Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Rayfish, Peer-to-peer mesh VPN with no server to trust

rayfish.xyz

Post reply on HN
Print view View original

11–20 of 116 posts

Re: Rayfish, Peer-to-peer mesh VPN with no server to trust

#11

Post by mac-monet »

captain_dfx wrote: post #2

Hi HN, we built Rayfish, a peer-to-peer mesh VPN written in Rust on top of iroh. The core idea: every node has a keypair, and its identity on the network is that public key. From the key we derive a stable IPv4 in 100.64.0.0/10 and a stable IPv6 in 200::/7, similar in spirit to yggdrasil. Those addresses are yours for as long as you hold the key, and they don't change when you move networks or your physical IP change…

Hey, thanks for sharing this, this is a very cool project and one that is the obvious next step with iroh. I'm curious if you plan to make it into a library to be used, or you intend to keep it solely as an application?

Re: Rayfish, Peer-to-peer mesh VPN with no server to trust

#12

Post by atrettel »

whywhywhywhy wrote: post #7

Having an install script that you paste into the terminal and all it does is download a binary and stick it in a folder is wild. If your users are savvy enough to be running random scripts they shouldn't need a script to do this and if they're not savvy enough to understand how to do that then the last thing they should be doing on earth is running a random terminal command off a website.

I still have no comprehension of how curl piped into a shell command has become the default installation method for many projects (looking at you, Rust...). It breaks my brain as to how potentially unsafe it is.

Re: Rayfish, Peer-to-peer mesh VPN with no server to trust

#13

Post by barnabee »

atrettel wrote: post #12
whywhywhywhy wrote: post #7

Having an install script that you paste into the terminal and all it does is download a binary and stick it in a folder is wild. If your users are savvy enough to be running random scripts they shouldn't need a script to do this and if they're not savvy enough to understand how to do that then the last thing they should be doing on earth is running a random terminal command off a website.

I still have no comprehension of how curl piped into a shell command has become the default installation method for many projects (looking at you, Rust...). It breaks my brain as to how potentially unsafe it is.

Everyone’s eventually going to run a binary they downloaded from the same place, if you’ve already decided to do that, why is a curled install script worse?

Re: Rayfish, Peer-to-peer mesh VPN with no server to trust

#14

Post by da-x »

atrettel wrote: post #12
whywhywhywhy wrote: post #7

Having an install script that you paste into the terminal and all it does is download a binary and stick it in a folder is wild. If your users are savvy enough to be running random scripts they shouldn't need a script to do this and if they're not savvy enough to understand how to do that then the last thing they should be doing on earth is running a random terminal command off a website.

I still have no comprehension of how curl piped into a shell command has become the default installation method for many projects (looking at you, Rust...). It breaks my brain as to how potentially unsafe it is.

It's all about lowest friction + domain-name trust.

Depending on third party packaging (distribution-validated install) is much higher friction.

Re: Rayfish, Peer-to-peer mesh VPN with no server to trust

#15

Post by jayd16 »

whywhywhywhy wrote: post #7

Having an install script that you paste into the terminal and all it does is download a binary and stick it in a folder is wild. If your users are savvy enough to be running random scripts they shouldn't need a script to do this and if they're not savvy enough to understand how to do that then the last thing they should be doing on earth is running a random terminal command off a website.

What would be your preferred solution?

Re: Rayfish, Peer-to-peer mesh VPN with no server to trust

#16

Post by zuzululu »

whywhywhywhy wrote: post #7

Having an install script that you paste into the terminal and all it does is download a binary and stick it in a folder is wild. If your users are savvy enough to be running random scripts they shouldn't need a script to do this and if they're not savvy enough to understand how to do that then the last thing they should be doing on earth is running a random terminal command off a website.

so how did you install npm or docker?

Re: Rayfish, Peer-to-peer mesh VPN with no server to trust

#18

Post by aftbit »

applfanboysbgon wrote: post #9
captain_dfx wrote: post #2

Hi HN, we built Rayfish, a peer-to-peer mesh VPN written in Rust on top of iroh. The core idea: every node has a keypair, and its identity on the network is that public key. From the key we derive a stable IPv4 in 100.64.0.0/10 and a stable IPv6 in 200::/7, similar in spirit to yggdrasil. Those addresses are yours for as long as you hold the key, and they don't change when you move networks or your physical IP change…

> Honest [...] > Happy to get into the addressing scheme I truly loathe how all of the HN spambots promoting shovelware include a stupid call-to-action for feedback/discussion.

> Happy to get into ...

No reply to various questions an hour later. I guess they're not really watching.

Re: Rayfish, Peer-to-peer mesh VPN with no server to trust

#19

Post by yubblegum »

barnabee wrote: post #13
atrettel wrote: post #12

Earlier quoted context omitted.

I still have no comprehension of how curl piped into a shell command has become the default installation method for many projects (looking at you, Rust...). It breaks my brain as to how potentially unsafe it is.

Everyone’s eventually going to run a binary they downloaded from the same place, if you’ve already decided to do that, why is a curled install script worse?

Because it normalizes a practice that, while acceptable in context of a well known project with numerous dedicated eyeballs such as Rust language, is not a generally acceptable method of installing software.

Re: Rayfish, Peer-to-peer mesh VPN with no server to trust

#20

Post by mcsniff »

zuzululu wrote: post #16
whywhywhywhy wrote: post #7

Having an install script that you paste into the terminal and all it does is download a binary and stick it in a folder is wild. If your users are savvy enough to be running random scripts they shouldn't need a script to do this and if they're not savvy enough to understand how to do that then the last thing they should be doing on earth is running a random terminal command off a website.

so how did you install npm or docker?

Using a package manager usually
Post reply on HN