pull down to refresh

0 sats \ 1 reply \ @thrown 5 Feb 2022 \ parent \ on: Someone should create non-custodial API service bitcoin
The information that is leaked by exposing Tallycoin to clearnet is your rough location in the world
The traffic is routing through TOR, so that should remove the first problem around physical location.
as well as making it easier for attackers to target your node.
What is the risk there? Your node gets DDOS'd basically? Is there a real risk beyond that?
write
preview
2 sats \ 0 replies \ @kevin OP 6 Feb 2022
The traffic is routing through TOR, so that should remove the first problem around physical location.
Look. Any service that wants to interact with a TOR hidden service (in this case Tallycoin running on Umbrel) needs to also run a TOR daemon. This is not ideal and brings with it a lot of issues.
You can set up a reverse proxy on your Umbrel machine to allow make Tallycoin reachable via clearnet but it brings with it privacy issues (ie. you leak your IP address). Not ideal.
What is the risk there? Your node gets DDOS'd basically? Is there a real risk beyond that?
The IP address being leaked (and by extension your rough physical location.). That can lead to all sorts of issues, for example DDOS or black hats targeting your machine specifically to get access to your node (and your funds). Remember that every LN node is in practice a kind of bug bounty.
There are examples of individuals that have accidentally exposed their Umbrel nodes to clearnet having their funds swiped. Granted, this has mostly been when the default password was "umbrel", but still.
reply