没错,不过使用比特币地址的好处是,两个人可以通过多种不同渠道来核实地址。如果朋友从我的网站上取得地址,却觉得有些不对劲,就可以给我打电话、发即时消息或邮件等,核实这个地址。攻击者基本上就得在所有可能的通信渠道里,包括语音,都把我的地址替换成恶意地址,这很难做到。直接通过网络地址通信时遭到中间人攻击,就没有这个优势,因为攻击者可以伪造地址或拦截通信。朋友同样可以通过那些方式向我核实地址,但核实地址本身并不能改善这种情况。
True, but the upside to using the BitCoin address is that two people can communicate via a number of different channels to verify the address. If my friend gets my address off my website, and thinks something fishy is going on, he can call me, or IM me, or email me, etc. to verify the address. An attacker would then have to basically be replacing my address with the malicious one in every possible communications channel, including voice, which is a difficult feat. MITMing the direct communication via network addresses doesn't have that benefit because the attacker is spoofing the address or intercepting. My friend can verify what my address is with me in the same ways, however verifying the address doesn't actually improve the situation.
这是个好办法。如果经常交易,地址簿里大概已经有对方的比特币地址了。
That is a good solution. If you transact regularly you probably already have the other person's BitCoin address in your address book.
说到这个,我想到系统故障可能导致比特币丢失的问题。应用似乎不会把数据保存在它运行的目录中,所以我猜数据保存在注册表或其他地方(还没打开 ProcessExplorer 亲自检查)。也许应该让应用能把恢复所需的全部数据导出到一个文件,这样就可以备份到这台机器之外。
One thing that came to mind on this topic is the potential for BitCoin loss if you have a system failure. The application doesn't seem to store any data in the directory that it runs in, so I assume it's stored in the registry and other places (haven't cracked out ProcessExplorer yet to check myself), so it may be a good idea to have the application be able to export everything that it needs for recovery to a file that could be backed up off of the system.
完全可以把它做成可选项,比如提供一个“向网络公布我的比特币地址”的开关,让用户自行开启或关闭。如果按比特币地址搜索时在网络上找不到你,就照常把交易写入区块链;如果找到了,就可以把交易元数据传送到那个网络地址。
You could always make that optional, such as a toggle that says 'Advertise my BitCoin address to the network' that the user could turn on or off. If you're not found on the network when searched for by BitCoin address, the transaction is inserted into the block-chain as normal. If you are, the transaction meta-data could be communicated to the network address.
今天还注意到一件事:关闭应用时,它似乎没有妥善关闭网络套接字(开始发出大量 TCP RST)。大概可以放进低优先级待办清单。(:
One other thing I noticed today is that if you close the application it doesn't appear to cleanly close it's network sockets (TCP RST's start flying). Probably an item for the low-priority todo list (:
回头再聊,
Talk to you later,
-- Dustin D. Trammell dtrammell@dustintrammell.com http://www.dustintrammell.com
-- Dustin D. Trammell dtrammell@dustintrammell.com http://www.dustintrammell.com
引用的来信Dustin D. Trammell来源 ↗关于这个话题,我想到一点:如果系统故障,可能会丢失 BitCoin。程序似乎没有在其运行目录中保存任何数据,所以我猜它把数据保存在注册表和其他位置(我还没有打开 ProcessExplorer 自己检查)。因此,也许应该让程序能够把恢复所需的一切导出到一个文件中,便于备份到系统以外。
One thing that came to mind on this topic is the potential for BitCoin loss if you have a system failure. The application doesn't seem to store any data in the directory that it runs in, so I assume it's stored in the registry and other places (haven't cracked out ProcessExplorer yet to check myself), so it may be a good idea to have the application be able to export everything that it needs for recovery to a file that could be backed up off of the system.
文件位于“%appdata%\Bitcoin”,需要备份的就是这个目录。数据存储在事务型数据库 DBM 中,所以如果发生崩溃或断电,应该不会丢失。
The files are in "%appdata%\Bitcoin", that's the directory to backup. The data is stored in a transactional database DBM, so it should be safe from loss if there's a crash or power failure.
%appdata% 的访问权限按用户区分。大多数新程序,例如 Firefox,都把设置文件放在那里,尽管 Microsoft 每发布一个 Windows 版本就更改目录名,而且目录名里全是空格,长得超出了屏幕。
%appdata% is per-user access privilege. Most new programs like Firefox store their settings files there, despite the headwind of Microsoft changing the directory name with every Windows release and being full of spaces and so long it runs off the screen.
引用的来信Dustin D. Trammell来源 ↗今天我还注意到,关闭程序时,它似乎没有正常关闭网络套接字(TCP RST 开始满天飞)。大概可以放进低优先级待办事项里(:
One other thing I noticed today is that if you close the application it doesn't appear to cleanly close it's network sockets (TCP RST's start flying). Probably an item for the low-priority todo list (:
刚刚已为下一个版本添加了解决这个问题的代码。
Just now added code to the next release for that.
Satoshi
Satoshi
当前版本尚未建立逐条校对状态记录。来源核验、历史审校与当前译文校对是不同事项。
译文内容版本:0cca241fb500。用于比对文本,不代表校对等级或更新时间。
请填写对应原文、现译文、建议译法和理由。复制后通过你联系本站作者的渠道提交;此处不会自动发送。
Satoshi to Dustin Trammell: re: a few thoughts — wallet location and socket fix (January 16, 2009)