|
|
|
|
|
by SomeStupidPoint
3464 days ago
|
|
I agree you could harden a cryptocurrency, I was merely pointing out that Bitcoin is not. (And would require reaching consesus or having a fork to become one.) Further, Im not sure that there's an anonymization network that could sustain being the consensus network backbone without also leaking the information to a pervasive, persistent adversary. Things like TOR likely can already be penetrated by the US or China or Russia, and things like FreeNet are likely too slow to reach global consesus fast enough to prevent diverging chains. Also, DoSing the network doesn't require you deanonymize them, merely that you can fill most of their anonymous routes with traffic (or that you can drop packets along them). This is problematic, because the network fundamentally must publish routes. The underlying architecture isn't meant to operate in truly adverse conditions. |
|
You're treating Bitcoin as a black box.
The thing people care about forking is the blockchain. The DoS problem is the network transport. They're independent pieces. You could add a new hardened transport without forking the blockchain or even discontinuing the existing transports. Everyone would just naturally start using the hardened transport if the attack materialized.
> Also, DoSing the network doesn't require you deanonymize them, merely that you can fill most of their anonymous routes with traffic (or that you can drop packets along them). This is problematic, because the network fundamentally must publish routes. The underlying architecture isn't meant to operate in truly adverse conditions.
An anonymity service needs to be resistant to censorship. In one sense that means having a lot of bandwidth, but it also means having some political support. A government may have the technical capacity to launch a large DoS attack but it can't do that if the target servers are in a non-pushover country that would take the attack as an act of aggression.
And penetrating an onion routing network in this context is non-trivial. The three main categories of attack are implementation bugs in the endpoints, an adversary operating a large number of relays, and timing correlation by a global adversary. But the first group are inherently temporary and there are fewer of them when the endpoint is not a web browser with ten million lines of code. The second can be mitigated by not choosing relays in adversarial countries. And the third can be mitigated for low bandwidth services by using a fixed low bitrate and sending padding when there is no data.