[bisq-network/bisq] Release v1.3.0 - v1.3.0

Christoph Atteneder notifications at github.com
Wed Apr 8 13:04:33 UTC 2020

This is a hot fix release fixing a critical security vulnerability in the trade protocol.

- https://github.com/bisq-network/bisq/pull/4134
- https://github.com/bisq-network/bisq/pull/4137
- https://github.com/bisq-network/bisq/pull/4140

Here are the release notes from v1.2.9:

## Release notes
This release is, once again, packed with bug fixes and improvements. Most notably, it reduces the intervals in which users can trigger a trade process refresh.

### UI
- [Improve wording for local BTC node reminder in `Settings > Network info`](https://github.com/bisq-network/bisq/pull/4024)
- [Display 2 decimal places for fiat trading fees](https://github.com/bisq-network/bisq/pull/3973)
- [Fix checkbox handling in `My Open Offers`](https://github.com/bisq-network/bisq/pull/4008)

### Trading
- Reduce time until trade process refresh is possible: [1](https://github.com/bisq-network/bisq/pull/3980), [2](https://github.com/bisq-network/bisq/pull/4044)
- [Update owner address of offer to new hidden service files](https://github.com/bisq-network/bisq/pull/4021)
- [Add ARS as supported currency for MoneyGram](https://github.com/bisq-network/bisq/pull/4007)

### Performance
- [Speed up DAO state monitor view load](https://github.com/bisq-network/bisq/pull/4035)

### Privacy
- [Remove unused uid in fee provider service](https://github.com/bisq-network/bisq/pull/4015)
- [Fix incorrect deletion of hidden service directory when using --appDataDir](https://github.com/bisq-network/bisq/pull/4018)

### Configuration
- [Avoid startup failure when appDataDir is a symbolic link](https://github.com/bisq-network/bisq/pull/4002)
- [Accept empty config values](https://github.com/bisq-network/bisq/pull/3978)

### Network
- [Update URL for mempool.ninja blockchain explorer](https://github.com/bisq-network/bisq/pull/4033)
- [Fix nginx.conf for collectd so it only listens on](https://github.com/bisq-network/bisq/pull/4016)
- Fix CoinMarketCap API issues: [1](https://github.com/bisq-network/bisq/pull/4032), [2](https://github.com/bisq-network/bisq/pull/4037), [3](https://github.com/bisq-network/bisq/pull/4043)
- [Moved node2.emzy.de to a new host](https://github.com/bisq-network/bisq/pull/4010)

### Monitor
- [Added monitoring install scripts](https://github.com/bisq-network/bisq/pull/3985)

### Support
- [Log delayed payout transaction bytes as soon as it's signed during trade initialization](https://github.com/bisq-network/bisq/pull/4040)
- [Dump delayed payout transactions of both pending and failed trades if flag is set](https://github.com/bisq-network/bisq/pull/4029)

### Assets
No assets were added.

## Verification

Url of the signing key (Christoph Atteneder): https://bisq.network/pubkey/29CDFD3B.asc
Full fingerprint: `CB36 D7D2 EBB2 E35D 9B75  500B CD5D C1C5 29CD FD3B`

Import the key:
`curl https://bisq.network/pubkey/29CDFD3B.asc | gpg --import`
GPG prints a confusion warning: "This key is not certified with a trusted signature!" - See https://serverfault.com/questions/569911/how-to-verify-an-imported-gpg-key for background information what it means.

How to verify signatures?
`gpg --digest-algo SHA256 --verify BINARY{.asc*,}`
Replace BINARY with the file you downloaded (e.g. Bisq-1.3.0.dmg)

Verify jar file inside binary:
You can verify on OSX the jar file with:
`shasum -a256 [PATH TO BISQ APP]/Bisq.app/Contents/Java/Bisq-1.3.0.jar`
The output need to match the value from the Bisq-1.3.0.jar.txt file.

## Known issues with installation 

### macOS Catalina:
> Bisq would like to receive keystrokes from any application.

Discussed in issue https://github.com/bisq-network/bisq/issues/3373, you will see a permission request in the latest macOS version that Bisq wants to receive keystrokes from any application. Unfortunately that is an issue for all Java applications that are run on Catalina right now. We are investigating already how to solve this issue and will fix in one of our next updates.

### Windows:

There is a known issue with Anti Virus software. We got several reports from users running into different problems. Either the AV software blocks Bisq or Tor, delete files in the data directory [2] or app directory [1]) or cause such a long delay at startup that Tor gets terminated and a file remains locked which can cause that Bisq cannot be started afterwards. To resolve that you need to restart Windows then the lock get released. We are working on solutions to fix those issues.

If you use Crypto currencies on your Windows system be aware that Windows is much more vulnerable to malware than Linux or OSX. Consider to use a dedicated non-Windows system when dealing with cryptocurrencies.

[1] Application directory (contains application installation files):

[2] Data directory (contains all Bisq data including wallet):
C:\Users\<username>\AppData\Roaming\Bisq\btc_mainnet\tor (you can delete everything except the hiddenservice directory)

### Linux:

Hint for Debian users:
If you have problems starting Bisq on Debian use: `/opt/Bisq/Bisq`

If your Linux distro does not support .deb files please follow this instruction:
cd ~/Downloads  
mkdir tmp  
cd tmp   
ar x ../Bisq-64bit-1.3.0.deb  
sudo tar Jxvf data.tar.xz  
sudo cp -rp opt/Bisq /opt/
That instruction is not tested on many different distros. If you encounter problems please report it in a Github issue so we can improve it. 

## Cleanup tool for saved trades that failed market price check

With this release we are also shipping a cleanup tool (Bisq-cleanup-trades*). It will remove corrupt trade entries added due to bug https://github.com/bisq-network/bisq/issues/2924. Install and run once, it will shut down automatically, then install version 1.3.0 or later. You can verify the binary the same way as you do with the Bisq application.

You are receiving this because you are subscribed to this thread.
View it on GitHub:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bisq.network/pipermail/bisq-github/attachments/20200408/e7d3c6a6/attachment-0001.html>

More information about the bisq-github mailing list