Live data from Hacker News

Show HN: A decentralized social network with end-to-end encryption

github.com

1–10 of 62 posts

Re: Show HN: A decentralized social network with end-to-end encryption

#6
This is a serious question, because it's the situation I'm in: Why would somebody who is techy enough to use a decentralized social network, not just use IRC?

I have a group of techie friends. We started a "private" IRC channel in 2010-ish and so far have been unable to find something better. Modern clients embed images, embed video links, and so on. We have bots that handle upvotes and offline messaging and a few other things. We even have a thingy that shows history (and most modern clients do that anyway)

None of us would be willing to self-host anything. Too much effort.

Am I misunderstanding how decentralization works for Charme? Is it more like hosting my own website, or more like using git?

I like the idea. I worry about moving my existing social capital.

Re: Show HN: A decentralized social network with end-to-end encryption

#7
Discovery is crucial.

A social network can be thought of as a kind of search engine: you're trying to find people, posts and resources that are relevant to your interests.

On the other hand, a social communication app works by allowing you to connect to your existing friends. So for example, with an app like Peach, finding new people or searching for posts matters less.

The really hard question for the first case is: how do you combine searchability with end-to-end encryption?

Re: Show HN: A decentralized social network with end-to-end encryption

#8
post #7

Discovery is crucial. A social network can be thought of as a kind of search engine: you're trying to find people, posts and resources that are relevant to your interests. On the other hand, a social communication app works by allowing you to connect to your existing friends. So for example, with an app like Peach, finding new people or searching for posts matters less. The really hard question for the first case is:…

There have to be things that are explorable and things that are not. Your messages, your "wall" (to non-friends) etc - those can be encrypted.

your name, your city, your public posts, posts made by companies - you could design this so those are not encrypted/are available for search.

Re: Show HN: A decentralized social network with end-to-end encryption

#9
The cryptography in this system does not appear to be safe. Apart from the fact that it's browser Javascript, which can only be as secure as the server's verified TLS key anyways (and thus doesn't add any security TLS doesn't), it's also using outdated RSA crypto constructions that are vulnerable to attacks.

I think you should find an expert to work on this project with you and provide the cryptographic design for you. Cryptography in a social network is like cryptography in a messaging application: it has to work. It's irresponsible to offer someone a solution for sharing secrets (with peers or with their network of close friends) if you can't keep those secrets.

Thankfully, you're not doing that yet; I think it was good judgement for you to include the "NOT SECURE" warning in the Readme.

Good luck!

Post reply on HN