📅 Original date posted:2020-10-09
📝 Original message:
Hi all,
For those looking to verify the gpg signature, please be sure the
support email is formatted
correctly. For example, the archive replaces "@" with " at ", and
apparently google groups
trims "support" to "sup...". If you run into issues, please double
check the plaintext matches
verbatim with what was sent on lightning-dev.
Cheers,
Conner
On Thu, Oct 8, 2020 at 5:19 PM Conner Fromknecht
<conner at lightning.engineering> wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Hi all,
>
> We are writing to let the Lightning community know about the existence of
> vulnerabilities that affect lnd versions 0.10.x and below. The full details of
> these vulnerabilities will be disclosed on October 20, 2020. The circumstances
> surrounding the discovery resulted in a compressed disclosure timeline compared
> to our usual timeframes. We will be publishing more details about this in the
> coming weeks along with a comprehensive bug bounty program.
>
> While we have no reason to believe these vulnerabilities have been exploited in
> the wild, we strongly urge the community to upgrade to lnd 0.11.0 or above ASAP.
> Please ping us on the #lnd IRC channel, the LND Slack, or at
> support at lightning.engineering if you need any assistance in doing so. Upgrade
> instructions can be found in our installation docs:
> https://github.com/lightningnetwork/lnd/blob/master/docs/INSTALL.md#installing-lnd.
>
> Regards,
> Conner Fromknecht
> -----BEGIN PGP SIGNATURE-----
>
> iQIzBAEBCAAdFiEEnI1hhop8SSADsnRO59c3tn+lkscFAl9/ozwACgkQ59c3tn+l
> kscVvBAAk21z6tlHPkOSwfj1lBE0pqc65A6Qa927WEjN5hdUpjjof4Xo2j+GzbnN
> Uoj4HGZu+koakzoVpJ4mzN+vg086zAnv+K668hhl7bbPHsQu6FqA1ALiAyy0nH6H
> 1yukXxpRflq53RTIVPjrEnFVdt6FCLhkCm9LuOk0a/SUf8D4b/N6OaB1Bxupeceu
> QFSCIkb9kvW/Eplwkv7PEnx/IZNGIQP9F11DaKLTAjWY5RnIxmCw/oamvlP8Mxt8
> /AqlzWVtPVqvwgJLhbMziraXNVV05naHrIXvbXrOI2Q7FZjdaxF+S4EKT4feuq1w
> iW7NYSS/u5N2FP3yK8YIdoX0I/nwYQQcpsfbAv2dS4Ql2Td/dyREId4NcchmaKSV
> N3w1jByMPWrgUtinl5WEDDOJdUKS2PHkQ95t3s/1uYDFsPz1kXJR2x37a/1AVz/K
> 6zQ45wFvHEopFR49hu/CV6MUvsvn4XKzPa46Ii7puaBaNqygx0RwuwlxbxCNxPNQ
> v45CaCUEq2Tj3stu7YoYGntFvrXVkxXJocn51eK6D+g0bIEXxaGlPJeTuvifKMTO
> 3T3ZEEbCe9UhDUT8Ja2boP2IIi8wAyExGS59k0tndQGzMSjkzWZ0fzgYyyf+y4nt
> r3nTCGi5WWe4y1i2KpiYZTRrQkbrNkRf+fnVdlnTS4lcgEWFFiY=
> =8t9Q
> -----END PGP SIGNATURE-----
Conner Fromknecht [ARCHIVE] /
npub1za…uua2a
2023-06-09 13:01:06
in reply to nevent1q…kljr
Author Public Key
npub1za0a9afyj7um5feva0d5xmhfsah3zxm252hna2duq0numa952frqvuua2aPublished at
2023-06-09 13:01:06Event JSON
{
"id": "97df3be81abf138af917f699d37285375788240d1bd934927db8d2837cc918c1",
"pubkey": "175fd2f52497b9ba272cebdb436ee9876f111b6aa2af3ea9bc03e7cdf4b45246",
"created_at": 1686315666,
"kind": 1,
"tags": [
[
"e",
"8af56b1258892924a081e530367462472e1f0831dc924cc95927554ec3609df1",
"",
"root"
],
[
"e",
"ae2cb412f7c5812ef61a04c2a5a6f5154f8d761e02cef899bb7b6059aa9ae511",
