Questions tagged [p2p]

A peer-to-peer (abbreviated to P2P) computer network is one in which each computer in the network can act as a client or server for the other computers in the network, allowing shared access to various resources such as files, peripherals, and sensors without the need for a central server.

Filter by
Sorted by
Tagged with
1
vote
1answer
29 views

How to protect certificates and keys in peer to peer application

I'm making a peer-to-peer cross-platform application (in Java & Kotlin), and I want to encrypt conversations between tens of users, concurrently. However, due to lack of knowledge in security good ...
0
votes
0answers
51 views

Is there really no “Usenet” these days? Why has everything died out? [closed]

I got onto the Internet after the Eternal September of 1993. I thus never got to experience a time when there was some kind of minimal quality/intelligence in everything posted. Usenet has since at ...
3
votes
1answer
62 views

Privacy in P2P vs relayed connections for VoIP

I'm developing some sort of VoIP application for mobile devices for fun. I initially planned to rely on P2P connections only. I didn't want to use a relay server because I thought (1.) there would ...
2
votes
1answer
170 views

Possible public/private identity recovery after compromise without a centeral authority?

I’ve been thinking about P2P systems using asymmetric keys and wondering if there is anyway to recover an identity in the event it was compromised using some kind of web-of-trust. This seems to be a ...
0
votes
1answer
57 views

How can I securely generate secret-sharing/multisig keys on a p2p network?

I am trying to create a peer-to-peer escrow system. I need to encrypt the private key of a wallet with a 2-of-3 secret-sharing function - the buyer, seller, and arbitrator will each have have one key. ...
0
votes
1answer
112 views

derived key from email + password?

When deriving a private key from a password, will the resulting secret key be any weaker if the user email is included in the function input? Meaning, user email concatenated with the user password. ...
0
votes
0answers
41 views

Secure Peer-to-Peer Multicast Communication?

The problem: A single broadcaster needs to send a series of messages through a peer-to-peer mesh network such that only specific other pre-approved nodes can read them. The set of authorized receivers ...
1
vote
2answers
201 views

How are UUIDs assigned in P2P protocols

I am learning about P2P in general (mainly blockchain). I know many P2P protocols uses a distributed hash table for node lookup (kademlia) that maps UUIDs of nodes to their addresses. I am curious ...
3
votes
1answer
1k views

Is it always safe (virus/malware/spyware) to download video/music files (torrent, lbry)? [closed]

assume all downloads legal Spent a long time trying to find an answer, this related question from 2013 (dated) doesn't fully answer my question although I do fear subtitle malware. LBRY claims to ...
0
votes
1answer
3k views

What is a more secure network topology, star or mesh? [closed]

I am studying for the CCNA and I touched on the topic of star (client-server) vs mesh (p2p) networks. I read in some articles that one of the advantages of a mesh network is the level security and ...
0
votes
2answers
487 views

Suspicious established network connection

So, while I casually did a netstat -a for an unrelated matter I found this connection open that seemed (at least to my untrained eye) strange: Where Name was the last name of another current employee ...
4
votes
1answer
2k views

WebRTC security & encryption

I am building a WebRTC application, and really concerned about security. I have read this quite interesting article : https://webrtc-security.github.io As I am far from being an expert in networking ...
2
votes
2answers
4k views

Suspected fake torrent peers with “client_test” ID

For a fair number of torrents I'm dealing with (qBittorrent 3.3.7 here), I see a number of entries in the "Peers" list (it apparently only shows peers that are currently connected) with client_test/1....
1
vote
1answer
2k views

Identifying torrented files by reversing info_hash

I've been lead to believe that if you decode the info_hash in a tracker GET request, you are left with the SHA1 hash of the file that is being downloaded. That makes sense to me but I'm not getting ...
6
votes
3answers
611 views

Why is DARPA interested in secure messaging platform using blockchain technology?

DARPA (US Defense Advanced Research Projects Agency) has released a Request for Proposal for a Secure Messaging Platform using a blockchain framework. The following is the Objective paragraph from ...
11
votes
1answer
490 views

Do software companies intentionally upload fake/infected versions of their own software to file sharing networks as a means to combat piracy? [closed]

Disclaimer: No illegal activity is condoned in this post. The legality of the described activity varies from country to country. I remember in the early 00's, when peer to peer file sharing was ...
1
vote
1answer
554 views

Is WebRTC safe for connecting random clients to each other?

