Bitcoin Forum
December 12, 2017, 07:22:40 AM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: « 1 2 [3] 4 5 »  All
  Print  
Author Topic: Bitcoin-Qt / bitcoind version 0.8.4 released, fixes critical DoS vulnerability  (Read 40038 times)
KSV
Sr. Member
****
Offline Offline

Activity: 398


SVERIGES VIRTUELLA VALUTAVÄXLING


View Profile WWW
September 04, 2013, 01:26:49 PM
 #41

Thanks to all working on the client, trying out the MAC OSX update now.

Had to delete the .Bitcoin folder and reindex all the blocks (corrupt database). Hope this works.

Trade Bitcoins @ FYB-SE ---> https://www.fybse.se
1513063360
Hero Member
*
Offline Offline

Posts: 1513063360

View Profile Personal Message (Offline)

Ignore
1513063360
Reply with quote  #2

1513063360
Report to moderator
1513063360
Hero Member
*
Offline Offline

Posts: 1513063360

View Profile Personal Message (Offline)

Ignore
1513063360
Reply with quote  #2

1513063360
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1513063360
Hero Member
*
Offline Offline

Posts: 1513063360

View Profile Personal Message (Offline)

Ignore
1513063360
Reply with quote  #2

1513063360
Report to moderator
1513063360
Hero Member
*
Offline Offline

Posts: 1513063360

View Profile Personal Message (Offline)

Ignore
1513063360
Reply with quote  #2

1513063360
Report to moderator
RodeoX
Legendary
*
Offline Offline

Activity: 2478


The revolution will be monetized!


View Profile
September 04, 2013, 01:49:34 PM
 #42

new update just after alot news about regulation.
prism backdor added?

Feeling paranoid ? Recompile from source ....
Exactly. If you are worried, look at the code yourself. Open source means nothing is hidden from you in the code.

The gospel according to Satoshi - https://bitcoin.org/bitcoin.pdf

Free bitcoin in ICELAND - https://bitcointalk.org/index.php?topic=1610684
KSV
Sr. Member
****
Offline Offline

Activity: 398


SVERIGES VIRTUELLA VALUTAVÄXLING


View Profile WWW
September 04, 2013, 01:55:13 PM
 #43


MAC OSX - system error DB corrupted.

Ever since i changed to a SSD its been going crazy.

Trade Bitcoins @ FYB-SE ---> https://www.fybse.se
Jace
Sr. Member
****
Offline Offline

Activity: 287


View Profile
September 04, 2013, 02:22:43 PM
 #44

Checkpoint at block 250,000 to speed up initial block downloads
and make the progress indicator when downloading more accurate.
What does this mean? Does it contain or download a truncated version of the blockchain (well, the first 250K blocks) or...?

Feel free to send your life savings to 1JhrfA12dBMUhcgh85wYan6HL2uLQdB6z9
WSDN
Full Member
***
Offline Offline

Activity: 234



View Profile
September 04, 2013, 02:24:09 PM
 #45

Thanks for the update. The client is running fine from the update with the same wallet.

superpanos2
Member
**
Offline Offline

Activity: 88


View Profile
September 04, 2013, 02:31:18 PM
 #46

but I installed 0.8.4 and now I have to redownload the blockchain?!??!!  Shocked
World
Hero Member
*****
Offline Offline

Activity: 746



View Profile
September 04, 2013, 03:05:48 PM
 #47

OSX: use 'FD_FULLSYNC' with LevelDB, which will (hopefully!)
prevent the database corruption issues many people have
experienced on OSX.

Thanks very much for addressing this one!

+1
+1 Thank you dev team

Supporting people with beautiful creative ideas. Bitcoin is because of the developers,exchanges,merchants,miners,investors,users,machines and blockchain technologies work together.
gmaxwell
Staff
Legendary
*
Offline Offline

Activity: 2366



View Profile
September 04, 2013, 03:23:43 PM
 #48

but I installed 0.8.4 and now I have to redownload the blockchain?!??!!  Shocked
No.  If you are one of the unfortunate people on OSX with an already corrupted database you'll still have to reindex, but otherwise it should just continue like normal.

Bitcoin will not be compromised
seafarer124
Sr. Member
****
Offline Offline

Activity: 302


View Profile
September 04, 2013, 03:38:35 PM
 #49

Do I just click on the link and it will update the current version?

