Earlier quoted context omitted.
If Tor is too difficult to use, people won't use it. Edward Snowden and Laura Poitras had to dedicate a significant amount of time to get Glenn Greenwald to just use TAILS, a plug and play Tor operating system. Someone like that is not going to use Whonix, even if maybe they should be.
Yeah, I get that. And I realize that I've gone off the deep end. It's hard to imagine anymore how easily people's eyes glaze over. I've written guides that lay everything out, step by step. And many people still can't seem to get it. But Whonix really is trivial. You install VirtualBox. You download the Whonix gateway and workstation appliances. You import them in VirtualBox. You start them. You work in the workstati…
ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network
161–170 of 171 posts
Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network
#162Earlier quoted context omitted.
Well, it is better to concentrate on getting users in than to solve some small quirks. Nobody is going to attack ZeroNet if it doesn't have users anyway.
Nobody is going to use ZeroNet in the first place if it's not secure. "Users before security" makes no sense at all if the product you're selling is security.
Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network
#163Earlier quoted context omitted.
> Also, it's written in Java. (Not sure if that's a praise or a criticism.) As much as I dislike Java (ML outclasses it as a language), that's probably much better than the obvious alternatives (C and C++): there aren't nearly as many undefined behaviours, and that eliminates a whole class of potential security vulnerabilities. If it were written now , Rust could be a viable alternative: just as safe, potentially fas…
>ML outclasses it you people are why nobody will take haskell or ocaml seriously. as a developer who works primarily with haskell: it is not a panacea, stop being so snobbish
Now as a language, I maintain that ML is better than Java on pretty much every account. It has sum types (or algebraic data types), a safer type system (without null), better generics (that weren't bolted on after the fact), a fine module system, easier lambdas… Ocaml in particular even has a class system, though it is almost never used: ML hardly ever need inheritance, so I count that as a negligible disadvantage. And of course, polymorphism (the OO kind) is easily obtained with with modules or plain higher-order functions.
Yes, yes, Java has an enormous community, loads of tools, and so many libraries that whatever you want to do has probably already been done. Yes, yes, it means that many projects would be cheaper and faster to write in Java, thanks to those libraries, communities, and plain available programmers. The JVM itself is pretty amazing, with a tunable garbage collector, and very fast execution once the JIT has warmed up.
While important, none of those advantages come from the language. They come from Sun, the staggering amount of working Java devs, and the heap of work they already accomplished. Network effects, mostly. A similar comparison could be made between C++ and Rust, though I don't know Rust well enough to have an actual opinion.
---
Also, "you people" should also admit that a language can be better than another, even if it's only Java8 vs Java7, or C++11 vs C++98. You should also realise that it's important to distinguish the language from the rest (community, tooling, libraries). If you don't, the older language always wins! Of course you wouldn't start a sizeable project in Rust in a C++ shop. Throwing away all the internal libraries and framework, all the training and painstakingly acquired experience? Of course not.
Still, one must not lose the long term picture. At that picture is provided by the language. Because ultimately, everything stems from the syntax and semantics of the language.
Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network
#164Love the ZeroNet project! Been following them for a year and they've made great progress. One thing that's concerning is the use of Namecoin for registering domains. Little known fact: A single miner has close to 65% or more mining power on Namecoin. Reported in this USENIX ATC'16 paper: https://www.usenix.org/node/196209 . Due to this reason some other projects have stopped using Namecoin. I'm curious what the ZeroN…
Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network
#165Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network
#166Has the code quality improved since I was told to screw off for bringing up security? * 2 years out of date gevent-websocket * Year old Python-RSA, which included some worrying security bugs in that time. [0](Vulnerable to side-channel attacks on decryption and signing.) * PyElliptic is both out of date, and actually an unmaintained library. But it's okay, it's just the OpenSSL library! * 2 years out of date Pybitcoi…
Can you take a look at it again? It's not my area of expertise.
Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network
#167Has the code quality improved since I was told to screw off for bringing up security? * 2 years out of date gevent-websocket * Year old Python-RSA, which included some worrying security bugs in that time. [0](Vulnerable to side-channel attacks on decryption and signing.) * PyElliptic is both out of date, and actually an unmaintained library. But it's okay, it's just the OpenSSL library! * 2 years out of date Pybitcoi…
I've brought up this thread on Reddit https://www.reddit.com/r/zeronet/comments/63lvqo/has_the_cod... and the author /u/nofishme fixed a few things and introduced automation. Can you take a look at it again? It's not my area of expertise.
About 52% test coverage, and pip is in use for some things.
However, so long as the LIB[0] folder exists, these sorts of problems will recur.
Each of those libraries is an opportunity for problems to emerge.
However, as they're manually managed, you don't get the chance to test against future versions, to check for breakage or okays.
Out of date becomes inevitable.
[0] https://github.com/HelloZeroNet/ZeroNet/tree/master/src/lib
Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network
#168The zeronet.io is hosted on vultr.com. Why don't they use zeronet to deliver its own website?
Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network
#169Has the code quality improved since I was told to screw off for bringing up security? * 2 years out of date gevent-websocket * Year old Python-RSA, which included some worrying security bugs in that time. [0](Vulnerable to side-channel attacks on decryption and signing.) * PyElliptic is both out of date, and actually an unmaintained library. But it's okay, it's just the OpenSSL library! * 2 years out of date Pybitcoi…
Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network
#170Several years ago I had Tor running on a server at home. It was a regular Tor node, not an exit node. Later I was put on a blacklist because of this. What is the risk of using this?
I ran a relay for years and never noticed any strange behaviour. Where and how were you blacklisted?