News for hackers. Stuff that matters.

A comment on Bitmagnet Allows People to Run Their Own Decentralized Torrent Indexer Locally.

Re:Bitmagnet Allows People to Run Their Own Decentralized To... by jesprenj on Sunday February 18, 2024 @02:44PM (#39422383)
Implementing sample_infohashes opens your torrent client to abuse. UDP responses are much larger than queries and this protocol (BEP51) allows attackers that can spoof source IP addresses to use a large number of clients as mules for amplified distributed denial of service attacks.
[ Parent | on HN ]
Re:Bitmagnet Allows People to Run Their Own Decentralized To... by mgdigital on Sunday February 18, 2024 @02:57PM (#39422506)
Bitmagnet has rate limiting on incoming UDP requests (both overall and per-IP) so I don't know that it would be vulnerable; if there's anything else that should be done to mitigate any risk I'd like to know.
[ Parent | on HN ]
Re:Bitmagnet Allows People to Run Their Own Decentralized To... by pluto_modadic on Sunday February 18, 2024 @03:03PM (#39422559)
outgoing rate limits, and also it could exhaust the overall rate with useless traffic.
[ Parent | on HN ]
Re:Bitmagnet Allows People to Run Their Own Decentralized To... by mgdigital on Sunday February 18, 2024 @03:06PM (#39422584)
Incoming and outgoing are both limited, I think the worst such an attack could do is prevent responding to legitimate incoming queries - this shouldn't slow down the DHT crawler in a noticeable way.
[ Parent | on HN ]
Re:Bitmagnet Allows People to Run Their Own Decentralized To... by jesprenj on Sunday February 18, 2024 @04:39PM (#39423666)
I do not mean bitmagnet here, I mean other bittorrent clients that respond to sample_infohashes.
[ Parent | on HN ]
Re:Bitmagnet Allows People to Run Their Own Decentralized To... by p1mrx on Sunday February 18, 2024 @05:42PM (#39424256)
Has anyone tried to fix this by making queries bigger, and limiting the response to the size of the query?
[ Parent | on HN ]
Re:Bitmagnet Allows People to Run Their Own Decentralized To... by the8472 on Monday February 19, 2024 @11:12AM (#39431378)
Individual DHT nodes should only see a trickle of packets. A few kilobytes per second. Even less per remote IP. So they can set fairly strict rate limits.

And ISPs are in a much better position to solve this problem anyway. They should ask for higher peering fees from peers that don't do source-filtering.

[ Parent | on HN ]
Re:Bitmagnet Allows People to Run Their Own Decentralized To... by jesprenj on Wednesday February 21, 2024 @02:46AM (#39451137)
True. Although an ISP can say they do source filtering and then fail to implement it properly. For example my ISP at home implements source filtering on IPv4, but not on IPv6.
[ Parent | on HN ]