5 ms·

GUN author here (https://github.com/amark/gun https://github.com/amark/gun) happy to answer any questions. IA did this integration in 1 week, Mitra is awesome.

GUN author here (https://github.com/amark/gun https://github.com/amark/gun) happy to answer any questions. IA did this integration in 1 week, Mitra is awesome. Also, decentralized Reddit (https://notabug.io https://notabug.io) was built in 1 week on us, and pushed 0.5TB P2P traffic on 1st day. Note: I may not be awake for several hours, and might not be able to reply until Monday.

pandasun 8y ago
Wow, your work (GUN) is really great. I hope you don't mind me asking how it works in layman's terms? Thank you for your work.
- marknadal 8y ago
  Huge honor! Yes: - http://gun.js.org/distributed/matters.html http://gun.js.org/distributed/matters.html - https://youtu.be/EHZyaupYjYo?t=55m52s https://youtu.be/EHZyaupYjYo?t=55m52s - http://gun.js.org/explainers/data/security.html http://gun.js.org/explainers/data/security.html (not about GUN itself, directly, but SEA) Is at least 1 of those helpful? If not, have any ideas on how I can improve the explanation?
modernerd 8y ago
GUN looks great! I love the quick-start tutorial too: https://gun.eco/think.html https://gun.eco/think.html How suitable is GUN for live multiplayer (non turn-based) web games? (Similar to https://airma.sh/. https://airma.sh/.) I see one game example at https://github.com/amark/gun/wiki/Awesome-GUN https://github.com/amark/gun/wiki/Awesome-GUN, although it's turn-based.
- marknadal 8y ago
  Thank you!!! I need to fix the organization of the documentation (and update the docs, oye!). I'm impressed you found Awesome-GUN. https://github.com/amark/gun/blob/master/examples/game/space.html https://github.com/amark/gun/blob/master/examples/game/space... is probably what you were searching for. What would be better is if I made a blog/tutorial for ^ link. Not a priority for me, sadly, but maybe it is for somebody out there, that they could help? Thanks again!
justin_ 8y ago
Thank you for creating GUN! The decentralized Reddit demo loads so quickly. To prevent spam, it looks like they require a PoW on each vote. Does every update on a GUN database from untrusted peers require something like this? Is authentication intended to stop spammers in the future? PS. For anyone reading, there's a recording of a talk Mark gave on GUN from the DWeb Summit, available here: https://youtu.be/kW6e1GCpqpE?t=43m22s https://youtu.be/kW6e1GCpqpE?t=43m22s
- go1dfish 8y ago
  Author of notabug here. GUN uses a proof of work for account creation/login I think, but otherwise no there is no proof of work requirement for updates. I added the proof of work requirement to votes as part of my own validation. The difficulty at https://notabug.io https://notabug.io is set quite low, but https://dontsuemebro.com https://dontsuemebro.com is a peer that still has it set quite a bit higher, it rejects the cheaper votes at notabug.io so the scores/sorts are different. Spent a lot of time focusing on performance, notabug.io is running GUN with redis as a storage adapter and doing server side rendering to speed up the user experience. Domain pages are currently all gun/clientside though with out the server doing anything special to help at all. https://notabug.io/domain/youtube.com/ https://notabug.io/domain/youtube.com/ Also when using the infinite scroll feature or chat most all content is loaded directly through gun without intermediary REST calls.
  - drasticmeasures 8y ago
    Decentralized Reddit sounds neat. But! I just upvoted myself to 200 points (making it the top post of all time on notabug), then saw someone else downvote me to -100 points (in 5 minutes), effectively censoring me. While this was just me with one computer, how will you stop bad actors (specially state actors, corporate actors or other political actors) with immense technological resources from gaming the voting system to silence people? It's a flaw inherent to democratic Internet voting-based comment filtering, no?
    - go1dfish 8y ago
deleted 8y ago
[deleted]
e12e 8y ago
Hi, thanks for stopping by :) I'm still trying to get a handle on the security aspects of gun. Say you want to create a blog/note app - that holds both private notes, drafts - and things that are to be shared to some friends. Would you effectively have to store data encrypted in gun, and manage access via sharing encryption keys - in order to be able to both securely store data, and share it? In the examples, it appears things like "create user" is called in client side code - which seems to imply anyone can write any data to a gun db? (by adding themselves as admin?) Is the use-case of gun more a public, structured wiki - where all content is fundamentally untrusted - but easily updated by anyone?
- marknadal 8y ago
  Right back to you! :) That is probably because I've done a poor job communicating it, since I'm still finding time to write about it. Thank you for bringing this up! Probably most relevant: I kinda sorta had a demo of a P2P LinkedIn working https://www.youtube.com/watch?v=ZiELAFqNSLQ https://www.youtube.com/watch?v=ZiELAFqNSLQ . So we do have an unstable API that automates key management and key sharing, but all production apps (notabug.io , etc.) today directly use our https://gun.eco/docs/SEA https://gun.eco/docs/SEA shim over WebCrypto. Unfortunately, that means you have to be aware of how to apply it - thankfully, we did make a cartoon cryptography crash course on this (in link), so it is viable to get started. Obviously, if you have any new insights, would love to hear it! Without SEA, gun is very much like what you say. With SEA, you can protect against just anyone randomly writing to GUN. Jump in and ask more Qs on https://gitter.im/amark/gun https://gitter.im/amark/gun about it, or you'll circle back around later - hopefully that is helpful directions? Thanks. Most important statement of mine: I bet you'll enjoy the cartoon cryptography series.
  - e12e 8y ago
    Thanks for replying. I guess: https://gun.eco/explainers/data/summary.html https://gun.eco/explainers/data/summary.html sums up the situation - but there's a few things that aren't quite clear: by design, everyone can access all encrypted data? So there's some meta-data that's easy to find, such as checking if an account exist, and how much data is associated with it - and the ability to record the approximate rate that data is written to the account? For example, if the login is an email, the app is an exercise logger - I might be able to infer that someone is out jogging by looking at the data?
rambojazz 8y ago
Is that website related to https://notabug.org https://notabug.org in any way?
- go1dfish 8y ago
  no
  - deathhand 8y ago
    FYI: Notabug can't post anonymous comments or chats as of 8/7/18 And there was no way of me telling you this besides here...

