4 ms·

Something like https://killcord.io https://killcord.io

by zcw100 2y ago

crote 2y ago
Is there something like this which is still maintained and isn't needlessly tied to crypto?
- KMnO4 2y ago
  > Needlessly tied to crypto Let’s unpack that. By “crypto” you probably mean cryptocurrency, but let’s not forget it’s the same crypto as in cryptography. You absolutely want cryptography involved in something like this for obvious reasons. You’ve probably also heard the term blockchain and immediately think of speculative currency futures. So throw that to the wind for a second and imagine how useful a distributed list of records linked and verifiable with cryptographic hash functions would be for this project. Then finally, run this all in a secure and autonomous way so that under certain conditions the action of releasing the key will happen. In other words: a smart contract. This is an absolutely perfect use of Ethereum. If you think cryptocurrencies are useless, then consider that projects like this are what give them actual real world use cases.
  - panzi 2y ago
    Yeah, but I don't think you need proof of work for this. Something more akin to git with commit signing should work. The thing with cryptocurrencies is that there isn't anything of real value in the Blockchain. If you view git as Blockchain there is something of real value in it: the code. And here the encrypted data. Although I don't know how you could make any kind of Blockchain containing data to be released at some condition and no way to release it before? If it's all public in the Blockchain it's all already public. You need atrusted authority that has a secret key to unlock the data. And if you have that all that Blockchain stuff is utterly redundant anyway.
  - lxgr 2y ago
    How can a smart contract “keep a secret” in a trustless way? Isn’t effectively all the trust still in the party releasing it at the right time, or not releasing it otherwise? If so, is the blockchain aspect anything other than decentralization theater? I guess one thing you can do with a blockchain is keeping that trusted party honest and accountable for not releasing at the desired date and in the absence of a liveness signal, but I’m not sure that’s the biggest trust issue here (for me, them taking a look without my permission would be the bigger one).
    - insapio 2y ago
      You can create a timelock smart contract requiring a future state of the blockchain to have been reached. Once that time has been reached, you can freely execute the function on the contract to retrieve the information. Tested it years ago, to lock up 1 ETH in essentially a CD for a year. The trust is held in your own code implementation of the contract and that ETH will continue to exist and not be hard-forked or Shor'd or something.
      - lxgr 2y ago
        That's not how it works: You can fundamentally not store secrets in smart contracts, you do need off-chain agents for that. (How would a smart contract prevent me from reading anything published on a blockchain?) > Tested it years ago, to lock up 1 ETH in essentially a CD for a year. That's not locking up a secret, that's locking up value. But it seems like there might be a game theoretic way to ensure that, as your sibling commenter has outlined.
    - DennisP 2y ago
      A smart contract can still help. Use Shamir's secret sharing to split the decryption key. Each friend gets a key fragment, plus the address of the smart contract that combines them. Now none of your friends have to know each other. No friend can peek on their own, they can't conspire with each other, and if one of them gets compromised, it doesn't put the others at risk. It's basically the same idea as "social recovery wallets," which some people use to protect large amounts of funds. If you don't have any friends then as you suggest, a conceivable infrastructure would be to pay anonymous providers to deposit funds in the contract, which they would lose they don't provide their key fragment in a timely manner after the liveness signal fails. For verification, the contract would have to hold hashes of the key fragments. Each depositor would include a public key with the deposit, which the whistleblower can use to encrypt and post a key fragment. (Of course the vulnerability here is the whistleblower's own key.) The contract should probably also hold a hash of the encrypted document, which would be posted somewhere public.
  - Saavedro 2y ago
    there's literally no way to implement this on ethereum, smart contracts can't store secrets, all of their state is public.
    - DennisP 2y ago
      But they can store hashes of SSS shards, and coordinate the revealing of secrets by individuals who don't have access to those secrets on their own.
  - jrflowers 2y ago
    >This is an absolutely perfect use of Ethereum. How to schedule an outgoing email through Gmail: https://support.google.com/mail/answer/9214606?hl=en&co=GENIE.Platform%3DDesktop https://support.google.com/mail/answer/9214606?hl=en&co=GENI... through Outlook https://support.microsoft.com/en-us/office/delay-or-schedule-sending-email-messages-in-outlook-026af69f-c287-490a-a72f-6c65793744ba https://support.microsoft.com/en-us/office/delay-or-schedule... through Apple Mail https://www.igeeksblog.com/how-to-schedule-email-on-iphone-ipad-mac/ https://www.igeeksblog.com/how-to-schedule-email-on-iphone-i... through Proton Mail https://proton.me/support/schedule-email-send https://proton.me/support/schedule-email-send

Something like https://killcord.io https://killcord.io

by zcw100 2y ago

Something like https://killcord.io https://killcord.io

crote 2y ago

Is there something like this which is still maintained and isn't needlessly tied to crypto?

