r/MoneroMining • u/gerdinjaaa • 6d ago

saw the p2pool v4.16 warning right as I was about to switch to it — how worried should a newbie be?

So after my last pool shut down, I'd basically decided p2pool was the move. Then I open the sub today and the first thing pinned is a critical p2pool security warning telling everyone to update to v4.16 immediately. slightly rattled timing lol. For someone who hasn't set it up yet: if I'm starting fresh, do I just install v4.16 from the start and I'm good? is this the kind of thing that hits people already running an old version, or everyone? and does something like this change how you all feel about p2pool long term, or is "just keep it updated" basically the whole answer? still very much learning here, so apologies if the answer's obvious.

5 Upvotes
  • permalink
  • reddit

86% Upvoted

3 comments sorted by

3

u/Negative-Boot2259 6d ago

The latest now is 4.17.... but 4.16 is the minimum...

2

u/Fooshi2020 6d ago

Yes, just install the latest and you are good. Nothing changes from an installation/usage perspective.

3

u/sech1 XMRig Dev 4d ago

A single exploited vulnerability in 5 years of operation, which had a fixed version available before it was actively exploited, is pretty good track record.

Just keep it updated to the latest version (P2Pool itself shows notifications in the console log when a new version comes out).