I have Computer Networking in my course work this semester. Yesterday, I learned about P2P networking. To learn more, I searched the internet and found this article online, published by The Ohio State University.
In this article, they say...
Peer-to-peer networks can be very dangerous from a security perspective. When you join a peer-to-peer network, you are choosing to trust the very large group of strangers that make up the network. Usually you have to open one or more internet “ports” on your computer so that the P2P network can send files to and from your machine. The problem is that you basically cannot control what goes in and out of those ports once you open them. They are like open doors through which you have given the users of the P2P network access to your machine. Sure, there are some limitations to the access other users of the network can have, but, these open ports can become an easy point of entry for attackers trying to gain access to your machine or your network. You might even invite them in without knowing.
When you download a song or an application file from a stranger’s machine, you can never be sure that you are getting what they say you are getting. “Don’t worry about it!” they say, “This is Justin Timberlake’s hottest new track, that’s all!” Maybe that’s true. Maybe you’ll be grooving to JT’s sweet tones as soon as the file downloads. But maybe there is a Trojan Horse hidden inside that file.
From more research, I found out that,
- You can use SSL to secure the connection (link)
- P2P network uses Homomorphic Hashing to verify file integrity (link)
- Data like IP address, username, Operating System version, etc. might leak (link)
So, my questions are,
- Is P2P network not secure? Because as far as I know, it is used in Blockchain technology.
- Is it possible to exploit the network in such a way that you can inject malware in the files that you share via P2P?
- When compared to the centralized Client-Server networking, which one is more secure for sharing
encryptedfiles? Because servers can also be (and have been) hacked.
What I mean by the last question is, for a complete naive user, who doesn't know how to check MD5 hashes, which one will be more secure? P2P where anyone can share files, or dedicated servers that are resilient but not immune to hacking.