On Wed, 2007-11-14 at 14:39 -0500, Alex . wrote:
[...]
> > >> For IPv4 you need duplicated IP address detection and an automatic
> > >> solution of that. And IMHO you actually need it for IPv6 too: MAC
> > >> addresses are in theory globally unique. I doubt that this is true in
> > >> practice given the vast numbers of sold network cards. And some clown
> > >> may change the MAC address at any time - if only to try it out or
> > >> trying to become a cool hacker or continuing some personal fight.
> 
> I'm pretty sure a mesh network at this point won't be attack proof
> (black holes, clones, etc...) but i'm also pretty sure that the
> benefit of being a good "mesh-izen" will outweight the idea of running
> all sort of attacks against the network just because we can...

Avoiding/inhibiting attacks is pretty hard. It would be a first success
if we can detect/survive simple and unintended misconfigurations - we
are all only humans.

> Also, people will tend to know each other, collaborate, etc... and
> with geolocation just around the corner, a sense of involvement might
> help too!

Yes. Actually this also comes somewhat automatically if you need to
invest - say - two evenings just to get your node up and running.
The question is: who are these people that will get involved only
because everything works out of the box (and who are not involved
otherwise)? How do they react if *their* node is misconfigured (for
whatever rason) and that is blackholed by the neighbours since it is not
fixed long enough by *them*?

	Bernd
-- 
Firmix Software GmbH                   http://www.firmix.at/
mobil: +43 664 4416156                 fax: +43 1 7890849-55
          Embedded Linux Development and Services



