You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently when Alice requests to open a stream with Bob, Bob automatically accepts and returns the generated streamid.
This make all clients vulnerable to memory attacks. Instead there should be some mechanism where Bob must confirm the stream open and it quickly times out if he does not.
The text was updated successfully, but these errors were encountered:
It may be better to have a stream limit and just close the oldest or least active. This may be better for the following reasons.
It keeps the interface simple.
Doing otherwise would just defer the attack vector to the user. It would be better to do this once correctly in storjnet instead of requesting users to duplicate the effort (likely badly or not at all).
Currently when Alice requests to open a stream with Bob, Bob automatically accepts and returns the generated streamid.
This make all clients vulnerable to memory attacks. Instead there should be some mechanism where Bob must confirm the stream open and it quickly times out if he does not.
The text was updated successfully, but these errors were encountered: