8 ms·

CovenantForum – A decentralized forum powered by CovenantSQL

50 points by auxten 8y ago

xq262144 8y ago
Is this free?
auxten 8y ago
The Demo is here: https://demo.covenantsql.io/forum/ https://demo.covenantsql.io/forum/ All messages can be found on blockchain like this: https://github.com/CovenantSQL/CovenantForum#comments-on-blockchain https://github.com/CovenantSQL/CovenantForum#comments-on-blo...
foreseaz 8y ago
Interesting, is it free?
- auxten 8y ago
  First, it's open source. so it's free technically. And, as all the database miner node is distributed globally(not enought for now). By running a client you can visit the forum even from localhost, it's relatively hard to block the forum. But using database hosted by miners need to pay PTC. You can get PTC by replying to the [topic](https://demo.covenantsql.io/forum/#/t/2 https://demo.covenantsql.io/forum/#/t/2) with your wallet address.
a-saleh 8y ago
For a true decentralized forum, I would probably prefer https://www.scuttlebutt.nz/ https://www.scuttlebutt.nz/ .. the protocol seems nice and understandable, doesn't use block-chain, just distributed append-log, based on user white-lists, user/machine is identified by their pub-key and it works even on local network without access to the internet. I played around with the git-ssb project that allows you to even host and collaborate on git repositories stored in the distributed log. Only thing I don't really like is the reliance on the npm ecosystem, so I am waiting if they manage to finish a reimplementation of client and server in rust.
- tsukurimashou 8y ago
  This is nice, first time I hear about it. But I cannot find much info about it, where did you hear they are re-implementing the client / server in rust?
  - nanomonkey 8y ago
    The rust implementation is mostly talked about on Scuttlebutt itself, the repository is https://github.com/sunrise-choir https://github.com/sunrise-choir
- auxten 8y ago
  CovenantSQL uses a CA less protocol to distribute log. To implement a decentralized system, I wrote a TLS like P2P net stack. The main idea is removing CA Cert from the whole system by using a DHT for Naming and Key Exchange. I am not a crypto expert, so if there's any flaw please point it out for me here or Github I use an Elliptic Curve for asymmetric encryption DH-RPC NodeID is generated by hash of Node PublicKey and an Uint256 Nonce: NodeID := sha256(blake2b-512(NodePublicKey + Uint256Nonce)) I refer to S/Kad idea to define the number of consecutive 0s in front of the NodeID as difficulty and to impose a minimum limit on the difficulty of the NodeID allowed to be stored on the DHT. DHT is used to hold the NodeID:PublicKey NodeID:Addr map. NodeID and Nonce are sent to do ECDH getting shared secret after TCP connection established. GenECDHSharedSecret(APub, BPriv) == GenECDHSharedSecret(BPub, APriv) The main procedure is described as sequence chart: https://github.com/CovenantSQL/CovenantSQL/blob/develop/logo/rpc.png https://github.com/CovenantSQL/CovenantSQL/blob/develop/logo... Because in the decentralized system NodeID is the URI, not "Bob/Alice.com". So anyone tries to fake NodeB by overwriting the address or public key on DHT without the private key of NodeB will be failed to get the correct shared secret. Github: https://github.com/CovenantSQL/CovenantSQL/tree/develop/rpc https://github.com/CovenantSQL/CovenantSQL/tree/develop/rpc
- elcomet 8y ago
  I heard about it already, but I think it has one major issue: the name is terrible. It is ugly, complicated, hard to say, has "butt" in it. I would never see myself talking to friends about "secure scuttlebut". I'm not a native speaker though, so maybe it makes sense for others.
gcb0 8y ago
decentralized is an empty term today. it can mean so many things we should just drop it.
- auxten 8y ago
  Yes, you are right. But I really can not find a proper word to describe this project. CovenantForum just stores all the data in CovenantSQL which is a database use blockchain to sync "binlog". CovenantForum also stores the pictures in database as blob.
  - 0db532a0 8y ago
    P2P would have been an acceptable term at some point.
  - gcb0 8y ago
    from your description is a append log blockchain then. maybe missing one other word for the participants benefit, token based? "decentralized" today is like saying "digital" in the 80s
daniel-l 8y ago
So, where does the data actually stored?
- auxten 8y ago
  CovenantForum stores data in CovenantSQL Miners which are selected and organized by the algorithm running by CovenantSQL BlockProducer. For more details, you can refer to: https://github.com/CovenantSQL/CovenantSQL#one-line-makes-data-on-blockchain https://github.com/CovenantSQL/CovenantSQL#one-line-makes-da... and https://github.com/CovenantSQL/CovenantForum#arch https://github.com/CovenantSQL/CovenantForum#arch
dylkil 8y ago
http://memo.cash http://memo.cash is truly decentralised. All messages and actions are stored on BCH and BSV blockchain. The protocol (https://memo.cash/protocol https://memo.cash/protocol) is open so anyone can interact or create a new UI for the memo protocol.
cnorthwood 8y ago
This is an interesting application. I wonder how it deals with abuse (e.g., libellous content that needs to be removed), a DELETE operation added to the blockchain? (I guess the content still exists in the blockchain but not in the database)
- auxten 8y ago
  Yes, SQL on blockchain is append-only. The SQLChain blocks can only be accessed with a granted private key. I think all public chains are facing the abuse problem.
michaelmior 8y ago
This seems to suggest that the OAuth secret needs to be shared with all the clients. Or is every client expected to generate their own secret?
- auxten 8y ago
  User private OAuth token is stored in the cookie. Forum clients can share the same token and also use their own token. Same DSN(database serial num) indicates the same forum.

