Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Offical apps | Community apps | Demo | Docs | Install
  1. Cloudron Forum
  2. Community Apps
  3. Upgrade your BTC Pay Server

Upgrade your BTC Pay Server

Scheduled Pinned Locked Moved Community Apps
7 Posts 4 Posters 173 Views 3 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • nostrdevN Offline
    nostrdevN Offline
    nostrdev
    wrote last edited by
    #1

    If you are running BTC Pay Server, please upgrade immediately, and destroy the macaroons file. There is an active exploit.

    More info: https://github.com/btcpayserver/btcpayserver/releases/tag/v2.4.2

    Image details (v2.4.2 is now available): https://ca.cloudron.io/app/btcpay-server

    1 Reply Last reply
    5
    • robiR Offline
      robiR Offline
      robi
      wrote last edited by robi
      #2

      There is a critical vulnerability being actively exploited on BTC Pay Server, which can result in the loss of funds.

      Please update your BTC Pay Server to 2.4.2 by going to Admin Dashboard -> Server -> Maintenance -> Update & verify the 2.4.2 version string in the footer.

      If you are unable to update right away, turn off your BTC Pay Server to prevent unauthorized access until you can update.

      Conscious tech

      1 Reply Last reply
      2
      • necrevistonnezrN Offline
        necrevistonnezrN Offline
        necrevistonnezr
        wrote last edited by necrevistonnezr
        #3

        Taking into account the Coldcard desaster as well: Maybe a decentralized money system, where nobody can control you but - unlike a Bank that is in charge of security - nobody is accountable isn’t such a good idea after all.

        nostrdevN marcusquinnM 2 Replies Last reply
        0
        • necrevistonnezrN necrevistonnezr

          Taking into account the Coldcard desaster as well: Maybe a decentralized money system, where nobody can control you but - unlike a Bank that is in charge of security - nobody is accountable isn’t such a good idea after all.

          nostrdevN Offline
          nostrdevN Offline
          nostrdev
          wrote last edited by
          #4

          @necrevistonnezr - hardly. Coldcard are accountable for their catastrophic mistake. The community has also learned a valuable lesson with regards to RNG and entropy.

          Note that the coldcard incident had nothing at all to do with the Bitcoin protocol, which continues to securely mine blocks.

          Remember that the money you loan to the bank:

          1. doesn't exist (it's credit)
          2. does not belong to you (it's a credit)
          3. is held by a (credit) institution that is not accountable to you. As anyone who has had their account frozen will attest.
          necrevistonnezrN 1 Reply Last reply
          1
          • necrevistonnezrN necrevistonnezr

            Taking into account the Coldcard desaster as well: Maybe a decentralized money system, where nobody can control you but - unlike a Bank that is in charge of security - nobody is accountable isn’t such a good idea after all.

            marcusquinnM Offline
            marcusquinnM Offline
            marcusquinn
            wrote last edited by marcusquinn
            #5

            @necrevistonnezr "money" is just a test score for your ability to create and preserve the value of goodwill. Many will fail that, and that's OK. They can take keep taking the tests gain until they figure it all out, or die trying.

            • https://x.com/jimmysong/status/2084798666616009103?s=20

            02427759-c755-400f-8429-fcdf07d61a38-image.jpeg

            Web Design & Development: https://www.evergreen.je
            Technology & Apps: https://www.marcusquinn.com

            1 Reply Last reply
            0
            • nostrdevN nostrdev

              @necrevistonnezr - hardly. Coldcard are accountable for their catastrophic mistake. The community has also learned a valuable lesson with regards to RNG and entropy.

              Note that the coldcard incident had nothing at all to do with the Bitcoin protocol, which continues to securely mine blocks.

              Remember that the money you loan to the bank:

              1. doesn't exist (it's credit)
              2. does not belong to you (it's a credit)
              3. is held by a (credit) institution that is not accountable to you. As anyone who has had their account frozen will attest.
              necrevistonnezrN Offline
              necrevistonnezrN Offline
              necrevistonnezr
              wrote last edited by necrevistonnezr
              #6

              @nostrdev said:

              Remember that the money you loan to the bank:

              1. doesn't exist (it's credit)
              2. does not belong to you (it's a credit)
              3. is held by a (credit) institution that is not accountable to you. As anyone who has had their account frozen will attest.

              Sorry, this is just nicely-worded nonsense. I'm a lawyer, and believe me, the "money" does exist and belong to you, you can successfully sue a bank if there is ever a need, bitcoins are frozen and seized all the time; and at least in a crisis a functioning state guarantees you access to it (up to a certain amount).

              Remember that crypto is the currency that fuels (cyber-)crime, the most corrupt family to ever hold the US-President office, and even failed states such as North Korea.

              The world would be better off without it.

              1 Reply Last reply
              0
              • nostrdevN Offline
                nostrdevN Offline
                nostrdev
                wrote last edited by
                #7

                @necrevistonnezr - I guess you are not going to be needing BTC Pay Server any time soon. Thanks for sharing your nicely-worded (and referenced) opinions.

                1 Reply Last reply
                2

                Hello! It looks like you're interested in this conversation, but you don't have an account yet.

                Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

                With your input, this post could be even better 💗

                Register Login
                Reply
                • Reply as topic
                Log in to reply
                • Oldest to Newest
                • Newest to Oldest
                • Most Votes


                • Login

                • Don't have an account? Register

                • Login or register to search.
                • First post
                  Last post
                0
                • Categories
                • Recent
                • Tags
                • Popular
                • Bookmarks
                • Search