Comments (1)
Since we're not a privacy coin, this attack wouldn't register as an attack in our case. At least not more than chain-analysis in Bitcoin is an attack.
What makes me mildly uncomfortable about the whole network being discoverable is that unlike other DLTs, most nodes on our network are expected to be miners, many of them home miners, which I don't expect to be well equipped to deal with eclipse attacks or even the most basic DoS.
One possibly related attack that I suggested we give some thought to is a sybil attack on our P2P. An attacker may bring up millions of non-mining P2P nodes. This can be done quite cheaply, I believe. By just doing that there's a high likelihood that this entity will be the only neighbor of everyone on the network, without anyone knowing it.
Some numbers to explain my last point. Say there are 5k miners on the network (a very happy scenario). Now an attacker brings up 50 million nodes and just plays nice and lets everyone connect to them, slowly, over time. When a new node joins the network and looks for 8 randomly selected peers, what's the chance of getting at least one honest node? Assuming our discovery mechanism gets close to randomly selecting from the entire population: 0.0008.
So after a while everyone's talking through this centralized man-in-the-middle that can basically do an eclipse on anyone.
Other DLTs are less vulnerable to this kind of attack because as long as a substantial portion of miners have an alternative way of communicating (e.g. Bitcoin FIBRE mining will be minimally affected and users/nodes will eventually find ways to mitigate this.
In our case everyone's a miner and we discourage industrial mining, so there can't be a closed communication channel for miners. More importantly, we're more reliant on prompt communication. Our Hare protocol makes assumptions about the propagation delay and is extremely vulnerable to network splits.
Circling back to the topic at hand: being able to map the entire P2P network makes the attack I described even cheaper since the attacker can then selectively accept connections from specific peers such that with minimal actual connections they can still split the network at will.
from protocol.
Related Issues (20)
- create an animation that will explain the DAG construction
- need a good visual for NIPoST
- NIPoST animation
- Animation of NIPoSTs chaining
- Improve README
- Update the ancient protocol docis in our team page. HOT 2
- Redundant transactions in blocks in the same layer HOT 1
- Write a wiki page explaining Spacemesh consensus in context HOT 6
- Add flows for each protocol
- Misc. questions from assertion flows HOT 10
- Gossip message queue and priorities
- NIPoST validity
- Add section on identity HOT 1
- Document genesis flow
- Fix relative links HOT 3
- Document differences with Filecoin
- Document global state
- Transaction example
- No distributed system can assume clocks are synchronized HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from protocol.