summaryrefslogtreecommitdiffhomepage
Commit message (Collapse)AuthorAge
...
* eliminate half the bloom filters, using HMAC to verify RequestIDsJoey Hess2016-09-13
| | | | | | | | | | | Simplifies code, uses less memory, and don't need to protect against flooding generation of RequestIDs, since the server does not store them at all. Note that the RequestIDSecret is only stored in ram, so restarting the server will invalidate any RequestIds given out before. It would be possible now to store that on disk to avoid that problem, but probably not worth it.
* updateJoey Hess2016-09-13
|
* made fallback request queue fairJoey Hess2016-09-13
| | | | | | | | Once on the queue, requests should not need to contend with other requests that are not on the queue, so added a fallback request bucket. tokenBucketWait is not fair, so ensure FIFO processing of the queue by using a FairRWLock.
* add date to loggerJoey Hess2016-09-13
|
* use fast-logger for better loggingJoey Hess2016-09-13
|
* fix pointer to bugJoey Hess2016-09-13
|
* updateJoey Hess2016-09-13
|
* changelogJoey Hess2016-09-13
|
* todoJoey Hess2016-09-13
|
* implemented dynamic rate limitingJoey Hess2016-09-13
|
* improved rate limiterJoey Hess2016-09-13
| | | | | Now caps total request rate even if attacker is willing to burn infinite CPU on PoW.
* fix buildJoey Hess2016-09-13
|
* got my usec conversion wrongJoey Hess2016-09-13
|
* Revert "refactor"Joey Hess2016-09-13
| | | | This reverts commit 48ec718a6211a71ae0a796eb1c3a6ea091dc6e14.
* got my usec conversion wrongJoey Hess2016-09-13
|
* refactorJoey Hess2016-09-13
|
* don't need --disk-reserveJoey Hess2016-09-13
| | | | keysafe does not run as root, so the normal ext2 disk reserve will do
* adding some server disk usage tuning optionsJoey Hess2016-09-13
|
* half the fill rateJoey Hess2016-09-13
| | | | | | This decreases the possible maximumStorageRate by half, down from 10 gb/month to 5 gb/month. Which is probably a tolerable amount for many servers; that's 16 months to fill up a terabyte disk.
* use half as many token bucketsJoey Hess2016-09-13
| | | | | | | (down from 7 to 4) This decreases the possible maximumStorageRate by half, down from 18 gb/month to 10 gb/month.
* maximumStorageRate calculationJoey Hess2016-09-13
|
* todoJoey Hess2016-09-13
|
* use token bucket as the random salt generation rate limiterJoey Hess2016-09-13
| | | | | This avoids a 1s delay in requests, except when an attacker is flooding them.
* more refactorJoey Hess2016-09-12
|
* refactorJoey Hess2016-09-12
|
* add proof of work to countobjectsJoey Hess2016-09-12
| | | | In this case, an empty string is hashed to generate the PoW.
* implement client-server Proof Of WorkJoey Hess2016-09-12
| | | | | | | | | | | | | | | | | | | Mashed up a argon2-based PoW with token buckets and bloom filters. This is intended to prevent a few abuses including: * Using a keysafe server for general file storage, by storing a whole lot of chunks. * An attacker guessing names that people will use, and uploading junk to keysafe servers under those names, to make it harder for others to use keysafe later. * An attacker trying to guess the names used for objects on keysafe servers in order to download them and start password cracking. (As a second level of defense, since the name generation hash is expensive already.) Completely untested, but it builds! This commit was sponsored by Andreas on Patreon.
* new moduleJoey Hess2016-09-12
|
* updateJoey Hess2016-09-04
|
* Added --name and --othername options.Joey Hess2016-09-04
|
* benchmark of full restore took expected amount of time on librem 13Joey Hess2016-09-01
|
* improve messageJoey Hess2016-09-01
| | | | Share download cannot be due to wrong password
* Fix bug that prevented keysafe --server from running when there was no ↵Joey Hess2016-09-01
| | | | controlling terminal and zenity was not installed.
* todo0.20160831Joey Hess2016-08-31
|
* better message on bad passwordJoey Hess2016-08-31
|
* prep releaseJoey Hess2016-08-31
|
* updateJoey Hess2016-08-31
|
* updaeJoey Hess2016-08-31
|
* wordingJoey Hess2016-08-31
|
* updateJoey Hess2016-08-31
|
* addJoey Hess2016-08-31
|
* add .desktop fileJoey Hess2016-08-31
|
* updateJoey Hess2016-08-31
|
* updateJoey Hess2016-08-31
|
* add systemd service, makefile, improve INSTALLJoey Hess2016-08-31
|
* added --store-directoryJoey Hess2016-08-31
|
* commentJoey Hess2016-08-31
|
* key encryption hash benchmark was off by a factor of 16, fixJoey Hess2016-08-30
| | | | | | f2fa457a7e45721e94a3f5d0307faf874150cdb4 did in fact fix a laziness issue in the benchmark. This explains why restore was taking so long, although I need to re-run a real restore to double-check this.
* addJoey Hess2016-08-30
|
* todoJoey Hess2016-08-30
|
generated by cgit v1.2.3 (git 2.39.1) at 2024-06-01 17:52:42 +0000