[ANN][LKY] Luckycoin Security Update

Titan

sr. member

Activity: 259

Merit: 260

Dear Luckycoin community,

Please update your clients to the latest version Luckycoin v1.0.0 on Github.

Windows:
https://github.com/LuckyCoinFoundation/LuckycoinQT

Source:
https://github.com/LuckyCoinFoundation/Luckycoin

The new Luckycoin client v1.0.0 introduces a block rate limiter!

Please update your Luckycoin clients before block 95360!

Forum link: https://cryptocointalk.com/topic/2209-luckycoin-v100-security-update-block-rate-limiter/

Giveaway thread: https://cryptocointalk.com/topic/1786-luckycoin-giveaway-2-celebrating-luckycoin-block-88888/

Get Lucky,

Titan

Titan

sr. member

Activity: 259

Merit: 260

Response from Sunny King:

Quote from: Sunny King on November 21, 2013, 05:04:18 PM

Hi Titan,

Typically the copyright notice and licensing text (MIT/X11) should also be included in the COPYING file in the source code.

Thanks for following open source ethics!

Best Regards,

Quote from: Titan on November 21, 2013, 03:45:39 PM

Dear Sunny King,

I have integrated checkpointing and alert code that originates from the PPCoin code base into the Luckycoin client. I have added a copyright notice in the About box of the Luckycoin referring to PPCoin.

Copyright © 2009-2012 Bitcoin Developers
Copyright © 2011-2012 Litecoin Developers
Copyright © 2011-2013 PPCoin Developers
Copyright © 2013 Luckycoin Developers

Is this sufficient from a legal point of view regarding the PPCoin code?

Source repository:
https://github.com/LuckyCoinFoundation/Luckycoin

Best regards,

Titan
Luckycoin Developer

Titan

sr. member

Activity: 259

Merit: 260

Dear ghostlander,

I have put a copyright notice regarding the PPCoin code prominently in the About box of Luckycoin client v0.9.9 and therefore removed the Feathercoin specific exemption notice from the source.
The original source of the checkpointing and alert code is definitely the PPCoin code base and therefore the PPCoin is mentioned in the About box.

Copyright © 2009-2012 Bitcoin Developers
Copyright © 2011-2012 Litecoin Developers
Copyright © 2011-2013 PPCoin Developers
Copyright © 2013 Luckycoin Developers

I have contacted Sunny King regarding the code integration.

Titan

ghostlander

legendary

Activity: 1242

Merit: 1020

No surrender, no retreat, no regret.

Titan, that's good to see you know how to pull the code from the Feathercoin repository and to integrate it into your code base. I'm talking about Sunny King's commits on Advanced Checkpointing and network alerts as well as my fix of getnetworkhashps. Have you missed the licence under which the Advanced Checkpointing code has been included in Feathercoin? I'll remind you.

https://github.com/FeatherCoin/FeatherCoin/blob/master/src/checkpointsync.cpp

Code:

// Copyright (c) 2012-2013 PPCoin developers
// Copyright (c) 2013 Primecoin developers
//
// A perpetual use license of this advanced checkpoint technology is granted
// to feathercoin by Sunny King on behalf of PPCoin developers and Primecoin
// developers.
//
// Permission is hereby granted to any person obtaining a copy of the advanced
// checkpoint technology, for perpetual use in feathercoin network, including
// the rights to use, copy, modify, merge, publish, distribute, subject to the
// following conditions:
//
// a) This license is not transferrable, no sublicense, and applies to
//    feathercoin only.
// b) The above copyright notice and this permission notice shall be included
//    in all copies of source code distributions.
//
// Feathercoin is waived from displaying the above copyright notice in
// 'About' for the inclusion of advanced checkpoint technology. Reference
// in file 'COPYING' is appreciated but not required.

