crzybilly
|
|
November 07, 2015, 11:17:47 PM |
|
Hello All, Unless you build your own wallet with the latest openSSL, your current wallet has security vulnerability as described here: http://openssl.org/news/secadv/20150709.txtSince ambercoindev hasn't upgraded/updated the wallet since the vulnerability has been addressed.
|
|
|
|
richwang
|
|
November 08, 2015, 01:19:37 PM |
|
Hello All, Unless you build your own wallet with the latest openSSL, your current wallet has security vulnerability as described here: http://openssl.org/news/secadv/20150709.txtSince ambercoindev hasn't upgraded/updated the wallet since the vulnerability has been addressed. This issue affects OpenSSL versions 1.0.2c, 1.0.2b, 1.0.1n and 1.0.1o. OpenSSL 1.0.2b/1.0.2c users should upgrade to 1.0.2d OpenSSL 1.0.1n/1.0.1o users should upgrade to 1.0.1p
|
|
|
|
crzybilly
|
|
November 08, 2015, 02:59:13 PM Last edit: November 08, 2015, 03:53:00 PM by crzybilly |
|
Hello All, Unless you build your own wallet with the latest openSSL, your current wallet has security vulnerability as described here: http://openssl.org/news/secadv/20150709.txtSince ambercoindev hasn't upgraded/updated the wallet since the vulnerability has been addressed. This issue affects OpenSSL versions 1.0.2c, 1.0.2b, 1.0.1n and 1.0.1o. OpenSSL 1.0.2b/1.0.2c users should upgrade to 1.0.2d OpenSSL 1.0.1n/1.0.1o users should upgrade to 1.0.1p all users should upgrade to the latest... and you do know that ambercoin uses 1.0.2a right? additionally here are the changes from a to b http://openssl.org/news/changelog.html#x3
|
|
|
|
cabsav
Legendary
Offline
Activity: 2912
Merit: 1150
|
|
November 08, 2015, 06:08:00 PM |
|
What is this all about? Dev do we need to do anything among this messages? Are our wallet safe?
|
|
|
|
Jayfek
|
|
November 08, 2015, 07:16:18 PM |
|
Hello All, Unless you build your own wallet with the latest openSSL, your current wallet has security vulnerability as described here: http://openssl.org/news/secadv/20150709.txtSince ambercoindev hasn't upgraded/updated the wallet since the vulnerability has been addressed. This issue affects OpenSSL versions 1.0.2c, 1.0.2b, 1.0.1n and 1.0.1o. OpenSSL 1.0.2b/1.0.2c users should upgrade to 1.0.2d OpenSSL 1.0.1n/1.0.1o users should upgrade to 1.0.1p all users should upgrade to the latest... and you do know that ambercoin uses 1.0.2a right? additionally here are the changes from a to b http://openssl.org/news/changelog.html#x3My AmberCoin Windows client (debug window): Client version: v2.1.0.1: Experimental Using OpenSSL version: OpenSSL 1.0.1l 15 Jan 2015 Build date: May 7 2015, 23:45:34
|
|
|
|
crzybilly
|
|
November 08, 2015, 09:27:19 PM |
|
I don't think this is anything to be alarmed about. The advisory states:
> This issue affects OpenSSL versions 1.0.2c, 1.0.2b, 1.0.1n and 1.0.1o.
The AmberCoin Wallet uses: OpenSSL 1.0.1l
(That's the letter "L" at the end there. I copied it into Excel and checked the ASCII code for it...108, a lowercase L.)
I'm going to wait and see what Dev says about it.
from the github ambercoin-qt.pro BOOST_LIB_SUFFIX=-mgw49-mt-s-1_57 BOOST_INCLUDE_PATH=C:/deps/boost_1_57_0 BOOST_LIB_PATH=C:/deps/boost_1_57_0/stage/lib BDB_INCLUDE_PATH=C:/deps/db-4.8.30.NC/build_unix BDB_LIB_PATH=C:/deps/db-4.8.30.NC/build_unix OPENSSL_INCLUDE_PATH=C:/deps/openssl-1.0.2a/include OPENSSL_LIB_PATH=C:/deps/openssl-1.0.2acheck it out for yourself and if you think 1.0.2a is good... read the change notes from a to b: http://openssl.org/news/changelog.html#x3
|
|
|
|
fitinplace
|
|
November 09, 2015, 04:53:08 AM |
|
Hi AmberCoin team, i was getting specs for each coin.
1. confirms received? 2. confirms reward? 3. average reward? 4. current coin count?
|
|
|
|
PowerHemp
Legendary
Offline
Activity: 1386
Merit: 1001
Ganja <3
|
|
November 09, 2015, 04:58:41 AM |
|
Hi AmberCoin team, i was getting specs for each coin.
1. confirms received? 2. confirms reward? 3. average reward? 4. current coin count?
why every ask the same things..? just chil lex und wait! time is with us:D
|
|
|
|
MbccompanyX
Full Member
Offline
Activity: 182
Merit: 100
★YoBit.Net★ 350+ Coins Exchange & Dice
|
|
November 09, 2015, 07:19:33 AM |
|
Hi AmberCoin team, i was getting specs for each coin.
