4 ms·

Could not find on the web page details about 1. the security model and implementation details 2. team / entity behind this 3. could it support 1,000,000 file

Could not find on the web page details about 1. the security model and implementation details 2. team / entity behind this 3. could it support 1,000,000 files 4. could it support 10,000 todo items on a single page 5. could it store 1TB (or more) of data 6. how do you plan to make money

sharipova 7y ago
1. We are based on the IPFS and Textile library, using ed25519 for signatures and aes256 for files encryption. We are planning to release tech whitepaper closer to the public launch
- jude- 7y ago
  What happens when the files get unpinned? Who pins the files when my laptop is offline? Who pays for this? What keeps my files online in the event of high node churn? What happens if malicious nodes join the IPFS swarm and censor key/value lookups?
  - requilence 7y ago
    > What happens when the files get unpinned? Peers who are interested in the content pin it. - E.g. your teammates share the same files - Your family have a shared photo album - Your devices(mobile+desktop) share your private files - Anytype provides nodes that store a small amount of encrypted data for free. Later we will provide an option to buy more backup space on our nodes to pin your encrypted data - You also will be able to set up your self-hosted anytype node to pin your data > Who pins the files when my laptop is offline? Who pays for this? Currently, Anytype provides a small cache on our public nodes to store the last encrypted versions to mitigate offline/online problems. You also will be able to set up your self-hosted anytype node. > What keeps my files online in the event of high node churn? - Peers who are interested in the content actually store it - Anytype nodes > What happens if malicious nodes join the IPFS swarm and censor key/value lookups - First, you will do the local-network lookup. E.g. if you are working with your team in the same network you will be able to discover local-network nodes via broadcast msgs - Anytype provide nodes that index the encrypted content. That nodes expose additional API that can be used to speed up P2P content discovery in that cases while being fully secure (because it is content-addressable)
    - jude- 7y ago
      Okay, so whoever wrote the text for your website is a liar. ----- From your website: > It’s free. No storage or upload limits You said: > You also will be able to set up your self-hosted anytype node to pin your data > Your family have a shared photo album > Your devices(mobile+desktop) share your private files > Later we will provide an option to buy more backup space on our nodes to pin your encrypted data So, it's not free. I'm paying for storage one way or another -- either by keeping it all on my always-on devices, or by paying you to pin it. ----- From your website: > Anytype works without a central server, so only you have access to your encryption keys and data. All apps run locally and exchange data directly in a peer-to-peer way without exposing it to intermediaries even when you work across devices and with others. You said: > Anytype provide nodes that index the encrypted content So, when I'm not on the same LAN as the computer, Anytype is not only _not_ peer-to-peer by default, but also Anytype gets to see when people write data and learn how much data they wrote.
      - jeswin 7y ago
        > Okay, so whoever wrote the text for your website is a liar. > So, it's not free. I'm paying for storage one way or another -- either by keeping it all on my always-on devices, or by paying you to pin it. Not the author, I don't think you can accuse them of lying. I suppose you could use any provider to pin stuff. There might be free IPFS pinning services and non-free ones. You may not need to use AnyType at all. > So, when I'm not on the same LAN as the computer, Anytype is not only _not_ peer-to-peer by default, but also Anytype gets to see when people write data and learn how much data they wrote. I don't agree with your assessment at all. It is ok in P2P to have intermediary nodes that handle pinning, hosting, mirroring, propagation etc when the node is offline. That's the only way P2P can be viable. What's important is that the protocols and standards are open. And that you can choose your own providers to handle the above mentioned services (pinning, mirroring etc). That seems to be the case here. You're criticism is unnecessarily acute. My feed back would be to be clearer on how it works - because your initial set of users are going to be more technically proficient.
        sharipova 7y ago
sharipova 7y ago
2. We are a team of 10 from Berlin :)
- java-man 7y ago
  What evil government spy agency is paying your salary?</joke> But seriously, you may want to provide some transparency on the web site. Or perhaps a link to github for security-critical components. All is lost if the master key is leaked through some side channel.
  - requilence 7y ago
    we don't have a master key :) only users have encryption keys for their data and only they decide with whom they want to share. BTW, I totally agree about transparency. We will opensource Anytype before the public release so anyone can inspect and build from sources
    - java-man 7y ago
      How do you plan to make money if it's IPFS and open source?
      - sharipova 7y ago
        some percentage of users will need a backup. While some technical users will configure something for themselves, for others it will be more convenient just to pay for backup from anytype
        java-man 7y ago
        thank you.
sharipova 7y ago
6. All users can use Anytype for free if they use their own resources. The first monetisation would be an option to buy backup of data - unlike in cloud solutions, Anytype will not have access to data there as well.
requilence 7y ago
3. Yes, it can, but currently it depends on the ability of the computer, as your nodes should store all of them locally. But because this is local-first app the limitations are going to be close to the limitations of your local FS 4. Definitely yes 5. Again depends on the available disk space you have. If you have enough disk space - you can store your data

sharipova 7y ago

1. We are based on the IPFS and Textile library, using ed25519 for signatures and aes256 for files encryption. We are planning to release tech whitepaper closer to the public launch

jude- 7y ago
What happens when the files get unpinned? Who pins the files when my laptop is offline? Who pays for this? What keeps my files online in the event of high node churn? What happens if malicious nodes join the IPFS swarm and censor key/value lookups?
- requilence 7y ago
  > What happens when the files get unpinned? Peers who are interested in the content pin it. - E.g. your teammates share the same files - Your family have a shared photo album - Your devices(mobile+desktop) share your private files - Anytype provides nodes that store a small amount of encrypted data for free. Later we will provide an option to buy more backup space on our nodes to pin your encrypted data - You also will be able to set up your self-hosted anytype node to pin your data > Who pins the files when my laptop is offline? Who pays for this? Currently, Anytype provides a small cache on our public nodes to store the last encrypted versions to mitigate offline/online problems. You also will be able to set up your self-hosted anytype node. > What keeps my files online in the event of high node churn? - Peers who are interested in the content actually store it - Anytype nodes > What happens if malicious nodes join the IPFS swarm and censor key/value lookups - First, you will do the local-network lookup. E.g. if you are working with your team in the same network you will be able to discover local-network nodes via broadcast msgs - Anytype provide nodes that index the encrypted content. That nodes expose additional API that can be used to speed up P2P content discovery in that cases while being fully secure (because it is content-addressable)
  - jude- 7y ago
    Okay, so whoever wrote the text for your website is a liar. ----- From your website: > It’s free. No storage or upload limits You said: > You also will be able to set up your self-hosted anytype node to pin your data > Your family have a shared photo album > Your devices(mobile+desktop) share your private files > Later we will provide an option to buy more backup space on our nodes to pin your encrypted data So, it's not free. I'm paying for storage one way or another -- either by keeping it all on my always-on devices, or by paying you to pin it. ----- From your website: > Anytype works without a central server, so only you have access to your encryption keys and data. All apps run locally and exchange data directly in a peer-to-peer way without exposing it to intermediaries even when you work across devices and with others. You said: > Anytype provide nodes that index the encrypted content So, when I'm not on the same LAN as the computer, Anytype is not only _not_ peer-to-peer by default, but also Anytype gets to see when people write data and learn how much data they wrote.
    - jeswin 7y ago
      > Okay, so whoever wrote the text for your website is a liar. > So, it's not free. I'm paying for storage one way or another -- either by keeping it all on my always-on devices, or by paying you to pin it. Not the author, I don't think you can accuse them of lying. I suppose you could use any provider to pin stuff. There might be free IPFS pinning services and non-free ones. You may not need to use AnyType at all. > So, when I'm not on the same LAN as the computer, Anytype is not only _not_ peer-to-peer by default, but also Anytype gets to see when people write data and learn how much data they wrote. I don't agree with your assessment at all. It is ok in P2P to have intermediary nodes that handle pinning, hosting, mirroring, propagation etc when the node is offline. That's the only way P2P can be viable. What's important is that the protocols and standards are open. And that you can choose your own providers to handle the above mentioned services (pinning, mirroring etc). That seems to be the case here. You're criticism is unnecessarily acute. My feed back would be to be clearer on how it works - because your initial set of users are going to be more technically proficient.
      - sharipova 7y ago

sharipova 7y ago

2. We are a team of 10 from Berlin :)

java-man 7y ago
What evil government spy agency is paying your salary?</joke> But seriously, you may want to provide some transparency on the web site. Or perhaps a link to github for security-critical components. All is lost if the master key is leaked through some side channel.
- requilence 7y ago
  we don't have a master key :) only users have encryption keys for their data and only they decide with whom they want to share. BTW, I totally agree about transparency. We will opensource Anytype before the public release so anyone can inspect and build from sources
  - java-man 7y ago
    How do you plan to make money if it's IPFS and open source?
    - sharipova 7y ago
      some percentage of users will need a backup. While some technical users will configure something for themselves, for others it will be more convenient just to pay for backup from anytype
      - java-man 7y ago
        thank you.

sharipova 7y ago

6. All users can use Anytype for free if they use their own resources. The first monetisation would be an option to buy backup of data - unlike in cloud solutions, Anytype will not have access to data there as well.

requilence 7y ago

3. Yes, it can, but currently it depends on the ability of the computer, as your nodes should store all of them locally. But because this is local-first app the limitations are going to be close to the limitations of your local FS 4. Definitely yes 5. Again depends on the available disk space you have. If you have enough disk space - you can store your data