That's what you have put instead:

https://github.com/LuckyCoinFoundation/Luckycoin/blob/master/src/checkpointsync.cpp

Code:

// Copyright (c) 2009-2012 The Bitcoin developers
// Copyright (c) 2011-2013 The PPCoin developers
// Copyright (c) 2013 The Luckycoin developers
// Distributed under the MIT/X11 software license, see the accompanying
// file COPYING or http://www.opensource.org/licenses/mit-license.php.

Not to mention the Bitcoin developers have nothing to do with synchronised checkpoints, but you have even added your copyright to the code where your only "contribution" is a pair of public keys. I doubt you have talked to Sunny King on this matter, so the whole thing is a theft in fact.

Titan

sr. member

Activity: 259

Merit: 260

Dear Luckycoin community,

Please update your clients to the latest version Luckycoin v0.9.9 on Github.

Windows:
https://github.com/LuckyCoinFoundation/LuckycoinQT

Source:
https://github.com/LuckyCoinFoundation/Luckycoin

The new Luckycoin client v0.9.9 introduces advanced checkpointing and a new reward reduction scheme!

Please update your Luckycoin clients before block 100,000!

Forum link: https://cryptocointalk.com/topic/1573-luckycoin-v099-security-update-advanced-checkpointing/

Giveaway thread: https://cryptocointalk.com/topic/1310-luckycoin-giveaway/

Get Lucky,

Titan

Titan

sr. member

Activity: 259

Merit: 260

Dear Luckycoin community,

Please update your clients to the latest version Luckycoin v0.8.8 on Github.

Windows:
https://github.com/LuckyCoinFoundation/LuckycoinQT

Source:
https://github.com/LuckyCoinFoundation/Luckycoin

The old clients are not compatible any more after the hard fork!

Forum link: https://cryptocointalk.com/forum/188-luckycoin-lky/

Giveaway thread: https://cryptocointalk.com/topic/1310-luckycoin-giveaway/

Get Lucky,

Titan

Titan

sr. member

Activity: 259

Merit: 260

Dear Luckycoin community,

I have created a new dedicated forum for the Luckycoin to serve as a better communication platform.

Please visit: https://cryptocointalk.com/forum/188-luckycoin-lky/

Future security updates will be announced and discussed in the new forum.

Get Lucky,

Titan

Reaper3

sr. member

Activity: 378

Merit: 250

Nice logo

nybbler905

full member

Activity: 213

Merit: 100

I had an issue of only fining the ' newer ' libraries and cheated alot to get the already compiled wallet to work
sudo -s
change to where the library files were and copy the newer *.so files to the ' old ' names, only took 3 files and it loaded. If I could find a way to change the original file or how in QT-Creator to actually copy the files IN to the final file, i'd have uploaded the full files as a branch of the source.

Still.... no big deal..... just need another 20 systems like I have to get my mining at a rate where I could solo mine Grin

Then again, I wanted to go via the ' challenge ' of getting a HD 4850 up and mining scrypt ( no easy feat even in Ubuntu ) and can still use the desktop with CGMiner set to intensity 14, shaders 800 --scrypt --cpu-engine 600 and hitting 80-89 Cel due to the dying fan ( new heatsink/fan in the mail, may have to do some drilling/tap & die to get it to fit ) and average hash on just that card 89.86KHash/sec. Good thing that is the rate on just ONE system Cool

Titan

sr. member

Activity: 259

Merit: 260

Quote from: nybbler905 on September 09, 2013, 09:42:03 PM

had the ' fun' of making a dual core PCI x16 v 1.1 system actually mine with an ATI Radion HD 4850 and tryed to follow my own directions on compiling the wallet. I keep getting issues related to the version 4.8 database files
" error while loading shared libraries: libdb_cxx-4.8.so: cannot open shared object file: No such file or directory "

Part of the issue is that the ' current supported ' has moved up to version 6, the other part is that as the current QT creator and the current files to compile do not create a stand alone executable ( stuff it in it instead of using external libraries ). Something to look in to to make Luckycoin-QT a stand alone aplication once it is compiled. There are workarounds in Linux ( Ubuntu 13.4 with some things back/down graded due to the HD 4850 ).

