Bitcoin Forum
March 28, 2024, 06:44:05 PM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 ... 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 [1106] 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 »
  Print  
Author Topic: Obyte: Totally new consensus algorithm + private untraceable payments  (Read 1233915 times)
buksan
Newbie
*
Offline Offline

Activity: 12
Merit: 1


View Profile
February 26, 2020, 09:23:42 AM
 #22101

An important security update is released.  It fixes two serious vulnerabilities discovered and reported to us by security researcher pearl:

*    text messages in chat were incorrectly handled which allowed attackers to execute arbitrary code on victim's wallet. An attacker could supply arbitrary code in angularjs {{}} expressions and the victim's wallet would evaluate it. The attack vector could be used to steal the private keys. The vulnerability existed in all versions of Obyte wallet since the first release in 2016. However, to exploit the vulnerability, an attacker needs to first trick the victim to pair with the attacker's wallet or chatbot. Users who had their wallets protected with a good password and seed words deleted were better protected against such an attack. We have no reports of this vulnerability being actually exploited. The fix makes sure that user input is always treated as text and never evaluated.

*    restore from full backup function allowed file paths with directory traversal (../) characters in backup archive, which could enable an attacker to overwrite important user files, such as .bashrc. on Linux. The vulnerability existed in all versions of Obyte wallet since restore from full backup was introduced in mid 2017. However, to exploit the vulnerability, an attacker needs to first trick the victim to restore from a maliciously crafted backup file. We have no reports of this vulnerability being actually exploited. The fix checks for directory traversal characters in file paths in the backup archive and ignores such files.

Since the two vulnerabilities are now publicly disclosed and each can be used to inflict serious damage to Obyte users who are not aware of them yet, the hub at obyte.org will refuse connections from non-upgraded wallets to keep them safe. All known operators of other hubs have been notified and recommended to apply the same policy.

Only GUI wallets are affected by the vulnerabilities and the upgrade is mandatory for them, headless nodes (wallets, hubs, relays) are not affected.

Please upgrade https://github.com/byteball/obyte-gui-wallet/releases



After updating, when I try to add a new chat bat, I see this error:
An exception occurred: TypeError: Cannot read property 'replace' of undefined; cause: undefined

I tried to create a new wallet and I can not add any chat bot for the same error.

PS Win64/32
"There should not be any signed int. If you've found a signed int somewhere, please tell me (within the next 25 years please) and I'll change it to unsigned int." -- Satoshi
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1711651445
Hero Member
*
Offline Offline

Posts: 1711651445

View Profile Personal Message (Offline)

Ignore
1711651445
Reply with quote  #2

1711651445
Report to moderator
tarmo888
Full Member
***
Offline Offline

Activity: 563
Merit: 103


View Profile WWW
February 26, 2020, 09:42:43 AM
 #22102


After updating, when I try to add a new chat bat, I see this error:
An exception occurred: TypeError: Cannot read property 'replace' of undefined; cause: undefined

I tried to create a new wallet and I can not add any chat bot for the same error.

PS Win64/32

while that gets fixed, you can add bots through that page https://obyte.io/bots
buksan
Newbie
*
Offline Offline

Activity: 12
Merit: 1


View Profile
February 27, 2020, 06:28:26 AM
 #22103


After updating, when I try to add a new chat bat, I see this error:
An exception occurred: TypeError: Cannot read property 'replace' of undefined; cause: undefined

I tried to create a new wallet and I can not add any chat bot for the same error.

PS Win64/32

while that gets fixed, you can add bots through that page https://obyte.io/bots

Thanks. The message signature does not work yet.
Writes an error: wrong signature.
tonych (OP)
Legendary
*
Offline Offline

Activity: 964
Merit: 1008


View Profile WWW
February 27, 2020, 03:24:23 PM
 #22104



Thanks. The message signature does not work yet.
Writes an error: wrong signature.

Which bot is that?

