On 7 May 2018 at 18:17, Michael Schwendt <bugs.michael(a)gmx.net> wrote:
On Mon, 07 May 2018 20:15:56 +0000, Josh Boyer wrote:
> > What about forgeries?
> Can you elaborate on what you mean?
Don't you fear computer vandalism? Script kids or other vandals
exploiting an oversimplified counting mechanism to fake the
They can do that already by just flooding the proxy servers with valid
looking requests for data. If the data turns out to be useless because
of it, then it stops getting recorded. I don't think there is much we
can do with publicly facing mirror servers which wouldn't be taken
offline by 3 jerks and a small IoT botnet. [I don't think any of the
projects could stand that either.]
The larger amount of problems will be how much of the data will report
that it is a PDP-11, Vax740, long strings of uuencoded /dev/random,
non-existant variants (Fedora Ubuntu variant), etc. But again I expect
that Debian popcorn and similar tools have to deal with that as much
as anything else.
In the end, the user is able to send whatever they want to the Fedora
Project proxy servers.. we can choose what to do with that data to a
point, but if they want to take us offline or jam some service.. they
can do it now.
council-discuss mailing list -- council-discuss(a)lists.fedoraproject.org
To unsubscribe send an email to council-discuss-leave(a)lists.fedoraproject.org
Stephen J Smoogen.