Received: from sog-mx-4.v43.ch3.sourceforge.com ([172.29.43.194] helo=mx.sourceforge.net) by sfs-ml-3.v29.ch3.sourceforge.com with esmtp (Exim 4.76) (envelope-from ) id 1UZp7A-0002ek-A6 for bitcoin-development@lists.sourceforge.net; Tue, 07 May 2013 21:08:00 +0000 Received-SPF: pass (sog-mx-4.v43.ch3.sourceforge.com: domain of bluematt.me designates 173.246.101.161 as permitted sender) client-ip=173.246.101.161; envelope-from=bitcoin-list@bluematt.me; helo=mail.bluematt.me; Received: from vps.bluematt.me ([173.246.101.161] helo=mail.bluematt.me) by sog-mx-4.v43.ch3.sourceforge.com with esmtp (Exim 4.76) id 1UZp78-0006Cp-SW for bitcoin-development@lists.sourceforge.net; Tue, 07 May 2013 21:08:00 +0000 Received: from [192.168.1.103] (84-75-251-165.dclient.hispeed.ch [84.75.251.165]) by mail.bluematt.me (Postfix) with ESMTPSA id 6A62C6043; Tue, 7 May 2013 21:07:52 +0000 (UTC) Message-ID: <1367960870.1385.7.camel@localhost.localdomain> From: Matt Corallo To: Petr Praus Date: Tue, 07 May 2013 23:07:50 +0200 In-Reply-To: References: <20130506161216.GA5193@petertodd.org> <20130506163732.GB5193@petertodd.org> <20130506180418.GA3797@netbook.cypherspace.org> <20130506225146.GA6657@netbook.cypherspace.org> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.8.1 Mime-Version: 1.0 Content-Transfer-Encoding: 7bit X-Spam-Score: -2.8 (--) X-Spam-Report: Spam Filtering performed by mx.sourceforge.net. See http://spamassassin.org/tag/ for more details. -1.5 SPF_CHECK_PASS SPF reports sender host as permitted sender for sender-domain -0.0 SPF_PASS SPF: sender matches SPF record -1.3 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain X-Headers-End: 1UZp78-0006Cp-SW Cc: Bitcoin Dev Subject: Re: [Bitcoin-development] limits of network hacking/netsplits (was: Discovery/addr packets) X-BeenThere: bitcoin-development@lists.sourceforge.net X-Mailman-Version: 2.1.9 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 May 2013 21:08:00 -0000 I really beg to differ on this one. If you're an Ubuntu user who is behind only one distro (quantal) you're stuck on version 0.6.2 with no updates since 2012 (yes, that means on May 15th you'll be lost). For those still on Debian Squeeze (ie barely out of date), you get 0.3.24! Yes, 0.3.24 including every issue we've fixed since (https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures) and bitcoin is not available in wheezy. Those are just the two I bothered to look up, but, additionally, nearly every distro I know of links bitcoin against libdb5.1 (latest Ubuntu, Arch, etc) which means wallets run once with those packages will never be usable an "official" Bitcoin build ever again. I can't necessarily fault them for this since 4.8 is quite old, but its certainly not "doing mostly a pretty good job" Matt On Mon, 2013-05-06 at 23:48 -0500, Petr Praus wrote: > I think it's worth noting that quite a large portion of Linux users > probably get the mainline Bitcoin client from the packages. I think > Bitcoin package maintainers are doing mostly a pretty good job :)