Live data from Hacker News

ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network

zeronet.io

81–90 of 171 posts

Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network

#81
post #77
post #69

Earlier quoted context omitted.

Even Tor isn't a magic bullet, specifically because of other technologies used in combination, such as a web browser. https://www.eff.org/pages/playpen-cases-frequently-asked-que...

Yes, the FBI exploited a Firefox vulnerability to drop NIT malware on Playpen users. And said malware phoned home to FBI servers, bypassing Tor. However, any Whonix users would not have been affected, for two reasons. One, this was Windows malware, and Whonix is based on Debian. Two, Whonix comprises a pair of Debian VMs, a Tor-gateway VM and a workstation VM. Even if the malware had pwned the workstation VM, there i…

Then I recommend you change this:

What works is using Tor.

to this:

What works is using [Whonix].

Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network

#82

I don't see how this could decentralize web applications though. Wouldn't each client have to be running the server software? Someone has to pay for that, too.

Yeah every client have to run the software or you use a proxy. If you have a site with many spreads you don't need a running instance. But if you have a an unknown site you would have to run a little server permanently.

Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network

#83
post #62

In other news ZeroNet has been banned from giving its TEDtalk: https://news.ycombinator.com/item?id=14039219

I quit giving TED my clicks long ago. They occasionally have some good talks, but many more that are pseudoscience garbage. Don't even get me started on TEDx. I hope ZeroNet find a better stage for their talk. Perhaps an organizer could contact them.

Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network

#84
post #79

> Anonymity: Full Tor network support with .onion hidden services instead of ipv4 addresses How does this track with the Tor Project's advice to avoid using BitTorrent over Tor [1]? I can imagine that a savvy project is developed with awareness of what the problems are and works around them, but I don't see it addressed. [1] https://blog.torproject.org/blog/bittorrent-over-tor-isnt-go...

Tor Project doesn't like people pushing HD video through its relays, because that degrades performance for other users. Torrent clients are very good at saturating links. This project is about hosting generally. But if it were used for HD video streaming, Tor Project would be just as unhappy.

The linked article refers to three ways bittorrent can deanonymise you behind Tor.

That's a privacy concern, not a load problem.

Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network

#85

> Anonymity: Full Tor network support with .onion hidden services instead of ipv4 addresses How does this track with the Tor Project's advice to avoid using BitTorrent over Tor [1]? I can imagine that a savvy project is developed with awareness of what the problems are and works around them, but I don't see it addressed. [1] https://blog.torproject.org/blog/bittorrent-over-tor-isnt-go...

I'm also suspicious, since they say that your blockchain address is used for authentication - couldn't colluding websites track your public key and use it to track you between websites?

Presumably since they're using BIP32, they create a new address for every website you visit.

Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network

#86
post #20

As for uncensorable, if the content is illegal, the torrent peers may be incriminated distribution of illegal content

Neither argument has been tested, but the defense would that you were acting as an ISP with dumb pipes. Which logically leads to an unrelated question -- if ISPs are doing DPI on every packet, they at least theoretically 'know' whether you're transmitting 'illegal' content. If I were a rights holder, I'd be making that argument against ISPs. I don't know how I'd sleep at night, maybe, but I wouldn't let ISPs have the…

I understand this logic, but state can then say that being ISPs without license is a crime too.

Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network

#88
post #87

This seems similar to ipfs. What are the main differences?

IPFS is more low-level in terms of that IPFS is a protocol (in reality a collection of protocols) for P2P data transfer. Together with IPLD, you'll get a full suite of protocols and data structures for creating fully distributed P2P applications.

ZeroNet is a application for distributing P2P applications, using Bittorrent for the P2P layer. In theory, ZeroNet could leverage IPFS to get a better and more modular stack for the actual connectivity and transfering.

Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network

#89
Love the ZeroNet project! Been following them for a year and they've made great progress. One thing that's concerning is the use of Namecoin for registering domains.

Little known fact: A single miner has close to 65% or more mining power on Namecoin. Reported in this USENIX ATC'16 paper: https://www.usenix.org/node/196209. Due to this reason some other projects have stopped using Namecoin.

I'm curious what the ZeroNet developers think about this issue and how has their experience been so far with Namecoin.

Re: ZeroNet – Uncensorable websites using Bitcoin crypto and BitTorrent network

#90
post #77
post #69

Earlier quoted context omitted.

Even Tor isn't a magic bullet, specifically because of other technologies used in combination, such as a web browser. https://www.eff.org/pages/playpen-cases-frequently-asked-que...

Yes, the FBI exploited a Firefox vulnerability to drop NIT malware on Playpen users. And said malware phoned home to FBI servers, bypassing Tor. However, any Whonix users would not have been affected, for two reasons. One, this was Windows malware, and Whonix is based on Debian. Two, Whonix comprises a pair of Debian VMs, a Tor-gateway VM and a workstation VM. Even if the malware had pwned the workstation VM, there i…

If the workstation vm is pwned what stops it from hitting the usual home router internal network address and/or changing the route?

Is there some network isolation going on which prevents that?

Post reply on HN