3 ms·

I'm in an unique position that I have half a year now to produce...well whatever I choose to produce. What is the thing that you're missing most?

by edem 4y ago

pdimitar 4y ago
Distributed chain-of-trust RSS would be nice as a start. Above everything else though, I am missing a decentralized, globally automatically replicated, blockchain-like storage network. Think software releases. Package X releases version 1.3.11. We should have that in an IPFS-like storage network + several hashes (SHA-2, SHA-3 and what have you) so it can never be tampered with. We should also have that version linked to the previous one -- 1.3.10 (a la Bitcoin transactions I guess). That's only one application. Another one would be: a network of friends and families all sharing e.g. huge photo travel albums. Or, if they are into it, torrented movies or music. Game hacks even. Whatever, it should not matter. Wanna dive deep into a rabbit hole? Here: - http://www.nncpgo.org/ http://www.nncpgo.org/ (pay no attention to bad site, the idea of the project and what has been coded so far is solid) - https://changelog.complete.org/archives/tag/nncp https://changelog.complete.org/archives/tag/nncp - https://www.complete.org/nncp/ https://www.complete.org/nncp/ That's what we're missing. Everyone constantly acts like hosting 10GB somewhere is a huge deal and I am honestly sick of it. Were I to retire financially tomorrow I'd work tirelessly on all this until my brain can no longer do programming. We need a new internet. Badly. We need it 10 years ago. BONUS POINTS: ability to automatically exchange keys in a neat UI e.g. I send a special message to a friend: "Join my inner circle of shared storage" or some such, they click it and the software does authentication and checking if both parties are who they claim to be, issue new keys (so them being compromised has a minimal impact). Think ZeroTier and/or Tailscale but even more self-hosted and even more reliable.
- ramoz 4y ago
  I don’t quite understand how your desired solution for software supply chains actually achieves much. Content addressability doesn’t seem different from checksums or subresource integrity. IPFS requires file pinning, so who is owning that and how is it different from a current state package distributer? Further, someone/a build-machine still has to upload to the storage network… so Now we need smart contract to build (plus a coin)? … then we’ll need a coin for the compute providers? And even if we have all of that, Charlie still employs his advanced supply chain attack upstream like he normally does… and we’re still left with malware plus a bubble of infra that didn’t quite solve much it was funded millions to solve.

I'm in an unique position that I have half a year now to produce...well whatever I choose to produce. What is the thing that you're missing most?

by edem 4y ago

I'm in an unique position that I have half a year now to produce...well whatever I choose to produce. What is the thing that you're missing most?

pdimitar 4y ago

Distributed chain-of-trust RSS would be nice as a start. Above everything else though, I am missing a decentralized, globally automatically replicated, blockchain-like storage network. Think software releases. Package X releases version 1.3.11. We should have that in an IPFS-like storage network + several hashes (SHA-2, SHA-3 and what have you) so it can never be tampered with. We should also have that version linked to the previous one -- 1.3.10 (a la Bitcoin transactions I guess). That's only one application. Another one would be: a network of friends and families all sharing e.g. huge photo travel albums. Or, if they are into it, torrented movies or music. Game hacks even. Whatever, it should not matter. Wanna dive deep into a rabbit hole? Here: - http://www.nncpgo.org/ http://www.nncpgo.org/ (pay no attention to bad site, the idea of the project and what has been coded so far is solid) - https://changelog.complete.org/archives/tag/nncp https://changelog.complete.org/archives/tag/nncp - https://www.complete.org/nncp/ https://www.complete.org/nncp/ That's what we're missing. Everyone constantly acts like hosting 10GB somewhere is a huge deal and I am honestly sick of it. Were I to retire financially tomorrow I'd work tirelessly on all this until my brain can no longer do programming. We need a new internet. Badly. We need it 10 years ago. BONUS POINTS: ability to automatically exchange keys in a neat UI e.g. I send a special message to a friend: "Join my inner circle of shared storage" or some such, they click it and the software does authentication and checking if both parties are who they claim to be, issue new keys (so them being compromised has a minimal impact). Think ZeroTier and/or Tailscale but even more self-hosted and even more reliable.

ramoz 4y ago
I don’t quite understand how your desired solution for software supply chains actually achieves much. Content addressability doesn’t seem different from checksums or subresource integrity. IPFS requires file pinning, so who is owning that and how is it different from a current state package distributer? Further, someone/a build-machine still has to upload to the storage network… so Now we need smart contract to build (plus a coin)? … then we’ll need a coin for the compute providers? And even if we have all of that, Charlie still employs his advanced supply chain attack upstream like he normally does… and we’re still left with malware plus a bubble of infra that didn’t quite solve much it was funded millions to solve.