回复：Bitcoin.org 备份
首次公开证据
打开首次公开证据查看 1 个交叉存档
来源说明
Published on GitHub in February 2024 as part of Martti Malmi's testimony in the COPA v. Wright trial
ShadowOfHarbringer 在这里介绍了一种镜像 bitcoin.org 网站和 论坛的方法： http://www.bitcoin.org/smf/index.php?topic=2026.msg30043#msg30043
我们是否应该照此办理，把数据库连同其中的密码哈希交给 一些拥有服务器、值得信赖的社区成员？
这似乎是在自找麻烦，而且我认为这会辜负 所有论坛注册用户对我们的默诚信任。
我同意，不要让数据库离开你的掌控。其中有私密站内信、 电子邮件地址和密码。
顺便说一下，密码哈希 = 密码。破解人们在论坛上使用的短密码的 哈希很容易。 6 个字符 = 难度 3
7 个字符 = 难度 410
8 个字符 = 难度 25418
另一个选择是
用 pgp 加密备份，并将其存放在多个地方。
这似乎更明智。每天把备份复制到……某个地方……似乎是 正确的做法。如果它们相当小（不到一 GB），我很乐意为它们支付 Amazon S3 的存储和带宽费用。
+1
即便经过加密，可信的存储地点也更好。
英文原文
展开英文原文
ShadowOfHarbringer described a way of mirroring the bitcoin.org website and forum here: http://www.bitcoin.org/smf/index.php?topic=2026.msg30043#msg30043
Should we go by it and trust the database along with its password hashes to some reliable community members who have servers?
That seems like asking for trouble, and I think it would violate the implicit trust of everybody who's registered for the forums.
I agree, don't let the database out of your hands. There's private PM in there, e-mail addresses, passwords.
BTW, password hashes = passwords. It's easy to break the hash of short passwords people use on forums. 6 chars = 3 difficulty
7 chars = 410 difficulty
8 chars = 25418 difficulty
Another option is to
encrypt the backups with pgp and store them in multiple places.
That seems wiser. Daily backups copied ... somewhere ... seems like the right thing to do. If they're reasonably small (less than a gigabyte), I'd be happy to pay for Amazon S3 storage/bandwidth for them.
+1
Even with encryption, a trusted storage place is better.