[ANN][LKY] Luckycoin Security Update - page 2.

Titan

sr. member

Activity: 259

Merit: 260

Quote from: nearmiss on July 08, 2013, 08:40:47 PM

Quote from: Titan on July 08, 2013, 12:54:24 PM

Quote from: nearmiss on July 08, 2013, 10:39:54 AM

I upgraded, but still see the litecoin upgrade announcement?

As long as a single litecoin node is connected to the network this message will appear.
I will change the alert message keys in the next security update or take some other measures to disable these messages.
I am currently evaluating the different options.
The alert messages are annoying but don't impact the performance of the network.

Titan

Ok thanks, np. Thought it was fixed in this release. All good. Keep up the great work!

If you all see too many litecoin nodes with port 9333 in the debug.log please erase the peers.dat file and start over again.
The 9917 nodes are the good ones.

Titan

mcgreed

newbie

Activity: 28

Merit: 0

FYI, attempting to compile on linux it throws an error that db_cxx.h is missing (berkeley-db -related file? but then which version of that do I use, where do I get it, and how do I include it?) Also: the .pro file references a Mingw install on an E drive. Lastly, I gave up trying to compile on Windows. Absolute bitch. I have no idea what toolchain, dependencies, and setup it requires. I pieced together what dependencies I *think* it needs from information on compiling litecoin, and then it only complained about duplicate declarations (in the Mingw boost library?) on compile.

Titan

sr. member

Activity: 259

Merit: 260

Quote from: milly6 on July 09, 2013, 04:36:51 PM

Make sure to delete your peers.dat and you shouldnt get the message. Also... Windows Client??

Windows client is in the works for the weekend. I've been very busy this week.

Titan

milly6

legendary

Activity: 1632

Merit: 1010

Make sure to delete your peers.dat and you shouldnt get the message. Also... Windows Client??

nearmiss

sr. member

Activity: 448

Merit: 250

Quote from: Titan on July 08, 2013, 12:54:24 PM

Quote from: nearmiss on July 08, 2013, 10:39:54 AM

I upgraded, but still see the litecoin upgrade announcement?

As long as a single litecoin node is connected to the network this message will appear.
I will change the alert message keys in the next security update or take some other measures to disable these messages.
I am currently evaluating the different options.
The alert messages are annoying but don't impact the performance of the network.

Titan

Ok thanks, np. Thought it was fixed in this release. All good. Keep up the great work!

Titan

sr. member

Activity: 259

Merit: 260

Quote from: nearmiss on July 08, 2013, 10:39:54 AM

I upgraded, but still see the litecoin upgrade announcement?

As long as a single litecoin node is connected to the network this message will appear.
I will change the alert message keys in the next security update or take some other measures to disable these messages.
I am currently evaluating the different options.
The alert messages are annoying but don't impact the performance of the network.

Titan

nearmiss

sr. member

Activity: 448

Merit: 250

I upgraded, but still see the litecoin upgrade announcement?

Titan

sr. member

Activity: 259

Merit: 260

Please update your clients!

Titan

Titan

sr. member

Activity: 259

Merit: 260

A new security update for the Luckycoin client is available on GitHub!
Please update your clients! More details are in the first post.

Please give some feedback if there are any problems.
I am working now on the binaries for Windows and Mac.

Titan

daggerismo

full member

Activity: 224

Merit: 100

Quote from: Titan on July 06, 2013, 05:49:49 PM

Quote from: nhminer on July 06, 2013, 11:25:45 AM

Do we have windows binaries yet?

I have been tracking down several security issues of the Luckycoin network.
Due to a misconfiguration of the client code the Luckycoin network connects occasionally to Litecoin nodes and other alt-networks nodes.
This is the reason for the resyncs in the qt-client and a lot of orphan blocks and other errors in the network.
Also the Litecoin alert messages entered the network due to this bug. Most of the alt-coins suffer from these bugs.

I have been testing all of the security updates over the last week to make sure everything is ok.
This was a lot of work and took more time than originally expected, but I think I've nailed it down now.

If you want to be a beta tester for the qt-clients please send me a private message.

Titan

great job titan, glad to see you taking the LKY flag

waiting for windows binaries

Titan

sr. member

Activity: 259

Merit: 260

Quote from: nhminer on July 06, 2013, 11:25:45 AM

Do we have windows binaries yet?

I have been tracking down several security issues of the Luckycoin network.
Due to a misconfiguration of the client code the Luckycoin network connects occasionally to Litecoin nodes and other alt-networks nodes.
This is the reason for the resyncs in the qt-client and a lot of orphan blocks and other errors in the network.
Also the Litecoin alert messages entered the network due to this bug. Most of the alt-coins suffer from these bugs.

I have been testing all of the security updates over the last week to make sure everything is ok.
This was a lot of work and took more time than originally expected, but I think I've nailed it down now.

If you want to be a beta tester for the qt-clients please send me a private message.

Titan

nhminer

sr. member

Activity: 473

Merit: 250

Do we have windows binaries yet?

bonsai99

member

Activity: 112

Merit: 10

Quote from: trixong on June 25, 2013, 03:23:44 PM

I have windows 7 64 bit. How I can udpate this?

Wait until the windows binaries are released.

trixong

newbie

Activity: 33

Merit: 0

I have windows 7 64 bit. How I can udpate this?

Titan

sr. member

Activity: 259

Merit: 260

Quote from: arlington on June 22, 2013, 05:11:18 PM

Quote from: Titan on June 21, 2013, 09:20:32 PM

Quote from: BitJohn on June 21, 2013, 07:07:18 PM

So I applaud the effort but don't see any windows binaries so probably not going to take hold. Unless you have them hiding somewhere.

BitJohn,

The updated GUI clients will be available soon. The initial release of the unix client was of highest priority.

Titan

Nice work, although I have to say that adding more checkpoints do not completely prevent the attack, anyone with 51% power can alter the chain from the last checkpoint. Though they can not change anything before it.

arlington, you are right adding some checkpoints does not prevent an attack. Although it is the most basic first step one can do.
I am currently looking into more advanced security tweaks used by other networks and working on realtime network analytic tools to better see whats going on.

arlington

sr. member

Activity: 476

Merit: 250

Quote from: Titan on June 21, 2013, 09:20:32 PM

Quote from: BitJohn on June 21, 2013, 07:07:18 PM

So I applaud the effort but don't see any windows binaries so probably not going to take hold. Unless you have them hiding somewhere.

BitJohn,

The updated GUI clients will be available soon. The initial release of the unix client was of highest priority.

Titan

Nice work, although I have to say that adding more checkpoints do not completely prevent the attack, anyone with 51% power can alter the chain from the last checkpoint. Though they can not change anything before it.

Titan

sr. member

Activity: 259

Merit: 260

Quote from: BitJohn on June 21, 2013, 07:07:18 PM

So I applaud the effort but don't see any windows binaries so probably not going to take hold. Unless you have them hiding somewhere.

BitJohn,

The updated GUI clients will be available soon. The initial release of the unix client was of highest priority.

Titan

BitJohn

hero member

Activity: 826

Merit: 1001

@Bit_John

So I applaud the effort but don't see any windows binaries so probably not going to take hold. Unless you have them hiding somewhere.

daPath

newbie

Activity: 9

Merit: 0

Quote from: Titan on June 20, 2013, 08:02:16 AM

Security is important! Update your clients!

Titan

Can you please lend me some help? I followed your link to update my client, but I get a PRO file which I have never crossed before. Can you host a "normal" client, from a noob point of view? If thats not possible, I will glady appreciate all the help you can give me regarding this PRO file.

Thanks in advance.

Titan

sr. member

Activity: 259

Merit: 260

Security is important! Update your clients!

Titan

Topic: [ANN][LKY] Luckycoin Security Update - page 2. (Read 4326 times)