{"action":"created","issue":{"url":"https://api.github.com/repos/bitcoin-dot-org/bitcoin.org/issues/1086","labels_url":"https://api.github.com/repos/bitcoin-dot-org/bitcoin.org/issues/1086/labels{/name}","comments_url":"https://api.github.com/repos/bitcoin-dot-org/bitcoin.org/issues/1086/comments","events_url":"https://api.github.com/repos/bitcoin-dot-org/bitcoin.org/issues/1086/events","html_url":"https://github.com/bitcoin-dot-org/bitcoin.org/pull/1086","id":110960711,"number":1086,"title":"add warning about UPnP vulnerability","user":{"login":"laanwj","id":126646,"avatar_url":"https://avatars.githubusercontent.com/u/126646?v=3","gravatar_id":"","url":"https://api.github.com/users/laanwj","html_url":"https://github.com/laanwj","followers_url":"https://api.github.com/users/laanwj/followers","following_url":"https://api.github.com/users/laanwj/following{/other_user}","gists_url":"https://api.github.com/users/laanwj/gists{/gist_id}","starred_url":"https://api.github.com/users/laanwj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/laanwj/subscriptions","organizations_url":"https://api.github.com/users/laanwj/orgs","repos_url":"https://api.github.com/users/laanwj/repos","events_url":"https://api.github.com/users/laanwj/events{/privacy}","received_events_url":"https://api.github.com/users/laanwj/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-10-12T12:03:50Z","updated_at":"2015-10-12T14:02:25Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/bitcoin-dot-org/bitcoin.org/pulls/1086","html_url":"https://github.com/bitcoin-dot-org/bitcoin.org/pull/1086","diff_url":"https://github.com/bitcoin-dot-org/bitcoin.org/pull/1086.diff","patch_url":"https://github.com/bitcoin-dot-org/bitcoin.org/pull/1086.patch"},"body":"Add warning about UPnP vulnerability.\r\n\r\nContext:\r\n\r\n- https://github.com/bitcoin/bitcoin/pull/6795\r\n- https://github.com/bitcoin/bitcoin/pull/6789\r\n- https://twitter.com/orionwl/status/652465879226142720\r\n\r\nTODO:\r\n\r\n- [ ] actually release 0.11.1 (or at the least rc binaries)\r\n- [x] move the screenshot image to a sane place\r\n- [x] maybe add instructinos about manually forwarding ports (not necessarily here)\r\n"},"comment":{"url":"https://api.github.com/repos/bitcoin-dot-org/bitcoin.org/issues/comments/147407687","html_url":"https://github.com/bitcoin-dot-org/bitcoin.org/pull/1086#issuecomment-147407687","issue_url":"https://api.github.com/repos/bitcoin-dot-org/bitcoin.org/issues/1086","id":147407687,"user":{"login":"laanwj","id":126646,"avatar_url":"https://avatars.githubusercontent.com/u/126646?v=3","gravatar_id":"","url":"https://api.github.com/users/laanwj","html_url":"https://github.com/laanwj","followers_url":"https://api.github.com/users/laanwj/followers","following_url":"https://api.github.com/users/laanwj/following{/other_user}","gists_url":"https://api.github.com/users/laanwj/gists{/gist_id}","starred_url":"https://api.github.com/users/laanwj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/laanwj/subscriptions","organizations_url":"https://api.github.com/users/laanwj/orgs","repos_url":"https://api.github.com/users/laanwj/repos","events_url":"https://api.github.com/users/laanwj/events{/privacy}","received_events_url":"https://api.github.com/users/laanwj/received_events","type":"User","site_admin":false},"created_at":"2015-10-12T14:02:25Z","updated_at":"2015-10-12T14:02:25Z","body":"> should we place a red banner at the top of each page notifying every visitor about this, should we use a less-aggressive orange banner, or should we use no banner at all.\r\n\r\nI'd put up a red banner, when it goes up.\r\n\r\n> should we temporarily disable the links on the Download page that point to 0.11.0?\r\n\r\nNot sure. It's ok to use 0.11.0 as long as people follow the steps in the alert.\r\n\r\n0.11.1rc2 is waiting for code signing. After that is done I'll upload them.\r\nThen people can test that...\r\n\r\n> Should we release this alert now, or should we wait for 0.11.1 to be released?\r\n\r\nI'd like to wait at least until rc binaries have been uploaded.\r\n"}}