[Gzz-commits] storm/doc/pegboard/attacking_gisp--hemppah peg.rst

[Hermanni Hyytiälä]

CVSROOT:        /cvsroot/storm
Module name:    storm
Branch:         
Changes by:     Hermanni Hyytiälä <address@hidden>      03/06/13 08:12:42

Modified files:
        doc/pegboard/attacking_gisp--hemppah: peg.rst 

Log message:
        exploit

CVSWeb URLs:
http://savannah.gnu.org/cgi-bin/viewcvs/storm/storm/doc/pegboard/attacking_gisp--hemppah/peg.rst.diff?tr1=1.30&tr2=1.31&r1=text&r2=text

Patches:
Index: storm/doc/pegboard/attacking_gisp--hemppah/peg.rst
diff -u storm/doc/pegboard/attacking_gisp--hemppah/peg.rst:1.30 
storm/doc/pegboard/attacking_gisp--hemppah/peg.rst:1.31
--- storm/doc/pegboard/attacking_gisp--hemppah/peg.rst:1.30     Fri Jun 13 
07:51:21 2003
+++ storm/doc/pegboard/attacking_gisp--hemppah/peg.rst  Fri Jun 13 08:12:42 2003
@@ -4,8 +4,8 @@
 
 :Authors:  Hermanni Hyytiälä
 :Date-Created: 2003-06-05
-:Last-Modified: $Date: 2003/06/13 11:51:21 $
-:Revision: $Revision: 1.30 $
+:Last-Modified: $Date: 2003/06/13 12:12:42 $
+:Revision: $Revision: 1.31 $
 :Status:   Incomplete
 
 .. :Stakeholders:
@@ -229,6 +229,16 @@
 
 
 Hypothesis:
+
+- GISP has a obvious exploit, if a hostile peer is able to behave like "dumb"
+  peer. More specifically, a hostile peer answers to "SEEN" messages in the
+  network, but no dot perform requested operations, e.g., do not provide
+  a "RESULT" message for a "QUERY" message. This behaviour allows other peers 
+  to maintain hostile peers in their routing tables while still hostile
+  peers are able to cause problems to the network's operation. "SEEN", "RESULT"
+  and "QUERY" messages are part of GISP-3.4 specification. Also, 
+  a hostile peer is able to use this "dumb" behaviour with other GISP-3.4 
+  messages.
 
 - It is expected that (popular) data items can be found with fewer hops in 
   *some cases* in GISP network w.r.t Chord network, since GISP extends Chord's