pandasun 8y ago

Wow, your work (GUN) is really great. I hope you don't mind me asking how it works in layman's terms? Thank you for your work.

marknadal 8y ago
Huge honor! Yes: - http://gun.js.org/distributed/matters.html http://gun.js.org/distributed/matters.html - https://youtu.be/EHZyaupYjYo?t=55m52s https://youtu.be/EHZyaupYjYo?t=55m52s - http://gun.js.org/explainers/data/security.html http://gun.js.org/explainers/data/security.html (not about GUN itself, directly, but SEA) Is at least 1 of those helpful? If not, have any ideas on how I can improve the explanation?

modernerd 8y ago

GUN looks great! I love the quick-start tutorial too: https://gun.eco/think.html https://gun.eco/think.html How suitable is GUN for live multiplayer (non turn-based) web games? (Similar to https://airma.sh/. https://airma.sh/.) I see one game example at https://github.com/amark/gun/wiki/Awesome-GUN https://github.com/amark/gun/wiki/Awesome-GUN, although it's turn-based.

marknadal 8y ago
Thank you!!! I need to fix the organization of the documentation (and update the docs, oye!). I'm impressed you found Awesome-GUN. https://github.com/amark/gun/blob/master/examples/game/space.html https://github.com/amark/gun/blob/master/examples/game/space... is probably what you were searching for. What would be better is if I made a blog/tutorial for ^ link. Not a priority for me, sadly, but maybe it is for somebody out there, that they could help? Thanks again!

