Possible attack vector - mass username registration

In the past, we talked about different account modes on this thread below.

It might be easier to simplify a little more. Instead of having account (creation + activation), maybe we just have account (creation).

No Login Required (Public GET functionality)

  • Unlimited browsing/download of public data.
  • Cannot PUT data onto the Network.

Create Account (Public and Private GET functionality w/ PUT)

  • Acquire Safecoin wallet address.
  • Can PUT data onto the Network.

I think it’s already set up this way? I just wanted to make sure we are on the same page. When a new user runs the client, they are in “public browse mode” by default, otherwise they login to their account to enable PUT functionality. This could reduce a large amount of account creations from people who just want to try the Network.

The original reason for (creation + activation) was to prevent users abusing free storage. But we are no longer doing free storage, so it is not needed, right?

3 Likes