CVE-2023-26248

The Kademlia DHT (specifically go-libp2p-kad-dht version 0.20.0 and earlier) used in IPFS (version 0.18.1 and earlier) is vulnerable to content censorship. The root cause is that the system assigns routing information for content to peers whose peer IDs have a small DHT distance from the content ...

Torrent Swarm Poisoning

=== Credits === Written by Burningmace. Thanks to Blindkilla for helping me out. === Introduction === The BitTorrent protocol identifies peers using a tracker. Each peer announces itself to the tracker via HTTP. Certain parameters in the announce request itself can be altered in order to fake the...