Questions tagged [p2p]
A peer-to-peer (abbreviated to P2P) computer network is one in which each computer in the network can act as a client or server for the other computers in the network, allowing shared access to various resources such as files, peripherals, and sensors without the need for a central server.
73 questions
1
vote
0
answers
46
views
How can blockchain P2P network help in bypassing country-level whitelist network blocking? [closed]
I've seen people on the web discussing the issue of network blocking, and they were discussing that if one day a country wanted to whitelist mode (i.e. outbound traffic is blocked by default, and ...
- 11
2
votes
0
answers
130
views
Discovery Service as a Trust Anchor for P2P Network?
Context
I'm designing a P2P network with a central Discovery Service (providing core info about every platform in the network) but no centralised Auth server.
OAuth 2.0 and OpenID Connect will be used ...
- 21
1
vote
1
answer
455
views
How can I port scan my p2p device?
I have a device and I am trying to port scan it. I did the basic
nmap -A -p0- 192.168.0.x
but I am just getting
0/tcp filtered unknown
so I don't think it is working. The device works on p2p so I am ...
0
votes
2
answers
7k
views
Is Peer-to-Peer network unsafe?
I have Computer Networking in my course work this semester. Yesterday, I learned about P2P networking. To learn more, I searched the internet and found this article online, published by The Ohio State ...
- 103
0
votes
0
answers
173
views
Routing attacks on Peer 2 Peer networks?
I've started creating a framework that aims to make anything into an IoT device. In order to stay online, a peer 2 peer layer needs to be implemented. On top of it, common point services will give the ...
- 1
2
votes
1
answer
365
views
How are passwords stored in the database of a decentralized peer to peer system?
I want to use username and password instead of public key cryptography for a decentralized peer-to-peer application, but since the passwords are stored on users' computers, there is a possibility of ...
- 21
1
vote
1
answer
164
views
Can a client prove to a third party that they sent a message to another client in a P2P network?
Let's say Alice sends a message to Bob in their P2P chat app asking him to complete some work. Bob is lazy, so he deletes the message off his machine, does not complete the work, and just claims that ...
- 135
1
vote
2
answers
706
views
Encrypt Text Message as Image
Is this a good idea to make the following text message encryption:
accept text from the user 1
store the text into a document in the form of some handwritten font
convert the document into an image
...
- 109
2
votes
1
answer
380
views
How to protect certificates and keys in peer to peer application
I'm making a peer-to-peer cross-platform application (in Java & Kotlin), and I want to encrypt conversations between tens of users, concurrently.
However, due to lack of knowledge in security good ...
- 23
3
votes
1
answer
258
views
Privacy in P2P vs relayed connections for VoIP
I'm developing some sort of VoIP application for mobile devices for fun.
I initially planned to rely on P2P connections only.
I didn't want to use a relay server because I thought (1.) there would ...
2
votes
1
answer
366
views
Possible public/private identity recovery after compromise without a centeral authority?
I’ve been thinking about P2P systems using asymmetric keys and wondering if there is anyway to recover an identity in the event it was compromised using some kind of web-of-trust.
This seems to be a ...
- 323
1
vote
1
answer
281
views
How can I securely generate secret-sharing/multisig keys on a p2p network?
I am trying to create a peer-to-peer escrow system. I need to encrypt the private key of a wallet with a 2-of-3 secret-sharing function - the buyer, seller, and arbitrator will each have have one key.
...
- 11
0
votes
2
answers
352
views
derived key from email + password?
When deriving a private key from a password, will the resulting secret key be any weaker if the user email is included in the function input? Meaning, user email concatenated with the user password.
...
- 109
2
votes
2
answers
578
views
How are UUIDs assigned in P2P protocols
I am learning about P2P in general (mainly blockchain). I know many P2P protocols uses a distributed hash table for node lookup (kademlia) that maps UUIDs of nodes to their addresses.
I am curious ...
- 125
3
votes
1
answer
3k
views
Is it always safe (virus/malware/spyware) to download video/music files (torrent, lbry)? [closed]
assume all downloads legal
Spent a long time trying to find an answer, this related question from 2013 (dated) doesn't fully answer my question although I do fear subtitle malware.
LBRY claims to ...
- 147
0
votes
1
answer
6k
views
What is a more secure network topology, star or mesh? [closed]
I am studying for the CCNA and I touched on the topic of star (client-server) vs mesh (p2p) networks. I read in some articles that one of the advantages of a mesh network is the level security and ...
