Questions tagged [distributed-computing]

The tag has no usage guidance.

1
vote
1answer
63 views

Blockchain + shared unused bandwidth as the proxy front = ddos mitigated?

Pentesting the new webapp that we have developed before having an external source have a go at it and give us a risk assessment. Now we have come to the portion right at the end; DDOS. For the most ...
1
vote
0answers
44 views

What is the reason why I am not able to able to use Maltego unless I disable port 135 (RPC) inbound on my Windows computer?

I originally attempted to use Maltego before making any configuration changes to my firewall; however, I was being blocked because I had port 135 disabled which is what Windows uses for RPC. After ...
1
vote
0answers
39 views

How to secure unique identification of physical resources in a distributed system?

I'm attempting to build a mechanism to prevent frauds and provide traceability of physical resources in a distributed system. The idea is straightforward: the resource travels hop-by-hop on a network ...
2
votes
0answers
85 views

How easily could a global network of machines break cryptography? [closed]

Suppose the NSA through legal means, or a malware group through illegal means has access to enormous computational resources via a backdoor into all Microsoft Windows machines (or some significant ...
0
votes
1answer
80 views

Somebody trying to ssh attack via hosting services on me. What is the best response? [duplicate]

I am having a lot of failed ssh authentication requests for the past two days, from various service providers. It seems somebody is intent on breaking into my computer. I am using Ubuntu on a Dell ...
-1
votes
2answers
118 views

Can cryptography be used to compare and verify time-sensitive responses from untrusted web servers? [closed]

In card games like poker it is critical that players do not know the hands of the other players until they simultaneously show their cards to see who has won. Is there a cryptographic technique to ...
2
votes
1answer
250 views

Is the Ethereum blockchain truly a tamper-proof way to deploy distributed applications?

The Ethereum website says that it provides a "cryptographically secure, decentralized, tamper-proof network" on which applications written in the Solidity contract language could be deployed. (https://...
6
votes
1answer
217 views

What are the drawbacks of non-PKI or distributed Key Management systems?

I just came across the Milagro project which seems to be solving some of the limitations introduced by PKI (centralized trust authorities with single point of failure hard-to-revoke root keys, using X....
16
votes
4answers
4k views

How does Ring.cx really work, and how secure is it?

Ring.cx calls itself "ultimate privacy and control for your voice, video and chat communications". But forums online mentioned in passing (little depth) that it uses bad cryptography protocols and has ...
10
votes
2answers
545 views

Why is e-voting still a problem?

Electronic voting has been considered technical infeasible for a long time. And recently I watched a video from the channel Computerphile on YouTube where they bring up all the problems that come ...
1
vote
1answer
683 views

How to prove that something happened before some time in a distributed way? [closed]

To prove that something happened after some time in a distributed way, just refer to something publicly know just before. Is that right? (Though I wonder how to make the time granularity smaller.) ...
3
votes
1answer
5k views

Why isn't Internet DNS based on blockchain? [closed]

Aside from the fact that verisign makes a lot of money doling out certificates from a central location.
10
votes
2answers
998 views

Is it possible to exploit this Zookeeper instance?

I was performing a security test for a client when I came across a Zookeeper installation on xx.x.x.xx:2181. Trying NetCat revealed that I'm able to all the following commands: dump: Lists the ...
1
vote
1answer
75 views

Is there a secure method of distributing keys to network-booted diskless nodes?

I have a bit of an 'initial trust' issue. We are using CoreOS to run Kubernetes, and secure both the etcd API and the Kubernetes API servers using client certificates. We are using iPXE to boot ...
1
vote
1answer
90 views

Any benefit to proof-of-work to avoid database lookups?

I thought I was being clever - overly engineering a (just for my learning) mobile app that is scaled out using only distributed technologies (AWS Lambda, S3, and Dynamo DB in this case). I want to ...
3
votes
3answers
360 views

PKI usage in a cluster; per application instance or per application?

I'm having a cluster with nodes (let's call them A and B for the sake of example) running identical micro services (1, 2 and 3 - so the application 2 running on node A is called A2). The applications ...
0
votes
1answer
552 views

Does it increase the security if we split data to n pieces and encrypt each one with different key and different algorithm?

For example: a 10 MB file will be sliced to 10 pieces (each 1 MB) and then dispersed between network nodes. Each node will encrypt it with its own key and different algorithm (AES, TwoFish, Blowfish, ...
1
vote
4answers
2k views

Is there any defense against Brute-Force done on a local encrypted file?

Let me start off by saying I don't know very much about encryption, hashing, cracking, etc. I'm just a typical computer enthusiasts, programmer and researcher with many questions. So, I've discovered ...
2
votes
1answer
109 views

Reducing asymmetric authorization token size

I would like to use an asymmetric rather than symmetric signature for authorization, since I don't want a compromised service being able to forge authorization tokens (obviously). An authorization ...
0
votes
1answer
293 views

Secure distributed storing and querying of [medical] data?

Comparing ways of distributing and securely storing and querying structured and schemaless data. Currently I am using MongoDB, but am looking into (Postgres|MySQL)&CryptDB, Cassandra and others. ...
2
votes
3answers
437 views

Is a file hash checking system 100% secure and non-bypassable/fakable?

I'm building an open source distributed (and partly offline replicated, as it's assumed that the network will be unstable) CMS and one of the core system 'job' will be to group all the files and ...
9
votes
1answer
375 views

Download mirror security

As with a large amount of open-source softwares, (Debian, Eclipse, PHP) you can apply to become a mirror of their site/downloads. I fully understand that this helps them with bandwidth and ...
5
votes
1answer
2k views

Is there any functional distributed timestamp server available? If not what about this homebrew solution?

Objective A secure Arrow of Time with unpredictable future behaviour to stop attackers or DDoS BotNets from pre-calculating proof-of-work and other gateway protections for P2P/F2F. A distributed ...
13
votes
1answer
763 views

How can an attacker abuse a distributed system?

How can an attacker take advantage of a world where state is eventually consistent and vector clocks are used to settle disagreements? For example, what are the security concerns of using a database ...
12
votes
1answer
371 views

A filesystem with chunks hidden all over the internet?

I am wondering if there are any implementations of a filesystem (as in FUSE) that would allow me to host a file in chunks steganographically distributed all over the internet. The way I imagine it, ...
4
votes
1answer
2k views

How large RSA-keys could the worlds combined computer power factorize in reasonable time?

If you combined every microprocessor on earth into one humongous computational cluster, how large RSA-keys could you factor in reasonable time (lets say a few years)? I know from reading the answers ...
1
vote
2answers
1k views

How is distributed computing security ensured?

I browsed some articles found on the web but none of them seems to have the answer to my question (or maybe I didn't see it). I've heard that it is possible to give one's CPU unused power to research ...