From: Joey Hess <joeyh@joeyh.name>
Date: Fri, 9 Aug 2024 20:47:28 +0000 (-0400)
Subject: todo
X-Git-Tag: archive/raspbian/10.20250416-2+rpi1~1^2~21^2~149
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=412f6057e45250573037af656846cd3b39ca6263;p=git-annex.git

todo
---

diff --git a/doc/todo/git-annex_proxies.mdwn b/doc/todo/git-annex_proxies.mdwn
index 13a8f56c06..85e4ec0cd8 100644
--- a/doc/todo/git-annex_proxies.mdwn
+++ b/doc/todo/git-annex_proxies.mdwn
@@ -33,6 +33,15 @@ Planned schedule of work:
 * balanced= and fullybalanced= need to limit the set of repositories to
   ones with enough free space to contain a key.
 
+* document balancing algo well enough that someone else could implement it
+  from the design doc
+
+* picking a low UUID and picking keys that mod N == 0 would let an attacker
+  generate keys that balancing always puts on that UUID. To avoid this
+  use HMAC with the set of UUIDs and the key. Then any such attack can be
+  prevented by adding another UUID to the set, it could even be a dummy
+  UUID that is marked as having 0 size, so it will never be used.
+
 * Add `git-annex maxsize` command.
 
 * Implement [[track_free_space_in_repos_via_git-annex_branch]]