Official Monero site has served possible malware for 30 minutes between Nov.18 and Nov.19.
Always verify hashes!
Official Monero site has served possible malware for 30 minutes between Nov.18 and Nov.19.
Always verify hashes!
According to the email from the monero-announce list the malware was being served for 14 hours.
The malware will steal your coins: Wrong hashes (from getmonero.org) · Issue #6151 · monero-project/monero · GitHub
I’ve posted a proposal at monero Community Crowdfunding System (CCS) where I suggested myself to become the maintainer of a monero GUI Debian package installable from whonix.org repository, avaiable for all users of Debian buster, Whonix and Qubes Debian buster template.
Discussion here:
Monero Debian Package Repository for 2 years (!130) · Merge requests · monero-project / CCS Proposals · GitLab
See full proposal text here:
Monero Debian Package Repository for 2 years (!130) · Merge requests · monero-project / CCS Proposals · GitLab
The CCS proposal was a success. Funding as provided.
https://ccs.getmonero.org/proposals/adrelanos-debian-package.html
Monero GUI was packaged for Debian. It’s available in all Whonix repositories.
https://github.com/Whonix/monero-gui
Not calling for testers just yet since I am still testing myself.
There’s also a non-packaging, probably non-Whonix specific 100% CPU use bug: v0.14.x.x High CPU Usage on Linux · Issue #2238 · monero-project/monero-gui · GitHub
Looks like a new ticket was created instead of re-opening the old one:
Good to see a developer react so quickly.
Could you please test monero-gui (from Whonix repository https://github.com/Whonix/monero-gui)
sudo apt update
sudo apt install monero-gui
in Whonix-Workstation KVM and see if KVM is affected by any of these bugs?
Related, perhaps you also have an idea for Test command from inside VM to detect if VirtualBox 3D acceleration is enabled or disabled?
Install mesa-utils then run glxinfo | grep OpenGL
If 3D is being emulated in pure software because no acceleration it will say llvmpipe. At least it’s the case with KVM. This isn’t future proof and makes no sense in vulkan environments.
OpenGL vendor string: VMware, Inc.
OpenGL renderer string: llvmpipe (LLVM 7.0, 128 bits)
VirtaulBox host setting VMSVGA 3D acceleration seems to be working.
The output of glxinfo
is exactly the same with and without 3D acceleration.
I can’t find any way to figure that out from inside the VM. The only way to find this out is by testing. Environment variable QMLSCENE_DEVICE=softwarecontext
is either required or not.
QMLSCENE_DEVICE=softwarecontext monero-wallet-gui
or
monero-wallet-gui
For VirtualBox, this will be simplified in the future in Whonix ™ 15.0.1.3.4
(and above) which is coming soon. QMLSCENE_DEVICE=softwarecontext
will be globally set as environment variable if VirtualBox is detected. Script:
vm-config-dist/20software_rendering_in_vms at master · Kicksecure/vm-config-dist · GitHub
Seeing the exact same behavior described in bug reports. Expected because 3D acceleration is not fully ready yet for KVM on Debian stable.
any way to test if it works for kvm?