justin_ 8y ago

Thank you for creating GUN! The decentralized Reddit demo loads so quickly. To prevent spam, it looks like they require a PoW on each vote. Does every update on a GUN database from untrusted peers require something like this? Is authentication intended to stop spammers in the future? PS. For anyone reading, there's a recording of a talk Mark gave on GUN from the DWeb Summit, available here: https://youtu.be/kW6e1GCpqpE?t=43m22s https://youtu.be/kW6e1GCpqpE?t=43m22s

go1dfish 8y ago
Author of notabug here. GUN uses a proof of work for account creation/login I think, but otherwise no there is no proof of work requirement for updates. I added the proof of work requirement to votes as part of my own validation. The difficulty at https://notabug.io https://notabug.io is set quite low, but https://dontsuemebro.com https://dontsuemebro.com is a peer that still has it set quite a bit higher, it rejects the cheaper votes at notabug.io so the scores/sorts are different. Spent a lot of time focusing on performance, notabug.io is running GUN with redis as a storage adapter and doing server side rendering to speed up the user experience. Domain pages are currently all gun/clientside though with out the server doing anything special to help at all. https://notabug.io/domain/youtube.com/ https://notabug.io/domain/youtube.com/ Also when using the infinite scroll feature or chat most all content is loaded directly through gun without intermediary REST calls.
- drasticmeasures 8y ago
  Decentralized Reddit sounds neat. But! I just upvoted myself to 200 points (making it the top post of all time on notabug), then saw someone else downvote me to -100 points (in 5 minutes), effectively censoring me. While this was just me with one computer, how will you stop bad actors (specially state actors, corporate actors or other political actors) with immense technological resources from gaming the voting system to silence people? It's a flaw inherent to democratic Internet voting-based comment filtering, no?
  - go1dfish 8y ago

deleted 8y ago

[deleted]

e12e 8y ago

Hi, thanks for stopping by :) I'm still trying to get a handle on the security aspects of gun. Say you want to create a blog/note app - that holds both private notes, drafts - and things that are to be shared to some friends. Would you effectively have to store data encrypted in gun, and manage access via sharing encryption keys - in order to be able to both securely store data, and share it? In the examples, it appears things like "create user" is called in client side code - which seems to imply anyone can write any data to a gun db? (by adding themselves as admin?) Is the use-case of gun more a public, structured wiki - where all content is fundamentally untrusted - but easily updated by anyone?

marknadal 8y ago
Right back to you! :) That is probably because I've done a poor job communicating it, since I'm still finding time to write about it. Thank you for bringing this up! Probably most relevant: I kinda sorta had a demo of a P2P LinkedIn working https://www.youtube.com/watch?v=ZiELAFqNSLQ https://www.youtube.com/watch?v=ZiELAFqNSLQ . So we do have an unstable API that automates key management and key sharing, but all production apps (notabug.io , etc.) today directly use our https://gun.eco/docs/SEA https://gun.eco/docs/SEA shim over WebCrypto. Unfortunately, that means you have to be aware of how to apply it - thankfully, we did make a cartoon cryptography crash course on this (in link), so it is viable to get started. Obviously, if you have any new insights, would love to hear it! Without SEA, gun is very much like what you say. With SEA, you can protect against just anyone randomly writing to GUN. Jump in and ask more Qs on https://gitter.im/amark/gun https://gitter.im/amark/gun about it, or you'll circle back around later - hopefully that is helpful directions? Thanks. Most important statement of mine: I bet you'll enjoy the cartoon cryptography series.
- e12e 8y ago
  Thanks for replying. I guess: https://gun.eco/explainers/data/summary.html https://gun.eco/explainers/data/summary.html sums up the situation - but there's a few things that aren't quite clear: by design, everyone can access all encrypted data? So there's some meta-data that's easy to find, such as checking if an account exist, and how much data is associated with it - and the ability to record the approximate rate that data is written to the account? For example, if the login is an email, the app is an exercise logger - I might be able to infer that someone is out jogging by looking at the data?

rambojazz 8y ago

Is that website related to https://notabug.org https://notabug.org in any way?

go1dfish 8y ago
no
- deathhand 8y ago
  FYI: Notabug can't post anonymous comments or chats as of 8/7/18 And there was no way of me telling you this besides here...