gizmobuddy (OP)
Newbie
Offline
Activity: 26
Merit: 0
|
|
December 27, 2018, 04:38:13 PM |
|
Guys,i need hash confirmation of latest Electrum release:- electrum-3.3.2-portable.exe Hashes i have are:- SHA256 22489e88966a9939cf34a94878f7ddf1dad140cce28ebe5339af6212afa611be SHA1 312afce51cbd22e8e6a93cc5611e03c14995172f MD5 5e9bf05766292e74ebfb08baf15888a2 Please confirm,if i have the correct file and hashes.
|
|
|
|
|
|
"The nature of Bitcoin is such that once version 0.1 was released, the
core design was set in stone for the rest of its lifetime." -- Satoshi
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
gizmobuddy (OP)
Newbie
Offline
Activity: 26
Merit: 0
|
|
December 27, 2018, 06:33:32 PM |
|
would be great, if somebody answers. i need to do some high value tranx. Thanks.
|
|
|
|
TryNinja
Legendary
Offline
Activity: 2828
Merit: 6984
|
|
December 27, 2018, 06:48:43 PM |
|
It's probably better if you verify the PGP Signatures with ThomasV's pubkey. 1. Import ThomasV's pubkey: gpg --keyserver pool.sks-keyservers.net --recv-keys 0x2BD5824B7F9470E6 2. Verify if it's imported: gpg --fingerprint 0x2BD5824B7F9470E6 3. Download the signature file on the website. 4. Verify with: gpg --verify signatureFile.asc electrum-3.3.2-portable.exe
|
. .HUGE. | | | | | | █▀▀▀▀ █ █ █ █ █ █ █ █ █ █ █ █▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ . CASINO & SPORTSBOOK ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ | | |
|
|
|
gizmobuddy (OP)
Newbie
Offline
Activity: 26
Merit: 0
|
|
December 27, 2018, 06:53:35 PM |
|
Hey TryNinja, thanks for the reply. i use a windows system & cant do these commands. also- i dont want to install additional softwares like gpg4win etc. what i can do is, use the inbuilt certUtil in Windows cmd to do sha256, sha1, md5 hashes. it would be truly great, if you please do a quick hash of the file and post below. thanks.
|
|
|
|
TryNinja
Legendary
Offline
Activity: 2828
Merit: 6984
|
|
December 27, 2018, 07:00:52 PM |
|
Hey TryNinja, thanks for the reply. i use a windows system & cant do these commands. also- i dont want to install additional softwares like gpg4win etc. what i can do is, use the inbuilt certUtil in Windows cmd to do sha256, sha1, md5 hashes. it would be truly great, if you please do a quick hash of the file and post below. thanks. Well, you shouldn't completely trust me, but I did get the hash of my electrum-3.3.2-portable.exe file downloaded from Electrum.org; SHA256 22489e88966a9939cf34a94878f7ddf1dad140cce28ebe5339af6212afa611be SHA1 312afce51cbd22e8e6a93cc5611e03c14995172f MD5 5e9bf05766292e74ebfb08baf15888a2 TLDR: They match.
|
. .HUGE. | | | | | | █▀▀▀▀ █ █ █ █ █ █ █ █ █ █ █ █▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ . CASINO & SPORTSBOOK ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ | | |
|
|
|
grtthegreat
Legendary
Offline
Activity: 1246
Merit: 1029
|
|
December 27, 2018, 07:01:06 PM Last edit: December 27, 2018, 07:24:06 PM by grtthegreat |
|
I too used the inbuilt certUtil command and it returns the following hashes which match with your hashes. Filename: electrum-3.3.2-portable.exeMD5: 5e9bf05766292e74ebfb08baf15888a2 SHA1: 312afce51cbd22e8e6a93cc5611e03c14995172f SHA256: 22489e88966a9939cf34a94878f7ddf1dad140cce28ebe5339af6212afa611be SHA384: 9fa3af5e26d8dd9d0311bfacd73c8b075bec199fc7cf8785f927603cf6828dac9982584a1e11c1327470f40f7908a147 SHA512: ed972ab31f54092a4e31536d174dd2db7183d3e0a15fdad8ff85e2f9d4cb27da00075dc4a443f4a508f3fa450c43683c0b8b0f69bd23f787a337ef486890e7c8 MD2: 91999e519d48200f4e66b3c8444aee42 MD4: 04c1107f659a6dbfeb713a98015a7410
|
|
|
|
|
TryNinja
Legendary
Offline
Activity: 2828
Merit: 6984
|
|
December 27, 2018, 07:06:51 PM |
|
It's just a false positive. The file is even signed by Electrum Technologies GmbH.
|
. .HUGE. | | | | | | █▀▀▀▀ █ █ █ █ █ █ █ █ █ █ █ █▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ . CASINO & SPORTSBOOK ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ | | |
|
|
|
gizmobuddy (OP)
Newbie
Offline
Activity: 26
Merit: 0
|
|
December 27, 2018, 07:10:32 PM |
|
my thoughts as well. which server is the official server to connect to?
|
|
|
|
grtthegreat
Legendary
Offline
Activity: 1246
Merit: 1029
|
|
December 27, 2018, 07:20:40 PM |
|
my thoughts as well. which server is the official server to connect to?
Just read through this GitHub issue page ( https://github.com/spesmilo/electrum/issues/4968). You will find some valuable information. Also, as a rule of thumb, do not click on the popup, in case one appears. The latest version is Electrum 3.3.2, stick to it whatsoever for now.
|
|
|
|
gizmobuddy (OP)
Newbie
Offline
Activity: 26
Merit: 0
|
|
December 27, 2018, 07:21:43 PM |
|
thanks guys. love you all.
|
|
|
|
HCP
Legendary
Offline
Activity: 2086
Merit: 4316
<insert witty quote here>
|
|
December 27, 2018, 07:25:52 PM Last edit: November 15, 2023, 07:48:33 AM by HCP |
|
my thoughts as well. which server is the official server to connect to?
