4 ms·
And they are slow, expensive and subject to node-based 33% attacks Hedera Hashgraph is none of these
by kfrzcode 3y ago
And they are slow, expensive and subject to node-based 33% attacks
Hedera Hashgraph is none of these
- Geisterde 3y agoIs bittorrent subject to sybil too?
- wizzwizz4 3y agoAll distributed networks are vulnerable to Sybil attacks (unless you can ensure provenance somehow, out-of-band), but unless you can break the hash function, all that gets you with BitTorrent is denial of service (and traffic interception, I suppose, but that should already be part of your threat model).
- Geisterde 3y agoI see, so there isnt a risk of downloading malicious content, just that you might not get the file. Thanks.
- wizzwizz4 3y agoThere is absolutely a risk of downloading malicious data. But the protocol will reject it for failing integrity checks. That doesn't mean the software will reject it.
- ndriscoll 3y agoAre you saying mainstream torrent clients don't check the hash? As far as I know, not only do they, but they ban peers who have sent them wrong data more than once. So you could DoS them for a bit with lots of peers sending bad data, but you need a lot of ips to do that because you'll quickly get all of them banned. And unless you are doing this through residential proxies, people will learn your ranges and block you by default. Maybe there's a DoS you could do with uTP by spoofing someone else's IP and getting them to ban a real peer, but you'd presumably have to get in between them requesting blocks and reply with bad ones, which realistically means you are a MitM, so you could DoS them more directly by just dropping their traffic. Or if you mean more generally that a malicious packet could reach a client and exploit a memory bug or something, that applies to literally anything on a network.
- wizzwizz4 3y agoSuppose you have a torrent client that saves chunks to the filesystem before performing integrity checks. Suppose also that you have an antivirus program that scans every newly-created file for malware… and someone sent you 42.zip. Sure, the torrent client will reject it later, but the damage has already been done. This specific scenario is unlikely (most antivirus programs can cope with zip bombs, these days), but computers are complex. Other edge-cases might exist. Torrenting is safer than downloading something from your average modern website, but in practice it's nowhere as safe as the theoretical limit.
- rakoo 3y agoBittorrent is free, as fast as my network collection allows, and verifies integrity. I disagree that it falls into your description.
- kfrzcode 3y agoYou're right, I was flippant with my descriptors.