[ANN][DASH] Dash (dash.org) | First Self-Funding Self-Governing Crypto Currency

[Tungi17]

DashText, the simple SMS text-based Dash wallet, just relaunched its charity. It helps children pay for breakfast at schools in impoverished areas of Caracas. Distribution of funds is automated and 100% reaches the kids.
Learn more and donate if you can:
http://charity.dashtext.io/
How to:
https://youtu.be/jCPpnj9ObI8

[Alexey45]

5021, Masternodes arrive. That's good! https://stats.masternode.me/network-report/292536

[Tungi17]

Dash developers announced the timeline of Evolution platform release

https://www.fxstreet.com/cryptocurrencies/news/dash-developers-announced-the-timeline-of-evolution-platform-release-201911161943

[Alexey45]

Dash developers announced the timeline of Evolution platform release

https://www.fxstreet.com/cryptocurrencies/news/dash-developers-announced-the-timeline-of-evolution-platform-release-201911161943

Why this news is not on the site: https://forklog.com/news/

[NibiruHybrid]

Dash Wins Malta Blockchain Summit DAO Innovation Award

Dash NEXT has won the “DAO Building of the Year” award over Maker DAO and DAO Casino at the A.I. & Blockchain Summit in Malta for its innovations and ability to drive further cryptocurrency adoption.

Read more - https://dashnews.org/dash-wins-malta-blockchain-summit-dao-innovation-award/

[NibiruHybrid]

BlackRock Joins Fidelity in Significantly Investing in Masternode Company Neptune Dash

BlackRock, a US-based global investment firm, reportedly owns over 11% of Dash masternode company Neptune Dash, bringing the total percentage of the company owned by major investment firms up past 21% when combined with the percentage owned by Fidelity.

Read more - https://dashnews.org/blackrock-joins-fidelity-in-significantly-investing-in-masternode-company-neptune-dash/

[Tungi17]

Dash is now available on Floyx
(The Social Media Page specific for Blockchain / Cryptocurrency Communities)
https://www.floyx.com/profile/dash

[NibiruHybrid]

Cryptobuyer Partners with Dash Text for SMS Cryptocurrency Purchases

Cryptobuyer, a popular Latin America-focused exchange and merchant point-of-sale system, has now partnered with Dash Text to bring simple SMS cryptocurrency exchanges to their merchant solutions.

Read more - https://dashnews.org/cryptobuyer-partners-with-dash-text-for-sms-cryptocurrency-purchases/

[qwizzie]

Monero's official website got compromised today and was infected with malware designed to steal coins : https://www.zdnet.com/article/official-monero-website-compromised-with-malware-that-steals-funds/

This got me thinking : do Dash users know how to verify the provided hash file that is available with the official Dash downloads ? (to verify if they have downloaded the correct official Dash Core Wallet file ?)
So i wrote this quick hash verification procedure for Dash users that are using Windows 10 / Windows 7.

When downloading from the official https://www.dash.org/downloads website, you will often come across this 'Hash File' :

 

After downloading such a 'Hash File', you end up with a SHA256SUMS.asc file. This .asc file can be opened with notepad / notepad++
which shows you the hash for each download and which looks like this :



Now lets for example download 'dashcore-0.14.0.3-win64.zip' and verify its hash to make sure that the downloaded file is actually the correct file with a match to hash number '0c3fe9a3658f4b676596154b085793fe6674f4d2c5c6015146f8bcedc883e25a'

For Windows 10 users, i suggest using Windows PowerShell (Admin), which you can find when you right click on the Windows Startbutton. For Windows 7 users i suggest you search
for Windows PowerShell within Windows 7.

Within Windows PowerShell (Admin) use cd to go to your download directory, use ls to list the files in there and then use command CertUtil -hashfile fullfilename* SHA256
* you can select and then copy (ctrl c) and paste (ctrl v) the full filename from within PowerShell  




As you can see the hash of the file i downloaded (dashcore-0.14.0.3-win64.zip), match with the provided hash in the Hash File.
The same can (and should) be done for other files like the Linux x64 file, when you for example need to update your online server / masternode.

Since it looks like we will be having a Dash Core Wallet update (v0.14.04) soon, we all will have an excellent opportunity to practice this.

[wackyD]

Monero's official website got compromised today and was infected with malware designed to steal coins : https://www.zdnet.com/article/official-monero-website-compromised-with-malware-that-steals-funds/

This got me thinking : do Dash users know how to verify the provided hash file that is available with the official Dash downloads ? (to verify if they have downloaded the correct official Dash Core Wallet file ?)
So i wrote this quick hash verification procedure for Dash users that are using Windows 10 / Windows 7.

