3 ms·

bigchaindb main product is actually a cluster of something like mongodb. Read the whitepaper, was disappointing.

by antocv 10y ago

diminator 10y ago
It's a project for decentralizing existing big data databases... Not sure where you've set your expectations?
- antocv 10y ago
  Ive set them at blockchain level, so. Meh. PostgreSQL can also be distributed with paxos.
  - trentmc 10y ago
    To clarify: "distributed" and "decentralized" are different. "Distributed" spreads compute among many physical resources, but may still have a single entity controlling it. "Decentralized" has no single entity controlling it. Paxos distributes but does not decentralize.
trentmc 10y ago
Hi, it's Trent here, I'm CTO of BigchainDB and also the author of the blockchains-AI article. Yep, it's a [database] cluster, and proud to be that:) But, it's special in that there isn't a single organization that owns or controls it. That is, it's decentralized. And in fact it draws on traditional distributed DBs by building on them, to get first-class scalability and querying abilities. The first version was built on RethinkDB and we're working on wrapping MongoDB too. There's also a public version of BigchainDB that's getting rolled out, called IPDB (http://ipdb.foundation http://ipdb.foundation). With IPDB, people building apps don't need to roll their own cluster, they can just talk to it via http. > was disappointing How? We're always looking for feedback.
- antocv 10y ago
  Yeah I get that, but a single "mongodb or whatever cluster database behind bigchaindb that you are using was called" drop tables * ; query would actually delete your so called blockchain. Thats a huge security whole, which last time I checked bigchaindb - would be solved "administratively" ie operational security level instead of protocol. Not to sound like an ass though, I do keep an eye on bigchaindb for what it is to become as the people behind it do seem to have great talent. Has that security issue been resolved? How is the ipdb secured?
  - trentmc 10y ago
    We acknowledge this attack vector and others; and list them in github. It's in our roadmap to address them. The current schedule is the following: we're currently wrapping up the a base MongoDB integration (next couple weeks); on the heels of that we'll improve the MongoDB replication (a couple months); and on the heels of that we'll address the "drop" issue (and other unwanted commands) via a wire protocol firewall. More security stuff to follow that. BTW thanks for the kind words about our team. I think they're amazing too:)

bigchaindb main product is actually a cluster of something like mongodb. Read the whitepaper, was disappointing.

by antocv 10y ago

bigchaindb main product is actually a cluster of something like mongodb. Read the whitepaper, was disappointing.

diminator 10y ago

It's a project for decentralizing existing big data databases... Not sure where you've set your expectations?

antocv 10y ago
Ive set them at blockchain level, so. Meh. PostgreSQL can also be distributed with paxos.
- trentmc 10y ago
  To clarify: "distributed" and "decentralized" are different. "Distributed" spreads compute among many physical resources, but may still have a single entity controlling it. "Decentralized" has no single entity controlling it. Paxos distributes but does not decentralize.

trentmc 10y ago

Hi, it's Trent here, I'm CTO of BigchainDB and also the author of the blockchains-AI article. Yep, it's a [database] cluster, and proud to be that:) But, it's special in that there isn't a single organization that owns or controls it. That is, it's decentralized. And in fact it draws on traditional distributed DBs by building on them, to get first-class scalability and querying abilities. The first version was built on RethinkDB and we're working on wrapping MongoDB too. There's also a public version of BigchainDB that's getting rolled out, called IPDB (http://ipdb.foundation http://ipdb.foundation). With IPDB, people building apps don't need to roll their own cluster, they can just talk to it via http. > was disappointing How? We're always looking for feedback.

antocv 10y ago
Yeah I get that, but a single "mongodb or whatever cluster database behind bigchaindb that you are using was called" drop tables * ; query would actually delete your so called blockchain. Thats a huge security whole, which last time I checked bigchaindb - would be solved "administratively" ie operational security level instead of protocol. Not to sound like an ass though, I do keep an eye on bigchaindb for what it is to become as the people behind it do seem to have great talent. Has that security issue been resolved? How is the ipdb secured?
- trentmc 10y ago
  We acknowledge this attack vector and others; and list them in github. It's in our roadmap to address them. The current schedule is the following: we're currently wrapping up the a base MongoDB integration (next couple weeks); on the heels of that we'll improve the MongoDB replication (a couple months); and on the heels of that we'll address the "drop" issue (and other unwanted commands) via a wire protocol firewall. More security stuff to follow that. BTW thanks for the kind words about our team. I think they're amazing too:)