回复：比特币与缓冲区溢出攻击
原始发布页
打开来源页面查看 1 个交叉存档
引用自：da2ce7，2010 年 12 月 11 日上午 05:49:22
直接向 IP 地址转账似乎是一个明显的攻击面。
前提是你能找到把它开启的人。它默认是禁用的。
引用自：witchspace，2010 年 12 月 11 日上午 09:59:40
不可能绝对确定不存在缓冲区溢出攻击。不过，用一种不会发生缓冲区溢出的语言来实现客户端会有所帮助，因为这种语言会检查数组索引（Python、Java、C#……）。
全都使用 STL。几乎没有缓冲区。
英文原文
展开英文原文
Quote from: da2ce7 on December 11, 2010, 05:49:22 AM
direct to IP address transfers seems like a obvious surface area to attack.
If you ever find anyone who turned it on. It's disabled by default.
Quote from: witchspace on December 11, 2010, 09:59:40 AM
There is no way to be absolutely sure that there are no buffer overflow attacks. Although it would help to implement the client in a language that doesn't have buffer overflows because it checks array indices (Python, Java, C#, ...).
It's all STL. There are almost no buffers.