I am trying to implement a chatroulette-sque app, and WebRTC seems to be the best choice as far implementing something that doesn't take a vast amount of server resources. My current scheme is to ...
6
votes
2answers
461 views

Are ZeroNet websites susceptible to 51% control attack?

I've been reading about ZeroNet and thought about putting a site together but have concerns that it may be vulnerable to the issue laid out in What can an attacker with 51% of hash power do?. From ...
6
votes
2answers
2k views

Securing Peer to Peer communication

Is there a standard way to secure peer to peer communication? I'm currently using HTTP to transfer data from peer to peer, however, securing with TLS/SSL normally requires a certificate authority to ...
0
votes
0answers
674 views

Is sharing with Direct Connect DC++ secure?

As I have some useful software that I want to share with friends and I don't like to get involved with torrents, DC++ (P2P client for sharing and chatting) seems a good way to do it, but I'm not sure ...
17
votes
7answers
4k views

Stopping ill-mannered use of guest wifi [closed]

I support a small business' tech issues including setting up a guest WiFi network. The WiFi is important since they want people sitting around and consuming their product. Over the past months they'...
1
vote
1answer
3k views

Is it possible to secure an Android Intent from other calls from apps?

I'm looking at the architecture of Android and want to come up with a service that allows for multiple applications (3rd party) to call a local android service and fetch data. Think of this as a ...
2
votes
1answer
1k views

Creating a P2P hosted website

Is there a way to create a peer-to-peer hosted website securely: - Without Having a connection between the developer (host) of the website to the website? - Securing some information the site uses ...
2
votes
0answers
143 views

How do I allow for anonymous encryption? [closed]

I have a protocol I am designing that requires anonymity and privacy. My idea is to have a minimum number of hops in the network before the message can be sent to its intended destination. The ...
2
votes
1answer
658 views

Mitigating DDOS in P2P systems

In P2P systems where performance and response times are critical individual clients are susceptible to DDOS by publicly exposing their IPs. While there are various mitigation solutions available at ...
2
votes
1answer
831 views

How can the sybil attack be used on a P2P system that implements DHT?

I was reading about the sybil attack and am unclear on some details. After becoming part of the peer-to-peer network, the adversary may then overhear communications or act maliciously. By ...
1
vote
1answer
285 views

Secure (P2P) Client/Company File Sharing

my small web design company currently uses a cloud storage service to collaborate with our clients and I would like an easier (and more secure) way for files to be transferred-in and stored. The ...
13
votes
1answer
2k views

Torrent “bad seed” attack by Sony, how does it work?

Sony recently saw a large amount of data stolen. In order to prevent the stolen data from being spread using torrents, they are doing what was called a bad seed attack. What is this attack? Is this a ...
3
votes
1answer
6k views

How can illegal downloads (not file sharing) be detected?

I understand that copyright holders can identify illegal filesharing over BitTorrent by simply taking part in the sharing process and noting IPs of peers. But how do they detect illegal downloads ...
8
votes
4answers
3k views

Is webRTC safe against man in the middle attacks?

We are implementing an open source software package (copay, a multisig bitcoin wallet), that uses peerJS, which uses webRTC to allow peer-to-peer communication between browsers. peerJS (and webRTC) ...
0
votes
1answer
625 views

Alternative to ICANN? [closed]

What are major DNS services offered that aren't state-controlled. Better yet, why can't we take Bitcoin's model and create a truly decentralized system with P2P DNS? I see potential reasons behind ...
2
votes
3answers
1k views

How do bots communicate in the zeus botnet?

I read on http://www.abuse.ch/?p=3499 that: ZeuS is now using an “IP list” which contains the IP addresses of other drones participating in the P2P botnet. An initial list of IP addresses is hardcoded ...
7
votes
1answer
3k views

WebRTC P2P SSL - Where are the keys generated?

