Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Already on GitHub? Sign in to your account

Updating 'alert system retirement' page. #1577

Merged
merged 3 commits into from May 10, 2017

Conversation

Projects
None yet
6 participants
Contributor

jonathancross commented Apr 24, 2017

If there is a known date for the alert key being published, I'm happy to add that too.
The date column states "1-2 months after the Final Alert" which has already passed. :-/

_alerts/2016-11-01-alert-retirement.md
@@ -49,15 +50,15 @@ receive the final alert.
|---|---|---|
|Pre-final Alert Posts|Posts on Bitcoin.org, various forums, and various mailing lists that the Alert system will be retired|2016-11-01|
|Pre-final Alert|The alert itself warning that the Alert system will be retired|2016-11-02|
-|Final Alert|Max sequence Alert to disable the Alert system|2017 (Will coincide with Bitcoin Core 0.14 Release Candidate process)|
+|Final Alert|Max sequence Alert to disable the Alert system|2017-19-01|
@achow101

achow101 Apr 24, 2017

Contributor

-01-19 instead to be consistent with other dates on this page

@jonathancross

jonathancross Apr 24, 2017

Contributor

Done. Thanks for catching that :-)

_alerts/2016-11-01-alert-retirement.md
are guaranteed to have removed/disabled the Alert system or allow you to disable it.
-* Bitcoin Core 0.13.1, 0.13.0, 0.12.1
+* Bitcoin Core 0.14.1, 0.14.0, 0.13.1, 0.13.0, 0.12.1
@achow101

achow101 Apr 24, 2017

Contributor

This can probably just be simplified to 0.12.1+

Contributor

jonathancross commented Apr 24, 2017

Thanks @achow101, I've addressed your comments and squashed.

_alerts/2016-11-01-alert-retirement.md
@@ -49,15 +50,15 @@ receive the final alert.
|---|---|---|
|Pre-final Alert Posts|Posts on Bitcoin.org, various forums, and various mailing lists that the Alert system will be retired|2016-11-01|
|Pre-final Alert|The alert itself warning that the Alert system will be retired|2016-11-02|
-|Final Alert|Max sequence Alert to disable the Alert system|2017 (Will coincide with Bitcoin Core 0.14 Release Candidate process)|
+|Final Alert|Max sequence Alert to disable the Alert system|2017-01-19|
|Alert key released|The Alert key will be made publicly available|1-2 months after the Final Alert|
@jonathancross

jonathancross Apr 26, 2017 edited

Contributor

Date column here ("1-2 months after the Final Alert") needs updating at some point...

@laanwj

laanwj Apr 26, 2017

Contributor

I'm not sure. We should probably discuss this at the meeting again.

@achow101

achow101 Apr 27, 2017

Contributor

According to @gmaxwell, there are some vulnerabilities in the Alert handling code that could be exploited if the alert key were released. He said that he would wait to publish it until after people have stopped using vulnerable software.

@jonathancross

jonathancross May 1, 2017 edited

Contributor

Thanks for the feedback.

I've updated the wording as such:

"Older clients may contain Alert handling code which is exploitable using the alert key, therefore the public release of the key has been temporarily postponed until considered safe."

@wbnns wbnns assigned Cobra-Bitcoin and wbnns and unassigned Cobra-Bitcoin Apr 28, 2017

Contributor

jonathancross commented May 1, 2017

I've updated the explanation for public release of alert key.
Please let me know if this is satisfactory and I should squash into a single commit.

_alerts/2016-11-01-alert-retirement.md
-|Final Alert|Max sequence Alert to disable the Alert system|2017 (Will coincide with Bitcoin Core 0.14 Release Candidate process)|
-|Alert key released|The Alert key will be made publicly available|1-2 months after the Final Alert|
+|Final Alert|Max sequence Alert to disable the Alert system|2017-01-19|
+|Alert key released|The Alert key will be made publicly available|Older clients may contain Alert handling code which is exploitable using the alert key, therefore the public release of the key has been temporarily postponed until considered safe.|
@achow101

achow101 May 1, 2017

Contributor

How about making this "Postponed until further notice" and moving the explanation to an update at the top of the page?

@jonathancross

jonathancross May 1, 2017

Contributor

Sounds good, please see latest commit (287acad)

Contributor

jonathancross commented May 4, 2017

Anything more you all would like to see here?
If not, should I squash into a single commit?

Contributor

achow101 commented May 8, 2017

LGTM

Contributor

wbnns commented May 8, 2017

@jonathancross @achow101 Thanks!

Unless others object, this will be merged on Wednesday, May 10th.

Contributor

harding commented May 10, 2017

Tested ACK.

@wbnns wbnns merged commit 495d835 into bitcoin-dot-org:master May 10, 2017

1 check passed

continuous-integration/travis-ci/pr The Travis CI build passed
Details

@jonathancross jonathancross deleted the jonathancross:alert-2 branch May 10, 2017

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment