Bitcoin Forum

Bitcoin => Electrum => Topic started by: mikelsmith2020 on December 12, 2020, 02:32:34 PM



Title: Electrum-4.0.7
Post by: mikelsmith2020 on December 12, 2020, 02:32:34 PM
Was it safe to update your electrum to Electrum-4.0.7?


Title: Re: Electrum-4.0.7
Post by: ranochigo on December 12, 2020, 02:33:57 PM
Why not? What's the difference with the previous versions? Just download and verify the signature with PGP.


Title: Re: Electrum-4.0.7
Post by: DireWolfM14 on December 12, 2020, 05:44:35 PM
It does take a bit of trust to be among the first to install a new release, but you can also verify for yourself that the download is safe.

First and foremost, you should learn how to verify the download using ThomasV's PGP signature.  This will ensure that you've downloaded the official version signed by the developer.  Even if Electrum's website gets hacked, and the download link is directed to a malicious version, this will mitigate your risks.  Here's a tutorial I wrote: [GUIDE] How to Safely Download and Verify Electrum [Guide] (https://bitcointalk.org/index.php?topic=5240594.msg54223763#msg54223763).

If you still don't trust the binary releases, you can always take some time to verify the code hasn't been manipulated with nefarious intent.  If you go the Electrum repository, you can browse through the changes made in real time.  You can confirm for yourself that only the changes published in the release notes are implemented into the code.

And if you're still doubtful about the binary releases, you can even run electrum right from the source code.  It's fairly easy if you're running Linux and have all the python dependencies installed (which you probably do if it's a recently released OS.)

Electrum's github.com repository: https://github.com/spesmilo/electrum
Electrum's Release Notes (change-logs): https://github.com/spesmilo/electrum/blob/master/RELEASE-NOTES
Electrum's previous releases: https://download.electrum.org/


Title: Re: Electrum-4.0.7
Post by: HCP on December 12, 2020, 06:30:59 PM
Was it safe to update your electrum to Electrum-4.0.7?
I have not had any issues with 4.0.7. I verified the digital signatures OK and it's running fine. It appears to be working just fine with my local "electrs" Electrum server as well.

As the others have said, make sure you're downloading from electrum.org (https://electrum.org/#download) and then verify the digital signatures before installing and you'll be OK :)


Title: Re: Electrum-4.0.7
Post by: Coin-Keeper on December 12, 2020, 10:58:21 PM
This issue is one of the reasons that I like to use linux App Image from Electrum.  It doesn't interfere with earlier versions.  Each App Image is fully independent and can sit on my Desktop to use.  Worst case is delete the .electrum folder from my home, which takes a few seconds.


Title: Re: Electrum-4.0.7
Post by: NotATether on December 12, 2020, 11:54:32 PM
This issue is one of the reasons that I like to use linux App Image from Electrum.  It doesn't interfere with earlier versions.  Each App Image is fully independent and can sit on my Desktop to use.  Worst case is delete the .electrum folder from my home, which takes a few seconds.

The source distribution (the .tar.gz archive) of Electrum is also completely independent from the rest of the system, because it's just a bunch of Python files that can be ran without installation. You can put different different source versions of Electrum side by side in a single folder ready to use.


Title: Re: Electrum-4.0.7
Post by: HCP on December 13, 2020, 03:23:25 AM
This issue is one of the reasons that I like to use linux App Image from Electrum.  It doesn't interfere with earlier versions.  Each App Image is fully independent and can sit on my Desktop to use.  Worst case is delete the .electrum folder from my home, which takes a few seconds.
That's not always completely true... while the app image may run "OK", be aware that if there is an update to the wallet file "version" in a new Electrum version, your wallet file will be "updated" and then older versions will refuse to open it.


Title: Re: Electrum-4.0.7
Post by: nc50lc on December 13, 2020, 06:57:38 AM
Was it safe to update your electrum to Electrum-4.0.7?
I've been using v4.0.7 [PC] for 3 days now and I haven't encountered any issues.
I have also used it on both lightning and on-chain payments without problems, so I'd say it's "safe".

Upgrade with regards to the previous replies, of course.


Title: Re: Electrum-4.0.7
Post by: Karartma1 on December 13, 2020, 08:50:25 AM
It does take a bit of trust to be among the first to install a new release, but you can also verify for yourself that the download is safe.

First and foremost, you should learn how to verify the download using ThomasV's PGP signature.  This will ensure that you've downloaded the official version signed by the developer.  Even if Electrum's website gets hacked, and the download link is directed to a malicious version, this will mitigate your risks.  Here's a tutorial I wrote: [GUIDE] How to Safely Download and Verify Electrum [Guide] (https://bitcointalk.org/index.php?topic=5240594.msg54223763#msg54223763).

If you still don't trust the binary releases, you can always take some time to verify the code hasn't been manipulated with nefarious intent.  If you go the Electrum repository, you can browse through the changes made in real time.  You can confirm for yourself that only the changes published in the release notes are implemented into the code.

And if you're still doubtful about the binary releases, you can even run electrum right from the source code.  It's fairly easy if you're running Linux and have all the python dependencies installed (which you probably do if it's a recently released OS.)

Electrum's github.com repository: https://github.com/spesmilo/electrum
Electrum's Release Notes (change-logs): https://github.com/spesmilo/electrum/blob/master/RELEASE-NOTES
Electrum's previous releases: https://download.electrum.org/

Great one.
As a bit of a reminder for myself and OP, I usually always wait before updating simply because if we are not talking about a security update (fixing critical bugs or vulnerabilities) I wait at least one week before any update. If you follow DireWolfM14 guide you will always make sure to have downloaded the legit version but if you like to have some peace of mind, just wait a bit. The previous version works perfectly fine.
In fact, I am not gonna update anytime soon  ;D


Title: Re: Electrum-4.0.7
Post by: mikelsmith2020 on December 13, 2020, 06:16:02 PM
It does take a bit of trust to be among the first to install a new release, but you can also verify for yourself that the download is safe.

First and foremost, you should learn how to verify the download using ThomasV's PGP signature.  This will ensure that you've downloaded the official version signed by the developer.  Even if Electrum's website gets hacked, and the download link is directed to a malicious version, this will mitigate your risks.  Here's a tutorial I wrote: [GUIDE] How to Safely Download and Verify Electrum [Guide] (https://bitcointalk.org/index.php?topic=5240594.msg54223763#msg54223763).

If you still don't trust the binary releases, you can always take some time to verify the code hasn't been manipulated with nefarious intent.  If you go the Electrum repository, you can browse through the changes made in real time.  You can confirm for yourself that only the changes published in the release notes are implemented into the code.

And if you're still doubtful about the binary releases, you can even run electrum right from the source code.  It's fairly easy if you're running Linux and have all the python dependencies installed (which you probably do if it's a recently released OS.)

Electrum's github.com repository: https://github.com/spesmilo/electrum
Electrum's Release Notes (change-logs): https://github.com/spesmilo/electrum/blob/master/RELEASE-NOTES
Electrum's previous releases: https://download.electrum.org/


Yes it's true usually I look here for some users to create new topic about new electrum release and I'm afraid about the new version even if I can verify it. By the way it seems good I've been using it now for hours. I'll lock this thread now.