41–50 of 171 posts
I always wondered why you couldn't just download a torrent of torrents for the month.
But that'll need revising once sha1 torrents are deprecated.
As for uncensorable, if the content is illegal, the torrent peers may be incriminated distribution of illegal content
Neither argument has been tested, but the defense would that you were acting as an ISP with dumb pipes. Which logically leads to an unrelated question -- if ISPs are doing DPI on every packet, they at least theoretically 'know' whether you're transmitting 'illegal' content. If I were a rights holder, I'd be making that argument against ISPs. I don't know how I'd sleep at night, maybe, but I wouldn't let ISPs have the…
Earlier quoted context omitted.
Maybe I'm not picking up what you're putting down, but how does this differ from DHT?
It might be possible with the DHT alone, but I think for what the grandparent poster wants it would depend on the ability to query the DHT. Both in general and by popularity and insert date. That might be possible, but with the prvelence of magnet links instead of everyone using that, I just assumed not.
No comment about ZeroNet itself, but am I alone in the opinion that this website takes grid layout too far? It looks outright cluttered and overloaded.
There is single point of failure, kill the tracker = kill the whole network. You can get all the IPs from the tracker that are visiting certain site, it's not so secure if someone is not using tor.
The project looks very promising but relies on running a lot of javascript from untraceable sources in the browser. Given the long history of vulnerabilities in the the browsers, trusting js from a well-known website might be OK, trusting js from zeronet is unreasonable. If ZeroNet could run with js code generated only by the local daemon or without js it would be brilliant.
Chrome added a feature a long while back I really wanted for ages. The ability to specify the checksum of a linked asset, so that it can be verified as it's downloaded (and untrusted/discarded if not). I just can't find the docs for it. :( My Google-fu is not strong. EDIT: Found it :D https://w3c.github.io/webappsec-subresource-integrity/
The project looks very promising but relies on running a lot of javascript from untraceable sources in the browser. Given the long history of vulnerabilities in the the browsers, trusting js from a well-known website might be OK, trusting js from zeronet is unreasonable. If ZeroNet could run with js code generated only by the local daemon or without js it would be brilliant.
Chrome added a feature a long while back I really wanted for ages. The ability to specify the checksum of a linked asset, so that it can be verified as it's downloaded (and untrusted/discarded if not). I just can't find the docs for it. :( My Google-fu is not strong. EDIT: Found it :D https://w3c.github.io/webappsec-subresource-integrity/
Earlier quoted context omitted.
It's called Subresource Integrity, see https://hacks.mozilla.org/2015/09/subresource-integrity-in-f... and https://www.w3.org/TR/SRI/ Browser support is noted here: http://caniuse.com/#feat=subresource-integrity
It's kind of a shame they didn't let their imagination fly with that one... I wish integrity were a global attribute, because I could totally see using it for things like images and audio/video.
Another option would be to just use a subresource-integrity protected script to check the hash of a downloaded image/video before displaying it.
There is single point of failure, kill the tracker = kill the whole network. You can get all the IPs from the tracker that are visiting certain site, it's not so secure if someone is not using tor.
Bittorrent supports more peer sources than just trackers, DHT being the most important one among the others.