What are the open privacy (and security) issues in the SAFE network?

[polpolrene]

Welcome to the forum!

I think the most harmful would be malware with a keylogger. If people would know your username:PIN:pass you’re doomed when it comes to security.

@fevir

-No info found on the forum of an Eclipse attack (routing table poisoning)

This topic might come close.

Close group security

I have read the system docs, and it seems that a lot of SAFE’s security relies on the hardness to enter other nodes’ close groups at will by means of sybil attacks. It isn’t quite clear to me why this is hard. Can anybody explain it to me? I read here that to create a vault ID you need two pairs of keys. One revocation key (Rpriv, Rpub) and one regular (Kpriv, Kpub). The vault ID is then H(Kpub + SigRpriv(Kpub)). Generating new vault IDs that are close to arbitrary other vault IDs seems like i…