search

cubedro / eth-netstats

Ethereum Network Stats
https://ethstats.net/
GNU General Public License v3.0
858 stars 546 forks source link

SECURITY ALERT #277

Open skydogch opened 9 years ago

skydogch commented 9 years ago

Hi,

when I execute "PORT=3015 WS_SECRET=big-secret npm start", the following log is show:

eth-netstats@0.0.9 start /home/cloudhorse/eth-netstats node ./bin/www

The problem is, when I open http://localhost:3015/, then the following message appears in the webbrowser

ATTENTION!This page does not represent the entire state of the ethereum network - listing a node on this page is a voluntary process. SECURITY ALERTRead the blog post

"Read the blog post" contains a link to "https://blog.ethereum.org/2015/09/10/security-alert-previous-security-patch-can-lead-to-invalid-state-root-on-go-clients-with-a-specific-transaction-sequence-fixed-please-update/"

Why is that happening? No network status is displayed

skydogch commented 9 years ago

Hi, any update about this issue?

mminisha commented 8 years ago

I have the same problem :-(

DavidBelinchon commented 8 years ago

sudo npm install -g grunt-cli

jackhuang89 commented 8 years ago

Same issue... like this...

screen shot 2016-04-25 at 11 56 09 am
PlamJ commented 8 years ago

screenshot from 2016-09-07 11 53 11

Getting this error, kindly help with the issue

sorokinvld commented 8 years ago

any update?

mikeyb commented 8 years ago

It means add some nodes to your service. This is not an application issue, more of an end user issue. By default your stats node will have no users, get people added.

AyushyaChitransh commented 6 years ago

This is resolved by building the site. README.md says that the site requires to be built: To build the full version run

grunt

To build the lite version run

grunt lite

If you want to build both versions run

grunt all

Either of the above will resolve this issue.

5chdn commented 5 years ago

Fixed all vulnerable deps in https://github.com/goerli/netstats-server/pull/5

iamhammadaali commented 4 years ago

ATTENTION!This page does not represent the entire state of the ethereum network - listing a node on this page is a voluntary process.

I am also getting this error. How to resolve this?

brianchul commented 3 years ago

I had made some progress with this blog post

It seems that you need to run frontend eth-netstats first and then launch backend api eth-net-intelligence-api with all same WS_SECRET.

Make sure to check you had set the env parameter correctly and both apps can read the same secret.

However the difficulty in frontend is still remain empty.

For the blank problem mention previous comments, simply run grunt all command but not grunt lite may fix the problem.