Bitcoin Forum
September 06, 2024, 08:25:35 PM
Welcome,
Guest
. Please
login
or
register
.
News
: Latest Bitcoin Core release:
27.1
[
Torrent
]
Home
Help
Search
Login
Register
More
Bitcoin Forum
>
Local
>
中文 (Chinese)
>
媒体
>
BU用闭源代码修复漏洞惹争议,网友吐槽其对比特币一无所知
Pages: [
1
]
« previous topic
next topic »
Print
Author
Topic: BU用闭源代码修复漏洞惹争议,网友吐槽其对比特币一无所知 (Read 164 times)
tmkqegc7437
(OP)
Newbie
Offline
Activity: 31
Merit: 0
BU用闭源代码修复漏洞惹争议,网友吐槽其对比特币一无所知
March 23, 2017, 06:34:25 PM
#1
Bitcoin unlimited(BU)开发者又引发了另一场争议。他们参照私有开发库的代码发布了新的客户端二进制数据,最终导致任何人都无法验证这次更新的有效性。添加一个闭源(closed source)的补丁绝对不是个好主意,特别是在“意外”分配的前提下(这个补丁不是通过官方渠道发布的)。
比特币代码
闭源补丁的风险
比特币的设计初衷在于协议的开源(open source)。这也就意味着所有的开发进程都应该是可以被公开验证的。出于某些原因,BU开发者决定采用闭源的方法发布近期的客户端二进制数据。更麻烦的是,这些二进制数据的发布信息被意外“泄露”了,因此BU也遭到了更多的质疑。
为了正确了解上述事件的严重性,我们首先应该了解这个新的BU二进制数据是通过Launchpad(软件发布平台)平台发布的。这是非常罕见的现象。彼得•托德(Peter Todd)在推特上指出,虽然在不同的分布式平台中发布代码不是什么大问题,但用Launchpad来发布闭源的、未经加密的二进制数据是错误的决定。因为,这一二进制数据很可能是恶意的客户端更新。
比特币
不久之后,比特币社区成员就对此做出了回应。Reddit上出现了很多讨论这一问题的帖子。另外,社交媒体平台的用户也没有轻饶这一错误,很多人都已经开始强烈抗议。甚至有一名推特用户说“这一事件证明了BU开发者对比特币一无所知”。这一说法存在强烈的情感色彩,但用户做出这种反应也是可以理解的。
这一特殊的二进制数据更新修复了另一个可能影响到BU节点的漏洞。上一个漏洞大约在一个星期以前得到解决,不过已经有人在补丁修复之前就恶意利用过这个漏洞。结果,数百个BU节点由于一位不明身份的攻击者而下线。一旦更新发布,所有客户端都得到修复之后,BU节点就迅速恢复了。
然而,这次出现了闭源的二进制数据更新,BU开发者是被迫采取了不同的方法。他们不希望看到另一个漏洞被公之于众,因此他们选择使用私有的代码库。只要所有重要节点都完成了更新,他们就会把这些二进制数据合并到常用的BU开发分支。这个解释听起来很有道理,就算他们说的是真的,BU也不应该选择这种方法。
以闭源的方式发布补丁不是解决遗留问题的最佳方式。秘密的开发工作很可能造成所有人都想象不到的严重后果。部分比特币社区成为认为BU这种开发方式存在“侮辱性”,因为比特币很可能因此背负骂名。在未来的补丁发布过程中,观察BU开发者是否会坚持使用这一方法或者他们是否已经从这次的“错误”中吸取了宝贵的教训是件有趣的事。
Pages: [
1
]
Print
Bitcoin Forum
>
Local
>
中文 (Chinese)
>
媒体
>
BU用闭源代码修复漏洞惹争议,网友吐槽其对比特币一无所知
« previous topic
next topic »
Jump to:
Please select a destination:
-----------------------------
Bitcoin
-----------------------------
=> Bitcoin Discussion
===> Legal
===> Press
===> Meetups
===> Important Announcements
=> Development & Technical Discussion
===> Wallet software
=====> Electrum
=====> Bitcoin Wallet for Android
=====> BitcoinJ
=====> Armory
=====> Mycelium
=====> Hardware wallets
=> Mining
===> Mining support
===> Pools
===> Mining software (miners)
===> Hardware
=====> Group buys
===> Mining speculation
=> Bitcoin Technical Support
=> Project Development
-----------------------------
Economy
-----------------------------
=> Economics
===> Speculation
=> Marketplace
===> Goods
=====> Computer hardware
=====> Digital goods
=======> Invites & Accounts
=====> Collectibles
===> Services
===> Currency exchange
===> Gambling
=====> Games and rounds
=====> Investor-based games
=====> Gambling discussion
===> Lending
=====> Long-term offers
===> Securities
===> Auctions
===> Service Announcements
=====> Micro Earnings
===> Service Discussion
=====> Web Wallets
=====> Exchanges
=> Trading Discussion
===> Scam Accusations
===> Reputation
-----------------------------
Other
-----------------------------
=> Meta
===> New forum software
===> Bitcoin Wiki
=> Politics & Society
=> Beginners & Help
=> Off-topic
=> Serious discussion
===> Ivory Tower
=> Archival
===> Корзина
===> CPU/GPU Bitcoin mining hardware
===> Chinese students
===> Obsolete (buying)
===> Obsolete (selling)
===> MultiBit
-----------------------------
Alternate cryptocurrencies
-----------------------------
=> Altcoin Discussion
=> Announcements (Altcoins)
===> Tokens (Altcoins)
=> Mining (Altcoins)
===> Pools (Altcoins)
=> Marketplace (Altcoins)
===> Service Announcements (Altcoins)
===> Service Discussion (Altcoins)
===> Bounties (Altcoins)
=> Speculation (Altcoins)
-----------------------------
Local
-----------------------------
=> العربية (Arabic)
===> العملات البديلة (Altcoins)
=====> النقاشات
===> إستفسارات و أسئلة المبتدئين
===> التعدين
===> النقاشات الأخرى
===> منصات التبادل
=> Bahasa Indonesia (Indonesian)
===> Marketplace (Bahasa Indonesia)
===> Mining (Bahasa Indonesia)
===> Altcoins (Bahasa Indonesia)
===> Trading dan Spekulasi
