NXT :: descendant of Bitcoin - Updated Information

[ChuckOne]

1) As I see it, a friend of mine would say: that plays no barrel organ. If a malicious forger uses a different client, what prevents him from executing some op or some pre-defined scripts differently that they are supposed to?

This gives no advantage at all. Actually this leads to blockchain corruption. The malicious forger will create his own fork which he will be forging alone.

How's that fork being defined? By majority vote?

[1714767468]

1714767468

[Come-from-Beyond]

Shouldnt this announcement be in big bold red letters all over the place? How do you expect everyone to upgrade due to a critical bug if you don't make it seem serious and disclose the matter nonchalantly.

Jean-Luc said "immediatelly", why do we need big bold red letters?

Because it just blends and gets washed away with the torrent of posts. Really, there should be a separate thread for important client updates and everyone should be directed to it so we have an easy way to check for important info like this without it getting buried in 5 minutes. The only reason I caught jean lucs post was because it was quoted on the most recent page and I happened to scroll down to it.

Also because the emphasis is clearly needed if its a critical bug. The average user, if they even happen to catch that post, isn't going to drop everything they are doing and upgrade their client unless it actually seems urgent. They will read that, tell themselves they'll do it a bit later, then forget. Does this bug put users money at risk?

Look at my post above.

[Come-from-Beyond]

How's that fork being defined? By majority vote?

All the other forgers will reject blocks of this malicious forger.

[ChuckOne]

Shouldnt this announcement be in big bold red letters all over the place? How do you expect everyone to upgrade due to a critical bug if you don't make it seem serious and disclose the matter nonchalantly.

Jean-Luc said "immediatelly", why do we need big bold red letters?

Because, people. Not machines.

Well, u have 2 options:

1. Do as Jean-Luc says
2. Don't do it, lose money and next time u'll do as Jean-Luc says

CfB, that's not what I meant.

I mean it's people. Humans. They need 'big bold red letters'.

[Come-from-Beyond]

Well I made it a global sticky at NXTCrypto Forums

and have asked all translators to notify as well

I wouldn't do it. If ppl don't take Jean-Luc words seriously they deserve to learn a lesson.

Ah, that's right.

[Come-from-Beyond]

CfB, that's not what I meant.

I mean it's people. Humans. They need 'big bold red letters'.

Look at my post above

[ChuckOne]

How's that fork being defined? By majority vote?

All the other forgers will reject blocks of this malicious forger.

Hope that suffices. 51% attack possible, right? Not by stake but by number of nodes?

[bidji29]

Update to 0.5.12, critical bug in 0.5.11

http://download.nxtcrypto.org/nxt-client-0.5.12.zip

[Come-from-Beyond]

What about exchanges? Do you contact them explicitely about something like this so they are sure to address it?

I notified BTER.

[ChuckOne]

CfB, that's not what I meant.

I mean it's people. Humans. They need 'big bold red letters'.

Look at my post above

Err which one? You made so many.

[Come-from-Beyond]

Hope that suffices. 51% attack possible, right? Not by stake but by number of nodes?

Impossible. He hurts only himself.

[ChuckOne]

Well I made it a global sticky at NXTCrypto Forums

and have asked all translators to notify as well

I wouldn't do it. If ppl don't take Jean-Luc words seriously they deserve to learn a lesson.

Ah, that's right.

What? Are you kidding me?

Yes, he's just a little joker tonight.

(And he needs some psychology lessons. )

[Come-from-Beyond]

What? Are you kidding me?

I didn't notice that it's one of the main Nxt forums.

[marcus03]

Update to 0.5.12, critical bug in 0.5.11

http://download.nxtcrypto.org/nxt-client-0.5.12.zip

+1

It's so easy to be constructive...

EDIT: I actually missed the trick in this... I just was reliefed to see someone simply post in red instead of discussing why this wasn't posted in red...

[ChuckOne]

Hope that suffices. 51% attack possible, right? Not by stake but by number of nodes?

Impossible. He hurts only himself.

Then which nodes should a new node trust? I know it could perform all the scripts that have been run for years now. But this would take weeks to complete?

I mean it's highly unlikely but even ghash.io reached 51% mining power which by then seemed undoable.

[opticalcarrier]

Update to 0.5.12, critical bug in 0.5.11 all previous versions

http://download.nxtcrypto.org/nxt-client-0.5.12.zip

FIFY

[landomata]

These last few pages has brought back memories of when the Nxt community was at battle with the zombies... watch this Turing or whatever you want to call it language/script be Nxt History before you know it!    

[achimsmile]

NRS (0.5.11) @ PC
NRS (0.5.11) @ PC
NRS (0.5.11) @ zd70c1whxP
NRS (0.5.5) @ VPS
NRS (0.5.11) @ nxtio.org
NRS (0.5.12) @ 22k.io
NRS (0.5.10) @ PC
NRS (0.5.12) @ nxt.now.im
NRS (0.5.11) @ PC
NRS (0.5.5) @ PC
NRS (0.5.12) @ nxt.now.im
NRS (0.5.11) @ 3frjUYA4NZ
NRS (0.5.11) @ PC
NRS (0.5.12) @ NCC-1701-D
NRS (0.5.11) @ Linux
NRS (0.5.11) @ PC
NRS (0.5.12) @ 22k.io
NRS (0.5.5) @ Happymining
NRS (0.5.12) @ 22k.io
NRS (0.5.11) @ Linux
NRS (0.5.11) @ PC
NRS (0.5.11) @ NEM-Genesis
NRS (0.5.11) @ PC

Too many are on 5.11
if this is indeed a critical bug, update asap!

spread the word

[gimre]

Fixed a critical bug. Everybody should upgrade immediately.

signatureLastBytes collects last QWORD of every transaction signature...

Could you or CfB explain this change inside pushBlock:

Code:

     Long lastBytes = Long.valueOf(new BigInteger(Arrays.copyOfRange(transaction.signature, transaction.signature.length - 8, transaction.signature.length)).longValue());
     if ((!Nxt.signatureLastBytes.add(lastBytes)) && (transaction.height != 58294)) {
       return false;
     }

this looks really disturbing...

[Come-from-Beyond]

Then which nodes should a new node trust? I know it could perform all the scripts that have been run for years now. But this would take weeks to complete?

Trust noone. Check everything.

Noone can create a very long running script. We have less than 1 billion coins.