-
Notifications
You must be signed in to change notification settings - Fork 38.6k
Change Luke Dashjr seed to dashjr-list-of-p2p-nodes-maybe-malware.us #29145
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
To avoid issues with DNS blacklisting, I've setup a separate domain for my DNS seed.
|
The following sections might be updated with supplementary metadata relevant to reviewers and maintainers. Code CoverageFor detailed information about the code coverage, see the test coverage report. ReviewsSee the guideline for information on the review process.
If your review is incorrectly listed, please react with 👎 to this comment and the bot will ignore it on the next update. ConflictsNo conflicts as of last run. |
|
Note that the current domain name continues to resolve for now; I'm just preemptively doing this in case it becomes a bigger issue in the future. |
mzumsande
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@luke-jr : Slightly unrelated to this PR, but looking at the results from all seeders, it seems that yours returns only nodes running old versions 0.21.x and 22.x. I didn't get a single result with a newer subversion.
Given the current composition of nodes on the network and that none of the other DNS seeds show a similar pattern, this seems unlikely to just be an unlucky result of a random selection. Could this be a bug in your seeder?
|
DNS points to the same host. So should be no difference is answers. |
|
The main outcome I can see from this change is confusion from (maybe less-technical) users, when they see this unusual domain / 2023-12-28T11:54:27.034530Z [dnsseed] Loading addresses from DNS seed dnsseed.bitcoin.dashjr-list-of-p2p-nodes-maybe-malware.us.I don't think we should ship software that will do that. |
|
I agree with @fanquake, so NACK the choice of domain name. Anyone who actually sees the domain name used and uses it for some purpose will very likely be able to understand that these IP addresses may be anything, so there is no need for this disclaimer. Meanwhile, putting malware in the name just invites confusion and unnecessary support requests from curious people who don't understand what they are seeing. |
|
Seems like if debug log is the concern, we could just mask it there... Doesn't seem like a good reason to make it easier for scammers by removing the warning? |
This comment was marked as abuse.
This comment was marked as abuse.
Er, how is "maybe malware" the purpose of the seeder? It seems like this would just confuse/alarm users, maybe choose something else instead. I don't think adding a log filter makes sense either. |
|
The DNS seeds resolve to IPs of random peers. It's entirely possible (and apparently reality) that some of those host malware. Putting It seems like a low-cost improvement to avoid abuse IMO, but if there's a hard objection to it, I can come up with another domain for it. |
It's entirely possible that one could be hosting a nascent superintelligence that's just escaped from a AI lab, but you're not adding "maybe-superintelligence" to the name. Even more likely for some of them to be chainanalysis spy nodes, or any number of other potentially worrying things. FWIW, knots hasn't yet been updated to be malware adjacent: https://github.com/bitcoinknots/bitcoin/blob/aed49ce8989334c364a219a6eb016a3897d4e3d7/src/kernel/chainparams.cpp#L135 |
I'd say objections to your current choice of domain name have been made clear from various contributors. Along with objection to changing any logging to accomodate it. Moved this to draft for now. Feel-free to undraft with a different domain etc. |
|
Given it's been more than a month, and there's no more followup here, I'm going to close this for now. Feel free to ping for a re-open, if/when you've picked a more suitable domain name. |
To avoid issues with DNS blacklisting, I've setup a separate domain for my DNS seed.
Like #28936
I've chosen a domain name that is explicitly verbose about its purpose and the possibility of malware on resolved IPs, to go an extra mile in helping avoid any attempts to abuse it.