On Friday 14 December 2007 09:12, Julien Cornuwel wrote: > Matthew Toseland a ?crit : > > > Your node is currently running in insecure mode. It is trivial for an attacker > > to find your node, and you could be connected to the Bad Guys right now. > > Please get some connections to people you trust and add them to the Friends > > page as soon as possible, you will be much less vulnerable. When you have at > > least 10 Friends, turn off insecure mode and your node will become invisible > > to the outside world. > > I'm not sure using the words "Insecure" and "Please get some > connections" are a good thing. Opennet is not that insecure.
It isn't? IMHO opennet is fairly insecure. Not only can you do local correlation to determine whether your peers are the source of a specific request, you can do network-level attacks based on the location of requests to gradually locate the originator. > Of course > it is if compared to pure-darknet, but it's still far more secure than > the internet. And most users just can't get connections to people they > know and trust because no one they know uses freenet. "Please get some connections to people you trust" isn't clear enough? It's even clearer on the previous warning, but the previous warning is too big. > > Just yesterday, I met someone on #freenet-fr who knew nobody in the > network. But after a few readings, he decided that opennet was insecure, > refused to enable it and came to IRC to get Friends ! He thought we used > Friends like in the friend-slots of eMule, not like in > real-life-friends. I think we should stress that point. LOL. > > What about : > Your node is not running at its maximal security level. It is trivial > for an attacker to find your node, and you could be connected to the Bad > Guys right now. If people you actually know and trust are using Freenet, > you can connect to them using the Friends page to increase your security > level. When you have at least 10 Friends, turn off insecure mode and > your node will become invisible to the outside world. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: <https://emu.freenetproject.org/pipermail/devl/attachments/20071214/4b2aa6c7/attachment.pgp>