- 851
0
votes
2
answers
2k
views
Suspicious established network connection
So, while I casually did a netstat -a for an unrelated matter I found this connection open that seemed (at least to my untrained eye) strange:
Where Name was the last name of another current employee ...
- 125
4
votes
1
answer
2k
views
WebRTC security & encryption
I am building a WebRTC application, and really concerned about security.
I have read this quite interesting article : https://webrtc-security.github.io
As I am far from being an expert in networking ...
- 141
2
votes
2
answers
5k
views
Suspected fake torrent peers with "client_test" ID
For a fair number of torrents I'm dealing with (qBittorrent 3.3.7 here), I see a number of entries in the "Peers" list (it apparently only shows peers that are currently connected) with client_test/1....
- 130
2
votes
1
answer
6k
views
Identifying torrented files by reversing info_hash
I've been lead to believe that if you decode the info_hash in a tracker GET request, you are left with the SHA1 hash of the file that is being downloaded. That makes sense to me but I'm not getting ...
- 191
6
votes
3
answers
747
views
Why is DARPA interested in secure messaging platform using blockchain technology?
DARPA (US Defense Advanced Research Projects Agency) has released a Request for Proposal for a Secure Messaging Platform using a blockchain framework.
The following is the Objective paragraph from ...
- 193
11
votes
1
answer
768
views
Do software companies intentionally upload fake/infected versions of their own software to file sharing networks as a means to combat piracy? [closed]
Disclaimer: No illegal activity is condoned in this post. The legality of the described activity varies from country to country.
I remember in the early 00's, when peer to peer file sharing was ...
- 3,127
2
votes
1
answer
746
views
Is WebRTC safe for connecting random clients to each other?
I am trying to implement a chatroulette-sque app, and WebRTC seems to be the best choice as far implementing something that doesn't take a vast amount of server resources. My current scheme is to ...
- 129
6
votes
2
answers
623
views
Are ZeroNet websites susceptible to 51% control attack?
I've been reading about ZeroNet and thought about putting a site together but have concerns that it may be vulnerable to the issue laid out in What can an attacker with 51% of hash power do?.
From ...
user72066
7
votes
2
answers
4k
views
Securing Peer to Peer communication
Is there a standard way to secure peer to peer communication?
I'm currently using HTTP to transfer data from peer to peer, however, securing with TLS/SSL normally requires a certificate authority to ...
- 313
0
votes
0
answers
1k
views
Is sharing with Direct Connect DC++ secure?
As I have some useful software that I want to share with friends and I don't like to get involved with torrents, DC++ (P2P client for sharing and chatting) seems a good way to do it, but I'm not sure ...
- 19
17
votes
7
answers
5k
views
Stopping ill-mannered use of guest wifi [closed]
I support a small business' tech issues including setting up a guest WiFi network. The WiFi is important since they want people sitting around and consuming their product. Over the past months they'...
- 291
1
vote
1
answer
4k
views
Is it possible to secure an Android Intent from other calls from apps?
I'm looking at the architecture of Android and want to come up with a service that allows for multiple applications (3rd party) to call a local android service and fetch data. Think of this as a ...
- 51.1k
2
votes
1
answer
2k
views
Creating a P2P hosted website
Is there a way to create a peer-to-peer hosted website securely:
- Without Having a connection between the developer (host) of the website to the website?
- Securing some information the site uses ...
- 163
2
votes
0
answers
213
views
How do I allow for anonymous encryption? [closed]
I have a protocol I am designing that requires anonymity and privacy. My idea is to have a minimum number of hops in the network before the message can be sent to its intended destination. The ...
- 121
2
votes
1
answer
957
views
Mitigating DDOS in P2P systems
In P2P systems where performance and response times are critical individual clients are susceptible to DDOS by publicly exposing their IPs. While there are various mitigation solutions available at ...
2
votes
1
answer
1k
views
How can the sybil attack be used on a P2P system that implements DHT?
I was reading about the sybil attack and am unclear on some details.
After becoming part of the peer-to-peer network, the adversary may
then overhear communications or act maliciously. By ...
- 10.2k
2
votes
1
answer
384
views
Secure (P2P) Client/Company File Sharing
my small web design company currently uses a cloud storage service to collaborate with our clients and I would like an easier (and more secure) way for files to be transferred-in and stored.
The ...
- 23
14
votes
1
answer
3k
views
Torrent "bad seed" attack by Sony, how does it work?
