i've heard that 1 confirmation, isn't enough to be sure that your transaction was spent, with this fancy attack?

i must wait for six confirmation for the time being? or i can... dunno, goes well with 3?