On 11/08/2019 11.06, Lars Wirzenius wrote: > * rejected: a karma or reputation system based on past > behaviour: this makes long-lived workers valuable targets, > and years of good behaviour won't protect if the worker gets > hijacked
Maybe karma could be an additional input in decision making. So that when you chose N builders, at least M of them have high karma. This would mitigate attackers that add 10000 nodes to the pool for an hour (costs roughly $100 in a cloud - if they are even real nodes). Long lived workers are valuable targets in any case. Just need to make sure that you do not trust them more than you would without karma.
signature.asc
Description: OpenPGP digital signature
_______________________________________________ [email protected] mailing list To change your subscription options, visit https://lists.reproducible-builds.org/listinfo/rb-general. To unsubscribe, send an email to [email protected].