Consider this a ' heads up ' and not a complaint Roll Eyes

I am running my nodes on Ubuntu 13.04 now. Earlier versions of Ubuntu had some issues with the boost library.
Some libraries have to be installed manually still, but no big deal.

sudo apt-get install git build-essential libssl-dev libdb-dev libdb++-dev libboost-all-dev

Titan

nybbler905

full member

Activity: 213

Merit: 100

had the ' fun' of making a dual core PCI x16 v 1.1 system actually mine with an ATI Radion HD 4850 and tryed to follow my own directions on compiling the wallet. I keep getting issues related to the version 4.8 database files
" error while loading shared libraries: libdb_cxx-4.8.so: cannot open shared object file: No such file or directory "

Part of the issue is that the ' current supported ' has moved up to version 6, the other part is that as the current QT creator and the current files to compile do not create a stand alone executable ( stuff it in it instead of using external libraries ). Something to look in to to make Luckycoin-QT a stand alone aplication once it is compiled. There are workarounds in Linux ( Ubuntu 13.4 with some things back/down graded due to the HD 4850 ).

Consider this a ' heads up ' and not a complaint Roll Eyes

Titan

sr. member

Activity: 259

Merit: 260

Quote from: nybbler905 on August 31, 2013, 05:46:55 PM

P2Pool.org got some Luckycoins with me mining, too many times solo in the pool and not getting over 23%.
http://www.luckycoinpool.com is where I ( and a whole lot of other people's miners ) are mining away and getting something
( Pool Hash Rate 1.256Mhash/s as of when i click post )
Cool

Great, thanks for adding hashing power to the Luckycoin network during times of high difficulty.
Now we are through this patch and difficulty is back down to 1.6 and profitability is about 200% again.

Titan

nybbler905

full member

Activity: 213

Merit: 100

P2Pool.org got some Luckycoins with me mining, too many times solo in the pool and not getting over 23%.
http://www.luckycoinpool.com is where I ( and a whole lot of other people's miners ) are mining away and getting something
( Pool Hash Rate 1.256Mhash/s as of when i click post )
Cool

Titan

sr. member

Activity: 259

Merit: 260

Quote from: nybbler905 on August 21, 2013, 01:14:42 PM

354 (ish ) on I still have to manualy change where the libs are by removing the drive letter and changing the path to where Ubuntu 12.04 stores them.

Code:

INCLUDEPATH += $$BOOST_INCLUDE_PATH $$BDB_INCLUDE_PATH $$OPENSSL_INCLUDE_PATH $$QRENCODE_INCLUDE_PATH
LIBS += $$join(BOOST_LIB_PATH,,-L,) $$join(BDB_LIB_PATH,,-L,) $$join(OPENSSL_LIB_PATH,,-L,) $$join(QRENCODE_LIB_PATH,,-L,)
LIBS += -lssl -lcrypto -ldb_cxx$$BDB_LIB_SUFFIX -loleaut32
# -lgdi32 has to happen after -lcrypto (see #681)

LIBS += E:\MinGW\lib\libws2_32.a // change to correct location no drive letter /usr/i686-w64-mingw32/lib ( 32 bit Ubuntu )
LIBS += E:\MinGW\lib\liboleaut32.a // change to correct other slash for Ubuntu / Linux drive slashes
LIBS += -lboost_system$$BOOST_LIB_SUFFIX -lboost_filesystem$$BOOST_LIB_SUFFIX -lboost_program_options$$BOOST_LIB_SUFFIX -lboost_thread$$BOOST_THREAD_LIB_SUFFIX

I highly recomend on the building system you add a path to that drive so it can ' just find ' \MinGW\lib\ ' with out the drive letter, it makes it more portable code, but what would an old guy like me know?

