Electrum 4.7.2 released

[cygan]

version 4.7.2 has just been released few days ago!
this version comes with several new changes and many bug fixes like this ones eg:

• changed: set restrictive unix umask application-wide by default
• fix: failing assert for wallets with old (2023) still unpaid ln payment requests
• fix: submarine swap providers window loses track of swap providers if opened for too long

you can read the complete changelog on the following github-link: https://github.com/spesmilo/electrum/blob/master/RELEASE-NOTES
and the version can be downloaded here: https://electrum.org/#download

[nc50lc]

That's new.
I mean your usual new version report is too late this time ;D

IDK why they've added this update in particular:

* QML GUI & Android:
   - changed: wizard: make trustedcoin 2fa secret copyable, open 2fa app for user (#10543)

This changes two things:

  [1] Makes the otp secret copy on click, so the user can tap on the secret and it gets copied to the clipboard.
  [2] If the user clicks on the qr it will automatically open their 2fa app with the secret, this is much more user friendly.

Using the same phone as 2FA device doesn't make sense (security-wise) aside from adding more workflow to open the wallet.
Even with different passwords (Electrum and 2FA App), if the device is key-logged, both of those passwords will be known.
But it's already a feature so, good(luck) for those who use that kind of 2fa wallet setup.

[NotATether]

Even with different passwords (Electrum and 2FA App), if the device is key-logged, both of those passwords will be known.

Which is significantly more likely to happen on old obsolete Android phones that have all sorts of unpatched vulnerabilities. Most people don't update their Android phones ever. At least with old Linux desktops or iPhones (not Windows or Mac devices), the barrier to entry for hackers is much higher.

[DireWolfM14]

Using the same phone as 2FA device doesn't make sense (security-wise) aside from adding more workflow to open the wallet.
Even with different passwords (Electrum and 2FA App), if the device is key-logged, both of those passwords will be known.
But it's already a feature so, good(luck) for those who use that kind of 2fa wallet setup.

I feel the whole TrustedCoin 2fa set up is  geared for newbies, so trying to make a bit more user friendly is understandable.  Once someone is aware enough to understand that a second device for 2fa is more appropriate, they'll likely have learned that a TrustedCoin enabled wallet is nothing more than a multi-sig wallet which they can set up on their own without the fees.  That was my learning curve when I was a newbie, so that might just be me projecting my own experience in regards to the subject.

@cygan,
What's with the delay?  Who authorized a vacation request?