Merge pull request #3812 from urbit/ted/no-impostor-comets

no more impostor comets

pkg/arvo/sys/vane/ames.hoon

@@ -1046,6 +1046,9 @@
   ++  on-hear-open
     |=  [=lane =packet ok=?]
     ^+  event-core
+    ::  assert the comet can't pretend to be a moon or other address
+    ::
+    ?>  ?=(%pawn (clan:title sndr.packet))
     ::  if we already know .sndr, ignore duplicate attestation
     ::
     =/  ship-state  (~(get by peers.ames-state) sndr.packet)

pkg/arvo/sys/zuse.hoon

@@ -9179,6 +9179,10 @@
     |-  ^-  seed:able:jael
     =/  cub=acru:ames  (pit:nu:crub:crypto 512 eny)
     =/  who=ship  `@`fig:ex:cub
+    ::  disallow 64-bit or smaller addresses
+    ::
+    ?.  ?=(%pawn (clan:title who))
+      $(eny +(eny))
     ?:  (~(has in stars) (^sein:title who))
       [who 1 sec:ex:cub ~]
     $(eny +(eny))