Sony recently saw a large amount of data stolen. In order to prevent the stolen data from being spread using torrents, they are doing what was called a bad seed attack. What is this attack? Is this a ...
- 709
3
votes
1
answer
10k
views
How can illegal downloads (not file sharing) be detected?
I understand that copyright holders can identify illegal filesharing over BitTorrent by simply taking part in the sharing process and noting IPs of peers.
But how do they detect illegal downloads ...
user30615
9
votes
4
answers
4k
views
Is webRTC safe against man in the middle attacks?
We are implementing an open source software package (copay, a multisig bitcoin wallet), that uses peerJS, which uses webRTC to allow peer-to-peer communication between browsers.
peerJS (and webRTC) ...
- 115
0
votes
1
answer
1k
views
Alternative to ICANN? [closed]
What are major DNS services offered that aren't state-controlled. Better yet, why can't we take Bitcoin's model and create a truly decentralized system with P2P DNS?
I see potential reasons behind ...
- 36
2
votes
3
answers
1k
views
How do bots communicate in the zeus botnet?
I read on http://www.abuse.ch/?p=3499 that: ZeuS is now using an “IP list” which contains the IP addresses of other drones participating in the P2P botnet. An initial list of IP addresses is hardcoded ...
- 21
7
votes
1
answer
4k
views
WebRTC P2P SSL - Where are the keys generated?
My understanding is that with the WebRTC peer-to-peer data API, communications between peers are encrypted via a modified form of SSL. Where are the keys for the peer-to-peer SSL connection generated, ...
- 2,292
0
votes
1
answer
202
views
Safely creating and communicating within a fully decentralized p2p network
I'm not entirely sure if this is the right place to ask this, and I'm also slightly fuzzy on how the p2p system works, so correct me if I'm wrong.
I've been looking into the practical implications of ...
- 243
1
vote
0
answers
342
views
P2P sharing of uniquely encrypted files
I need a way to share large, uniquely encrypted files (AES256) that are actually the same file when decrypted, through P2P, to optimize download speeds.
For instance, a centralized server would ...
- 119
9
votes
3
answers
4k
views
Bittorrent Sync encryption
Sync, a new product from BitTorrent, Inc., has been cited as a viable alternative to other cloud-storage platforms. The Sync FAQ indicates that an encryption scheme is being used, but does not comment ...
- 3,023
2
votes
3
answers
544
views
Is a file hash checking system 100% secure and non-bypassable/fakable?
I'm building an open source distributed (and partly offline replicated, as it's assumed that the network will be unstable) CMS and one of the core system 'job' will be to group all the files and ...
user134346
2
votes
0
answers
564
views
Duration of torrent activity and ISP tracking [closed]
The only reason I use BitTorrent is to download Linux distros, Open source apps and large documentation files. My ISP contacted me once and warned me:
Ok, you aren't downloading anything illegal or ...
- 135
1
vote
3
answers
10k
views
Why does P2P need port forwarding when behind NAT? [closed]
Correct me if I'm wrong, but for a node to participate in peer-to-peer, if it's behind NAT, it must port forward to be able to connect. Why is the port forwarding necessary? I know there are ...
- 10.2k
4
votes
1
answer
404
views
Hiding BitTorrent clients
One of the things that came out of the Snowden files, I believe, was that ISP's will monitor someone that has a BitTorrent client (uTorrent, qbittorrent etc.) installed on their PC, even if they don't ...
- 143
0
votes
1
answer
156
views
Decentralized online shopping service [closed]
Would it be possible to create an online shopping service like Amazon (or Silk Road) but also to make it decentralized so there would no main server users would have to trust with their data?
I ...
- 101
4
votes
2
answers
223
views
Could server honesty be audited by remote peers without said peers having sole (or any) control of the server?
Suppose for some reason, you and your peers absolutely positively have know that a server is acting honestly.
Could the server behaviour be audited remotely through some mechanism of randomly ...
- 5,253
2
votes
1
answer
447
views
Danger of peer to peer software [closed]
I wanted to ask what are the risks of using P2P software. I found a lot of information on-line regarding the danger of file sharing but not about the software by itself.
I am writing a mobile ...
- 422
9
votes
8
answers
37k
views
How to block some websites and torrent usage in a small office?
In my office there are approaximately 25 systems are connected through network and all having internet accessibility.but some people are missusing this facilities like downloading films from torrent ...
- 307