flare-foundation / go-songbird

BSD 3-Clause "New" or "Revised" License
66 stars 32 forks source link

Introduce list of static beacons #5

Closed awfm9 closed 2 years ago

awfm9 commented 2 years ago

We currently don't provide any static list of beacons for any of the networks. This is a security risk, because all of the beacons are injected through the command line parameters. If an attacker manages to get someone to change the related command line parameters, he can put nodes on an alternative network that he controls.

By having a small set of nodes that are static and always used for bootstrapping, we can avoid this problem. Even with an invalid command line parameter, some of the nodes will be correct, and the node will at least be able to tell something strange is going on.