Please Update To v10.14.1 - Masternode Security Update

[AjM]

The guy who wrote the exploid still gets payments

Yeah, still 73% are old v.10.13.15 MN version.

 

[UdjinM6]

eduffield The debug.log seems to be getting spammed with a lot of:

2014-10-07 22:43:57 dsee - Got mismatched pubkey and vin
2014-10-07 22:43:57 ProcessMessage(dsee, 217 bytes) FAILED

same here

 

[thelonecrouton]

eduffield The debug.log seems to be getting spammed with a lot of:

2014-10-07 22:43:57 dsee - Got mismatched pubkey and vin
2014-10-07 22:43:57 ProcessMessage(dsee, 217 bytes) FAILED

Looks like that's the fix, rejecting spoofed nodes.

 

[UdjinM6]

At current rate debug.log will grow ~5 Mb per hour or 120 Mb per day. That's not too much may be but what if an attacker increase rate of creating invalid MNs? Say 10 times -> 1.2 Gb per day? That's a lot.

 

[eduffield]

At current rate debug.log will grow ~5 Mb per hour or 120 Mb per day. That's not too much may be but what if an attacker increase rate of creating invalid MNs? Say 10 times -> 1.2 Gb per day? That's a lot.

It's just because a bunch of the nodes still think those masternodes are valid and keep sending them around. It'll stop in a few hours.

 

[HinnomTX]

Masternodes up to date! Fastest patch ever. Thanks!

 

[Propulsion]

QT wallet is pegging the CPU to 100% for me. I have to wait five minutes minimum just to attempt to use it.

[email protected] ~/.darkcoin $ 
(darkcoin-qt:9340): Gtk-CRITICAL **: IA__gtk_widget_get_direction: assertion 'GTK_IS_WIDGET (widget)' failed

I'm seeing the above error while it hangs.

What would you need from me to debug; the MakeFile perhaps?

 

[thelonecrouton]

Pity 10.14.1 didn't kick older versions off. :tongue:

 

[moli]

There has def been damage. Since the attacker was able to insert his own masternodes into the list without needing the 1000 coins he was able to receive tons of payments...

http://explorer.darkcoin.io/address/XwzmEE1cJ6HG84CgJvAt7ADmJ8W9Wh65Tq

All payments from today.

At least he found the vuln before it gets worse, he should be rewarded with what he found. He said he would test Darksend more, I can't wait to hear what he finds. I would love to raise fund for him if he can help more.

 

[thelonecrouton]

At least he found the vuln before it gets worse, he should be rewarded with what he found. He said he would test Darksend more, I can't wait to hear what he finds. I would love to raise fund for him if he can help more.

Nah, let's see if he can 'raise' any more funds for himself.

 

[tungfa]

do i have to update the local wallet as well ?

 

[veta]

Oh dear.

 

[MrMime]

3 mn's updated. Thanks Evan!

 

[moli]

It's just because a bunch of the nodes still think those masternodes are valid and keep sending them around. It'll stop in a few hours.

Evan, so far he's got paid 98.0506 DRK and it seems he still keeps getting paid:

https://chainz.cryptoid.info/drk/address.dws?XwzmEE1cJ6HG84CgJvAt7ADmJ8W9Wh65Tq.htm

 

[thelonecrouton]

He'll go on getting paid until everyone has updated, which is why I was surprised there wasn't a protocol/version bump to kick older versions off. Maybe that would have caused too much pool-related aggravation? Eventually the client/MN/pool codebases should be separated perhaps, the better to contain and manage such incidents.

Need more manpower... hopefully The Foundation has a fundraising plan. If not we need to think about coming up with something in that department.

 

[HinnomTX]

Evan, so far he's got paid 98.0506 DRK and it seems he still keeps getting paid:

https://chainz.cryptoid.info/drk/address.dws?XwzmEE1cJ6HG84CgJvAt7ADmJ8W9Wh65Tq.htm

Yeah, his run rate is about 78k DRK per year. Current salary in fiat would be $165k/year. Not bad for 8 hours of coding. I hope he turns white hat and joins the dev team.

 

[moli]

Yeah, his run rate is about 78k DRK per year. Current salary in fiat would be $165k/year. Not bad for 8 hours of coding. I hope he turns white hat and joins the dev team.

I hope so too...

XwzmEE1cJ6HG84CgJvAt7ADmJ8W9Wh65Tq, If you read this, please join the dark side... I mean please join us ... lol

 

[HinnomTX]

I hope so too...

XwzmEE1cJ6HG84CgJvAt7ADmJ8W9Wh65Tq, If you read this, please join the dark side... I mean please join us ... lol

You can still wear a black hat (or helmet) if you want to. With our combined strength, we can end this destructive conflict, and bring order to crypto currency.

 

[emmo]

Just in case . . .this applies only to MN operators right. If i use 0.9.13 wallet still use the same version, I see no update ?Thanks

 

[stonehedge]

Just in case . . .this applies only to MN operators right. If i use 0.9.13 wallet still use the same version, I see no update ?Thanks

This only applies to MN operators at this time.

 

[stonehedge]

So is Mr or Mrs XwzmEE1cJ6HG84CgJvAt7ADmJ8W9Wh65Tq still getting paid? And if not, are the payments being paid to somebody else?

Over 50% of the masternode network are still to update. Update update update!

 

[emmo]

This only applies to MN operators at this time.

thank you, I think it would be good to note somewhere after version for "non" MN operators no longer available on the official website. Not any holder of DRKs continuously monitor the forums (sometimes just check the official website for updates), take it as a recommendation from a "normal" user

 

[stonehedge]

I actually had a dream last night (sad I know) that there was a darkcoin mandatory update mailing list which is sent out at times like these with clear instructions on who needs to do what.

For example:

This has happened and this is what people need to do:

Masternode owners: Update to XX ASAP
Darksend wallet owners: Not affected but please update when new version available.
Wallet owners: Not affected

Either that or the guidance posted on the forum is in this format.

 

[Light]

I hope so too...

XwzmEE1cJ6HG84CgJvAt7ADmJ8W9Wh65Tq, If you read this, please join the dark side... I mean please join us ... lol

He is already in the Dark side, just not on our side yet :tongue:

 

[dongreenmon]

How can I keep my old addresses when upgrading? (from the 9 series wallet for Windows)

 

[crowning]

It's just because a bunch of the nodes still think those masternodes are valid and keep sending them around. It'll stop in a few hours.

What happens if HE has more than 50% Masternodes and does NOT update?

He's still getting a lot of coins: http://explorer.darkcoin.io/address/XwzmEE1cJ6HG84CgJvAt7ADmJ8W9Wh65Tq

 

[stonehedge]

From a selfish perspective I'm sad that the short period that we had where masternode owners were being paid as intended has already come to an end.

I assume that he will stop being paid when pools update?

 

[crowning]

From a selfish perspective I'm sad that the short period that we had where masternode owners were being paid as intended has already come to an end.

I assume that he will stop being paid when pools update?

Dunno, I've asked eduffield if the pools need to update as well and got no answer so far.

 

[tungfa]

evan is sleeping
2-3 am over there i guess

 

[Walter]

I started with v.10.13.15 win cold wallet ok.

Thanks mate. That's what i did in the end. Hoped it would suffice