day 7: observation about processes: how long does it take to come out with a new Gridcoin version?

[Erkan-Yilmaz]

Please share your ideas/suggestions about process improvements that will help Gridcoin. Thank you!

August 15:

• I posted about security flaws being reported in Gridcoin
  • further info at #34 (and as can be seen there: the issues were known much earlier, but now we have it out open in the public)

August 21:

• Gridcoin dev @tomasbrod applied an exploit at the "public" 1million-block event
  • see this and this (345 is already in released code)

Let's observe now:

• How much time will it take to get a (mandatory) Gridcoin version out (that fixes the issues from above)?
  • it seems that some fixes are already in the staging branch
• the thing also is: that exchanges need some time in advance to prepare for the mandatory
  • and especially Poloniex with its known delays (aka: not replying to support tickets) will be probably a critical factor
• let's be good-willing and take as counter August 15

related:

• 27: check the timeline there: took about 1 week to release a version for:

  • "new Gridcoin user? your wallet will not run :-("
  • the issue seems to have been to wait on Rob @gridcoin
  • What could be done elsewise in future? Give also @denravonska God powers for the repo and needed services (so e.g. he can build + release a Windows version)? Speeden up the autotools or Travis system (see milestones)?

see also:

• Gridcoin dev milestones (August 15)
• more dev news in here
• the process category: e.g. You have an "out of sync" message in version 3.5.9.9 (but your blockchain is actually uptodate and fine) ?

---

• You like what I do? Take action here.
• Did you know, you can also SUBMIT content onto twitter account @GridcoinIRC ?

[gridcoin]

Incorrect- Although I dont mind being blamed when I am the bottleneck, and do take responsibility for creating the RSA weight exploit in the first place, this release process was not bottlenecked by me. The current release process is already light, and frankly having me for the final release provides an extra set of eyes on the actual prod final release (as far as ensuring the client stakes, the cutover height etc).

There is no way to release code directly to production without going through the process.

Please elaborate on where you believe the process could have deployed the fix any sooner.

Things need to be pushed from test to staging to prod After they are tested before they can be released.

[Erkan-Yilmaz]

4 days now, no new Gridcoin version or snapshot