I would then need to back-up the new version?
silvergoldandbitcoin
Sr. Member
****
Offline Offline

Activity: 424



View Profile
September 04, 2013, 03:59:30 PM
 #50

Sad to see that updates are neccessary, but glad to see neccessary updates come out

+1

It can be troubling that "bugs" or "vulnerabilities" are there, but at least they are found! We're all only human anyway.

nofuture
Full Member
***
Offline Offline

Activity: 209



View Profile
September 04, 2013, 05:50:19 PM
 #51

I see the following message when I run bitcoin

assertion failed:
Progra(x86)\bitcoin-qt.ese
file.db/dbformat.h
lineZ:96
expression: Internal_keylsize() >=8

for more informaton on how your program can cause an asserationj failure see...

▬▬▬ ▰ ▰ ▰ ▰ ▰ ▰ E i d o o ▬ your blockchain asset experience ▰ ▰ ▰ ▰ ▰ ▰ ▬▬▬
▬▬▬▬▬▬▬▬▬ " Token Sale Raised 82,372.33 ETH " ▬▬▬▬▬▬▬▬▬
▬▬▬ ▰ ▰ ▰ ▰ ▰ ▰ TwitterFacebook  ▰ BountyDiscussion ▰ ▰ ▰ ▰ ▰ ▰ ▬▬▬
nofuture
Full Member
***
Offline Offline

Activity: 209



View Profile
September 04, 2013, 06:06:03 PM
 #52

Did anyone lose coins as a result of the bugs?

▬▬▬ ▰ ▰ ▰ ▰ ▰ ▰ E i d o o ▬ your blockchain asset experience ▰ ▰ ▰ ▰ ▰ ▰ ▬▬▬
▬▬▬▬▬▬▬▬▬ " Token Sale Raised 82,372.33 ETH " ▬▬▬▬▬▬▬▬▬
▬▬▬ ▰ ▰ ▰ ▰ ▰ ▰ TwitterFacebook  ▰ BountyDiscussion ▰ ▰ ▰ ▰ ▰ ▰ ▬▬▬
giszmo
Legendary
*
Offline Offline

Activity: 1568


¡ɥɔʇɐʍ ʇsnɾ &#7


View Profile WWW
September 04, 2013, 07:03:26 PM
 #53

Did anyone lose coins as a result of the bugs?
could anyone loose coins as a result of the bugs fixed in this release?

Gnah, updating is always such a pain when money is at risk. The "do you know the ppa guy" question being unanswered is also priceless. For Bitcoin and sensitive apps like that we need some signing mechanism that is easy to use and transparent.
When I use the ppa, I want to see something like "This binary is signed by A, B and C. D is missing. Should we install anyway?" If yes: "Do you generally trust updates containing just A, B and C?"

My other question: To have multiple people confirm the quality of a binary, can they compile it separately, getting the same binary? I would love to see as many people that review code to sign the binaries to gain trust. The source being trustful and the binary being signed by just one person is kind of a joke with the money at stake. No offense, Gavin, you are doing a great job and it's maybe a lack of tools or maybe a lack of understanding on my side (which would be a lack of easy and well known tools) but I think this update process needs more trust.

Extending this to mobile, I earlier mentioned how it is a joke to advertise a wallet as open source when 99.99% of all users use the binary. There needs to be a way to get what you want and to sign stuff.

To understand how many signatures I am thinking of: I want to be able to publicly approve of stuff and I want to be able to configure my friends' PCs to warn about updates if I did not approve of this version publicly.

gmaxwell
Staff
Legendary
*
Offline Offline

Activity: 2366



View Profile
September 04, 2013, 07:21:57 PM
 #54

could anyone loose coins as a result of the bugs fixed in this release?

No. The whole network could be shut down, but the coins would stay put.

Quote
My other question: To have multiple people confirm the quality of a binary, can they compile it separately, getting the same binary? I would love to see as many people that review code to sign the binaries to gain trust. The source being trustful and the binary being signed by just one person is kind of a joke with the money at stake. No offense, Gavin, you are doing a great job and it's maybe a lack of tools or maybe a lack of understanding on my side (which would be a lack of easy and well known tools) but I think this update process needs more trust.
Uhhh.

Our binaries are bit-reproducible, and are always authenticated by multiple parties before being posted: https://github.com/bitcoin/gitian.sigs

We are innovators in this space, your criticism here is really misplaced.

Bitcoin will not be compromised
giszmo
Legendary
*
Offline Offline

Activity: 1568


¡ɥɔʇɐʍ ʇsnɾ &#7


View Profile WWW
September 04, 2013, 07:38:00 PM
 #55

could anyone loose coins as a result of the bugs fixed in this release?

