Using the FEC-Decoder and setting fectmpdir will compromise node runners.
During decoding and sometimes when the node crashes files containing
'cleartext' data remain in the fec-tmp directory which could be used
as evidence against a user. This could even be considered a design-flaw,
you might argue that the fec code doesn't belong into the Freenet node
but into the users web-browser where it'll be all your fault if you don't
use Freenet properly.

So even if you save all the files downloaded in encrypted
storage (e.g. cfs), you still leave possibly incriminating traces.

I couldn't find any pointers to this, so I think this should possibly be
documented somewhere (I couldn't find a suitable place in the Wiki).
A warning when starting up with the web frontend might be appropriate, too.
-- 
Volker Stolz * http://www-i2.informatik.rwth-aachen.de/stolz/ * PGP * S/MIME


_______________________________________________
support mailing list
[EMAIL PROTECTED]
http://hawk.freenetproject.org/cgi-bin/mailman/listinfo/support

Reply via email to