3 ms·

If the history is not public, probably not. I suspect this could be risky. If someone reports that illegal content was uploaded and it is known the site opera

If the history is not public, probably not. I suspect this could be risky. If someone reports that illegal content was uploaded and it is known the site operates from git then it would be known that the contents would still be in git. The reason I mention this is that people who would view this site as their competitor game the legal system by uploading illegal material via proxies and compromised machines and automatically reporting it to authorities, server providers and dns registrars to get the nodes, domains and admins cancelled. This is how many small sites have been shut down and why many small forums have gone private. The competitors are anyone with a vested financial interest in the existing platforms. I think I would want all traces of the content purged in a timely manor to mitigate this risk if I were running the site. Another tricky part of this is how git deals with binary blobs. The repos are going to get massive rather fast. I suspect truncating the binaries without making git aware may lead to errors. Even if they can be ignored it may get harder with time to troubleshoot the repo. I suppose you could make a prototype and load test it to see what happens when you upload a few TB of files and start truncating some of them.

MrThoughtful 3y ago
I think one can also run a git repo without history. That would solve the "dirty stuff in the history" problem. I don't think binary blobs should be included at the beginning. The "content" file should be just a text file.
- LinuxBender 3y ago
  In my opinion by implementing git without history and linking to binaries is just a reinvention of phpBB [1] which already has powerful moderation capabilities, a very advanced permissions systems and file storage that has been battle hardened for a couple decades. The UI can be made to look modern using modular styles and by uploading modern emoji which phpBB already supports. The most work would be working on a style to make it look modern. phpBB can use Postgres or MySQL for the metadata and it links to file storage for attachments. There is also a very advanced permissions system with limits per file type. If the site grew big enough the file storage could be scaled with Ceph. The only thing they leave out is some tuning/hardening of php.ini disabling unused classes and functions [2] and implementing good outbound firewall rules to mitigate most 0-day's. Those are fairly straight forward to implement. [Edit] FWIW I tried vouching your submission that was flagged but then it was re-flagged. [1] - https://www.phpbb.com/ https://www.phpbb.com/ [2] - https://www.cyberciti.biz/faq/linux-unix-apache-lighttpd-phpini-disable-functions/ https://www.cyberciti.biz/faq/linux-unix-apache-lighttpd-php...

MrThoughtful 3y ago

I think one can also run a git repo without history. That would solve the "dirty stuff in the history" problem. I don't think binary blobs should be included at the beginning. The "content" file should be just a text file.

LinuxBender 3y ago
In my opinion by implementing git without history and linking to binaries is just a reinvention of phpBB [1] which already has powerful moderation capabilities, a very advanced permissions systems and file storage that has been battle hardened for a couple decades. The UI can be made to look modern using modular styles and by uploading modern emoji which phpBB already supports. The most work would be working on a style to make it look modern. phpBB can use Postgres or MySQL for the metadata and it links to file storage for attachments. There is also a very advanced permissions system with limits per file type. If the site grew big enough the file storage could be scaled with Ceph. The only thing they leave out is some tuning/hardening of php.ini disabling unused classes and functions [2] and implementing good outbound firewall rules to mitigate most 0-day's. Those are fairly straight forward to implement. [Edit] FWIW I tried vouching your submission that was flagged but then it was re-flagged. [1] - https://www.phpbb.com/ https://www.phpbb.com/ [2] - https://www.cyberciti.biz/faq/linux-unix-apache-lighttpd-phpini-disable-functions/ https://www.cyberciti.biz/faq/linux-unix-apache-lighttpd-php...