"",
"reply"
],
[
"p",
"175fd2f52497b9ba272cebdb436ee9876f111b6aa2af3ea9bc03e7cdf4b45246"
]
],
"content": "📅 Original date posted:2020-10-09\n📝 Original message:\nHi all,\n\nFor those looking to verify the gpg signature, please be sure the\nsupport email is formatted\ncorrectly. For example, the archive replaces \"@\" with \" at \", and\napparently google groups\ntrims \"support\" to \"sup...\". If you run into issues, please double\ncheck the plaintext matches\nverbatim with what was sent on lightning-dev.\n\nCheers,\nConner\n\n\nOn Thu, Oct 8, 2020 at 5:19 PM Conner Fromknecht\n\u003cconner at lightning.engineering\u003e wrote:\n\u003e\n\u003e -----BEGIN PGP SIGNED MESSAGE-----\n\u003e Hash: SHA256\n\u003e\n\u003e Hi all,\n\u003e\n\u003e We are writing to let the Lightning community know about the existence of\n\u003e vulnerabilities that affect lnd versions 0.10.x and below. The full details of\n\u003e these vulnerabilities will be disclosed on October 20, 2020. The circumstances\n\u003e surrounding the discovery resulted in a compressed disclosure timeline compared\n\u003e to our usual timeframes. We will be publishing more details about this in the\n\u003e coming weeks along with a comprehensive bug bounty program.\n\u003e\n\u003e While we have no reason to believe these vulnerabilities have been exploited in\n\u003e the wild, we strongly urge the community to upgrade to lnd 0.11.0 or above ASAP.\n\u003e Please ping us on the #lnd IRC channel, the LND Slack, or at\n\u003e support at lightning.engineering if you need any assistance in doing so. Upgrade\n\u003e instructions can be found in our installation docs:\n\u003e https://github.com/lightningnetwork/lnd/blob/master/docs/INSTALL.md#installing-lnd.\n\u003e\n\u003e Regards,\n\u003e Conner Fromknecht\n\u003e -----BEGIN PGP SIGNATURE-----\n\u003e\n\u003e iQIzBAEBCAAdFiEEnI1hhop8SSADsnRO59c3tn+lkscFAl9/ozwACgkQ59c3tn+l\n\u003e kscVvBAAk21z6tlHPkOSwfj1lBE0pqc65A6Qa927WEjN5hdUpjjof4Xo2j+GzbnN\n\u003e Uoj4HGZu+koakzoVpJ4mzN+vg086zAnv+K668hhl7bbPHsQu6FqA1ALiAyy0nH6H\n\u003e 1yukXxpRflq53RTIVPjrEnFVdt6FCLhkCm9LuOk0a/SUf8D4b/N6OaB1Bxupeceu\n\u003e QFSCIkb9kvW/Eplwkv7PEnx/IZNGIQP9F11DaKLTAjWY5RnIxmCw/oamvlP8Mxt8\n\u003e /AqlzWVtPVqvwgJLhbMziraXNVV05naHrIXvbXrOI2Q7FZjdaxF+S4EKT4feuq1w\n\u003e iW7NYSS/u5N2FP3yK8YIdoX0I/nwYQQcpsfbAv2dS4Ql2Td/dyREId4NcchmaKSV\n\u003e N3w1jByMPWrgUtinl5WEDDOJdUKS2PHkQ95t3s/1uYDFsPz1kXJR2x37a/1AVz/K\n\u003e 6zQ45wFvHEopFR49hu/CV6MUvsvn4XKzPa46Ii7puaBaNqygx0RwuwlxbxCNxPNQ\n\u003e v45CaCUEq2Tj3stu7YoYGntFvrXVkxXJocn51eK6D+g0bIEXxaGlPJeTuvifKMTO\n\u003e 3T3ZEEbCe9UhDUT8Ja2boP2IIi8wAyExGS59k0tndQGzMSjkzWZ0fzgYyyf+y4nt\n\u003e r3nTCGi5WWe4y1i2KpiYZTRrQkbrNkRf+fnVdlnTS4lcgEWFFiY=\n\u003e =8t9Q\n\u003e -----END PGP SIGNATURE-----",
"sig": "84c05fb6a4c84c6284c3c98e835c1cf9b1308ca04cf92735ec829e849404f3a9427547ee0bec2e0290e115a26f02cf1ad7b895f40e903facbe76aad44c3d5bf0"
}