Simplicity is beauty
buksan
Newbie
*
Offline Offline

Activity: 12
Merit: 1


View Profile
February 27, 2020, 04:06:06 PM
 #22105



Thanks. The message signature does not work yet.
Writes an error: wrong signature.

Which bot is that?

At first I couldn't sign my address in Draw Airdrop with message: unknown fields. But then I found out that signing your address is impossible in any bot now.
tonych (OP)
Legendary
*
Offline Offline

Activity: 964
Merit: 1008


View Profile WWW
February 27, 2020, 04:29:25 PM
 #22106



Thanks. The message signature does not work yet.
Writes an error: wrong signature.

Which bot is that?

At first I couldn't sign my address in Draw Airdrop with message: unknown fields. But then I found out that signing your address is impossible in any bot now.

Draw bot has not been upgraded yet but the draw is suspended anyway.  What other bots did you try?

Simplicity is beauty
buksan
Newbie
*
Offline Offline

Activity: 12
Merit: 1


View Profile
February 28, 2020, 05:19:22 PM
 #22107



Thanks. The message signature does not work yet.
Writes an error: wrong signature.

Which bot is that?

At first I couldn't sign my address in Draw Airdrop with message: unknown fields. But then I found out that signing your address is impossible in any bot now.

Draw bot has not been upgraded yet but the draw is suspended anyway.  What other bots did you try?

Signing an address isn't possible in real name attestation bot.
wrong signature
tonych (OP)
Legendary
*
Offline Offline

Activity: 964
Merit: 1008


View Profile WWW
February 28, 2020, 05:48:07 PM
 #22108



Thanks. The message signature does not work yet.
Writes an error: wrong signature.

Which bot is that?

At first I couldn't sign my address in Draw Airdrop with message: unknown fields. But then I found out that signing your address is impossible in any bot now.

Draw bot has not been upgraded yet but the draw is suspended anyway.  What other bots did you try?

Signing an address isn't possible in real name attestation bot.
wrong signature

Works for me. The bot was updated last night though, signing didn't work yesterday when it was on the old version.

Simplicity is beauty
USBitcoinServices.Com
Sr. Member
****
Offline Offline

Activity: 1666
Merit: 267


Earn bitcoins every hour: USBitcoinServices.com


View Profile WWW
February 29, 2020, 01:22:56 AM
 #22109

I haven't been active on this thread and still have version 2.7.2 Do I have to get a newer version?

tarmo888
Full Member
***
Offline Offline

Activity: 563
Merit: 103


View Profile WWW
February 29, 2020, 02:36:39 AM
 #22110

I haven't been active on this thread and still have version 2.7.2 Do I have to get a newer version?

Yes, the old versions doesn't work anymore because there were vulnerabilities discovered in them. Also, the network will activate Autonomous Agents any time now, which requires the latest wallet version.
tonych (OP)
Legendary
*
Offline Offline

Activity: 964
Merit: 1008


View Profile WWW
March 05, 2020, 10:25:24 PM
 #22111

Another security update v3.0.2 that fixes several serious vulnerabilities (again discovered and reported to us by security researcher pearl).

The update is mandatory for all nodes.

Other bugfixes and improvements in this release:

* Fixed a bug that crashed the wallet when trying to view bots or smart contract definition
* Fixed a bug that crashed wallets on Windows if username contains non-latin characters
* Restored the display of dollar amounts when sending funds, it was lost in the previous release due to merge error
* Mac app is now notarized by Apple which allows it to be installed on macOS Catalina
* Other minor bugfixes

https://github.com/byteball/obyte-gui-wallet/releases


Simplicity is beauty
DaveF
Legendary
*
Offline Offline

Activity: 3430
Merit: 6129


Crypto Swap Exchange


View Profile WWW
March 08, 2020, 07:29:48 PM
 #22112

I installed the 3.0.2 and it goes to updating the database, please wait. It will take several hours please be patient. then when the OK pops and you click it the app closes.

Windows10 64 bit if that matters.


