this post was submitted on 05 Mar 2024
132 points (87.1% liked)
Open Source
31358 readers
142 users here now
All about open source! Feel free to ask questions, and share news, and interesting stuff!
Useful Links
- Open Source Initiative
- Free Software Foundation
- Electronic Frontier Foundation
- Software Freedom Conservancy
- It's FOSS
- Android FOSS Apps Megathread
Rules
- Posts must be relevant to the open source ideology
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon from opensource.org, but we are not affiliated with them.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
The most important questions about any p2p service:
It seems to me it's IPFS again, but now for git repos. And it has the same problems as IPFS
I believe the thinking should be the other way around.
No one wants to store your code, and you shouldn't store anybody's code either. But suppose you have a group of people who want to collaborate on (or just mirror) a codebase, so they already decided to store it on their machines. This project gives them a decentralized tool to coordinate their efforts, and their code/issues/patches will be stored and accessible as long as they are interested in it.
Like, the tool doesn't give you a reason to use it, but if you have a reason then here is a tool to help you.
Same question. P2p was initially used to pirate stuff e.g. movies which isn't a private property and streaming that through p2p made a lot of sense. But for codes I don't know if its appropriate or not...
Why is CSAM the only traffic you object to? When you run torrent clients and such how do you filter out CSAM peers from the DHT?
There were other similar initiatives where everything is encrypted, so you cannot be sure what others store on your node. For torrent you can select what torrent you download and share.
I was thinking about Storj, where you get "money" for hosting other people's content in a similar p2p fashion. For Storj the answer to the first 2 questions are money, but you can't answer the third, because encryption. ("Money" is not real money but some strange crypto, but that's not important now.)
CSAM is just the worst possible example, it's forbidden in most countries of the world, and no sane people should be ok storing it. The main thing is, if you host other people's content, can you know what is the content, do you have some word if you want to host it or not.
You do not have a choice what your machine passes on from your peers via the DHT
DHT returns an ip based on a hash, what do you mean.
If you solely rely on DHT for searching for new things to download, than yes, that's a good way to get unwanted material on your hard disk, I don't recommend to do that to anybody at the curtent state of the technology. Don't mix up things deliberately, usually people don't do that, they get a torrent file or magnet link from a trusted source, than DHT can't mess it up.
Participating in the DHT allows others to find torrents and peers, without filtering, beause your machine is sharing information from your DHT peers.
Interesting where you try to draw the line
As I understand DHT is just addresses and hashes, not the actual data.
I draw the line this way: If I disconnect the computer from the network any given time, does it store the questionable data.
Would running an onion relay that helps people access illegal material be fine? Nothing gets stored on your machine
Yes?
Do you want to ban the internet because people using it for bad things? Basically you say the same thing.
I don't care what other people do, I care what they could do with me.
I never suggested such a thing, was just curious on your viewpoint.
The way I see it, as any platform or service gets more users, traffic and messages the probability that it will be used for nefarious purposes approaches 100%. It's the nature of life, it'll happen anywhere and everywhere people can communicate or interact. It's counter productive to ban technology like encryption or decentralised services just because someone might use it in a way the government doesn't like, or for other nefarious purposes.
Here's another response I got from someone from radicle regarding this.
More importantly, why would you want to host code on a few likely-totally-unreliable computers, when you can host on a few servers which are bulletproof with redundancy?
Github has a SLA of 99.9% uptime reliability lol