[bittorrent] NauBTilus - secure and survivable BitTorrent-based system with data updates
boski_cinek at o2.pl
Sat Sep 5 09:44:58 EDT 2009
Adrian Ulrich wrote:
>> For this reason, anyone who would like to read it, please send me request (through my e-mail)
>> and I will send you the article.
> I'd be interested to receive a copy.
I've just sent it to you in separate e-mail.
>> As for DHT, the problem is a little more complicated. NauBTilus was
>> designed mainly to handle DDoS attacks. And DHT doesn't solve this
>> problem. It's still possible to attack vulnerable peers that are
>> currently responsible for handling specific torrents.
> Kademlia is pretty robust against (D)DOS-Attacks. DOS'ing a DHT-Node makes
> no sense because the network will recover itself such as it does when someone
> terminates the client. Even DDOSing a large Kademlia-Segment won't do much harm.
Yes, but does it recovers instantly? Because attacker can just switch
the target for DDoS every time he detects new DHT-node and not give it a
chance to recover. And that brings another question: can you force user
to become DHT-node, possible target for DDoS attack, without giving him
opt-out option? As far as I know this is exactly what happens in DHT. On
the other hand NauBTilus was designed with easy opt-out option in mind.
> It would make much more sense to DDOS some Seeders.
That is also, in a way, covered in NauBTilus (not in a very pretty way,
but it should works).
>> Even worse, combining Sybil attack on DHT with other malicious techniques can turn
>> swarm into specific kind of botnet that could be use to perform DDoS
> This is a known problem and not DHT/Sybil specific:
> So an evil node could just take a sha1 that is near to some popular info_hash and
> hand out wrong IPs (= IPs that point to a target) (-> Sybil)
> But hey: You do not even need to do a sybil attack: Just place a node *somewhere* in the network
> and always send a get_peers response. Some clients out there are willing to accept responses
> to unasked questions :-)
I was rather thinking about many DHT nodes for single machines used to
route all possible traffic they get into victims machine.
> ..Or you could join the network to spread the target-IPs via PEX
Which is far more harder to do if don't have a lot of other peers IP
addresses and they're not willing to pass provided victims IP to other
Just to clear something out: I agree that BT is doing its job pretty
well. NauBTilus wasn't design to compete with BitTorrent. It was design
to serve different purpose than BitTorrent.
More information about the BitTorrent