News for hackers. Stuff that matters.

A comment on Abusing WebRTC to reveal coarse location data in Signal. Parent comment

Re:Abusing WebRTC to reveal coarse location data in Signal by ajconway on Thursday May 21, 2020 @05:28AM (#23256425)
Lokinet seem to claim (https://medium.com/@LokiNetwork/lokinet-b8f738fefe7a) that their network is more resistant to sybil attacks by introducing different incentives (an internal cryptocurrency) and not having a central authority (which TOR does have, and which users have to trust). It's unclear how this helps against a wealthy adversary determined to control the network via its own nodes.
[ Parent | on HN ]
Re:Abusing WebRTC to reveal coarse location data in Signal by mirimir on Thursday May 21, 2020 @11:00AM (#23259142)
As I understand it, there's a slowly increasing supply of Loki, a private cryptocurrency. Basically, service nodes earn Loki for caching messages, and relaying traffic. I gather that's analogous to mining in Bitcoin etc.

Creating a new service node requires a providing a stake in Loki, which I believe currently costs on the order of $5000. And the only source is Loki held by existing service nodes. So arguably, as the creation rate for new service nodes increases, the price of the requisite Loki stake increases, perhaps supra linearly, or even exponentially.

There's also the issue that service nodes that behave maliciously lose all of their Loki, both the initial stake, and anything that they've earned.

I don't know specifics, however. So I don't know just how high the bar is for malicious service nodes.

[ Parent | on HN ]
Re:Abusing WebRTC to reveal coarse location data in Signal by ajconway on Thursday May 21, 2020 @03:42PM (#23263932)
If I understand it correctly, a node does not need to be acting malicious, it only needs to cooperate with other compromised nodes.
[ Parent | on HN ]
Re:Abusing WebRTC to reveal coarse location data in Signal by mirimir on Thursday May 21, 2020 @08:48PM (#23267519)
Thanks, I'll look into it. It seems like a subtle distinction. That is, "cooperat[ing] with other compromised nodes" seems like a flavor of malicious activity.

I get that the Tor Project has banned relays for numerous reasons. The tor-relays list is a good (albeit incomplete) source for reports, discussion and decisions.

[ Parent | on HN ]