31–40 of 75 posts
Can anyone access the demo example repo linked from this page? : https://veilid.com/chat/ (points to : https://veilid.com/chat/ )
I haven't been able to. I attempted to yesterday also with no luck. Their site mentions availability after recovering from DEF CON or something to that affect.
Also discussed 8 days ago as "Cult of the Dead Cow wants to save internet privacy with new encryption protocol, 82 comments: https://news.ycombinator.com/item?id=37018404
It wasn't launched yet, and there were very few details then. Now there's a slide deck and code.
"You can get the code for Veilid Chat at https://gitlab.com/veilid/veilidchat"
Visiting that link gives me a GitLab signup page. Not a good onboarding experience for someone who cares about security and privacy. Perplexed I return to the original page and spot the offhanded mention:
"If you want to try out this proof of concept, please stay tuned for details on how to gain access."
This doesn't bode well, if they're reluctant to release even their own proof of concept.
Why reinvent the wheel? We already have NKN [N]ew [K]ind of [N]etwork. (nkn.org)
Earlier quoted context omitted.
It wasn't launched yet, and there were very few details then. Now there's a slide deck and code.
Some code. "You can get the code for Veilid Chat at https://gitlab.com/veilid/veilidchat " Visiting that link gives me a GitLab signup page. Not a good onboarding experience for someone who cares about security and privacy. Perplexed I return to the original page and spot the offhanded mention: "If you want to try out this proof of concept, please stay tuned for details on how to gain access." This doesn't bode well,…
I saw this talk at DEFCON. It seems to combine ideas from IPFS, BitTorrent magnet links, Tor, and things like scuttlebutt. There was a very strong focus on privacy including for metadata. The biggest weaknesses I saw were around DOS attack resistance, which I did not see addressed. There were good approaches for privacy and security but what if someone with resources (botnet or money) wants to just burn the network d…
No expert but I do wonder how a cheap client can be more secure than a professionally managed server.
If you mean robustness against brute force volumetric and resource exhaustion attacks then yes large systems are going to be more resilient than small systems for the same reason a big boat is harder to swamp with waves than a small one. The whole business model of things like Cloudflare is to put your site behind a gigantic CDN that is just so damn big it can weather volumetric attacks. It's a brute force solution to a brute force problem.
In this case I was talking about more intelligent distributed attacks against distributed protocols. Those types of attacks are very hard to protect against in general.
Most systems deal with it by being closed and isolated or at least having fairly strict policies about who is allowed to participate (e.g. BGP). In an open P2P network you're going to have to figure out a way to permit resiliency in aggregate without a trust model, which is IMHO an unsolved open problem in protocol design. There's been some progress in countermeasures but no huge breakthroughs.
Earlier quoted context omitted.
Some code. "You can get the code for Veilid Chat at https://gitlab.com/veilid/veilidchat " Visiting that link gives me a GitLab signup page. Not a good onboarding experience for someone who cares about security and privacy. Perplexed I return to the original page and spot the offhanded mention: "If you want to try out this proof of concept, please stay tuned for details on how to gain access." This doesn't bode well,…
That’s due to running out of time before DEF CON, not by plan. It’ll be there for everyone to see very soon, promise!
Do we have any metrics on the network performance? I have a project that might have use for this, but it depends on pushing a lot of data around.