Re: Warning: don’t use -server or bitcoind on a machine where you web browse

Bitcoin Talk

Don’t use the -server or -daemon switch or run bitcoind on a machine where you use a web browser.  It opens port 8332 on 127.0.0.1, the local loopback address, and you wouldn’t think that web browsers could cross-site access it, but it is possible.

We’re working on a release soon that puts a password on the JSON-RPC interface, but until then, avoid using the -server switch, and don’t web browse on the same machine where bitcoind is running.

The JSON-RPC HTTP authentication feature in 0.3.3 solves this problem.

88,588 total views, 69 views today

Related posts:

  1. Warning: don’t use -server or bitcoind where you web browse (v0.3.2 and lower) Don’t use the -server or -daemon switch or run bitcoind...
  2. Re: bitcoind not responding to RPC Occasionally bitcoind will not respond to RPC I’m calling it...
  3. Re: Bitcoin snack machine (fast transaction problem) Quote from: llama on July 18, 2010, 00:03:29 This is...
  4. Re: Bitcoin snack machine (fast transaction problem) How would a Bitcoin snack  machine work? 1) You want...
  5. Re: bitcoind transaction to ip address I cant figure out how to send a transaction to...
  6. Re: Payment server Quote from: riX on January 27, 2010, 12:49:07 Wallets already...
https://bitcointalk.org/index.php?topic=479.msg5432#msg5432