My understanding is that with the WebRTC peer-to-peer data API, communications between peers are encrypted via a modified form of SSL. Where are the keys for the peer-to-peer SSL connection generated, ...
0
votes
1answer
125 views

Safely creating and communicating within a fully decentralized p2p network

I'm not entirely sure if this is the right place to ask this, and I'm also slightly fuzzy on how the p2p system works, so correct me if I'm wrong. I've been looking into the practical implications of ...
1
vote
0answers
243 views

P2P sharing of uniquely encrypted files

I need a way to share large, uniquely encrypted files (AES256) that are actually the same file when decrypted, through P2P, to optimize download speeds. For instance, a centralized server would ...
9
votes
3answers
4k views

Bittorrent Sync encryption

Sync, a new product from BitTorrent, Inc., has been cited as a viable alternative to other cloud-storage platforms. The Sync FAQ indicates that an encryption scheme is being used, but does not comment ...
2
votes
3answers
451 views

Is a file hash checking system 100% secure and non-bypassable/fakable?

I'm building an open source distributed (and partly offline replicated, as it's assumed that the network will be unstable) CMS and one of the core system 'job' will be to group all the files and ...
2
votes
0answers
391 views

Duration of torrent activity and ISP tracking [closed]

The only reason I use BitTorrent is to download Linux distros, Open source apps and large documentation files. My ISP contacted me once and warned me: Ok, you aren't downloading anything illegal or ...
1
vote
3answers
8k views

Why does P2P need port forwarding when behind NAT? [closed]

Correct me if I'm wrong, but for a node to participate in peer-to-peer, if it's behind NAT, it must port forward to be able to connect. Why is the port forwarding necessary? I know there are ...
4
votes
1answer
264 views

Hiding BitTorrent clients

One of the things that came out of the Snowden files, I believe, was that ISP's will monitor someone that has a BitTorrent client (uTorrent, qbittorrent etc.) installed on their PC, even if they don't ...
0
votes
1answer
82 views

Decentralized online shopping service [closed]

Would it be possible to create an online shopping service like Amazon (or Silk Road) but also to make it decentralized so there would no main server users would have to trust with their data? I ...
4
votes
2answers
162 views

Could server honesty be audited by remote peers without said peers having sole (or any) control of the server?

Suppose for some reason, you and your peers absolutely positively have know that a server is acting honestly. Could the server behaviour be audited remotely through some mechanism of randomly ...
2
votes
1answer
305 views

Danger of peer to peer software [closed]

I wanted to ask what are the risks of using P2P software. I found a lot of information on-line regarding the danger of file sharing but not about the software by itself. I am writing a mobile ...
9
votes
8answers
36k views

How to block some websites and torrent usage in a small office?

In my office there are approaximately 25 systems are connected through network and all having internet accessibility.but some people are missusing this facilities like downloading films from torrent ...
21
votes
2answers
360k views

What are the TCP/UDP ports used by torrent applications?

I want to block torrent traffic on my network because it is utilizing too much bandwidth and disrupted my network traffic. What port range should I use and what protocol TCP or UDP?
5
votes
3answers
498 views

What is a reasonable expiry for user authentication certificates?

This question is about a nearly decentralized P2P system with a centralized certificate authority where users can authenticate and receive a certificate on their public key and then can authenticate ...
1
vote
1answer
2k views

Can p2p use be traced by targeting a known individual rather than an offending IP Address?

My understanding of most filesharing lawsuits initiated by copyright holders is as follows: The monitoring agency will connect to a torrent swarm and collect the ip addresses of people downloading ...
0
votes
2answers
404 views

Is encryption of Onion Proxy possible?

I wanted to know that if we are using onion routing in P2P networks, and when the data comes from the provider to onion proxy(proxy connected with requester), the data is not any more encrypted, ...
0
votes
3answers
1k views

Privacy in torrents?

It seems that if you download a file via torrent, each downloader can see other downloaders IP addresses. I also noticed that my (windows) pc's name was sometimes displayed briefly. How does one keep ...
1
vote
1answer
921 views

Protecting peers communicating with WebRTC

For reference: WebRTC Homepage I've been really interested in these new RTC technologies that are coming out, specifically the fact that use the PeerConnection API to establish a connection between ...