HN user

tribler

166 karma
Posts0
Comments42
View on HN
No posts found.

Thnx! Sadly it's not that simple.

What IPFS, Dat protocol, Tribler, and all others are missing is "adverserial decentralised information retrieval".

For any keyword you type in, the match you want should show first. Trolling, Kremlin bots and copyright police forces should not be able to bring it down. Unsolved problem. How to create a privacy respecting relevance ranking or distributed clicklog.

Imagine if all Twitter users had 'verified' status and you could also find them across their other social apps without any risk of following fake or wrong accounts by mistake.

Without any risks? Ideas from self-sovereign identity are somewhat included in this promo. Does this service include hiring notaries to check state-issued IDs to verify identities? Risk-free IDs are unsolved I believe.

IPFS 0.5 6 years ago

It seems global copyright enforcement with blacklisting and blocklists: https://github.com/ipfs/notes/issues/284 (I've testified in US federal court in copyright cases as the expert witness professor. I always try to investigate the DMCA decisions of developers. Difficult tradeoffs.)

Wow, you have some really tough business decisions with this architecture:

- Is the mentioned blacklist implemented?

- Will it be enabled by default?

- Will the legal entity responsible for the blacklist be US-based?

That is very interesting spec, but also alarming. It contains:

The meshsub router offers a baseline construction with good amplification control properties, which we augment with gossip about message flow.

This is notoriously hard to get right. How to prevent spam, posioning or Sybils in your gossip network? Scientific work on p2p overlays and gossip is hard to publish now at venues like Usenix or NSDI. After Newscast from 2003 it seems you need strong identity to make these systems attack resilient. An unsolved problem.

Thank you for this insight! We will put a university student team on exploring this likely vulnerability in IPFS/libp2p.