Re: [computer-go] how to use GTP in place of GMP

[Gunnar Farnebäck <gunnar@xxxxxxxxxxxxxx>]

Peter Paul Elfferich wrote:
> Quoting "Compgo123@xxxxxxxxxxxxxxxxx" <Compgo123@xxxxxxxxxxxxxxxxx>:
> > I have one question. Does GTP pose any potential security problem
> > in anyway?
> 
> I'd say so. All programs are processing data which has been received
> over a network. If either the network or the program on the other
> side is untrustworthy this is risky.

I agree that connecting a computer to a network or more generally
getting involved in any kind of communication with another computer is
a potential security risk.

I don't agree with the implication (at least as I read it, maybe it
wasn't intended that way) that GTP as a protocol should be a specific
security risk. It doesn't matter whether you are talking GTP, GMP, the
IGS protocol, or something else. If you are careless with the incoming
data you're always at risk. Depending on your programming language it
may be more or less difficult to be careless though.

> So, as with all I/O handling: verify all input to be correct or at
> least specify upper limits to the amount of data to be processed!

This is very true. Making sure that the data you read does fit in the
memory you have allocated for storing it goes a long way to avoiding
such problems.

/Gunnar
_______________________________________________
computer-go mailing list
computer-go@xxxxxxxxxxxxxxxxx
http://www.computer-go.org/mailman/listinfo/computer-go/