Please Update To v10.14.1 - Masternode Security Update

UdjinM6

Official Dash Dev
Dash Core Team
Moderator
May 20, 2014
3,637
3,536
1,183
At current rate debug.log will grow ~5 Mb per hour or 120 Mb per day. That's not too much may be but what if an attacker increase rate of creating invalid MNs? Say 10 times -> 1.2 Gb per day? That's a lot.
 

eduffield

Core Developer
Mar 9, 2014
1,084
5,319
183
At current rate debug.log will grow ~5 Mb per hour or 120 Mb per day. That's not too much may be but what if an attacker increase rate of creating invalid MNs? Say 10 times -> 1.2 Gb per day? That's a lot.
It's just because a bunch of the nodes still think those masternodes are valid and keep sending them around. It'll stop in a few hours.
 

Propulsion

The buck stops here.
Feb 26, 2014
1,008
467
183
Dash Address
XerHCGryyfZttUc6mnuRY3FNJzU1Jm9u5L
QT wallet is pegging the CPU to 100% for me. I have to wait five minutes minimum just to attempt to use it.

Bash:
[email protected] ~/.darkcoin $ 
(darkcoin-qt:9340): Gtk-CRITICAL **: IA__gtk_widget_get_direction: assertion 'GTK_IS_WIDGET (widget)' failed
I'm seeing the above error while it hangs.

What would you need from me to debug; the MakeFile perhaps?
 

moli

Grizzled Member
Aug 5, 2014
3,261
1,837
1,183
There has def been damage. Since the attacker was able to insert his own masternodes into the list without needing the 1000 coins he was able to receive tons of payments...

http://explorer.darkcoin.io/address/XwzmEE1cJ6HG84CgJvAt7ADmJ8W9Wh65Tq

All payments from today.
At least he found the vuln before it gets worse, he should be rewarded with what he found. He said he would test Darksend more, I can't wait to hear what he finds. I would love to raise fund for him if he can help more.
 

thelonecrouton

Well-known Member
Foundation Member
Apr 15, 2014
1,135
813
283
At least he found the vuln before it gets worse, he should be rewarded with what he found. He said he would test Darksend more, I can't wait to hear what he finds. I would love to raise fund for him if he can help more.
Nah, let's see if he can 'raise' any more funds for himself. :eek:
 

tungfa

Administrator
Dash Core Team
Moderator
Foundation Member
Masternode Owner/Operator
Apr 9, 2014
8,967
6,739
1,283
do i have to update the local wallet as well ?
 

thelonecrouton

Well-known Member
Foundation Member
Apr 15, 2014
1,135
813
283
He'll go on getting paid until everyone has updated, which is why I was surprised there wasn't a protocol/version bump to kick older versions off. Maybe that would have caused too much pool-related aggravation? Eventually the client/MN/pool codebases should be separated perhaps, the better to contain and manage such incidents.

Need more manpower... hopefully The Foundation has a fundraising plan. If not we need to think about coming up with something in that department.
 

moli

Grizzled Member
Aug 5, 2014
3,261
1,837
1,183
Yeah, his run rate is about 78k DRK per year. Current salary in fiat would be $165k/year. Not bad for 8 hours of coding. I hope he turns white hat and joins the dev team.
I hope so too...

XwzmEE1cJ6HG84CgJvAt7ADmJ8W9Wh65Tq, If you read this, please join the dark side... I mean please join us ... lol :)
 
  • Like
Reactions: HinnomTX

HinnomTX

Active Member
Jul 22, 2014
166
196
103
I hope so too...

XwzmEE1cJ6HG84CgJvAt7ADmJ8W9Wh65Tq, If you read this, please join the dark side... I mean please join us ... lol :)
You can still wear a black hat (or helmet) if you want to. With our combined strength, we can end this destructive conflict, and bring order to crypto currency.
 
  • Like
Reactions: moli

emmo

New Member
May 23, 2014
37
11
8
Just in case . . .this applies only to MN operators right. If i use 0.9.13 wallet still use the same version, I see no update ?Thanks
 

stonehedge

Well-known Member
Foundation Member
Jul 31, 2014
696
333
233
Just in case . . .this applies only to MN operators right. If i use 0.9.13 wallet still use the same version, I see no update ?Thanks
This only applies to MN operators at this time.
 

stonehedge

Well-known Member
Foundation Member
Jul 31, 2014
696
333
233
So is Mr or Mrs XwzmEE1cJ6HG84CgJvAt7ADmJ8W9Wh65Tq still getting paid? And if not, are the payments being paid to somebody else?

Over 50% of the masternode network are still to update. Update update update!
 

emmo

New Member
May 23, 2014
37
11
8
This only applies to MN operators at this time.
thank you, I think it would be good to note somewhere after version for "non" MN operators no longer available on the official website. Not any holder of DRKs continuously monitor the forums (sometimes just check the official website for updates), take it as a recommendation from a "normal" user :)
 

stonehedge

Well-known Member
Foundation Member
Jul 31, 2014
696
333
233
I actually had a dream last night (sad I know) that there was a darkcoin mandatory update mailing list which is sent out at times like these with clear instructions on who needs to do what.

For example:

This has happened and this is what people need to do:

Masternode owners: Update to XX ASAP
Darksend wallet owners: Not affected but please update when new version available.
Wallet owners: Not affected

Either that or the guidance posted on the forum is in this format.
 

Light

Well-known Member
Foundation Member
Jun 4, 2014
346
256
233
I hope so too...

XwzmEE1cJ6HG84CgJvAt7ADmJ8W9Wh65Tq, If you read this, please join the dark side... I mean please join us ... lol :)
He is already in the Dark side, just not on our side yet :tongue:
 
Last edited by a moderator:
  • Like
Reactions: coingun

stonehedge

Well-known Member
Foundation Member
Jul 31, 2014
696
333
233
From a selfish perspective I'm sad that the short period that we had where masternode owners were being paid as intended has already come to an end.

I assume that he will stop being paid when pools update?
 

tungfa

Administrator
Dash Core Team
Moderator
Foundation Member
Masternode Owner/Operator
Apr 9, 2014
8,967
6,739
1,283
evan is sleeping
2-3 am over there i guess