monero-project / monero-site

https://getmonero.org
BSD 3-Clause "New" or "Revised" License
268 stars 381 forks source link

Update I2P guide to use i2pd #2277

Open jermanuts opened 4 months ago

jermanuts commented 4 months ago

https://www.getmonero.org/resources/user-guides/node-i2p-zero.html utilizes i2p zero which is no longer maintained since 2021.

They use a very old version of I2p version 0.9.50 (2021-05-18) which is vulnerable, example: https://xeiaso.net/blog/CVE-2023-36325/ (Attackers can de-anonymize i2p hidden services with a message replay attack). Official site https://geti2p.net/en/blog/post/2023/06/25/new_release_2.3.0, https://geti2p.net/en/blog/post/2023/12/18/i2p-release-2.4.0, https://geti2p.net/en/blog/post/2022/04/21/Easy-Install-Updates etc

Update guide using i2pd which is more well maintained implementation in C++ and very fast and lightweight.

Reference: https://landchad.net/monerod/#i2p

jermanuts commented 4 months ago

I just saw https://github.com/monero-project/monero-site/pull/1968#issuecomment-1783948345

@plowsof can you open a PR with the updated guide?

nahuhh commented 3 months ago

Afaik i2pzero pulls in latest java i2p router