Please do sic BCX on defenseless little p2pool. I double dog dare you to force it to evolve or die, because pressure makes diamonds. Too bad you can't.
I have no control over BCX.
You seem to be hard of hearing. P2Pool can't be fixed. The specific vulnerability is inherent in the fact that it is decentralized. There is no possible mitigation.
Since your feeble technical abilities are becoming too apparent, let me spell it out for you n00b.
Since P2Pool is decentralized, there is no central party to hide any information. Thus all the information for the pooling has to be public. Thus there is no way to hide the requirements of the block solution. Thus miners know when they've solved a block, and can choose to not share it.
The oblivious shares fix requires a change to the block chain, so that centralized pools can select a secret, then have miners solve a block solution that depends on that secret. Thus the miners never know if their mining share is a block solution or not. P2Pool can't do that, impossible.
Now please get a life and leave me alone.
It sounds like you're trying to get off the forum for a minute or two, so I'm sorry to ask this right now .. but it sounds like what you're saying is that if someone wanted to accomplish what you're describing, then someone could just have to code a program that lets an individual miner know when they've found a solution on a p2pool node .. and then additionally submit it to the network outside of the pool and receive the entire reward themselves rather than get paid pennies from the pool? So they could forego one pool payment for a full block reward, and then carry on in the pool as if nothing happened .. effectively owning that hashrate from the p2pool network for one block relative to themselves? Would software like that in the hands of all the p2pool miners, if such software were to be open sourced and kept up to date, and made to work with standard mining software be possible?
Would that take a lot of work? Or, am I not paying attention again?
add: nvm, you would forego the pool payout and just delay the finding of a block for a period of time. got it. but, could a large centralized pool utilize their hashrate to manipulate p2pool in such a way that it would be economically feasible to do so?
if mining was 50% p2pool and 50%ghash.io, could ghash take 25% and set it on p2pool and withold the solutions they find allowing a window in which the other half of their pool to, in general, find >50% of the blocks and then distribute to all miners of their pool?