Live data from Hacker News

I2P: End-to-end encrypted and anonymous internet

github.com

51–60 of 124 posts

Re: I2P: End-to-end encrypted and anonymous internet

#51
post #45

Earlier quoted context omitted.

If you want to avoid copyright notices, then you need to do it for the payload too. That's because a copyright holder could easily host a copy of some pirate film on your new network, and then just see the destination of the data packets.

Wait, but if the copyright holder is sending the actual payload to you as a client, couldn't you make the argument that they implicitly authorized you to have it? AFAIK, cops can't deal you actual drugs and then arrest you for it.

It's something Prenda Law got up to and is among the things that did them in.

> An expert witness affidavit stated that IP addresses linked to Prenda's Minnesota and Florida offices and John Steele, had themselves been identified in 2013 as the initial "seeders" (sharers) of some pornographic media, tagged for "fast" sharing on file-sharing networks, which would be followed up by threat of legal action

https://en.wikipedia.org/wiki/Prenda_Law

Re: I2P: End-to-end encrypted and anonymous internet

#52
Related. Others?

Easy anonymous file sharing using I2P technology - https://news.ycombinator.com/item?id=31790940 - June 2022 (1 comment)

Guide to I2P and How It Differs from Tor/VPN and Setup Guide - https://news.ycombinator.com/item?id=29547676 - Dec 2021 (1 comment)

I2P celebrates the 20 years of the project with version 1.5.0 release - https://news.ycombinator.com/item?id=28302808 - Aug 2021 (1 comment)

Invisible Internet Project (I2P) - https://news.ycombinator.com/item?id=25734254 - Jan 2021 (23 comments)

I2P - https://news.ycombinator.com/item?id=22985995 - April 2020 (1 comment)

NTCP2 – An authenticated key agreement protocol for I2P - https://news.ycombinator.com/item?id=17749865 - Aug 2018 (4 comments)

Kovri – A secure, private, untraceable C++ implementation of the I2P network - https://news.ycombinator.com/item?id=14963044 - Aug 2017 (51 comments)

I2P-Bote – Email plugin for the I2P network that uses a distributed hash table - https://news.ycombinator.com/item?id=14236331 - May 2017 (20 comments)

I2P: The Invisible Internet Project - https://news.ycombinator.com/item?id=12882790 - Nov 2016 (3 comments)

I2P: Invisible Internet Protocol - https://news.ycombinator.com/item?id=12022917 - July 2016 (55 comments)

I2P – An anonymous overlay network - https://news.ycombinator.com/item?id=8871740 - Jan 2015 (3 comments)

'Silk Road Reloaded' Just Launched on a Network More Secret Than Tor - https://news.ycombinator.com/item?id=8871023 - Jan 2015 (27 comments)

Re: I2P: End-to-end encrypted and anonymous internet

#53
post #37

Earlier quoted context omitted.

We will still need VPNs to get good connectivity to other residential ISPs until some government entity (or market condition) inspires ISPs to invest in more hardware and peering with each other. CDNs and VPN providers are now sadly a requirement for the internet to work the way we expect it to.

With modern tech, I should be able to launch a web server, give you my ipv6 that never changes, route a few ports through fw and we’re good.

With modern tech I should never have any identifier that doesn’t change whatsoever. Mac,ip,etc should randomize every nth second lol

Re: I2P: End-to-end encrypted and anonymous internet

#54
post #3

I really like I2P as a project, and I think it gets a lot of things right. For example having every network participant relay some internal traffic, instead of relying on altruism from relay operators, makes it much harder for a single entity to control enough hops to deanonymize users. Sadly, outside of torrenting I2P doesn't seem to have much traction, losing out to the better funded tor project

One of the reasons people were wary of Freenet, where every user would participate in the hosting, was that if the encryption algorithm was ever broken, people would undoubtedly be revealed to have been passing CSAM along. Unwittingly, but still. Does I2P’s model not spark the same concerns?

Re: I2P: End-to-end encrypted and anonymous internet

#55

Earlier quoted context omitted.

I2P actually has a functional network, Veilid has just launched, and isn't really available to the public in a meaningful way. Outside of the practical, I2P is built entirely in Java, Veilid is built in Rust, so potentially more performant, Veilid uses modern ciphers so is potentially more secure, Weilid is potentially easier to modify and integrate into apps, and Veilid locally encrypts its storage, I2P does not. So…

Does Veilid allow arbitrary networking like I2P? It's advertised as a social media data sharing network.

It does. The VeilidChat app is built on top of the general-purpose Veilid application framework. Chat apps were the first, easiest things to make on that framework, but there's nothing inherently social media (or even messaging) oriented about it.

Re: I2P: End-to-end encrypted and anonymous internet

#57

Tor Browser is Tor's killer app. I2P needs a secure simplified fingerprint-free browser that only does basic HTML, otherwise you're just asking for trouble.

That is very correct.

Normal browsers being used is a massive downside for anonymity of I2P. The Tor browser tries to make everyone on the Tor network look the same.

Re: I2P: End-to-end encrypted and anonymous internet

#58
post #3

I really like I2P as a project, and I think it gets a lot of things right. For example having every network participant relay some internal traffic, instead of relying on altruism from relay operators, makes it much harder for a single entity to control enough hops to deanonymize users. Sadly, outside of torrenting I2P doesn't seem to have much traction, losing out to the better funded tor project

> gets a lot of things right... having every network participant relay some internal traffic

There are trade-offs. The Tor Project has its reasons for not doing this (from https://support.torproject.org/alternate-designs/):

"...many Tor users cannot be good relays — for example, some Tor clients operate from behind restrictive firewalls, connect via modem, or otherwise aren't in a position where they can relay traffic. Providing service to these clients is a critical part of providing effective anonymity for everyone, since many Tor users are subject to these or similar constraints and including these clients increases the size of the anonymity set..."

"...we need to better understand the risks from letting the attacker send traffic through your relay while you're also initiating your own anonymized traffic. Three different research papers describe ways to identify the relays in a circuit by running traffic through candidate relays and looking for dips in the traffic while the circuit is active. These clogging attacks are not that scary in the Tor context so long as relays are never clients too..."

Re: I2P: End-to-end encrypted and anonymous internet

#59
post #48
post #45

Earlier quoted context omitted.

Wait, but if the copyright holder is sending the actual payload to you as a client, couldn't you make the argument that they implicitly authorized you to have it? AFAIK, cops can't deal you actual drugs and then arrest you for it.

Cops can absolutely do that. Cops posing as prostitutes can arrest you for attempting to purchase sex from them as well.

This is absolutely true in many states in America. Not sure why you received any down votes.

Re: I2P: End-to-end encrypted and anonymous internet

#60
post #3

I really like I2P as a project, and I think it gets a lot of things right. For example having every network participant relay some internal traffic, instead of relying on altruism from relay operators, makes it much harder for a single entity to control enough hops to deanonymize users. Sadly, outside of torrenting I2P doesn't seem to have much traction, losing out to the better funded tor project

One of the reasons people were wary of Freenet, where every user would participate in the hosting, was that if the encryption algorithm was ever broken, people would undoubtedly be revealed to have been passing CSAM along. Unwittingly, but still. Does I2P’s model not spark the same concerns?

Do ISPs worry about relaying TLS traffic because if the encryption is ever broken, it will be revealed that they were relaying CSAM? There isn't any difference to an i2p node relaying encrypted data and and ISP doing it.
Post reply on HN