Live data from Hacker News

I2P: End-to-end encrypted and anonymous internet

github.com

111–120 of 124 posts

Re: I2P: End-to-end encrypted and anonymous internet

#111
post #102

Earlier quoted context omitted.

Having something like that turned on by default but being able to disable it would be a good choice. Ultimately until someone can satisfy a user’s concern about the privacy and security of what flows through their connection there will be scrutiny on this piece. Being able to interject one’s own proxy or vpn tunnel could be interesting.

Right, I think that it could be good. But it's not obvious that it would be good while it would definitely add complexity, bugs, and attack surface, and discourage at least some people from using Tor. > Being able to interject one’s own proxy... could be interesting. I think this is essentially what the Tor Project wants to see instead: if you're in a position to do so, operate your own relay and make it your entry g…

I feel it would be a good choice to give users rather than force all users into it. Not all users stories are the same.

You’re right as well as this is one way it could be, and there could be other ways.

Tor might want to see that, but I’m not entirely sure how well it’s going when hosting exit relays can be an issue for the hoster.

Re: I2P: End-to-end encrypted and anonymous internet

#112
post #92

Earlier quoted context omitted.

Perhaps security was a concern

Not only. Whole Java ecosystem is damn heavy.

Not really. Java was built from the start to run on microcontrollers and is still running fine on billion of small phones. It is now powering the apps inside a billion android devices.

You are likely referring to awful enterprise frameworks like Spring that make a lot of noise. Some ten years ago it was JBoss giving a bad fame to Java. You won't be finding those enterprise frameworks being used by most open source projects.

For those cases Java is kept clean and fast, as it should.

Re: I2P: End-to-end encrypted and anonymous internet

#113
post #72

Earlier quoted context omitted.

Originally Skype and Spotify had their own peer-to-peer networks and distribution. Both stopped using them because it worked so badly.

> it worked so badly. Skype has a much worse quality now after the switch for all people I know who used Skype at the time. The real reason for switching was iPhone. First, Apple did not allow long-running apps in favour of centralized notifications. Periodically start Skype to check events did not help recwicing calls. Second, users moved to smartphones, which depleted the active nodes network. So there has been an…

Microsoft at that time said they are moving Skype to centralized server from distributed to reduce code complexity.

Re: I2P: End-to-end encrypted and anonymous internet

#114
post #92

Earlier quoted context omitted.

Not only. Whole Java ecosystem is damn heavy.

Not really. Java was built from the start to run on microcontrollers and is still running fine on billion of small phones. It is now powering the apps inside a billion android devices. You are likely referring to awful enterprise frameworks like Spring that make a lot of noise. Some ten years ago it was JBoss giving a bad fame to Java. You won't be finding those enterprise frameworks being used by most open source pr…

Exactly. Java itself is among the fastest, and can be quite lightweight. It's primarily the heavy and slow frameworks (especially "enterprise" frameworks) that have absolutely abysmal performance .

Re: I2P: End-to-end encrypted and anonymous internet

#115
post #92

Earlier quoted context omitted.

Not only. Whole Java ecosystem is damn heavy.

Not really. Java was built from the start to run on microcontrollers and is still running fine on billion of small phones. It is now powering the apps inside a billion android devices. You are likely referring to awful enterprise frameworks like Spring that make a lot of noise. Some ten years ago it was JBoss giving a bad fame to Java. You won't be finding those enterprise frameworks being used by most open source pr…

I was a Java true believer in the late 90s/early 2000s, working on LimeWire, the most popular Java desktop app at the time (maybe of all time?). I thought we were close to a time when garbage collection was just as fast as manual memory management, and runtime re-optimization could make up for the extra time an ahead-of-time compiler could spend on optimizations. (Yes, I've read all of the Garbage Collection Handbook, and am aware of the speed advantages of bump allocation and the advantages of memory compaction. However, when it really matters, people still sidestep Java's GC using object pools and/or size their heaps such that they never collect while the stock market is open.)

Then, I started slinging C++ for the Google indexing system.

I still hope we get to a point where compiling to native code is as rare as hand-writing assembler is today. I hope we distribute code primarily in a format optimized for native translation, SafeTSA or similar. (Though, I'd hope we get install-time caching of native code generation, similar to AS/400 TIMI / current Android Runtime.)

However, until compilers get very good at statically inferring lifetimes and statically scheduling object collection, I hope garbage collection is optional and freely mixable with manually managed objects. (Yes, statically determining minimal lifetimes in the general case is equivalent to solving the halting problem, but we can be conservative and fall back on GC in the statically-unsolvable cases.)

The main drawback of Java for most applications is that with garbage collection there's a time-space tradeoff. As a rule of thumb in order to avoid frequent major collections, a Java program is going to use about twice as much memory as an equivalent C/C++ program.

When it really counts, we're still not at the point where Java is faster (even after warm-up) than expert-written hand-optimized C/C++ with profile-guided optimization.

