Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
github.com/zeisss/mediasyncer
= MediaSyncer
image:https://app.wercker.com/status/850bd47b5003aa433f6c2e8d38cf97bb/m[]
Automatic rebalancing files between peers in a gossip based peer-to-peer network.
== The Problem
I have a bunch of disks attached to different devices (A MyWorldBook, 2 Raspberry PIs, a PC) and use all of them for storing my collection of files and videos. If a disk gets full, I have to manually move around files though. Since I mainly place new files on one device, this needs to be done regularly.
== The solution
+mediasyncer+ solves this by setting up a gossip network and performing regular auctions between the peers. Each peer regularly asks other peers if they want to store a file the current peer has. This is implemented via an auction: Each peer replies with a bid and the highest bidder gets the file transfered. The bid can be influenced by the amount of free space or the file itself that gets bid one. This makes it is easy to implement a bidding strategy that automatically moves files away as long as there is local disk space available. By voting with dynamic bids based on the files, it is even possible to move files based
== Current implementation state
Basic auctioning, bidding and transfering works. Current supported bidding strategies are random
or static
.
Future strategies could be based on file size, pathname or age to group related files on certain disks.
Files are only auctioned if their modtime
is older than 60 minutes. Only one file is auctioned at a time. An auction is triggered every 10 seconds.
Uploads to the winning peer is done via HTTP PUT
. Afterwards the local file is deleted. No checksum checks are performed yet.
Files can also be downloaded via the HTTP endpoint. Filelisting is not supported yet though.
NOTE: This is probably very unstable at the momement and might delete your data. Use at your own risk.
== Configuration
name
price-formula
price-static float
volume string
http-addr string
http-port int
bind-port int
debug bool
== Used libraries
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.