There is no "official" server... there are just "public" servers available, that anyone is free to setup and run... If you are attempting to avoid the Electrum "fake error message" attack, it doesn't matter which server you connect to, they can't hack your wallet unless you download the fake version of Electrum. According to the above posts, your version of Electrum is legit, so just connect to any Electrum server and try to send your transaction. If you get the fake error message: IGNORE IT... DO NOT CLICK ON THE LINK!Then go and change the server to something else and try again.
|
|
|
|
gizmobuddy (OP)
Newbie
Offline
Activity: 26
Merit: 0
|
|
December 27, 2018, 07:28:32 PM |
|
how do i know, i am not connected to an attackers server? i have selected Auto connect.
|
|
|
|
TryNinja
Legendary
Offline
Activity: 2828
Merit: 6984
|
|
December 27, 2018, 07:38:54 PM |
|
how do i know, i am not connected to an attackers server? i have selected Auto connect.
From the main issue, those are the malicious servers (there could be others): Attacker servers: [ 'gregoire12.mldlab-works.space:50002:s', 'readonly.23734430190.pro:50002:s', 'wireless12.bitquantum.space:50002:s', 'superuser.23734430190.pro:50002:s', 'pacslinkip12.krypto-familar.fun:50002:s', 'topicres.imaginarycoin.info:50002:s', 'wlseuser12.bitcoinplug.website:50002:s', 'operatns.imaginarycoin.info:50002:s', 'superman.cryptoplayer.fun:50002:s', 'lucent01.23734430190.pro:50002:s', 'qtmhhttp12.mldlab-works.space:50002:s', 'plmimservice.bitcoinplug.website:50002:s', 'username.cryptoplayer.fun:50002:s', 'qlpinstall.krypto-familar.fun:50002:s', 'adminstat.imaginarycoin.info:50002:s', 'lessonuser2.cryptoplayer.fun:50002:s', 'utilities12.pebwindkraft.space:50002:s', 'openspirit.cryptoplayer.fun:50002:s', 'qautprof12.coinucopiaspace.xyz:50002:s', 'prodcics12.imaginarycoin.info:50002:s', 'vcoadmin.23734430190.pro:50002:s', 'siteminder.23734430190.pro:50002:s', 'videouser.bitcoinplug.website:50002:s', 'anonymous.bitcoinplug.website:50002:s', 'oraprobe.23734430190.pro:50002:s' ] Source: https://github.com/spesmilo/electrum/issues/4968#issuecomment-450046206You can see in which server you are by going to Tools -> Network.
|
. .HUGE. | | | | | | █▀▀▀▀ █ █ █ █ █ █ █ █ █ █ █ █▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ . CASINO & SPORTSBOOK ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ | | |
|
|
|
gizmobuddy (OP)
Newbie
Offline
Activity: 26
Merit: 0
|
|
December 27, 2018, 07:40:23 PM |
|
so i need to be watching out for these servers. is it humanly possible to be constantly on watchout while being on Auto connect??!!
i thought electrum would be easy. guess i was wrong.
|
|
|
|
TryNinja
Legendary
Offline
Activity: 2828
Merit: 6984
|
|
December 27, 2018, 07:42:35 PM |
|
so i need to be watching out for these servers. is it humanly possible to be constantly on watchout while being on Auto connect??!!
i thought electrum would be easy. guess i was wrong.
You could just select a trusted server instead of using Auto connect. AFAIK all the server could do is block you from sending transactions (by giving it the error) and show that fake message.
|
. .HUGE. | | | | | | █▀▀▀▀ █ █ █ █ █ █ █ █ █ █ █ █▄▄▄▄ | ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ . CASINO & SPORTSBOOK ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ | ▀▀▀▀█ █ █ █ █ █ █ █ █ █ █ █ ▄▄▄▄█ | | |
|
|
|
gizmobuddy (OP)
Newbie
Offline
Activity: 26
Merit: 0
|
|
December 27, 2018, 07:45:10 PM |
|
what if they are brewing an advanced attack!
is there a list of honest servers i can manually connect to?
|
|
|
|
gizmobuddy (OP)
Newbie
Offline
Activity: 26
Merit: 0
|
|
December 27, 2018, 08:08:50 PM |
|
how is it not already sorted? i guess, electrum is the one of the oldest wallet out there.
this is scary. does anybody know how to find honest servers?
|
|
|
|
HCP
Legendary
Offline
Activity: 2086
Merit: 4316
<insert witty quote here>
|
|
December 27, 2018, 08:17:25 PM |
|
how is it not already sorted? i guess, electrum is the one of the oldest wallet out there.
Fixing things "properly" takes time... the worst thing the devs could do is rush a "fix" that hasn't been properly tested that then turns out to make things worse! this is scary. does anybody know how to find honest servers?
There is no danger if you do not download and run the malicious software. If you connect to a server and it comes up with the error... connect to a different server. At worst all they can do is log your IP and addresses... but ANY Electrum server can already do this. They can't steal your BTC just by connecting to a "bad" server. electrum.hsmiths.com is one of the "oldest" Electrum servers that I know of... whether or not it is any more trustworthy than any other Electrum server, I have no way of knowing/confirming. Just pick one from the server list that IS NOT in the list posted above...
|
|
|
|
gizmobuddy (OP)
Newbie
Offline
Activity: 26
Merit: 0
|
|
December 27, 2018, 08:18:46 PM |
|
got it. thanks.
any other server guys?
|
|
|
|
|