j"1LAnZuoQdcKCkpDBKQMCgziGMoPC4VQUckM><div class="post">Don't use the -server or -daemon switch or run bitcoind on a machine where you use a web browser. It opens port 8332 on 127.0.0.1, the local loopback address, and you wouldn't think that web browsers could cross-site access it, but it is possible.<br/><br/>We're working on a release soon that puts a password on the JSON-RPC interface, but until then, avoid using the -server switch, and don't web browse on the same machine where bitcoind is running.<br/><br/>Update:<br/>The JSON-RPC HTTP authentication feature in 0.3.3 solves this problem.</div> text/html
https://whatsonchain.com/tx/b67ead67cbf7daf648ffe2b9b851a8d01f68b16dfd57ee9e87de3f3dec392054