Don't get me wrong. I understand the development velocity advantages of Java over C/C++ can often more than make up for performance differences, and good C/C++ developers (especially with domain-specific skills) are rather expensive to employ. I worked on equity trading systems in an interpreted language, where we replaced a lower latency system written in Java. The high-level interpreted language enabled a very rapid turnaround time and was easier for Statistics/Physics PhDs to implement models. The better models resulted in better average prices despite the system reacting more slowly to incoming data.

Ideally, I'd like to see something Elixir-like with good interoperability with something Rust-like for the parts that use a lot of CPU time and/or a lot of memory, all compiling down to a SafeTSA-like compressed control flow graph representation designed for fast native code generation.

Re: I2P: End-to-end encrypted and anonymous internet

#116
post #92

Earlier quoted context omitted.

Not only. Whole Java ecosystem is damn heavy.

Not really. Java was built from the start to run on microcontrollers and is still running fine on billion of small phones. It is now powering the apps inside a billion android devices. You are likely referring to awful enterprise frameworks like Spring that make a lot of noise. Some ten years ago it was JBoss giving a bad fame to Java. You won't be finding those enterprise frameworks being used by most open source pr…

Okey, Can you then provide me some info about those Java compiler/LVM stuff? Last time I used Java was in time it had Sun Microsystems logo :) It was sth like Java 1.5.x. JRE installer was 16MB, so for my standards its already quite heavy. My old ruby static that I provide with scripts is under 1MB. I wonder if I am missing something...

Re: I2P: End-to-end encrypted and anonymous internet

#117

Earlier quoted context omitted.

> the favoured course of action for some dissident communities is instead retreating I'm not sure that this kind of passivity can properly be described as "dissidence". Surely dissidents are people who speak up, taking a risk with their own security? At any rate, I don't want to quibble about semantics. If you disagree with your government, but aren't prepared to speak up, then you're at best getting in the way. Pass…

That kind of passivity can most definitely be described as dissidence. Those Soviets who circulated literature through samizdat, who put on performances of disapproved modernist music or poetry in their own flats to a small circle of peers, etc. are commonly described as dissidents even when they never publicly challenged the authorities. The claim that such dissidents are collaborators is, again, Western-centric. Di…

> Those Soviets who circulated literature through samizdat

I count that as "speaking up". GP spoke of people who retreat into what seems to be passive silence.

Incidentally, I said they're like collaborators; I didn't say they were collaborators. I meant they're part of the problem, not part of the solution.

Re: I2P: End-to-end encrypted and anonymous internet

#118

Earlier quoted context omitted.

That kind of passivity can most definitely be described as dissidence. Those Soviets who circulated literature through samizdat, who put on performances of disapproved modernist music or poetry in their own flats to a small circle of peers, etc. are commonly described as dissidents even when they never publicly challenged the authorities. The claim that such dissidents are collaborators is, again, Western-centric. Di…

> Those Soviets who circulated literature through samizdat I count that as "speaking up". GP spoke of people who retreat into what seems to be passive silence. Incidentally, I said they're like collaborators; I didn't say they were collaborators. I meant they're part of the problem, not part of the solution.

> GP spoke of people who retreat into what seems to be passive silence.

I said people who retreat into private words. Samizdat was a private world. Events held in people’s homes was private worlds. Writing non-conforming literature or music “for one’s desk drawer” was a private world. Modern dissidents using censorship-evading, privacy-guaranteeing software to enjoy community are in private worlds.

Calling such dissidents “part of the problem” is not helpful. There have been famous cases where Westerners’ demands for how dissidents should behave, actually pushed dissidents closer to the regime.

Re: I2P: End-to-end encrypted and anonymous internet

#119
I am a long happy user of authenticated TOR hidden services for my secure admin access to ssh servers and some self-hosting services, and it is my last hope when even tailnets, meshnets fail to reach. I2PD c++ IP2 nodes are very helpful as backup authenticated hidden services for some of my servers, as in general TOR is more stable but sometimes I2P can work around when TOR fails.

Tor is simpler, better audited, and I don't mind too much the little centralization of the authority TOR nodes, plus the pluggable transports.

I2P is more complete (UDP, protocol libraries, nice hidden service client and server port handling, etc) its somewhat chaotic decentralization is a mixed bless, but that's the point. I like the tradeoff of mixing my bandwidth with others bandwidth (pay with some bandwidth now to save my rear-end later when needed).

I2PD c++ node is pleasant for me because it is compact and clean for my needs (authenticated hidden service SSH access and self-hosted web services) and I can manage it almost like the TOR node. The original IP2 Java node is good for end users, handy with integrated IRC, email, and file sharing services.

Re: I2P: End-to-end encrypted and anonymous internet

#120

Earlier quoted context omitted.

It's already possible (and quite easy) to assign a static IPv6 for incoming traffic e.g. webserver, then configure a private and constantly rotating IPv6 for all outgoing traffic.

Can you share a link, please?

I second this motion
Post reply on HN