Code:

Path=$path,E:\MinGW\lib\

Got a whole 5 Luckycoins from mining on P2Pool.org and looks like i'm the last in the pool and the global is still keeping me under 40% of the hashing

Edited to add info on where /usr/i686-w64-mingw32/lib is and to change the slashes as Linux uses the ' wrong ' slash for directory trees.

Thanks for looking into these building issues! I will have a closer look on all your comments when I am back from traveling end of next week.

I have stopped mining on p2pools after seeing strange things happen some weeks ago.
You can easily go solo on the Luckycoin network. The multipool is also highly efficient.

Titan

nybbler905

full member

Activity: 213

Merit: 100

For Ubuntu 12.04 you will need to use Ubuntu Software Center
needed to enter in the search for software:

QT Creator ( installs icon on the left, we will use this to compile LuckyCoin )
QT 4 ( translation tool, Designer and Document Browser )
IDLE 3 ( python3 stuff )
Python ( just grab version 3+ stuff, it's handy for compiling your miners anyways )
Berkeley ( I used v4.8 of everything grabbable in software center )
mingw ( open and search from file system for libws2_32.a you will need to know where it is later )
ncurses ( did libncurses5-dev for miners might as well grab it now if you don't have it )
Embedded GNU C Library ( bunch of compiler related items, grab the ones you think you need for your system, on Intel, you won't need AMD64 unless you got another pc with AMD Inside )

in a terminal window you will need to do alot of 'sudo apt-get install ( name )'
All lower case, it means act as ROOT access to get/install components.
try with software center first, then from terminal window ( control+alt+t )
name and why.
gcc - compiler ( still for your miners and to do the make of the final wallet)
make - compiler component to do the final ' make ' of the project
autoconf - helps in the make process
qt-sdk - I forget if it was software center or not, click installed then on the bottom for the technical items to ensure you got it.
libboost-test1.48-dev - you never know when you need Development versions of stuff

Once you get it all, time to fire up QT creator, open project/file and point to where you expanded Luckycoin-master and select the .pro file.

left side, click the Edit and go down the .pro file to 354 OR use the bottom search for -lol
highlight and copy ( control+C ) 3 lines, starting with windows:LIBS
un-highlight and past AFTER those 3, incert the pound sign on them ( so we can undo changes and have 3 lines to change )
first, remove the extra letter L from the uncommented Windows line, then the 2 following LIBS need the drive letter removed, and the correct locations for those 2 library files ( from installing MingW )
mine reads as follows
linux:LIBS += -ole32 -uuid -gdi32
LIBS += /usr/i686-w64-mingw32/lib/libws2_32.a
LIBS += /usr/i686-w64-mingw32/lib/liboleaut32.a
SAVE ALL ( and do not toss the compressed version, just in case you need to kill it all, unpack and start over )
click Build and wait, go for a coffee, walk around the house, etc.
it SHOULD create a file called leaut32 in the same folder as the dot pro file. Open it, it still uses your home folder to store the .luckycoin folder for your wallet and block data.

There may be some ' missing ' software after all that preventing it from compiling. As you can see, there is little to no mucking with the source to make it ' just work ' in Ubuntu, just a whole lota library upgrading on the build system. Feel free to mine at P2Pool.org with my luckycoin wallet address of
LS7FEfu9ajp3NQcDjui9TSKscwQesj9i8k -Luckycoin

nybbler905

full member

Activity: 213

Merit: 100

Still trying to get the ' latest' to compile on Ubuntu 12.04 with ( from Ubuntu Software Center ) QT Creator ( and it's green/white icon on the left of my screen ) and a few of the things it complained about being missing. At this point, I did manage to get the old version to compile, [ leaut32 ] create a wallet and solo mine. Swapped to a pool pretty quick with what low hash rate the system was doing. Current Balance as of this posting in LuckyCoins = 5.27978783 LKY Not bad for using Ubuntu for less than a month Cool

errors so far with the 'new' version ( besides where MinGW is )

