Ian Clarke wrote:
> 
> Yep, it would also make it easy to remotely shut down someone elses
> node, just spoof IP packets from 127.0.0.1 and Bobs your uncle, no more
> node.  Very convenient (for those who don't like Freenet ;).
> 
> There are some simple precautions we could take to prevent this such as
> ensuring that there is some 2-way communication in the process.
> 
> Ian.
> 


Since this is a TCP connection, they would have to spoof connection setup, 
which, assuming
they are not using a Win95/98 system would be a significant challenge (i.e. 
impossible for
all practical purposes).  Win95/98 uses a trivial time delay increment for 
initial TCP
sequence values, so this may require some additional authentication to be 
secure.

Anyway, as long as TCP transport is used (as it is for RPC,FCP?) , this should 
not be too
much a problem.

_______________________________________________
Devl mailing list
Devl at freenetproject.org
http://lists.freenetproject.org/mailman/listinfo/devl

Reply via email to