3 ms·
Kaspersky says that if you decide to write or download a program that executes arbitrary bytecode written to the blockchain it would be possible for somebody to
by TTPrograms 11y ago
Kaspersky says that if you decide to write or download a program that executes arbitrary bytecode written to the blockchain it would be possible for somebody to put malicious bytecode on the blockchain that you could then execute if you decided to point to those transactions.
Fortunately there's a fix - don't do that. Nobody does that.
- sigzero 11y agoNever say "nobody".
- NeutronBoy 11y ago> if you decide to write or download a program that executes arbitrary bytecode written to the blockchain Or any code at all that parses the contents of the blockchain. This applies to any program or function that takes untrusted input. http://seclists.org/fulldisclosure/2014/Nov/74 http://seclists.org/fulldisclosure/2014/Nov/74
- ikeboy 11y agoNo. There's a very narrow non-turing complete set of instructions that bitcoin understands. See https://en.bitcoin.it/wiki/Script https://en.bitcoin.it/wiki/Script There's no way to execute arbitrary code on the host. >Unfortunately, many of these scripts appear to call a rather large number of third-party tools that likely have not been designed with malicious inputs in mind. Bitcoin was designed with malicious inputs in mind.