[freehaven-dev] another attack

[Roger R Dingledine <arma@mit.edu>]

Scenario:

Node A has a normal comm module, but a different haven module, which:
* Does no buddy checking
* Only accepts trades that expire in under a week
* Trades at maximal possible rate (perhaps trading at a loss)
* Keeps a sharedb with no actual shares in it, just the info about them
* When a request arrives for a share it's supposed to have, it does a
  broadcast request (either for the whole doc or for that share), and 
  then when it gets an answer changes the answer from "secondary"
  status to "primary" status and then responds to the initial request.

If this node accepts really short-lived shares and provides small- or
medium-sized longlived shares (*new* shares) in return, how much damage
can it do?