1. confirms received? 2. confirms reward? 3. average reward? 4. current coin count?
why every ask the same things..? just chil lex und wait! time is with us:D for what i'm starting to think is that is somekind of bot because even on another thread posted the same thing with almost no changes.... but those kind of things are appearing from nowhere and this isn't the first one...
|
|
|
|
cabsav
Legendary
Offline
Activity: 2912
Merit: 1150
|
|
November 09, 2015, 11:52:26 AM |
|
dev, so whats going on with wallets? are we safe? i dont understand codes so if anything under danger let us know please
|
|
|
|
crzybilly
|
|
November 09, 2015, 12:18:24 PM |
|
dev, so whats going on with wallets? are we safe? i dont understand codes so if anything under danger let us know please
if you're running windows/mac then it's recommended to have the wallet upgraded... running on linux, it works off your openssl installed/patch as long as you patch it along the way.
|
|
|
|
bb2ebb
|
|
November 09, 2015, 01:01:24 PM |
|
dev, so whats going on with wallets? are we safe? i dont understand codes so if anything under danger let us know please
dev always updated for safe wallet, if there a danger situation in a wallet security, of course dev will doing giving alert and instruction to us for updating wallet
|
|
|
|
cabsav
Legendary
Offline
Activity: 2912
Merit: 1150
|
|
November 09, 2015, 01:33:51 PM |
|
dev, so whats going on with wallets? are we safe? i dont understand codes so if anything under danger let us know please
if you're running windows/mac then it's recommended to have the wallet upgraded... running on linux, it works off your openssl installed/patch as long as you patch it along the way. i have a windows wallet but how to upgrade it? as i know if dev publish new wallet and im downloading it and using it. but i have the last wallet on this topic.
|
|
|
|
crzybilly
|
|
November 09, 2015, 02:34:15 PM |
|
dev, so whats going on with wallets? are we safe? i dont understand codes so if anything under danger let us know please
if you're running windows/mac then it's recommended to have the wallet upgraded... running on linux, it works off your openssl installed/patch as long as you patch it along the way. i have a windows wallet but how to upgrade it? as i know if dev publish new wallet and im downloading it and using it. but i have the last wallet on this topic. Either Dev needs to compile with new openSSL or someone else that compiles wallets needs to do it.
|
|
|
|
OVRGRO
|
|
November 09, 2015, 05:32:17 PM |
|
End of the day, what is the threat to our wallets from this? I've read the changelog, but I don't grasp what the threat is... An eli5 explanation would be appreciated greatly.
|
|
|
|
AmberCoinDev (OP)
|
|
November 09, 2015, 08:25:33 PM |
|
dev, so whats going on with wallets? are we safe? i dont understand codes so if anything under danger let us know please
if you're running windows/mac then it's recommended to have the wallet upgraded... running on linux, it works off your openssl installed/patch as long as you patch it along the way. i have a windows wallet but how to upgrade it? as i know if dev publish new wallet and im downloading it and using it. but i have the last wallet on this topic. Either Dev needs to compile with new openSSL or someone else that compiles wallets needs to do it. Now a mandatory wallet update is being prepared. (New wallet will have lower POS interest and several cosmetic improvements) We will use fresh Open SSL in it.
|
|
|
|
twn
Legendary
Offline
Activity: 1204
Merit: 1011
|
|
November 09, 2015, 09:11:29 PM |
|
dev, so whats going on with wallets? are we safe? i dont understand codes so if anything under danger let us know please
if you're running windows/mac then it's recommended to have the wallet upgraded... running on linux, it works off your openssl installed/patch as long as you patch it along the way. i have a windows wallet but how to upgrade it? as i know if dev publish new wallet and im downloading it and using it. but i have the last wallet on this topic. Either Dev needs to compile with new openSSL or someone else that compiles wallets needs to do it. Now a mandatory wallet update is being prepared. (New wallet will have lower POS interest and several cosmetic improvements) We will use fresh Open SSL in it. As i remember pos will be 10% But couple monhts ago you publish here pos percentages.and i remember first year its 25% then 2nd year it was 10 or 15%. Why company change their mind? Btw i think lower pos means higher rates so its good for us amyway.
|
|
|
|
OVRGRO
|
|
November 09, 2015, 09:57:01 PM |
|
from July, I think?
Annual POS stakes will be the following: 1- st year: 10% 2-nd year: 3% 3-rd year: 0.5% 4-th year: 0.5% 5-th year: 0.5% 6-th year: 0.5% 7-th year: 0.5%
|
|
|
|
fitinplace
|
|
November 10, 2015, 03:33:39 AM |
|
hi just wanted to ask simply again a few questions. how many confirms does it take to spend AMBER after receiving it in qt wallet? how many confirms before being able to spend rewards for mining blocks? how much are average rewards for mining blocks or staking blocks? i am sorry for the bother
|
|
|
|
richwang
|
|
November 10, 2015, 03:55:02 AM |
|
hi just wanted to ask simply again a few questions. how many confirms does it take to spend AMBER after receiving it in qt wallet? how many confirms before being able to spend rewards for mining blocks? how much are average rewards for mining blocks or staking blocks? i am sorry for the bother
you can find it at here http://ambercoin.info/Coin Name: AmberCoin Abbreviation: AMBER Max number of coins ( Including POS phase) : 49,000,000 Timing of block (in seconds) : 60 Difficulty Retarget: every block Block number when POW ends : 2,000,000 POS interest per year : 25% Min stake age : 6 hours Max stake age : 30 days
|
|
|
|
|