|
Title: Please upgrade to 0.3.8! Post by: satoshi on August 03, 2010, 11:40:18 PM Version 0.3.8 adds an important security improvement. Everyone should upgrade to get this change.
The new safety feature displays a warning message in the status bar and locks down RPC if it detects a problem that may require an upgrade. If it sees a longer chain, but it can't process it, then it knows something is wrong. It displays "WARNING: Displayed transactions may not be correct! You may need to upgrade." and makes most RPC commands return an error. It still keeps generating as normal, which is necessary for the stability of the network. There were important security updates in the versions before this too, so if you haven't upgraded recently, it's extremely important that you upgrade now! Also, don't forget, we recently added 2.4x faster generating thanks to tcatm's mid-state caching optimisation and BlackEye's help getting ASM SHA-256 working. Download: http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.3.8/ Title: Re: Please upgrade to 0.3.8! Post by: FreeMoney on August 04, 2010, 12:08:05 AM Link takes me to 3.7
Title: Re: Please upgrade to 0.3.8! Post by: satoshi on August 04, 2010, 12:29:37 AM I guess SourceForge hasn't updated its mirrors yet. The files are there on the admin side, but not on the user side. I have no idea how long that will take. It's always been immediate in the past.
Edit: SourceForge is updated now. Title: Re: Please upgrade to 0.3.8! Post by: lachesis on August 04, 2010, 02:18:34 AM If it sees a longer chain, but it can't process it, then it knows something is wrong. It displays "WARNING: Displayed transactions may not be correct! You may need to upgrade." and makes most RPC commands return an error. What sort of attack is this intended to protect against? If it sees a longer chain but can't process it, it should also fail to validate any of the transactions in that block, right?Title: Re: Please upgrade to 0.3.8! Post by: lfm on August 04, 2010, 05:06:27 AM If it sees a longer chain, but it can't process it, then it knows something is wrong. It displays "WARNING: Displayed transactions may not be correct! You may need to upgrade." and makes most RPC commands return an error. What sort of attack is this intended to protect against? If it sees a longer chain but can't process it, it should also fail to validate any of the transactions in that block, right?I presume mainly just to bring up an alert that an incompatible change is running on some nodes, weather it is a new version from Satoshi or someone else is trying to change something either way it'll be nice to know. Title: Re: Please upgrade to 0.3.8! Post by: Aaron on August 04, 2010, 12:43:47 PM The new safety feature displays a warning message in the status bar and locks down RPC if it detects a problem that may require an upgrade. It would be nice to have a link in the about dialog to take users to a location for current version information and downloads. It also wouldn't be a bad thing if the software was able to determine the current version and issue a warning for out of date software. There has to be plenty of this logic GPLed around the place. I'm happy to search it out if nobody has some at hand. |