===> Ekonomi, Politik, dan Budaya
===> Topik Lainnya
=> Español (Spanish)
===> Mercado y Economía
=====> Servicios
=====> Trading y especulación
===> Hardware y Minería
===> Esquina Libre
===> Mercadillo
=====> Mexico
=====> Argentina
=====> España
=====> Centroamerica y Caribe
===> Primeros pasos y ayuda
===> Altcoins (criptomonedas alternativas)
=====> Minería de altcoins
=====> Servicios
=====> Tokens (Español)
=> 中文 (Chinese)
===> 跳蚤市场
===> 山寨币
===> 媒体
===> 挖矿
===> 离题万里
=> Hrvatski (Croatian)
===> Trgovina
===> Altcoins (Hrvatski)
=====> Announcements (Hrvatski)
===> Off-topic (Hrvatski)
=> Deutsch (German)
===> Anfänger und Hilfe
===> Mining (Deutsch)
===> Trading und Spekulation
===> Projektentwicklung
===> Off-Topic (Deutsch)
===> Treffen
===> Presse
===> Altcoins (Deutsch)
=====> Announcements (Deutsch)
===> Marktplatz
=====> Auktionen
=====> Suche
=====> Biete
=> Ελληνικά (Greek)
===> Αγορά
===> Mining Discussion (Ελληνικά)
===> Altcoins (Ελληνικά)
=====> Altcoin Announcements (Ελληνικά)
=====> Altcoin Mining (Ελληνικά)
=> עברית (Hebrew)
=> Français
===> Actualité et News
===> Débutants
===> Discussions générales et utilisation du Bitcoin
===> Mining et Hardware
===> Économie et spéculation
===> Place de marché
=====> Échanges
=====> Produits et services
=====> Petites annonces
===> Le Bitcoin et la loi
===> Wiki, documentation et traduction
===> Développement et technique
===> Vos sites et projets
===> Hors-sujet
===> Altcoins (Français)
=====> Annonces
=> India
===> Mining (India)
===> Marketplace (India)
===> Regional Languages (India)
===> Press & News from India
===> Alt Coins (India)
===> Buyer/ Seller Reputations (India)
===> Off-Topic (India)
=> Italiano (Italian)
===> Guide (Italiano)
===> Progetti
===> Discussioni avanzate e sviluppo
===> Trading, analisi e speculazione
===> Mercato
=====> Mercato valute
=====> Beni
=====> Servizi
=====> Esercizi commerciali
=====> Hardware/Mining (Italiano)
=====> Gambling (Italiano)
===> Accuse scam/truffe
===> Mining (Italiano)
===> Alt-Currencies (Italiano)
=====> Annunci
===> Raduni/Meeting (Italiano)
===> Crittografia e decentralizzazione
===> Off-Topic (Italiano)
=> 日本語 (Japanese)
===> アルトコイン
=> Nederlands (Dutch)
===> Markt
===> Gokken/lotterijen
===> Mining (Nederlands)
===> Beurzen
===> Alt Coins (Nederlands)
===> Off-topic (Nederlands)
===> Meetings (Nederlands)
=> Nigeria (Naija)
===> Politics and society (Naija)
===> Off-topic (Naija)
=> 한국어 (Korean)
===> 대체코인 Alt Coins (한국어)
=> Pilipinas
===> Altcoins (Pilipinas)
=====> Altcoin Announcements (Pilipinas)
===> Pamilihan
===> Others (Pilipinas)
=> Polski
===> Tablica ogłoszeń
===> Alternatywne kryptowaluty
=====> Nowe kryptowaluty i tokeny
=====> Tablica ogłoszeń (altcoiny)
=> Português (Portuguese)
===> Primeiros Passos (Iniciantes)
===> Economia & Mercado
===> Mineração em Geral
===> Desenvolvimento & Discussões Técnicas
===> Criptomoedas Alternativas
===> Brasil
===> Portugal
=> Русский (Russian)
===> Новички
===> Бизнес
=====> Барахолка
=====> Обменники
===> Идеи
===> Кодеры
===> Майнеры
===> Политика
===> Трейдеры
===> Альтернативные криптовалюты
=====> Токены
=====> Бayнти и aиpдpoпы
===> Хайпы
===> Работа
===> Разное
===> Oбcyждeниe Bitcoin
=====> Новости
=====> Юристы
=> Română (Romanian)
===> Anunturi importante
===> Offtopic
===> Market
=====> Discutii Servicii
===> Minerit
===> Tutoriale
===> Bine ai venit!
===> Presa
===> Altcoins (Monede Alternative)
=====> Anunturi Monede Alternative
=> Skandinavisk
=> Türkçe (Turkish)
===> Bitcoin Haberleri
===> Pazar Alanı
===> Madencilik
===> Ekonomi
===> Servisler
=====> Fonlar
===> Proje Geliştirme
===> Alternatif Kripto-Paralar
=====> Madencilik (Alternatif Kripto-Paralar)
=====> Duyurular (Alternatif Kripto-Paralar)
===> Konu Dışı
===> Yeni Başlayanlar & Yardım
===> Buluşmalar
=> Other languages/locations
Loading...