From: Tom Lord <lord@emf.net>
Date: Fri, 29 Apr 2005 19:52:43 GMT
Subject: Re: Val Henson's critique of hash-based content storage systems
Message-ID: <200504291952.MAA27541@emf.net>
In-Reply-To: <Pine.LNX.4.58.0504291221250.18901@ppc970.osdl.org>



I wouldn't expect outright successful attacks like forged replacements
for arbitrary files.

I would expect someone to have on hand a small number of blobs that are
different but have different hashes and, eventually, to drop said files
into a blob-based infrastructure to wreak havoc.

So: a way to locally mark a given checksum as "controversial" seems 
prudent, to me (hence, support for such in my blob-db code/spec).

-t