以下是引用song在2004-7-29 6:44:29的发言:
3.03的安全问题主要是容易作弊,对于使用就没有影响,反倒是3.08镶入系统比较讨厌。对于我们个人来说,还是不镶入系统的安全性好一些,比较容易掌控。
3.03的问题不是作弊,是程序有漏洞,会导致主机被攻击!
Version 3.08 is a precautionary security release. There was a potential buffer overrun in the networking code of the client that is fixed with version 3.08. Note that to exploit this vulnerability, a potential attacker would have to trick the client into contacting a fake server rather than the actual SETI@home server. To our knowledge, no SETI@home client has ever been attacked in this manner.
http://setiathome.ssl.berkeley.edu/version308.html
[此贴子已经被作者于2004-7-29 9:42:18编辑过]
|