RE: I think i found a relatively big problem in BOINC - Particularly for small projects . It can achieve data quorum from workunits from the same computer

[hotbit]

If you find a potential security hole, you should contact devs and wait for an explanation or patch before making it public.

Comments

[an0n7m0us3]

I completely agree. If this is a legitimate exploit, giving it publicity before contacting devs or the project is reckless and puts the network at a greater risk. It's called responsible disclosure, look it up.

[ivanviso]

It isnt that bad, even if it were to be exploited malicious attackers would compete with each other and achieve their daily task limit whitout gaining any credit, and then getting banned from the project.

Edit: I forgot - The main problem is people accidentally feeding bad data to the project