Peergos / nabu

A minimal Java implementation of IPFS
MIT License
59 stars 11 forks source link

Don't retrieve block for authing bitswap requests #74

Closed ianopolous closed 9 months ago

ianopolous commented 9 months ago

This removes an attack where remote peers could DOS us with 1000s of requests for a block we have, but with invalid auth, each resulting in a block get from the blockstore. This is possible now because of the block metadata db.