Is there ever going to be a production ready BitTorrent application implementation in Python or is just not feasible with the GIL? It would be nice to be able to use BitTorrent for basic p2p capabilities in a pip installable fully Python app.
BitTorrent v2
311–320 of 576 posts
Re: BitTorrent v2
#312Earlier quoted context omitted.
> sha1's weakness would require you to be the creator of the torrent Huh, why?
I'm not an expert here, but I'm thinking about it like this: Creating a SHA-1 collision is doable, but it's still hard. If you want to serve someone a malicious piece of data, that's already one hash of the two colliding hashes that you've used up. Now you have to create harmless or "benevolent" data that collides with the hash of your malicious data so that you can create a positive reputation for your file from use…
It sounds like the perfect scenario for movie companies to target pirates.
Re: BitTorrent v2
#313Earlier quoted context omitted.
This is exactly the problem with all cryptocurrency currently. It’s a massive user experience issue, in the sense that users have to experience the technical bullshit of how the currencies work, completely missing the brilliant part of real money: it just works. I hand people money, they give me things. I swipe my credit card, I get things. I can’t remember who aid it originally, but there’s a great test you can give…
It has been a few years, and despite a few attempts, I still don't really understand bitcoin. Yes yes ledgers and proof of work and yada yada, but I still don't know what I would need to do to buy something with bitcoin right now. As I understand I need to do something that's pretty much exactly like opening a bank account, but transactions take forever, they cost money, and the currency is not accepted by any busine…
Communities can create value. The Bitcoin community believes Bitcoin has value, so it does. It has unique tokenomics with a limited 21m supply and is backed by math and cryptography. That's all there is to understand. Look into the history of money. Crypto just allows communities to have value. Soon you will see many communities online creating governance tokens, something like "reddit coins" but better, and you will be able to sell them for another coin like DAI or USDC.
You can already purchase Reddit MOONS from the r/cryptocurrency subreddit here: http://xmoon.exchange/
Re: BitTorrent v2
#314Earlier quoted context omitted.
> It feels like this isn't a large enough leap forward. The hash it relies on is broken, so their hand has been forced.
sha1 is not meaningfully broken for BitTorrent, It would require a second pre-image attack to meaningfully hurt it, you can not take an existing hash you don't control and synthesize a matching set of incorrect/malicious data. Second preimage attacks are MUCH harder to pull off, even md5 is still safe from them, many years after they were found to be broken in other contexts. The only thing that sha1's weakness would…
It's not super easy, but you could create a legitimate torrent of some popular content, as well as a malicious version. Use the legit version to gain popularity and then distribute malicious chunks to select peers.
Certainly not a trivial attack, but not benign either.
Re: BitTorrent v2
#315Earlier quoted context omitted.
Why won't ISPs stop advertising 'unlimited' service that is actually limited to N gigabytes a month, where N is substantially lower than what's possible given the speeds they provide? Because they can get away with it.
Because it is insanely expensive to actually provide that. The nature of internet traffic is short bursts, not 100% utilization. In a commercial setting you can purchase fixed pipes that are entirely yours and they’re tens or hundreds of times more expensive. Why wouldn’t you want to pool bandwidth with your neighbors so you could all get faster speeds when you were using it instead of rate limiting everyone?
Plenty of other countries have actually unlimited high speed internet with little issue and reasonable pricing. It's obviously not so "insanely expensive" that it can't be done.
Re: BitTorrent v2
#316Earlier quoted context omitted.
This right here is the biggest new feature in my opinion, and should have been discussed in more depth in the announcement. I also think they should have pursued this avenue further before releasing v2. Content addressing is one of the big advantages of p2p applications, and IPFS has been pushing it for a long time. Just imagine if this was done all the way down to the piece level. You have two different torrents (sa…
Only if blocks have the same offset in the same binary and if they align with the block boundaries. Otherwise, different hashes would be generated. I don't expect that to happen a lot.
Well if files in an ISO are aligned to some boundary it would help a lot, similar to how filesystems on disk have a sector size, where all files begin at the start of a sector. However, I don't know if this is true in ISO9660 or any of its extensions.
Re: BitTorrent v2
#317> not only uses a hash tree, but it forms a hash tree for every file in the torrent [...] > Files that are identical can also more easily be identified across different swarms, since their root hash only depends on the content of the file. Wait, content addressed blobs across swarms... does that mean torrents made by completely different people at different times that happen to contain one or more identical files can…
> completely different people at different times that happen to contain one or more identical files
Yes, this won't be useful for speed.
But it will be useful for health and appearance of health.
So a torrent that has no seeds because it's missing "RARBG_DO_NOT_MIRROR.exe" can be filled in quickly and have proper seed info.
Also large seasons can be filled in. They get corrupted at later episodes because people will prioritise the first episodes then the seeds can jump.
So anyone filling in the later episodes through single episodes torrents might repair the season torrent.
It'll allow over lap between torrents only differentiated be a missing RARBG.txt if they are both fragmented.
There's always been talk of allowing a torrent to have files added to it. It's be interesting to see if this might be useful client side to do this in a Claytons way.
Personally I don't think it's useful for Linux isos. Not sure on this. Do Linux isos get unhealthy?
Re: BitTorrent v2
#318It feels like this isn't a large enough leap forward. It would be nice if BitTorrent v2 made it harder for ISPs to identify what is bit torrent traffic. AT&T artificially slows down upload speeds.
What are you doing to help? Coding? Contributing money?
Re: BitTorrent v2
#319Since we're on this topic, what's your torrent client of choice HN? I plainly use BitTorrent nowadays
Deluge for a server/client model with optional web interface, if you for example want to command your Raspberry Pi to add som torrents. But for a more traditional one I prefer qBittorrent after Ludde abandoned uTorrent.
deluge is great. it has a mobile client that i can use to connect to my home server using zerotier to make the home server accessible anywhere.
Re: BitTorrent v2
#320Earlier quoted context omitted.
> It's a tool that doesn't pitch that it's a P2P tool - it doesn't try to convince you with sob stories in how using P2P helps fight against the big bad evil web. Instead, you use it because it's genuinely the best at what it does: it being P2P is not a selling point, it's just how it happens to work, and that is exactly what it should be. This should be something that every creator who markets or sells products shou…
This is exactly the problem with all cryptocurrency currently. It’s a massive user experience issue, in the sense that users have to experience the technical bullshit of how the currencies work, completely missing the brilliant part of real money: it just works. I hand people money, they give me things. I swipe my credit card, I get things. I can’t remember who aid it originally, but there’s a great test you can give…
As far as I'm aware many crypto exchanges also act as wallets and have smartphone apps that feature QR scanning for transfers / payments.
The largely obviates the need for any domain knowledge.