"I think" they fixed it for now

The new chia release version 1.1.7 has nothing to be excited about, at least on paper.
But, this is my opinion and could be wrong, they fixed the Core-pool’s back door for now… (Cat and mouse story begins… )

How? The commits between 1.1.6 and 1.1.7 are here:

How does anything in those commits stop core-pool (a separate, closed source project) from doing anything they like to your computer during their install? From stealing your private key to installing a backdoor?

1 Like