SN-3839 已核对来源，附原文与上下文。
其他参与者原话da2ce7原帖 ↗直接向 IP 地址转账似乎是个显而易见的攻击面。
direct to IP address transfers seems like a obvious surface area to attack.
就怕你找得到一个把它打开的人。它默认是关闭的。
If you ever find anyone who turned it on. It's disabled by default.
其他参与者原话witchspace原帖 ↗没有办法绝对保证不存在缓冲区溢出攻击。不过，用一种因检查数组下标而没有缓冲区溢出的语言来实现客户端（Python、Java、C# 等）会有帮助。
There is no way to be absolutely sure that there are no buffer overflow attacks. Although it would help to implement the client in a language that doesn't have buffer overflows because it checks array indices (Python, Java, C#, ...).
全程用的都是 STL。几乎不存在什么缓冲区。
It's all STL. There are almost no buffers.
