that pool miners, not just the pool operators,
847220	852920	but the pool miners are likely recipients of these from Coinbase outputs.
852920	855560	Because a mining pool, again, will mine a block,
855560	857520	and they'll send a payout to someone.
857520	859140	They need to send that payment somehow.
859140	861180	So they need to spend that Coinbase output.
861180	866560	They might give the output that's generated next to specific users.
866560	871100	And so therefore, the entropy set of who actually may touch these outputs,
871100	875760	even though on chain, it's only one level away from the mining,
875760	878680	so the Coinbase outputs, in all actuality,
878680	883040	holding one of these outputs covers a much wider scope of activity.
883040	884400	And so it's much more convincing.
884400	891240	If your friend, let's say, sends you a decoy that includes one of these outputs,
891240	896020	they perhaps might have just been mining with their laptop on a mining pool
896020	898620	and eventually got a tiny fraction of a payout.
898620	900060	That's possible.
900060	904200	That's certainly much more possible than them sending you an actual Coinbase output.
904200	907380	It's completely different. It's much, much more convincing.
907460	911440	So it's important to consider who actually touches these outputs.
911440	914740	And this wraps around to the scope of the talk or name of the talk again
914740	918360	in saying that, are you a convincing money printer?
918360	922040	Are you a convincing person to actually touch these initial Coinbase outputs?
922040	925480	For the vast majority of people, the answer is no.
925480	930040	Very, very few predictable people are the ones that typically touch these Coinbase outputs.
930720	932400	So what can we do?
932520	935680	Well, we can handle Coinbase outputs differently.
935680	937620	We can optionally decide to say,
937620	943760	hey, we would like Coinbase rings to remain separate from non-Coinbase rings.
943760	946700	One thing we can also do with consensus changes
946700	952040	is say that Coinbase rings must be a certain size
952040	954560	and non-Coinbase rings must be a certain size.
954560	956680	Of course, for Minero transactions right now,
956680	960540	we mandate a ring size of 11 for all transactions,
960540	964040	whether they're spending Coinbase outputs or not spending Coinbase outputs.
964040	969000	But we could say, well, since there's so much information available public anyway
969000	972820	for Coinbase outputs because mining pools make so much information public,
972820	977200	we can instead say, well, let's just say that these can have a smaller ring size.
977200	978960	We'll drop them down to three.
978960	983000	We will inform network participants that Coinbase outputs themselves
983000	986380	are not reasonably protected because, you know,
986380	989180	it's predictable to figure out who actually owns them.
989720	994380	So therefore, we can save transaction efficiency,
994380	997220	you know, network efficiency for these specific outputs.
997300	1000680	And those who are actually solo mining or mining on private pools
1000680	1005620	will just be told, well, don't specifically send these funds you generate to someone else.
1005620	1007820	You will at least want one level of separation.
1007820	1010920	So you include a much wider scope of activity there.
1011640	1014540	And then, of course, with a non-Coinbase ring, we can say,
1014540	1017480	oh, well, we can keep this at size 11, let's say,
1017480	1022160	or maybe we can pop it up to size 12 or 13,
1022160	1026000	just to take advantage of those additional efficiency benefits.
1026060	1029680	So the network overall is still as efficient as it was before to verify.
1029820	1032500	But the users who do care about privacy are actually getting it.
1032500	1038260	And the people who don't care are not having efficiency wasted on them in a way.
1039380	1041100	So, yeah, again, in the Coinbase rings,
1041100	1044740	the only ones that actually would construct these are mining pools and solo miners.
1044740	1046400	For the non-Coinbase rings,
1046400	1048620	these would be constructed by everyone,
1048620	1051380	including mining pools and solo miners, of course.
1051380	1053340	So the whole network is constructing these,
1053340	1055740	but we can make separate rules for Coinbase rings.
1055740	1059780	And that might be warranted if network activities suggest
1059780	1062760	that it will actually be impacting certain users' behavior.
1063860	1067480	So Serang Noether looked at the actual spend distribution
1067480	1070520	of Coinbase and non-Coinbase outputs in Monero.
1070520	1073200	Now, granted, the only way we were actually able to look at these
1073200	1077520	is by looking at Monero's traceable old history.
1077520	1079620	So Monero from 2014 to 2017
1080340	1083720	definitely did not have very strong ring signature protections.
1083800	1089180	And so we were able to determine when certain outputs were spent.
