Live data from Hacker News

Vuvuzela: Metadata-private messaging

vuvuzela.io

11–20 of 32 posts

Re: Vuvuzela: Metadata-private messaging

#11
post #3

From their research paper at https://vuvuzela.io/static/vuvuzela.pdf : > Vuvuzela can support 1 million users exchanging text messages (up to 240 bytes each) with an end-to-end latency of 37 seconds, achieving a throughput of 68,000 messages/sec. Unfortunately, 37 seconds, even for a privacy-aware service, seems too slow to deliver instant messages.

Our latest paper, Karaoke, achieves 6.8 seconds with 2 million active users: https://vuvuzela.io/static/karaoke.pdf

Re: Vuvuzela: Metadata-private messaging

#13
post #12
post #10

Cool, but having to give data to Google to create an account is a major detractor.

Sorry about that. I need some way to prevent someone from quickly registering many email addresses. Do you have any other ideas?

I don't beyond browser fingerprint+ip throttling which may be a step in the wrong direction. Does spark the idea to create a LibreCaptcha.

Re: Vuvuzela: Metadata-private messaging

#16
post #12
post #10

Cool, but having to give data to Google to create an account is a major detractor.

Sorry about that. I need some way to prevent someone from quickly registering many email addresses. Do you have any other ideas?

Registering a large number of rogue identities to exhaust the bandwidth seems to be one of the most practical attacks.

How do you consider that in the threat model of the research paper?

Re: Vuvuzela: Metadata-private messaging

#17
post #8

> Vuvuzela is the first system that provides strong metadata privacy while scaling to millions of users. Previous systems that hide metadata using Tor (such as Pond) are prone to traffic analysis attacks. Pardon my ignorance here, so how is something like my IP hidden from the centralized server? I would assume "strong metadata privacy" would include the most obvious metadata, IP, and keep it from the server like Tor…

> Vuvuzela is secure against adversaries that observe and tamper with all network traffic, and that control all nodes except for one server. Vuvuzela’s key insight is to minimize the number of variables observable by an attacker, and to use differential privacy techniques to add noise to all observable variables in a way that provably hides information about which users are communicating. Someone watching all traffic…

I understand the traffic analysis part. I'm talking about individual MITM (e.g. an ISP) or tracking DNS operators. Can my ISP tell the endpoint I'm connecting to? With Tor, my source and destination are anonymized and that provides a level of metadata privacy (strength is debatable of course). I'm wondering if Vuvuzela, whilst comparing to Tor, offers less metadata privacy on this point.

Noise to thwart traffic analysis is wholly unrelated to endpoint obfuscation.

Re: Vuvuzela: Metadata-private messaging

#18
I love it. Gonna try and get some of my friends to use this! Plus there's something unabiguously cool about chatting through the terminal... hacker aesthetic or something like that.

How would you say your privacy + tech measure up against Signal and WhisperSystems? I love those folks and what they build and have been using Signal primarily for texting for a while now.

Re: Vuvuzela: Metadata-private messaging

#19
post #12
post #10

Cool, but having to give data to Google to create an account is a major detractor.

Sorry about that. I need some way to prevent someone from quickly registering many email addresses. Do you have any other ideas?

What Gmail did when they started up was to give each early user a small number of invites to hand out to others. That way someone could quickly register, say, five email addresses, but only at the cost of being able to invite five of their friends.

Re: Vuvuzela: Metadata-private messaging

#20
Pardon my ignorance, but is a technology like this anything more than research? Ie, lets pretend there is a market for this (ie, that people actually cared about security), could this be used?

I ask because the 2M (concurrent?) users would be a very small limit in a hypothetical whatsapp/telegram/etc replacement.

So my question is not a critique, but an honest question. I imagine either this is purely research, or that 2M limitation is intended to be setup for communities, where you'll have many 2M instances running. Though, many 2M instances running seems prone to isolating one group of individuals.

Thoughts?

Post reply on HN