No. The whole network could be shut down, but the coins would stay put.
Thanx.

My other question: To have multiple people confirm the quality of a binary, can they compile it separately, getting the same binary? I would love to see as many people that review code to sign the binaries to gain trust. The source being trustful and the binary being signed by just one person is kind of a joke with the money at stake. No offense, Gavin, you are doing a great job and it's maybe a lack of tools or maybe a lack of understanding on my side (which would be a lack of easy and well known tools) but I think this update process needs more trust.
Uhhh.

Our binaries are bit-reproducible, and are always authenticated by multiple parties before being posted: https://github.com/bitcoin/gitian.sigs

We are innovators in this space, your criticism here is really misplaced.

It was not meant as criticism of the dev team. You all do a great job. It can't be as I don't know how to do it better. It is meant to raise awareness of how many people actually blindly install anything that comes as bitcoin.exe. The "criticism" also contains "it's maybe a lack of tools or maybe a lack of understanding on my side". It is a fact that the majority of users install without ever checking a sig. I know it is not trivial to improve this and have no solution. Having some github repo with the sigs helps experts supervise the hosted files and I guess there is a bunch of people supervising all kind of hostings but the doubt – mine and the doubt of others – is a problem when it comes to getting updates spread fast.

It's good to learn that binaries are bit-reproducible. This is essential to trust any binary.

gmaxwell
Staff
Legendary
*
Offline Offline

Activity: 2366



View Profile
September 04, 2013, 07:44:17 PM
 #56

It was not meant as criticism of the dev team. You all do a great job. It can't be as I don't know how to do it better. It is meant to raise awareness of how many people actually blindly install anything that comes as bitcoin.exe. The "criticism" also contains "it's maybe a lack of tools or maybe a lack of understanding on my side". It is a fact that the majority of users install without ever checking a sig.
You have my complete agreement there. In the future we should use an updater program (e.g. "gitian updater") which checks the signature for the users, so at least once users have one good copy they should be okay on future ones.

Bitcoin will not be compromised
Joe_Bauers
Hero Member
*****
Offline Offline

Activity: 785


GCVMMWH


View Profile
September 04, 2013, 08:29:53 PM
 #57

I am unable to compile 0.8.4 in Debian 7. I checked out 0.8.3 and was able to compile with no issues. When I switch back to 0.8.4 I get the following:

Your paste indicates you are building the development version (master, aka pre-0.9), not 0.8.4 release.

Your 0.9 build fails due to lack of the protobufs compiler, "protoc"

You want to check out the v0.8.4 branch.

Yep - I checked out  v0.8.4r2 and it worked. I'm guessing that a lot of folks are just going to git clone https://github.com/bitcoin/bitcoin.git and get the same issue though.
Anyway, thanks for the update.
Gorgoy
Member
**
Offline Offline

Activity: 115


View Profile
September 05, 2013, 01:40:16 AM
 #58

Roger that upgrading now thanks as always to the devs

+ Thanks a million to all the Dev, will go update. Smiley

Ɏ : YEojPD2QxFVaSUypTLYhwJgmVekqoAtdE3
฿ : 1946hwLbBdLNSA1FFUY3ZvRx6j6dqvbzcE
Ł : LczTrStBZ8b1Y4DJU59CjtYRtjKufbTXPE
Ғ : 6i4S4BfHfC9LLmTBhjYDVKe7g8XfPz9uj8
Ψ : AGpoWwc6N59PPqKbzRTAiFG5WmDEQU7Ydp
ζ : ZLYFK2KNrFDDGVbEJPKnTdWuGk3iA3CNY2
G : GQbjHcGPgUwRBKZcdoMCpuf24QSXY5t5bf
LightRider
Legendary
*
Offline Offline

Activity: 1485


I advocate the Zeitgeist Movement & Venus Project.


View Profile WWW
September 05, 2013, 05:31:10 AM
 #59

Win7x64 operating without issue.

Bitcoin combines money, the wrongest thing in the world, with software, the easiest thing in the world to get wrong.
Visit www.thevenusproject.com and www.theZeitgeistMovement.com.
emisi
Sr. Member
****
Offline Offline

Activity: 300


View Profile
September 05, 2013, 10:09:07 AM
 #60

Thanks for the update! Upgrading now...  Wink

Pages: « 1 2 [3] 4 5 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!