1089180	1090700	And then we, you know, Dr. Serang Noether
1090700	1095460	broke them down to whether or not they were Coinbase or non-Coinbase outputs.
1095460	1098620	And as you can see, there's very little difference.
1098620	1100960	So we have the option, too, to say,
1100960	1103480	oh, well, we can have different time selection periods
1103480	1107560	for whether or not we're selecting decoys for Coinbase or non-Coinbase rings.
1107560	1111000	But the evidence so far shows that there's no need to actually do this.
1111000	1112860	But if there was a need to do that,
1112860	1116260	then the benefit to overall privacy for people would be far greater
1116260	1120960	because we're able to segregate by this required point of network metadata,
1120960	1124380	whether or not an output is a Coinbase output or not.
1124440	1125860	So just something to think about.
1125860	1128540	That's something we can do, but there's no need to,
1128540	1130720	given current research so far.
1131660	1135280	So I know the point of the talk is like, you know, why we should.
1135520	1138100	But ultimately, one of the big takeaways I want is
1138100	1140100	you don't need to panic as a result of this.
1140100	1141920	Coinbase outputs are increasingly rare
1141920	1145860	as a proportion of total network activity.
1145860	1147580	And ring sizes are pretty large already,
1147580	1151180	and they will most likely get substantially larger in the future.
1151300	1156000	So looking at some transaction data on total number of transactions per block,
1156000	1158520	there are about two outputs per transaction.
1158520	1159480	Or at least two.
1159480	1162340	So actually the average is a little bit more than two.
1162340	1165020	But to all intents and purposes, let's just consider it two.
1165120	1168000	Over the past month, year,
1168000	1171260	there's been about 13 Monero transactions per block,
1171260	1172180	which is quite a bit.
1172180	1175560	A lot more than in Monero's early history.
1175600	1179820	So that means 13 transactions times two outputs per transaction.
1179960	1183560	We're generating 26 outputs per block
1183560	1185920	just by non-Coinbase related transactions.
1185920	1188380	And then, of course, we have that one Coinbase output
1188380	1190280	that's being generated per block.
1190280	1194020	So really, the total proportion of Coinbase outputs
1194020	1197500	that are being generated is a pretty low 3.7%.
1197500	1199340	So all things being equal,
1199340	1202070	if you are selecting decoys from the blockchain,
1202700	1205040	the likelihood you're going to choose a new Coinbase output
1205040	1208060	is much lower than choosing a non-Coinbase output.
1208060	1211040	In the past, with a smaller transaction amount,
1211040	1217880	this used to be closer to 20% even a year or so ago.
1217880	1218900	So it really has changed
1218900	1221260	with the additional adoption of Monero activity.
1221260	1223060	That is really what has changed.
1223200	1225240	The discussion here is based off
1225240	1227340	Monero having far more transactions
1228020	1233840	that will make the absolute impact of Coinbase outputs,
1235380	1237780	the proportional impact be small
1237780	1240200	and absolute for each transaction be smaller too.
1240200	1243680	So that's pretty exciting to think about.
1243680	1246620	Also, large ring sizes still minimize.
1246900	1250300	Like pretty much for all things Monero attack related,
1250300	1251580	one solution is always,
1251580	1253020	well, why don't we just bump the ring size?
1253020	1254120	Just increase the ring size,
1254120	1256380	just keep bumping the ring size, right?
1256380	1258580	So with the current situation,
1258580	1260620	you have 11 ring members
1260620	1262300	and on average, you're probably going to select
1262300	1266120	one or zero Coinbase outputs per transaction.
1266120	1268980	Again, it used to be more like one to three,
1268980	1270300	but really at the moment,
1270300	1273160	it's zero or one for most transactions.
1273160	1274120	So you can say that,
1274120	1276660	oh, well, if one Coinbase output is selected,
1276660	1278580	really, unless you know that they're a miner,
1279220	1280580	a mining pool operator,
1280580	1281640	not even just a miner,
1281640	1283780	the effective ring size is actually 10.
1283780	1285140	It's reduced by one.
1285620	1289420	Well, if we do not segregate Coinbase rings,
1289420	1292140	well, we still will have a proportional scale
1292140	1294240	where the total proportion of Coinbase outputs
1294240	1295340	are still going to be selected
1295340	1297900	for even larger ring sizes.
1297900	1300980	And so more outputs are going to be compromised,
1300980	1302360	but ultimately at the end of the day,
1302360	1304760	the effective ring size is still going to increase
1304760	1306440	quite substantially, right?