In member funcion 'void MiningPage::minerStarted()' -miningpage.cpp - line 233
- warning - suggest exlicit braces to avoid ambiguous 'else' [-Wparentheses]

ERROR - can not find -loleaut32 -- Ubuntu it's -oleaut32, not -loleaut32, big find/replace not sure if qt-win32.yml[line 50] shoud be made as qt-linux32.yml or not and/or lines 351 and 353 of luckycoin-qt.pro. 353 looks like a conditional LIBS directive ( this ain't no hex edit of a 6502 so i'm guessing on the coding ) that could include a line like Linux:LIBS += -ole32 -uuid -gdi32

ERROR - collect2:ld returned 1 exit status ( Huh

)

still poking at it and trying to get it to ' just work ' like the first one did.. error on upgrade on that copy...

nybbler905

full member

Activity: 213

Merit: 100

354 (ish ) on I still have to manualy change where the libs are by removing the drive letter and changing the path to where Ubuntu 12.04 stores them.

Code:

INCLUDEPATH += $$BOOST_INCLUDE_PATH $$BDB_INCLUDE_PATH $$OPENSSL_INCLUDE_PATH $$QRENCODE_INCLUDE_PATH
LIBS += $$join(BOOST_LIB_PATH,,-L,) $$join(BDB_LIB_PATH,,-L,) $$join(OPENSSL_LIB_PATH,,-L,) $$join(QRENCODE_LIB_PATH,,-L,)
LIBS += -lssl -lcrypto -ldb_cxx$$BDB_LIB_SUFFIX -loleaut32
# -lgdi32 has to happen after -lcrypto (see #681)

LIBS += E:\MinGW\lib\libws2_32.a // change to correct location no drive letter /usr/i686-w64-mingw32/lib ( 32 bit Ubuntu )
LIBS += E:\MinGW\lib\liboleaut32.a // change to correct other slash for Ubuntu / Linux drive slashes
LIBS += -lboost_system$$BOOST_LIB_SUFFIX -lboost_filesystem$$BOOST_LIB_SUFFIX -lboost_program_options$$BOOST_LIB_SUFFIX -lboost_thread$$BOOST_THREAD_LIB_SUFFIX

I highly recomend on the building system you add a path to that drive so it can ' just find ' \MinGW\lib\ ' with out the drive letter, it makes it more portable code, but what would an old guy like me know?

Code:

Path=$path,E:\MinGW\lib\

Got a whole 5 Luckycoins from mining on P2Pool.org and looks like i'm the last in the pool and the global is still keeping me under 40% of the hashing

Edited to add info on where /usr/i686-w64-mingw32/lib is and to change the slashes as Linux uses the ' wrong ' slash for directory trees.

Titan

sr. member

Activity: 259

Merit: 260

Get your new Windows Luckycoin QT client today!

https://github.com/LuckyCoinFoundation/LuckycoinQT

Titan

Titan

sr. member

Activity: 259

Merit: 260

Quote from: Torn on July 15, 2013, 06:19:59 PM

Still getting upgrade warning after deleting peers.dat and restarting. No biggy really.
I'm more interested in a Win binary.
No offense Titan but are you the only person working on LKY?

Be well. GL.
T.

Yes, I took over the development of the Luckycoin network and lead the project now.

The updated windows qt client is now available on github.
https://github.com/LuckyCoinFoundation/LuckycoinQT

The linux client client has also been updated to block the litecoin alert messages.
https://github.com/LuckyCoinFoundation/Luckycoin

Titan

Torn

member

Activity: 108

Merit: 10

Free Dog to good home

Still getting upgrade warning after deleting peers.dat and restarting. No biggy really.
I'm more interested in a Win binary.
No offense Titan but are you the only person working on LKY?

Be well. GL.
T.

Topic: [ANN][LKY] Luckycoin Security Update (Read 4326 times)