"象棋桥 (CCBridge)"的自动更新存在安全风险:更新经由明文 HTTP 下载,且不校验数字签名。任何控制本域名的人都可能借此在您的电脑上运行任意程序。
如果您仍在使用象棋桥,为安全起见请任选其一:
Datas\Set.dat,在 [Set] 段中加入一行 AutoCheckUpdate=0;或在软件选项中关闭"自动检测更新"。The Chinese-chess program CCBridge (象棋桥) has an insecure auto-update: it fetches updates over plaintext HTTP with no signature verification. Anyone controlling this domain could use it to run arbitrary code on your computer.
If you still use CCBridge, please do one of the following:
Datas\Set.dat in the install folder and add AutoCheckUpdate=0 under [Set]; or turn off "automatic update check" in the program's options.This domain is currently held by a security researcher for defensive and research purposes only. No software or updates are distributed here.