1306440	1310320	Where, you know, the difference between 128 and 116
1310320	1313820	is far lower, even though it's a proportional same,
1313820	1316160	than the difference between 11 and 10, right?
1316420	1320120	The actual decoy difference is much bigger
1320120	1323800	in practice for smaller numbers than bigger numbers.
1323800	1329380	So in conclusion, you are not the money printer, right?
1329380	1331600	You are not actually spending Coinbase outputs.
1331600	1333360	There's no convincing way that you would ever
1333360	1335080	control these for any reason.
1335540	1338860	But this only materially matters
1338860	1342000	if Monero has small adoption.
1342000	1348600	If Monero has only a handful of transactions per block,
1348600	1350780	then yes, it does matter.
1350780	1352200	The proportion of Coinbase outputs
1352200	1354180	would be quite significant.
1354240	1357380	However, if you have the tune of dozens of Monero transactions
1357720	1360220	per block on average, then really,
1360220	1364160	Coinbase outputs aren't getting in the way that much.
1364160	1365360	They just aren't.
1365740	1369520	So, you know, the most important thing
1369520	1373400	for resolving this problem is making sure
1373400	1375220	that Coinbase outputs are rare,
1375220	1378020	proportional to the total number of transactional nodes.
1378020	1380680	And really, the total number of Coinbase outputs
1380680	1382560	is not changing per day.
1382560	1384040	That's like stagnant.
1384040	1386860	Every two minutes on average, a block is going to be mined.
1386860	1388000	That's predictable.
1388000	1390180	So network activity for all other transactions
1390480	1396060	needs to be substantial in order to cover users, right?
1398160	1403760	So really, we should, in my opinion,
1403760	1406000	still separate Coinbase outputs.
1406000	1410020	Because in all reality, if you see a transaction still
1410020	1414260	that appears to spend a Coinbase output,
1414260	1416500	the likelihood it actually is spending this
1416500	1417820	is very, very low.
1417860	1418820	Very, very low.
1418820	1420240	It's not super likely.
1420500	1422320	So we should still separate it.
1422320	1423500	But at the end of the day,
1423500	1427580	it's also not the end of the world if we don't.
1427580	1430560	And so that's one of those good problems to have, I guess.
1430560	1434020	And then as ring sizes increase too,
1434760	1437160	you likely will have, or you also will have
1437160	1440260	an increase in the absolute protection
1440260	1442560	provided by the rings anyway,
1442560	1444520	even if a few of them are going to be selecting
1444520	1448280	from these toxic Coinbase output pools.
1448460	1453160	So ultimately, that's the main takeaway from this whole talk.
1454120	1457380	OK, so if you want to get more educated on Monero,
1457380	1459360	learn more, get started, join the communities,
1459360	1462140	you can get educated by going to masteringmonero.com.
1462140	1464320	You can get to read a free book there, buy a print version.
1464320	1465780	You can go to moneromeans.money
1465780	1470440	and watch a movie that Dr. Daniel Kim was the star in.
1470440	1474000	It was actually number one box office in the United States for two days
1474000	1478200	and number two for the week and weekend back in April.
1478440	1482080	You can download cakewallet.com and get the app there.
1482080	1484260	You can go to getmonero.org and download that wallet.
1484260	1486680	There's also other great wallets like Monerubio you can download
1486680	1488880	or you can join the Monero communities.
1489040	1492200	The Monero community workgroup is communityworkgroup.org.
1492200	1495500	It will actually be changing shortly to monerocommunity.org.
1495500	1498440	And the other communities are listed on getmonero.org.
1498440	1503240	My specific information is, you know, contact there at above.
1503340	1506480	I just really was interested in Coinbase outputs
1506480	1510040	and felt that it was necessary to have a talk about them at some point.
1510040	1514360	I know it's kind of niche, but it's important to think about
1514360	1516860	certain points of metadata on the Monero blockchain
1516860	1519920	and then try and connect these points of metadata to user behavior
1519920	1527120	to see if anything is revealing and will potentially degrade Monero privacy.
1527120	1530960	So it's important to think about these things going forward.
1530960	1532280	All right, that's the end of my talk.
1532280	1533940	We have some wonderful other talks coming up.
1533940	1536360	So I'm going to hand it off to the rest of the Monero village
1536360	1539000	and hope you enjoy the rest of your time here.
1539000	1539640	Take care.