Bitcoin Forum
May 05, 2024, 06:39:27 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1]
1  Bitcoin / Bitcoin Technical Support / Forum: Add Jabber/XMPP to the list of IM services. on: August 10, 2010, 07:18:02 AM
I am pretty sure the most of bitcoiners have interest in BC as well as other open-source decentralized projects, the most popular of them being Jabber. Basically, it is an IM service (like ICQ, AIM, MSN), that... is distributed (so you can set up your own server). It is quite popular: many people have Jabber accounts even if they don't know about it (GMail/GTalk users, LiveJournal users, Facebook users (IIRC, since I never had a FB account) QIP Infium users...). It also has transport services, that you can register your other service accounts on and talk with those services' users within your Jabber client...

There are easy-to-install mods that add Jabber to the IM list for SMF forums, so this shouldn't be too hard.
2  Bitcoin / Development & Technical Discussion / A security bug in headless client? on: July 16, 2010, 10:51:28 AM
(not found by me, but by linux.org.ru user mkfifo)

If you start bitcoind as one user, then type some command as the other user (e.g. bitcoind getbalance), it will work and output your balance. It may be very dangerous on multi-user systems. Imagine there is a user with a hard password that owns bitcoin wallet and a user with weak password that doesn't. So if a hacker breaks the other user's password or gets access to the other user's account, he could steal the money from the first user.

Some desktops (Windows and Linux) even have the guest account with no password, that can be used to steal bitcoins too.

The solution would be to open a UNIX socket with read/write permissions only for the user/group it is opened as.
Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!