NXT :: descendant of Bitcoin - Updated Information - page 1064.

marcus03

full member

Activity: 224

Merit: 100

Quote from: ?? on ??

Quote from: Come-from-Beyond on February 05, 2014, 01:07:01 PM

Quote from: ?? on ??

Shouldnt this announcement be in big bold red letters all over the place? How do you expect everyone to upgrade due to a critical bug if you don't make it seem serious and disclose the matter nonchalantly.

Jean-Luc said "immediatelly", why do we need big bold red letters?

Because it just blends and gets washed away with the torrent of posts. Really, there should be a separate thread for important client updates and everyone should be directed to it so we have an easy way to check for important info like this without it getting buried in 5 minutes. The only reason I caught jean lucs post was because it was quoted on the most recent page and I happened to scroll down to it.

Also because the emphasis is clearly needed if its a critical bug. The average user, if they even happen to catch that post, isn't going to drop everything they are doing and upgrade their client unless it actually seems urgent. They will read that, tell themselves they'll do it a bit later, then forget. Does this bug put users money at risk?

A thread exists for updates. Add to your watchlist and post a message when a new version comes out. NxtChoice has kept the original post up-to-date, but would be better if accompanied by a new message for watchlist.

https://bitcointalksearch.org/topic/nxt-client-update-link-406288

Thanks. Watching now. Still, there is no data regarding changes in releases in that thread or the posts it links to. I could have already been following it and still not have known about any critical flaws.

I am about to go ballistic... Why havn't you updated that post? Are you here to critize only? Just get your a** up and act yourself instead of jumping onto others... Geez.

ChuckOne

sr. member

Activity: 364

Merit: 250

☕ NXT-4BTE-8Y4K-CDS2-6TB82

Quote from: ?? on ??

Quote from: Come-from-Beyond on February 05, 2014, 01:07:01 PM

Quote from: ?? on ??

Shouldnt this announcement be in big bold red letters all over the place? How do you expect everyone to upgrade due to a critical bug if you don't make it seem serious and disclose the matter nonchalantly.

Jean-Luc said "immediatelly", why do we need big bold red letters?

Because it just blends and gets washed away with the torrent of posts. Really, there should be a separate thread for important client updates and everyone should be directed to it so we have an easy way to check for important info like this without it getting buried in 5 minutes. The only reason I caught jean lucs post was because it was quoted on the most recent page and I happened to scroll down to it.

Also because the emphasis is clearly needed if its a critical bug. The average user, if they even happen to catch that post, isn't going to drop everything they are doing and upgrade their client unless it actually seems urgent. They will read that, tell themselves they'll do it a bit later, then forget. Does this bug put users money at risk?

A thread exists for updates. Add to your watchlist and post a message when a new version comes out. NxtChoice has kept the original post up-to-date, but would be better if accompanied by a new message for watchlist.

https://bitcointalksearch.org/topic/nxt-client-update-link-406288

Thanks. Watching now. Still, there is no data regarding changes in releases in that thread or the posts it links to. I could have already been following it and still not have known about any critical flaws.

I made new post quoting JLP. Suggest others do the same when a new release comes out (once is enough per release).

+1

Come-from-Beyond

legendary

Activity: 2142

Merit: 1010

Newbie

Quote from: ChuckOne on February 05, 2014, 01:35:36 PM

That takes us to 2). What are your suggestions and what do you think of the even split between the 1440 forgers of that day.

I like the idea when 1 forger gets all the fees of that script.

ChuckOne

sr. member

Activity: 364

Merit: 250

☕ NXT-4BTE-8Y4K-CDS2-6TB82

Quote from: Come-from-Beyond on February 05, 2014, 01:32:10 PM

Quote from: ChuckOne on February 05, 2014, 01:27:55 PM

Then which nodes should a new node trust? I know it could perform all the scripts that have been run for years now. But this would take weeks to complete?

Trust noone. Check everything.

Noone can create a very long running script. We have less than 1 billion coins.

Valid.

That takes us to 2). What are your suggestions and what do you think of the even split between the 1440 forgers of that day.

gimre

legendary

Activity: 866

Merit: 1002

Quote from: minusbalancer on February 05, 2014, 10:23:48 AM

I vote for 0.01 fee. Makes currency more attractive

you might want to update dotnxt...

relm9

hero member

Activity: 840

Merit: 1000

Maybe try and get a mod to update the thread title so more people are aware of this update.

