On 3/23/07, Matthew Toseland <[EMAIL PROTECTED]> wrote:

How far can we go in abusing the production network in order to make it
work? The testnet is never likely to be large enough to be a useful
model. What I propose is that on swap requests, which already include
the location of the node, and the locations of its peers, we also add a
unique ID (say the first 8 bytes of some hash of the identity) for the
node and each peer.

This would make it easier to map the network. It is already possible to
map the network but it is a lot of work and a lot of uncertainty,
because we don't know about every swap so we have to try to do partial
matches.

This may make some attacks easier. Having said that, with the current
swap requests, you can probably identify the topology close to you with
some confidence. The main benefit here is in identifying the topology
further away more reliably. Which isn't that interesting for attackers
unless they've been e.g. watching #freenet-refs and can match an IP
address to each node on the network. Even then, there are much easier
attacks, and correlation attacks on nodes 4 hops away may not have
enough information.

The benefit is we could test all our pet theories about the shape of the
network being completely broken due to #freenet-refs . We could gather
real world information about node uptimes, location swapping, location
clustering. It would of course be spoofable, but only to the extent that
location swapping is already spoofable. It would double the size of the
swap request packets, but these are fairly small.




How long of a period are we talking about?  I would be willing to run a
build that did this for 1-2 weeks (I used to use the testnet, but it was
impossible to find peers).  I don't know if it would need to be a mandatory
build, but if so you should give people notice that '"'whichever build #'
includes this tracking info, if you don't want to use it turn off your node
for X days".  That being said if you were to release an optional build that
didn't autoupdate I think it would be best...

I may disagree with what you have to say, but I shall defend, to the death,
your right to say it. - Voltaire
Those who would give up Liberty, to purchase temporary Safety, deserve
neither Liberty nor Safety. - Ben Franklin
_______________________________________________
Devl mailing list
[email protected]
http://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl

Reply via email to