Open jermanuts opened 4 months ago
https://www.getmonero.org/resources/user-guides/node-i2p-zero.html utilizes i2p zero which is no longer maintained since 2021.
They use a very old version of I2p version 0.9.50 (2021-05-18) which is vulnerable, example: https://xeiaso.net/blog/CVE-2023-36325/ (Attackers can de-anonymize i2p hidden services with a message replay attack). Official site https://geti2p.net/en/blog/post/2023/06/25/new_release_2.3.0, https://geti2p.net/en/blog/post/2023/12/18/i2p-release-2.4.0, https://geti2p.net/en/blog/post/2022/04/21/Easy-Install-Updates etc
Update guide using i2pd which is more well maintained implementation in C++ and very fast and lightweight.
Reference: https://landchad.net/monerod/#i2p
I just saw https://github.com/monero-project/monero-site/pull/1968#issuecomment-1783948345
@plowsof can you open a PR with the updated guide?
Afaik i2pzero pulls in latest java i2p router
https://www.getmonero.org/resources/user-guides/node-i2p-zero.html utilizes i2p zero which is no longer maintained since 2021.
They use a very old version of I2p version 0.9.50 (2021-05-18) which is vulnerable, example: https://xeiaso.net/blog/CVE-2023-36325/ (Attackers can de-anonymize i2p hidden services with a message replay attack). Official site https://geti2p.net/en/blog/post/2023/06/25/new_release_2.3.0, https://geti2p.net/en/blog/post/2023/12/18/i2p-release-2.4.0, https://geti2p.net/en/blog/post/2022/04/21/Easy-Install-Updates etc
Update guide using i2pd which is more well maintained implementation in C++ and very fast and lightweight.
Reference: https://landchad.net/monerod/#i2p