3 ms·
Yeah I'm glad I'm not the only one who finds this a bit shocking, and their initial response doesn't really impress me that much. I don't expect a desktop app t
by DSMan195276 5y ago
Yeah I'm glad I'm not the only one who finds this a bit shocking, and their initial response doesn't really impress me that much. I don't expect a desktop app to be displaying random unverified messages to me in the same way my email or phone might, and especially so if it's not made that clear where the message is from. It's certainly true that this guy shouldn't have made this mistake anyway, but there are plenty of steps Electrum could do to make it clear whether a message should be trusted or not, and to their credit it does at least sound like they did make changes in this area in later versions. Of course, to clarify I have not actually tried this thing, I'm just basing that on their description of changes they made such as no longer displaying RTF and/or arbitrary messages.
- zarzavat 5y agoWhat can they do about old versions? Yes clearly it is an exploit but patching only fixes it in new versions. If someone insists on using an old version with that bug, they are on their own.
- DSMan195276 5y agoI agree with that, I was just objecting a bit to the tone of the original comment. IMO it's a bit of a hard sell to me to say "we're sorry, there's nothing we can do" after listing a bunch of things they did to fix this in later versions. Rather than going on and on about how it's an unfixable problem, they could have just said they have made steps to address the issue in later versions but there isn't a way to fix existing versions.