Electrum got New Released 4.0.2 | Bitcointalksearch.org

crypto_curious

full member

Activity: 933

Merit: 175

Quote from: Pmalek on July 18, 2020, 02:45:49 PM

Quote from: crypto_curious on July 17, 2020, 01:55:58 PM

Actually there have been vulnerabilities discovered in hardware wallets and Electrum 3.3.8. It's called Fee overpayment attack on multi-input segwit transactions

That has been patched by Ledger in one of their software updates a few weeks back. Besides, that attack was not exclusive to Ledger and Electrum's version 3.3.8. Plenty of other brands were affected. Some patched it already, others waited and did it in future updates.

I assume you are talking about this:
https://support.ledger.com/hc/en-us/articles/360014191540-Massive-transaction-fees-in-BTC-and-BTC-based-apps

I replied to your post because you said "Unless a vulnerability is found with 3.3.8 I am not really in a hurry.", and I pointed out that vulnerability has indeed been found month earlier in electrum 3.3.8 (And other software as you mentioned, Ledger etc), so it's not safe to use 3.3.8.
And latest Electrum 4.0.3 has been released on 11 September and it restores compatibility for PSBT after this vulnerability previously discussed, it has it's own CVE now: http://cve.circl.lu/cve/CVE-2020-14199
So definitely it's recommended to stay with latest Electrum and latest Bitcoin Core at the moment.

Pmalek

legendary

Activity: 2730

Merit: 7065

Quote from: crypto_curious on July 17, 2020, 01:55:58 PM

Actually there have been vulnerabilities discovered in hardware wallets and Electrum 3.3.8. It's called Fee overpayment attack on multi-input segwit transactions

That has been patched by Ledger in one of their software updates a few weeks back. Besides, that attack was not exclusive to Ledger and Electrum's version 3.3.8. Plenty of other brands were affected. Some patched it already, others waited and did it in future updates.

I assume you are talking about this:
https://support.ledger.com/hc/en-us/articles/360014191540-Massive-transaction-fees-in-BTC-and-BTC-based-apps

crypto_curious

full member

Activity: 933

Merit: 175

Quote from: Pmalek on July 10, 2020, 10:47:42 AM

I expected that there would be a few bugs when the new 4.0 version came out so I decided to stick with the old and reliable 3.3.8 for the time being.
I am not planning to update yet. I prefer to sit back a little and see what happens. Unless a vulnerability is found with 3.3.8 I am not really in a hurry. I use Electrum together with a hardware wallet so...

Based on some other posts I read around the forum, seems that the new mobile apps have a few bugs here and there as well. Nothing out of the ordinary though.

Actually there have been vulnerabilities discovered in hardware wallets and Electrum 3.3.8. It's called Fee overpayment attack on multi-input segwit transactions.

Trezor firmware upgrade info: https://blog.trezor.io/details-of-firmware-updates-for-trezor-one-version-1-9-1-and-trezor-model-t-version-2-3-1-1eba8f60f2dd
Description of the attack on Optech Newsletter: https://bitcoinops.org/en/newsletters/2020/06/10/

I waited with Trezor firmware upgrade until Electrum 4.0.2 was released, now I have upgraded both, it works fine.

nc50lc

legendary

Activity: 2534

Merit: 6080

Self-proclaimed Genius

Quote from: hugeblack on July 12, 2020, 04:47:06 AM

Releasing a lot of updates in short times will be detrimental to beginners, even though the mistake is made of them not checking the message.
Can anyone tell us, do recent updates deserve a new version?

Maybe because some of the updates are trivial for some android phone users.

The merged PR here that were 9days-old and earlier were the updates included in the latest version 4.0.2 (from v4.0.1):
https://github.com/spesmilo/electrum/pulls?q=is%3Apr+is%3Aclosed
The first 6 in the list, specially the "back button" issue, which I didn't experienced.

NeuroticFish

legendary

Activity: 3668

Merit: 6382

Looking for campaign manager? Contact icopress!

Quote from: hugeblack on July 12, 2020, 04:47:06 AM

Releasing a lot of updates in short times will be detrimental to beginners, even though the mistake is made of them not checking the message.

If they don't check the messages they may be very well still on 3.3.8.
...Also the beginners can and should set in-wallet notify for new version.

hugeblack

legendary

Activity: 2702

Merit: 4002

Releasing a lot of updates in short times will be detrimental to beginners, even though the mistake is made of them not checking the message.
Can anyone tell us, do recent updates deserve a new version?

for those who want to use it with Arch and Ledger wallet you need btchip-python v1.3 (Install python-pip & "pip install btchip-python)
https://twitter.com/lb750123/status/1281174681228361734

nc50lc

legendary

Activity: 2534

Merit: 6080

Self-proclaimed Genius

Quote from: blue Snow on July 11, 2020, 03:01:22 AM

Quote from: nc50lc on July 10, 2020, 09:22:34 PM

It's not in those screenshots, he needs to tap the wallet name above (upper-left) to display the 'wallet information'.

