Author

Topic: Electrum got New Released 4.0.2 (Read 338 times)

full member
Activity: 924
Merit: 175
September 20, 2020, 07:03:37 PM
#15
Actually there have been vulnerabilities discovered in hardware wallets and Electrum 3.3.8. It's called Fee overpayment attack on multi-input segwit transactions
That has been patched by Ledger in one of their software updates a few weeks back. Besides, that attack was not exclusive to Ledger and Electrum's version 3.3.8. Plenty of other brands were affected. Some patched it already, others waited and did it in future updates.  

I assume you are talking about this:
https://support.ledger.com/hc/en-us/articles/360014191540-Massive-transaction-fees-in-BTC-and-BTC-based-apps

I replied to your post because you said "Unless a vulnerability is found with 3.3.8 I am not really in a hurry.", and I pointed out that vulnerability has indeed been found month earlier in electrum 3.3.8 (And other software as you mentioned, Ledger etc), so it's not safe to use 3.3.8.
And latest Electrum 4.0.3 has been released on 11 September and it restores compatibility for PSBT after this vulnerability previously discussed, it has it's own CVE now: http://cve.circl.lu/cve/CVE-2020-14199
So definitely it's recommended to stay with latest Electrum and latest Bitcoin Core at the moment.
legendary
Activity: 2730
Merit: 7065
Farewell, Leo. You will be missed!
July 18, 2020, 03:45:49 PM
#14
Actually there have been vulnerabilities discovered in hardware wallets and Electrum 3.3.8. It's called Fee overpayment attack on multi-input segwit transactions
That has been patched by Ledger in one of their software updates a few weeks back. Besides, that attack was not exclusive to Ledger and Electrum's version 3.3.8. Plenty of other brands were affected. Some patched it already, others waited and did it in future updates. 

I assume you are talking about this:
https://support.ledger.com/hc/en-us/articles/360014191540-Massive-transaction-fees-in-BTC-and-BTC-based-apps
full member
Activity: 924
Merit: 175
July 17, 2020, 02:55:58 PM
#13
I expected that there would be a few bugs when the new 4.0 version came out so I decided to stick with the old and reliable 3.3.8 for the time being.
I am not planning to update yet. I prefer to sit back a little and see what happens. Unless a vulnerability is found with 3.3.8 I am not really in a hurry. I use Electrum together with a hardware wallet so...

Based on some other posts I read around the forum, seems that the new mobile apps have a few bugs here and there as well. Nothing out of the ordinary though.

Actually there have been vulnerabilities discovered in hardware wallets and Electrum 3.3.8. It's called Fee overpayment attack on multi-input segwit transactions.

Trezor firmware upgrade info: https://blog.trezor.io/details-of-firmware-updates-for-trezor-one-version-1-9-1-and-trezor-model-t-version-2-3-1-1eba8f60f2dd
Description of the attack on Optech Newsletter: https://bitcoinops.org/en/newsletters/2020/06/10/

I waited with Trezor firmware upgrade until Electrum 4.0.2 was released, now I have upgraded both, it works fine.
legendary
Activity: 2394
Merit: 5531
Self-proclaimed Genius
July 12, 2020, 06:07:03 AM
#12
Releasing a lot of updates in short times will be detrimental to beginners, even though the mistake is made of them not checking the message.
Can anyone tell us, do recent updates deserve a new version?
Maybe because some of the updates are trivial for some android phone users.

The merged PR here that were 9days-old and earlier were the updates included in the latest version 4.0.2 (from v4.0.1):
https://github.com/spesmilo/electrum/pulls?q=is%3Apr+is%3Aclosed
The first 6 in the list, specially the "back button" issue, which I didn't experienced.
legendary
Activity: 3668
Merit: 6382
Looking for campaign manager? Contact icopress!
July 12, 2020, 06:06:38 AM
#11
Releasing a lot of updates in short times will be detrimental to beginners, even though the mistake is made of them not checking the message.

If they don't check the messages they may be very well still on 3.3.8.
...Also the beginners can and should set in-wallet notify for new version.
legendary
Activity: 2506
Merit: 3645
Buy/Sell crypto at BestChange
July 12, 2020, 05:47:06 AM
#10
Releasing a lot of updates in short times will be detrimental to beginners, even though the mistake is made of them not checking the message.
Can anyone tell us, do recent updates deserve a new version?


for those who want to use it with Arch and Ledger wallet you need btchip-python v1.3 (Install python-pip & "pip install btchip-python)
https://twitter.com/lb750123/status/1281174681228361734
legendary
Activity: 2394
Merit: 5531
Self-proclaimed Genius
July 11, 2020, 06:48:51 AM
#9
It's not in those screenshots, he needs to tap the wallet name above (upper-left) to display the 'wallet information'.
-snip-
Seems I can't backup, it say Backup directory not configured.