50 points by auxten 8y ago

Is this free?

The Demo is here: https://demo.covenantsql.io/forum/ https://demo.covenantsql.io/forum/ All messages can be found on blockchain like this: https://github.com/CovenantSQL/CovenantForum#comments-on-blockchain https://github.com/CovenantSQL/CovenantForum#comments-on-blo...

foreseaz 8y ago

Interesting, is it free?

auxten 8y ago
First, it's open source. so it's free technically. And, as all the database miner node is distributed globally(not enought for now). By running a client you can visit the forum even from localhost, it's relatively hard to block the forum. But using database hosted by miners need to pay PTC. You can get PTC by replying to the [topic](https://demo.covenantsql.io/forum/#/t/2 https://demo.covenantsql.io/forum/#/t/2) with your wallet address.

a-saleh 8y ago

For a true decentralized forum, I would probably prefer https://www.scuttlebutt.nz/ https://www.scuttlebutt.nz/ .. the protocol seems nice and understandable, doesn't use block-chain, just distributed append-log, based on user white-lists, user/machine is identified by their pub-key and it works even on local network without access to the internet. I played around with the git-ssb project that allows you to even host and collaborate on git repositories stored in the distributed log. Only thing I don't really like is the reliance on the npm ecosystem, so I am waiting if they manage to finish a reimplementation of client and server in rust.

tsukurimashou 8y ago
This is nice, first time I hear about it. But I cannot find much info about it, where did you hear they are re-implementing the client / server in rust?
- nanomonkey 8y ago
  The rust implementation is mostly talked about on Scuttlebutt itself, the repository is https://github.com/sunrise-choir https://github.com/sunrise-choir
auxten 8y ago
CovenantSQL uses a CA less protocol to distribute log. To implement a decentralized system, I wrote a TLS like P2P net stack. The main idea is removing CA Cert from the whole system by using a DHT for Naming and Key Exchange. I am not a crypto expert, so if there's any flaw please point it out for me here or Github I use an Elliptic Curve for asymmetric encryption DH-RPC NodeID is generated by hash of Node PublicKey and an Uint256 Nonce: NodeID := sha256(blake2b-512(NodePublicKey + Uint256Nonce)) I refer to S/Kad idea to define the number of consecutive 0s in front of the NodeID as difficulty and to impose a minimum limit on the difficulty of the NodeID allowed to be stored on the DHT. DHT is used to hold the NodeID:PublicKey NodeID:Addr map. NodeID and Nonce are sent to do ECDH getting shared secret after TCP connection established. GenECDHSharedSecret(APub, BPriv) == GenECDHSharedSecret(BPub, APriv) The main procedure is described as sequence chart: https://github.com/CovenantSQL/CovenantSQL/blob/develop/logo/rpc.png https://github.com/CovenantSQL/CovenantSQL/blob/develop/logo... Because in the decentralized system NodeID is the URI, not "Bob/Alice.com". So anyone tries to fake NodeB by overwriting the address or public key on DHT without the private key of NodeB will be failed to get the correct shared secret. Github: https://github.com/CovenantSQL/CovenantSQL/tree/develop/rpc https://github.com/CovenantSQL/CovenantSQL/tree/develop/rpc
elcomet 8y ago
I heard about it already, but I think it has one major issue: the name is terrible. It is ugly, complicated, hard to say, has "butt" in it. I would never see myself talking to friends about "secure scuttlebut". I'm not a native speaker though, so maybe it makes sense for others.

gcb0 8y ago

decentralized is an empty term today. it can mean so many things we should just drop it.

auxten 8y ago
Yes, you are right. But I really can not find a proper word to describe this project. CovenantForum just stores all the data in CovenantSQL which is a database use blockchain to sync "binlog". CovenantForum also stores the pictures in database as blob.
- 0db532a0 8y ago
  P2P would have been an acceptable term at some point.
- gcb0 8y ago
  from your description is a append log blockchain then. maybe missing one other word for the participants benefit, token based? "decentralized" today is like saying "digital" in the 80s

daniel-l 8y ago

So, where does the data actually stored?

auxten 8y ago
CovenantForum stores data in CovenantSQL Miners which are selected and organized by the algorithm running by CovenantSQL BlockProducer. For more details, you can refer to: https://github.com/CovenantSQL/CovenantSQL#one-line-makes-data-on-blockchain https://github.com/CovenantSQL/CovenantSQL#one-line-makes-da... and https://github.com/CovenantSQL/CovenantForum#arch https://github.com/CovenantSQL/CovenantForum#arch

dylkil 8y ago

http://memo.cash http://memo.cash is truly decentralised. All messages and actions are stored on BCH and BSV blockchain. The protocol (https://memo.cash/protocol https://memo.cash/protocol) is open so anyone can interact or create a new UI for the memo protocol.

cnorthwood 8y ago

This is an interesting application. I wonder how it deals with abuse (e.g., libellous content that needs to be removed), a DELETE operation added to the blockchain? (I guess the content still exists in the blockchain but not in the database)

auxten 8y ago
Yes, SQL on blockchain is append-only. The SQLChain blocks can only be accessed with a granted private key. I think all public chains are facing the abuse problem.

michaelmior 8y ago

This seems to suggest that the OAuth secret needs to be shared with all the clients. Or is every client expected to generate their own secret?

auxten 8y ago
User private OAuth token is stored in the cookie. Forum clients can share the same token and also use their own token. Same DSN(database serial num) indicates the same forum.