-Dave

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
aigeezer
Legendary
*
Offline Offline

Activity: 1450
Merit: 1013


Cryptanalyst castrated by his government, 1952


View Profile
March 08, 2020, 07:42:04 PM
 #22113

I installed the 3.0.2 and it goes to updating the database, please wait. It will take several hours please be patient. then when the OK pops and you click it the app closes.

Windows10 64 bit if that matters.


-Dave

I had the same issue, but it eventually synced after multiple restarts. Also Win10 64.

DaveF
Legendary
*
Offline Offline

Activity: 3430
Merit: 6129


Crypto Swap Exchange


View Profile WWW
March 08, 2020, 07:57:51 PM
 #22114

I installed the 3.0.2 and it goes to updating the database, please wait. It will take several hours please be patient. then when the OK pops and you click it the app closes.

Windows10 64 bit if that matters.


-Dave

I had the same issue, but it eventually synced after multiple restarts. Also Win10 64.

Client restarts or OS restarts or both? I am working on 5 or 6 times now of the client restart.

-Dave

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
aigeezer
Legendary
*
Offline Offline

Activity: 1450
Merit: 1013


Cryptanalyst castrated by his government, 1952


View Profile
March 08, 2020, 08:01:34 PM
 #22115



Client restarts or OS restarts or both? I am working on 5 or 6 times now of the client restart.

-Dave

Client restarts. It went on for a couple of days iirc. Something - probably task manager - convinced me that it was making progress.



tarmo888
Full Member
***
Offline Offline

Activity: 563
Merit: 103


View Profile WWW
March 09, 2020, 06:07:47 PM
 #22116



Client restarts or OS restarts or both? I am working on 5 or 6 times now of the client restart.

-Dave

Client restarts. It went on for a couple of days iirc. Something - probably task manager - convinced me that it was making progress.






Re-download and install the latest version again, there was small fix to the binary, which fix the issue for Windows full nodes.
https://github.com/byteball/obyte-gui-wallet/releases
aigeezer
Legendary
*
Offline Offline

Activity: 1450
Merit: 1013


Cryptanalyst castrated by his government, 1952


View Profile
March 09, 2020, 08:01:09 PM
 #22117


Re-download and install the latest version again, there was small fix to the binary, which fix the issue for Windows full nodes.
https://github.com/byteball/obyte-gui-wallet/releases

Thanks very much. It also fixes an error that had just started to appear for me: "ReadError: IO error: NewRandomAccessFile failed to Create/Open: rocksdb/".
Memo to self - after dodging that kind of bullet it really is time to make a new backup!

tarmo888
Full Member
***
Offline Offline

Activity: 563
Merit: 103


View Profile WWW
March 09, 2020, 08:35:18 PM
 #22118


Re-download and install the latest version again, there was small fix to the binary, which fix the issue for Windows full nodes.
https://github.com/byteball/obyte-gui-wallet/releases

Thanks very much. It also fixes an error that had just started to appear for me: "ReadError: IO error: NewRandomAccessFile failed to Create/Open: rocksdb/".
Memo to self - after dodging that kind of bullet it really is time to make a new backup!

A new backup should be done regularly, especially when some private data changes (added new attestation profile, sent/received private assets like blackbytes, added multi-sig wallet or got a new smart-wallet/sub-wallet).

Continues cloud backup to is planned feature.
ewibit
Legendary
*
Offline Offline

Activity: 2955
Merit: 1049


View Profile
March 10, 2020, 02:19:14 AM
 #22119



Continues cloud backup to is planned feature.

don`t want a cloud
only wan`t a simple easy local one!!!!

 Smiley
tarmo888
Full Member
***
Offline Offline

Activity: 563
Merit: 103


View Profile WWW
March 10, 2020, 03:09:45 AM
 #22120



Continues cloud backup to is planned feature.

don`t want a cloud
only wan`t a simple easy local one!!!!

 Smiley

Cloud is great if the backup is encrypted with passphrase.
Pages: « 1 ... 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 [1106] 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 »
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!