Come-from-Beyond

legendary

Activity: 2142

Merit: 1010

Newbie

Quote from: gimre on February 05, 2014, 01:31:00 PM

Quote from: Jean-Luc on February 05, 2014, 09:57:07 AM

Fixed a critical bug. Everybody should upgrade immediately.

signatureLastBytes collects last QWORD of every transaction signature...

Could you or CfB explain this change inside pushBlock:

Code:

Long lastBytes = Long.valueOf(new BigInteger(Arrays.copyOfRange(transaction.signature, transaction.signature.length - 8, transaction.signature.length)).longValue());
   if ((!Nxt.signatureLastBytes.add(lastBytes)) && (transaction.height != 58294)) {
   return false;
   }

this looks really disturbing...

I can, will do it later.

Come-from-Beyond

legendary

Activity: 2142

Merit: 1010

Newbie

Quote from: ChuckOne on February 05, 2014, 01:27:55 PM

Then which nodes should a new node trust? I know it could perform all the scripts that have been run for years now. But this would take weeks to complete?

Trust noone. Check everything.

Noone can create a very long running script. We have less than 1 billion coins.

gimre

legendary

Activity: 866

Merit: 1002

Quote from: Jean-Luc on February 05, 2014, 09:57:07 AM

Fixed a critical bug. Everybody should upgrade immediately.

signatureLastBytes collects last QWORD of every transaction signature...

Could you or CfB explain this change inside pushBlock:

Code:

     Long lastBytes = Long.valueOf(new BigInteger(Arrays.copyOfRange(transaction.signature, transaction.signature.length - 8, transaction.signature.length)).longValue());
     if ((!Nxt.signatureLastBytes.add(lastBytes)) && (transaction.height != 58294)) {
       return false;
     }

this looks really disturbing...

achimsmile

legendary

Activity: 1225

Merit: 1000

NRS (0.5.11) @ PC
NRS (0.5.11) @ PC
NRS (0.5.11) @ zd70c1whxP
NRS (0.5.5) @ VPS
NRS (0.5.11) @ nxtio.org
NRS (0.5.12) @ 22k.io
NRS (0.5.10) @ PC
NRS (0.5.12) @ nxt.now.im
NRS (0.5.11) @ PC
NRS (0.5.5) @ PC
NRS (0.5.12) @ nxt.now.im
NRS (0.5.11) @ 3frjUYA4NZ
NRS (0.5.11) @ PC
NRS (0.5.12) @ NCC-1701-D
NRS (0.5.11) @ Linux
NRS (0.5.11) @ PC
NRS (0.5.12) @ 22k.io
NRS (0.5.5) @ Happymining
NRS (0.5.12) @ 22k.io
NRS (0.5.11) @ Linux
NRS (0.5.11) @ PC
NRS (0.5.11) @ NEM-Genesis
NRS (0.5.11) @ PC

Too many are on 5.11
if this is indeed a critical bug, update asap!

spread the word

landomata

legendary

Activity: 2184

Merit: 1000

Quote from: ?? on ??

These last few pages has brought back memories of when the Nxt community was at battle with the zombies... watch this Turing or whatever you want to call it language/script be Nxt History before you know it! Wink

opticalcarrier

full member

Activity: 238

Merit: 100

Quote from: bidji29 on February 05, 2014, 01:21:28 PM

Update to 0.5.12, critical bug in ~~0.5.11~~ all previous versions

http://download.nxtcrypto.org/nxt-client-0.5.12.zip

FIFY

ChuckOne

sr. member

Activity: 364

Merit: 250

☕ NXT-4BTE-8Y4K-CDS2-6TB82

Quote from: Come-from-Beyond on February 05, 2014, 01:23:09 PM

Quote from: ChuckOne on February 05, 2014, 01:20:49 PM

Hope that suffices. 51% attack possible, right? Not by stake but by number of nodes?

Impossible. He hurts only himself.

Then which nodes should a new node trust? I know it could perform all the scripts that have been run for years now. But this would take weeks to complete?

I mean it's highly unlikely but even ghash.io reached 51% mining power which by then seemed undoable.

marcus03

full member

Activity: 224

Merit: 100

Quote from: bidji29 on February 05, 2014, 01:21:28 PM

Update to 0.5.12, critical bug in 0.5.11

http://download.nxtcrypto.org/nxt-client-0.5.12.zip

+1

It's so easy to be constructive...

EDIT: I actually missed the trick in this... I just was reliefed to see someone simply post in red instead of discussing why this wasn't posted in red...

Come-from-Beyond

legendary

Activity: 2142

Merit: 1010

Newbie