You are viewing a single comment's thread from:
RE: Denial of Service Vulnerability Fix
I'm a Backup witness, but I have not heard of this solution. Where can I get a mention?
I'm a Backup witness, but I have not heard of this solution. Where can I get a mention?
Check #witness in steem.chat
Is there another place that you are monitoring for witness related matters?
I'm already involved in it, but I don't think the content was first disclosed there.
I checked the update through the alarm, but Top witnesses were already updated. Do they have a separate channel?
Oh, you’re not part of the special club? Well that’s weird. I thought we were supposed to have decentralization and transparency and stuff. Why would there be secret clubs of selected witnesses by the chain’s “lead dev team” and single largest stakeholder?
Inquiring minds would like to know. Amirite?
:)
Easy (and honest) answer:
Often with security releases it’s important for the top 20 witnesses to be patched prior to the fix being made public in order to ensure uninterrupted service and safety. Even if it were not us (Steemit Inc) proposing a fix, these witnesses should (and do) have an open channel of communication amongst themselves in order to coordinate rolling out these types of patches.
Oh, so it’s just a chat for top-20 witnesses that’s controlled by those witnesses?
The public channel you mentioned means "https://steem.chat/channel/witness", but I think there are other special channels. Because some of the witnesses had already been updated to version 20.10 before the updates were released and mentioned on the channel.
As you mentioned, you need a public channel for quick sharing. Is there a condition for accessing channels for special members?
For high risk scenarios like this a private channel for the top 20 witnesses, plus those witnesses close to the top 20, is required for security reasons. Such a channel exists and the only requirement for entry is one's position in the witness rankings. If a witness is in the top 20 they are in that slack. If there is a chance they may enter the top 20 (e.g. if they are close) they should be in that slack and if they are not, they should contact me at [email protected].
It's a long way to top, but thank you for the information. I'll contact you if it gets closer.
I don't belong unfortunately............
Every witness has an opportunity, with Steem's vote-enabled democracy, to rise the ranks to become number one. I would say secondary witnesses are just as important as primary witnesses, in my experience at least. They often build dapps, on-board users, and bring code into the FOSS ecosystem. I appreciate all witnesses and humans in general that contribute their valuable time and effort to push forward blockchain technology.