When downloading from the official https://www.dash.org/downloads website, you will often come across this 'Hash File' :



After downloading such a 'Hash File', you end up with a SHA256SUMS.asc file. This .asc file can be opened with notepad / notepad++
which shows you the hash for each download and which looks like this :



Now lets for example download 'dashcore-0.14.0.3-win64.zip' and verify its hash to make sure that the downloaded file is actually the correct file with a match to hash number '0c3fe9a3658f4b676596154b085793fe6674f4d2c5c6015146f8bcedc883e25a'

For Windows 10 users, i suggest using Windows PowerShell (Admin), which you can find when you right click on the Windows Startbutton. For Windows 7 users i suggest you search
for Windows PowerShell within Windows 7.

Within Windows PowerShell (Admin) use cd to go to your download directory, use ls to list the files in there and then use command CertUtil -hashfile fullfilename* SHA256
* you can select and then copy (ctrl c) and paste (ctrl v) the full filename from within PowerShell  




As you can see the hash of the file i downloaded (dashcore-0.14.0.3-win64.zip), match with the provided hash in the Hash File.
The same can (and should) be done for other files like the Linux x64 file, when you for example need to update your online server / masternode.

Since it looks like we will be having a Dash Core Wallet update (v0.14.04) soon, we all will have an excellent opportunity to practice this.

wow, this is pretty scary!

[Tungi17]

“The percentage of Bitcoin ATM’s supporting any other than Bitcoin cryptocurrencies increased and now it is 70.4%. Dash was the most added coin in October with 194 (17.77% increase) ......" 

https://dailyhodl.com/2019/11/18/global-bitcoin-and-crypto-atms-hit-6000-btc-litecoin-and-ethereum-leading-the-pack/

[buzzkillb]

I like to use 7zip and right click the file to verify the hash checksum when using windows. Looks like a bunch of coins are getting infected wallets switched in lately. That hash file should be posted in multiple places, as this happened on Linux Mint at some point and the hashes were also compromised on the website.

[qwizzie]

I like to use 7zip and right click the file to verify the hash checksum when using windows. Looks like a bunch of coins are getting infected wallets switched in lately. That hash file should be posted in multiple places, as this happened on Linux Mint at some point and the hashes were also compromised on the website.

I agree that hash files should be stored on a separate server, and not on the normal download server (to avoid getting compromised too in case of a hack).
Also I like to point out that Dash also offer both it's binaries and the SHA256SUMS.asc (hash file) on Github .

Link : https://github.com/dashpay/dash/releases (see assets)

I understand there are also ways to verify hash files themselves, by checking who pgp signed them and compare that with developers that have signature rights.
Maybe someone from Dash Core Group can comment on the above ?

I guess we have to wait and see how Monero's official site got compromised in the first place and then check if our own security measurements are still sufficient.
Good to hear that 7zip also has a hash verification tool inside.

[TaoOfSaatoshi]

In 2 hours: Join us in the chat box during the "Tao & Amanda LIVE!" premiere!

We'll introduce ourselves & the show, plus talk Mimblewimble's woes & President Maduro's new crypto commercial.



Thanks for watching!

[buzzkillb]

I like to use 7zip and right click the file to verify the hash checksum when using windows. Looks like a bunch of coins are getting infected wallets switched in lately. That hash file should be posted in multiple places, as this happened on Linux Mint at some point and the hashes were also compromised on the website.

I agree that hash files should be stored on a separate server, and not on the normal download server (to avoid getting compromised too in case of a hack).
Also I like to point out that Dash also offer both it's binaries and the SHA256SUMS.asc (hash file) on Github .

Link : https://github.com/dashpay/dash/releases (see assets)

I understand there are also ways to verify hash files themselves, by checking who pgp signed them and compare that with developers that have signature rights.
Maybe someone from Dash Core Group can comment on the above ?

I guess we have to wait and see how Monero's official site got compromised in the first place and then check if our own security measurements are still sufficient.
Good to hear that 7zip also has a hash verification tool inside.

Something like this hit another coin I follow. They went after the account without 2fa on github and switched the Windows QT binary, but nothing else. Which is a good reminder for anyone using github make sure to have 2fa setup on top of separate strong passwords on anything important. Dash has some great guides, if they do sign with pgp, is there a guide on how to check the binary against that?

[NibiruHybrid]

Willy Woo: Most Cryptocurrencies Severely Lack Market Liquidity

According to new data posted by cryptocurrency analyst Willy Woo on Twitter, most cryptocurrency projects severely lack market liquidity, which keeps many serious investors away.

Read more - https://dashnews.org/willy-woo-most-cryptocurrencies-severely-lack-market-liquidity/

[UdjinM6]

I like to use 7zip and right click the file to verify the hash checksum when using windows. Looks like a bunch of coins are getting infected wallets switched in lately. That hash file should be posted in multiple places, as this happened on Linux Mint at some point and the hashes were also compromised on the website.

I agree that hash files should be stored on a separate server, and not on the normal download server (to avoid getting compromised too in case of a hack).
Also I like to point out that Dash also offer both it's binaries and the SHA256SUMS.asc (hash file) on Github .