- How much minimum btc required to create channels?.
The minimum for Electrum is 0.002BTC plus fee.

For the backup, you need to enable it first in the 'Menu->Settings->Backups: No -> Yes'.
Or you haven't granted Electrum a "file management/storage permission" yet.
HCP
legendary
Activity: 2086
Merit: 4314
July 11, 2020, 06:04:14 AM
#8
What you have created is a non-expiring "request"... it's like creating an invoice and sending it to a client...

If all you want is an "address" that someone can send funds to, then click that entry in the list, then click the "address" tab at the top-right of the "Receive" page:


NOTE: It is only pending, because has detected that no funds have been sent to that address yet, so the "request" has been filled Wink So you will be able to receive the funds sent to that address.


Alternatively, you can use "View - Show Addresses" and then click on the "Addresses" tab and select an address from that list.
legendary
Activity: 2310
Merit: 1075
July 11, 2020, 04:28:07 AM
#7
I am quite new to electrum and just downloaded their latest release. I am wondering what does the "pending" means after I requested an address that doesn't expire? also, is it ok to use the address while it is in pending will I be able to receive BTC from it? TIA!!!

image for reference
legendary
Activity: 1484
Merit: 1024
#SWGT CERTIK Audited
July 11, 2020, 04:01:22 AM
#6
It's not in those screenshots, he needs to tap the wallet name above (upper-left) to display the 'wallet information'.
Thank you, I found enable button, I am using electrum android downloaded from Playstore.



Seems I can't backup, it say Backup directory not configured.

- How much minimum btc required to create channels?.
legendary
Activity: 2394
Merit: 5531
Self-proclaimed Genius
July 10, 2020, 10:22:34 PM
#5
On my local board, my friend sharing about a mobile phone aplication have a bug where lightning network enable button disappear in wallet information.
I'm using v4.0.2 arm-v8-64bit and there's an "Enable LN" button below the wallet information (third button)...
It's just grayed out since my watch-only wallet is P2SH-SegWit.

It's not in those screenshots, he needs to tap the wallet name above (upper-left) to display the 'wallet information'.
legendary
Activity: 1484
Merit: 1024
#SWGT CERTIK Audited
July 10, 2020, 09:46:04 PM
#4
Based on some other posts I read around the forum, seems that the new mobile apps have a few bugs here and there as well. Nothing out of the ordinary though.
However, now it offers Lightning support. If you want to use lighting you would have to update.

On my local board, my friend sharing about a mobile phone aplication have a bug where lightning network enable button disappear in wallet information.

 
legendary
Activity: 2212
Merit: 5622
Non-custodial BTC Wallet
July 10, 2020, 04:09:12 PM
#3
I expected that there would be a few bugs when the new 4.0 version came out so I decided to stick with the old and reliable 3.3.8 for the time being.
I am not planning to update yet. I prefer to sit back a little and see what happens. Unless a vulnerability is found with 3.3.8 I am not really in a hurry. I use Electrum together with a hardware wallet so...

Based on some other posts I read around the forum, seems that the new mobile apps have a few bugs here and there as well. Nothing out of the ordinary though.
There isn't any great difference between the two, so I agree, no need to hurry to update

However, now it offers Lightning support. If you want to use lighting you would have to update.
legendary
Activity: 2730
Merit: 7065
Farewell, Leo. You will be missed!
July 10, 2020, 11:47:42 AM
#2
I expected that there would be a few bugs when the new 4.0 version came out so I decided to stick with the old and reliable 3.3.8 for the time being.
I am not planning to update yet. I prefer to sit back a little and see what happens. Unless a vulnerability is found with 3.3.8 I am not really in a hurry. I use Electrum together with a hardware wallet so...

Based on some other posts I read around the forum, seems that the new mobile apps have a few bugs here and there as well. Nothing out of the ordinary though.
legendary
Activity: 1484
Merit: 1024
#SWGT CERTIK Audited
July 08, 2020, 06:28:39 AM
#1
https://twitter.com/ElectrumWallet/status/1280785286742540288
Quote
New release: Electrum 4.0.2 (minor bugfixes).
https://electrum.org/#download

# Release 4.0.2 - (July 8, 2020)
 - rm old corrupted non-bip70 invoices (#6345)
 - other minor fixes
Jump to: