limited friends forwarding shows the data name

OneSwarm Forum » Bugs

limited friends forwarding shows the data name

(8 posts) (2 voices)

Started 1 year ago by zoorgh
Latest reply from zoorgh

Tags:

No tags yet.

zoorgh
Member

i notice friends forwarding data in the 'transfer' section. it show me relay data from one limited friend to another limited friend. both of friends are on community server and has little 'l' next to the names.

but look! in column 'Data' it showed the name of the file they were transfering! it should be encrypted and say 'unknown' like everything else between limited friends, no? then i can just read the filename and neglect to relay it if i don't like it.

is this a bug? if not i want a way to reject relay data that i am not supposed to see but it show me anyway.

Posted 1 year ago #
isdal
Administrator

Hi, we received this question (as well as showing friend ips) before so I will just be lacy and copy the response from then :-)
===
We have received the same question before: Is it really that smart to show the IP address of your friends?

The policy we have so far is that we expose all information that is trivial to get (like the IP-address of your friend). We do this to avoid confusion, we want people to know what is hidden and what is not.

We apply the same policy during friend-forwarding. If you recognize the hashhash in the search packet that started the forward (perhaps because one of your friend is sharing that torrent with you) we will show the name of the torrent in the friend forward table. If you don't recognize it we show 'unknown' instead. Again, we do this since that information is trivial to get.

Basically we want all security in the system to be because of the protocol and algorithms used, not because of what is displayed in the ui and what is not. The system can be pretty hard to understand already, and we think that full disclosure is the best way to give people a better feel for what security that is provided.
===
http://forum.oneswarm.org/topic/75

Posted 1 year ago #
zoorgh
Member

no no. this isn't case where my limited friends is showing me content i already have or that i can have from trusted friends sharing with me. this is case where 1S is sending like this:

alice -> me -> bob

and it tell me the data is 'foo.bar' when i looked at 'friends forwarding' but i am certain i don't have foo.bar and i am certain none of my trusted friends have foo.bar.

so how can my 1S know it is foo.bar and tell me that?

Posted 1 year ago #
zoorgh
Member

i read the 1S paper again and it seems like i misuderstand it. i thought that data that i relay is encrypted so i don't know what it is. but it is just encrypted from alice -> me, then i can read it and i encrypt it from me -> bob. is this right? i am confuse

Posted 1 year ago #
isdal
Administrator

for the
alice->you-> bob example, traffic is decrypted hop-by-hop and not end-to-end. There is unfortunately no way to do end-to-end encryption unless you know the public key of the source. In OneSwarm the source is unknown so we have to settle for hop-by-hop encryption.

The reason you sometimes can see the filename instead of 'unknown' is because someone has you as a trusted friend and shares that file. If you don't want to know see someone else's share you can uncheck the 'request file list' checkbox for that friend.

Posted 1 year ago #
zoorgh
Member

ok thank you now i am understanding. well starting to :)

question #2:
mun is my trusted friend and we see each other files. mun make a swarm forMyTrustedFreindOnly.wav. mun makes it shared with me but not with bob.

i see that mun has added this file and i want to download and listen it.

now- 1S give me one path lets say it is this-

mun -> bob -> me

can bob read forMyTrustedFreindOnly.wav or know that this is the file that is in transit? here is seems like we COULD have end-to-end encryption but is it the case?

finally- for limited friend relaying why cannot i generate a one-time public-private key pair and send the public one with my request for download then the guys who has the file do initial encrypt with my one-time public key? then they still do the hop-to-hop encrypt/decrypt but only i can read data when i get the file piece and unencrypt with private key.

thank you

Posted 1 year ago #
zoorgh
Member

oops when i say one-time key pair i mean it last for that channel- then when the channel is done and go away i throw away that key pair. you only generate these temporary keys when open up a channel hopefuly that makes sense

Posted 1 year ago #
zoorgh
Member

@isdal- you solved my issue. i see that i request files from a limited friend long ago. that friend must have had 'foo.bar' so it showed it to me. thank you

Posted 1 year ago #

RSS feed for this topic

Reply

You must log in to post.