search

HelloZeroNet / ZeroNet

ZeroNet - Decentralized websites using Bitcoin crypto and BitTorrent network
https://zeronet.io
Other
18.35k stars 2.27k forks source link

Protection against a myriad of rogue peers that could prevent publication of updates #1817

Open danimesq opened 5 years ago

danimesq commented 5 years ago

@anoadragon453 said on Riot.im:

I think ZeroNet has different classes of attacks, more spam-related. Though a myriad of bad nodes could prevent your updates from being published.

Reference: https://github.com/HelloZeroNet/ZeroNet/issues/1016

HelloZeroNet commented 5 years ago

Not sure what he meant, but I think every unfederated P2P network is vulnerable to these kind of attacks: someone joins lets say with 10000 peers to the network that does not distributes every content or acts maliciously in different way. ZeroNet prefers older/more reliable peers when pick IPs from the peer database, i think this should be efficient against most attacks. Other p2p networks (eg bitcoin) distributes reliable peer list with the client, but it would be hard to do for us (as every node has different sites) and I think it would make the network more centralized.

anoadragon453 commented 5 years ago

Not sure what he meant

Yeah, happens when I'm just quoted out of context lol

ZeroNet prefers older/more reliable peers when pick IPs from the peer database

That's cool, didn't know that.

danimesq commented 5 years ago

@HelloZeroNet

Not sure what he meant

You say like if I'm a "12 years old autist" with an alien language... ...but finally you'd admitted that:

every unfederated P2P network is vulnerable to these kind of attacks

I'm impressed. Because on that issue, you and some users also ironized: https://github.com/HelloZeroNet/ZeroNet/issues/1016; but you didn't admitted that its possible, different from now. So, even not sure what I'd meant, I could say it well, thanks to the words of @anoadragon453 . Funny that some users thinks that the immature is me; but I don't like to be sarcastic.

anoadragon453

Yeah, happens when I'm just quoted out of context lol

The context or even the mention isn't important, but the words.

That's cool, didn't know that.

More than cool, but peaceful and fair, if we have more than 80% of sure that ZeroNet is ready against 51% attacks.

ZeroNet prefers older/more reliable peers when pick IPs from the peer database, i think this should be efficient against most attacks.

Do you know that ZeroNet is known by the most powerful governments? Do you remember the lots of times when China attacked ZeroNet? Efficient against most of attacks, shows that its not efficient to all attacks, so ZeroNet is vulnerable, then we can't say it is censorship-resistant. Where a new user gets this list with supposed older/more reliable peers? Where is that peer database? How that could work better with DHT?

Other p2p networks (eg bitcoin) distributes reliable peer list with the client, but it would be hard to do for us (as every node has different sites)

Your logic is, if that is harder, its not worth to implement? Please, open ZeroNet to new maintainers alongside you. There are lots of users that doesn't wants anymore to contribute, because you have no time to review their pull requests. I agree with a list with reliable/trusted peers being built with the program itself.

I think it would make the network more centralized

Depends on which paradoxical view you have. What is worst: a curated peer list by trusted users, or a random thing that is eaten by a botnet?

danimesq commented 5 years ago

@anoadragon453 You haven't anything to say about this form of attack? On Riot.im you was freely speaking about it. Its a mistery.

anoadragon453 commented 5 years ago

It's a public room. Here's the link if people really want to read it.