-snip-
Seems I can't backup, it say Backup directory not configured.

- How much minimum btc required to create channels?.

The minimum for Electrum is 0.002BTC plus fee.

For the backup, you need to enable it first in the 'Menu->Settings->Backups: No -> Yes'.
Or you haven't granted Electrum a "file management/storage permission" yet.

HCP

legendary

Activity: 2086

Merit: 4361

What you have created is a non-expiring "request"... it's like creating an invoice and sending it to a client...

If all you want is an "address" that someone can send funds to, then click that entry in the list, then click the "address" tab at the top-right of the "Receive" page:

NOTE: It is only pending, because has detected that no funds have been sent to that address yet, so the "request" has been filled Wink

So you will be able to receive the funds sent to that address.

Alternatively, you can use "View - Show Addresses" and then click on the "Addresses" tab and select an address from that list.

acroman08

legendary

Activity: 2520

Merit: 1113

I am quite new to electrum and just downloaded their latest release. I am wondering what does the "pending" means after I requested an address that doesn't expire? also, is it ok to use the address while it is in pending will I be able to receive BTC from it? TIA!!!

image for reference

blue Snow

legendary

Activity: 1526

Merit: 1032

Up to 300% + 200 FS deposit bonuses

Quote from: nc50lc on July 10, 2020, 09:22:34 PM

It's not in those screenshots, he needs to tap the wallet name above (upper-left) to display the 'wallet information'.

Thank you, I found enable button, I am using electrum android downloaded from Playstore.

Seems I can't backup, it say Backup directory not configured.

- How much minimum btc required to create channels?.

nc50lc

legendary

Activity: 2534

Merit: 6080

Self-proclaimed Genius

Quote from: blue Snow on July 10, 2020, 08:46:04 PM

On my local board, my friend sharing about a mobile phone aplication have a bug where lightning network enable button disappear in wallet information.

I'm using v4.0.2 arm-v8-64bit and there's an "Enable LN" button below the wallet information (third button)...
It's just grayed out since my watch-only wallet is P2SH-SegWit.

It's not in those screenshots, he needs to tap the wallet name above (upper-left) to display the 'wallet information'.

blue Snow

legendary

Activity: 1526

Merit: 1032

Up to 300% + 200 FS deposit bonuses

Quote from: Pmalek on July 10, 2020, 10:47:42 AM

Based on some other posts I read around the forum, seems that the new mobile apps have a few bugs here and there as well. Nothing out of the ordinary though.

Quote from: bitmover on July 10, 2020, 03:09:12 PM

However, now it offers Lightning support. If you want to use lighting you would have to update.

On my local board, my friend sharing about a mobile phone aplication have a bug where lightning network enable button disappear in wallet information.

Quote from: Husna QA on July 10, 2020, 04:25:55 PM

bitmover

legendary

Activity: 2352

Merit: 6089

bitcoindata.science

Quote from: Pmalek on July 10, 2020, 10:47:42 AM

I expected that there would be a few bugs when the new 4.0 version came out so I decided to stick with the old and reliable 3.3.8 for the time being.
I am not planning to update yet. I prefer to sit back a little and see what happens. Unless a vulnerability is found with 3.3.8 I am not really in a hurry. I use Electrum together with a hardware wallet so...

Based on some other posts I read around the forum, seems that the new mobile apps have a few bugs here and there as well. Nothing out of the ordinary though.

There isn't any great difference between the two, so I agree, no need to hurry to update

However, now it offers Lightning support. If you want to use lighting you would have to update.

Pmalek

legendary

Activity: 2730

Merit: 7065

I expected that there would be a few bugs when the new 4.0 version came out so I decided to stick with the old and reliable 3.3.8 for the time being.
I am not planning to update yet. I prefer to sit back a little and see what happens. Unless a vulnerability is found with 3.3.8 I am not really in a hurry. I use Electrum together with a hardware wallet so...

Based on some other posts I read around the forum, seems that the new mobile apps have a few bugs here and there as well. Nothing out of the ordinary though.

blue Snow

legendary

Activity: 1526

Merit: 1032

Up to 300% + 200 FS deposit bonuses

https://twitter.com/ElectrumWallet/status/1280785286742540288

Quote

New release: Electrum 4.0.2 (minor bugfixes).
https://electrum.org/#download

# Release 4.0.2 - (July 8, 2020)
- rm old corrupted non-bip70 invoices (#6345)
- other minor fixes

Topic: Electrum got New Released 4.0.2 (Read 363 times)