Link : https://github.com/dashpay/dash/releases (see assets)

I understand there are also ways to verify hash files themselves, by checking who pgp signed them and compare that with developers that have signature rights.
Maybe someone from Dash Core Group can comment on the above ?

I guess we have to wait and see how Monero's official site got compromised in the first place and then check if our own security measurements are still sufficient.
Good to hear that 7zip also has a hash verification tool inside.

Each binary file has a corresponding signature (.asc) file, SHA256SUMS.asc is a signed list of hashes for all files. Corresponding dev keys to check these signatures can be found on github (the easiest way to verify keys - check the modification/commit date to make sure they were not altered recently) and on keybase. Keys on both resources should match (it's highly unlikely that they would be compromised in both places).

[qwizzie]

I like to use 7zip and right click the file to verify the hash checksum when using windows. Looks like a bunch of coins are getting infected wallets switched in lately. That hash file should be posted in multiple places, as this happened on Linux Mint at some point and the hashes were also compromised on the website.

I agree that hash files should be stored on a separate server, and not on the normal download server (to avoid getting compromised too in case of a hack).
Also I like to point out that Dash also offer both it's binaries and the SHA256SUMS.asc (hash file) on Github .

Link : https://github.com/dashpay/dash/releases (see assets)

I understand there are also ways to verify hash files themselves, by checking who pgp signed them and compare that with developers that have signature rights.
Maybe someone from Dash Core Group can comment on the above ?

I guess we have to wait and see how Monero's official site got compromised in the first place and then check if our own security measurements are still sufficient.
Good to hear that 7zip also has a hash verification tool inside.

Each binary file has a corresponding signature (.asc) file, SHA256SUMS.asc is a signed list of hashes for all files. Corresponding dev keys to check these signatures can be found on github (the easiest way to verify keys - check the modification/commit date to make sure they were not altered recently) and on keybase. Keys on both resources should match (it's highly unlikely that they would be compromised in both places).

Thank you UdjinM6.

I found the following so far :

Verification of SHA256SUMS.asc --> Just copy and paste all of the text of this hash file into : https://keybase.io/verify --> this will provide a name
Verification of Github binaries --> https://github.com/dashpay/dash/tags (press green verified signature button next to v0.14.0.3) --> this will also provide a name

Both names match and point to a specific Dash Core Developer.

Which means we have three points of verification :

- verify the downloaded binaries hash (downloaded either from Dash.org or from Github) with the Hash File (also available on 2 locations), to see if they match with regards to the hash --> Hash Verification
- verify who issued the SHA256SUMS.asc / Hash File through Keybase --> Dev ID verification
- verify who issued the binaries on Github --> Dev ID verification

To UdjinM6 :

Each binary file has a corresponding signature (.asc) file, SHA256SUMS.asc is a signed list of hashes for all files.

it looks like most Hash Files are SHA256SUMS.asc files, i'm not seeing any individual .asc files for individual binaries. I guess it saves time this way.

[UdjinM6]

---snip---

To UdjinM6 :

Each binary file has a corresponding signature (.asc) file, SHA256SUMS.asc is a signed list of hashes for all files.

it looks like most Hash Files are SHA256SUMS.asc files, i'm not seeing any individual .asc files for individual binaries. I guess it saves time this way.

There you go: GPG verification results I get by clicking on dashcore-0.14.0.3-osx.dmg.asc (assuming you have GPG Tools installed and codablock's key imported into it already) on top of Downloads with the binary itself and this signature file on top of Github releases page with both these files lilsted

[qwizzie]

I think it could be useful if someone from Dash Core Group makes an official guide into verifying both the hash and GPG key of the Dash binaries and link to it on the download page.
In my previous post i just looked at the dash.org/downloads site (specifically the Hash File there) and overlooked the Github binaries (which indeed have individual .asc files for each binary).

To get GPG verification working in Windows, people can mostly follow this guide for now : https://src.getmonero.org/resources/user-guides/verification-windows-beginner.html
Current version of Gpg4win is v3.1.10 and is free to download when you click 0 donation. GPG Tools seems to come with a price (€ 23.80), so that is the main reason i'm using Gpg4win.

Only instead of importing Monero's Signing Key, we will be importing Dash's Signing Key
Dash Signing Key can be found here : https://keybase.io/codablock

You need to click on the key symbol and then copy and paste all the text in grey, starting with

-----BEGIN PGP PUBLIC KEY BLOCK-----

and ending with

-----END PGP PUBLIC KEY BLOCK-----

Put this in a text file and then rename the file from .txt to .asc (this was not clear in above guide) and just follow the rest of the guide.

Through Kleopatra we can then verify both individual .asc files of each binary and the SHA256SUMS.asc file.
You should be getting the following result :





You can then connect .asc files directly to Kleopatra by using 'open with' on a .asc file, selecting Kleopatra and clicking 'always use this app'.