Please upgrade to 0.3.8!

6 messages BitcoinTalk Satoshi Nakamoto, FreeMoney, lachesis, lfm, Aaron August 3, 2010 — August 4, 2010
Satoshi Nakamoto August 3, 2010 23:40 UTC Source ·

Version 0.3.8 adds an important security improvement.  Everyone should upgrade to get this change.

The new safety feature displays a warning message in the status bar and locks down RPC if it detects a problem that may require an upgrade.

If it sees a longer chain, but it can’t process it, then it knows something is wrong.  It displays “WARNING: Displayed transactions may not be correct!  You may need to upgrade.” and makes most RPC commands return an error.  It still keeps generating as normal, which is necessary for the stability of the network.

There were important security updates in the versions before this too, so if you haven’t upgraded recently, it’s extremely important that you upgrade now!

Also, don’t forget, we recently added 2.4x faster generating thanks to tcatm’s mid-state caching optimisation and BlackEye’s help getting ASM SHA-256 working.

Download: http://sourceforge.net/projects/bitcoin/files/Bitcoin/bitcoin-0.3.8/

FreeMoney August 4, 2010 00:08 UTC Source ·

Link takes me to 3.7

Satoshi Nakamoto August 4, 2010 00:29 UTC Source ·

I guess SourceForge hasn’t updated its mirrors yet.  The files are there on the admin side, but not on the user side.  I have no idea how long that will take.  It’s always been immediate in the past.

Edit: SourceForge is updated now.

lachesis August 4, 2010 02:18 UTC Source ·
Quote from: satoshi on August 03, 2010, 11:40:18 PM UTC

If it sees a longer chain, but it can’t process it, then it knows something is wrong. It displays “WARNING: Displayed transactions may not be correct! You may need to upgrade.” and makes most RPC commands return an error.

What sort of attack is this intended to protect against? If it sees a longer chain but can’t process it, it should also fail to validate any of the transactions in that block, right?

lfm August 4, 2010 05:06 UTC Source ·
Quote from: lachesis on August 04, 2010, 2:18:34 AM UTC
Quote from: satoshi on August 03, 2010, 11:40:18 PM UTC

If it sees a longer chain, but it can’t process it, then it knows something is wrong. It displays “WARNING: Displayed transactions may not be correct! You may need to upgrade.” and makes most RPC commands return an error.

What sort of attack is this intended to protect against? If it sees a longer chain but can’t process it, it should also fail to validate any of the transactions in that block, right?

I presume mainly just to bring up an alert that an incompatible change is running on some nodes, weather it is a new version from Satoshi or someone else is trying to change something either way it’ll be nice to know.

Aaron August 4, 2010 12:43 UTC Source ·
Quote from: satoshi on August 03, 2010, 11:40:18 PM UTC

The new safety feature displays a warning message in the status bar and locks down RPC if it detects a problem that may require an upgrade.

It would be nice to have a link in the about dialog to take users to a location for current version information and downloads.

It also wouldn’t be a bad thing if the software was able to determine the current version and issue a warning for out of date software. There has to be plenty of this logic GPLed around the place. I’m happy to search it out if nobody has some at hand.