KMnO4 2y ago
> Needlessly tied to crypto Let’s unpack that. By “crypto” you probably mean cryptocurrency, but let’s not forget it’s the same crypto as in cryptography. You absolutely want cryptography involved in something like this for obvious reasons. You’ve probably also heard the term blockchain and immediately think of speculative currency futures. So throw that to the wind for a second and imagine how useful a distributed list of records linked and verifiable with cryptographic hash functions would be for this project. Then finally, run this all in a secure and autonomous way so that under certain conditions the action of releasing the key will happen. In other words: a smart contract. This is an absolutely perfect use of Ethereum. If you think cryptocurrencies are useless, then consider that projects like this are what give them actual real world use cases.
- panzi 2y ago
  Yeah, but I don't think you need proof of work for this. Something more akin to git with commit signing should work. The thing with cryptocurrencies is that there isn't anything of real value in the Blockchain. If you view git as Blockchain there is something of real value in it: the code. And here the encrypted data. Although I don't know how you could make any kind of Blockchain containing data to be released at some condition and no way to release it before? If it's all public in the Blockchain it's all already public. You need atrusted authority that has a secret key to unlock the data. And if you have that all that Blockchain stuff is utterly redundant anyway.
- lxgr 2y ago
  How can a smart contract “keep a secret” in a trustless way? Isn’t effectively all the trust still in the party releasing it at the right time, or not releasing it otherwise? If so, is the blockchain aspect anything other than decentralization theater? I guess one thing you can do with a blockchain is keeping that trusted party honest and accountable for not releasing at the desired date and in the absence of a liveness signal, but I’m not sure that’s the biggest trust issue here (for me, them taking a look without my permission would be the bigger one).
  - insapio 2y ago
    You can create a timelock smart contract requiring a future state of the blockchain to have been reached. Once that time has been reached, you can freely execute the function on the contract to retrieve the information. Tested it years ago, to lock up 1 ETH in essentially a CD for a year. The trust is held in your own code implementation of the contract and that ETH will continue to exist and not be hard-forked or Shor'd or something.
    - lxgr 2y ago
      That's not how it works: You can fundamentally not store secrets in smart contracts, you do need off-chain agents for that. (How would a smart contract prevent me from reading anything published on a blockchain?) > Tested it years ago, to lock up 1 ETH in essentially a CD for a year. That's not locking up a secret, that's locking up value. But it seems like there might be a game theoretic way to ensure that, as your sibling commenter has outlined.
  - DennisP 2y ago
    A smart contract can still help. Use Shamir's secret sharing to split the decryption key. Each friend gets a key fragment, plus the address of the smart contract that combines them. Now none of your friends have to know each other. No friend can peek on their own, they can't conspire with each other, and if one of them gets compromised, it doesn't put the others at risk. It's basically the same idea as "social recovery wallets," which some people use to protect large amounts of funds. If you don't have any friends then as you suggest, a conceivable infrastructure would be to pay anonymous providers to deposit funds in the contract, which they would lose they don't provide their key fragment in a timely manner after the liveness signal fails. For verification, the contract would have to hold hashes of the key fragments. Each depositor would include a public key with the deposit, which the whistleblower can use to encrypt and post a key fragment. (Of course the vulnerability here is the whistleblower's own key.) The contract should probably also hold a hash of the encrypted document, which would be posted somewhere public.
- Saavedro 2y ago
  there's literally no way to implement this on ethereum, smart contracts can't store secrets, all of their state is public.
  - DennisP 2y ago
    But they can store hashes of SSS shards, and coordinate the revealing of secrets by individuals who don't have access to those secrets on their own.
- jrflowers 2y ago
  >This is an absolutely perfect use of Ethereum. How to schedule an outgoing email through Gmail: https://support.google.com/mail/answer/9214606?hl=en&co=GENIE.Platform%3DDesktop https://support.google.com/mail/answer/9214606?hl=en&co=GENI... through Outlook https://support.microsoft.com/en-us/office/delay-or-schedule-sending-email-messages-in-outlook-026af69f-c287-490a-a72f-6c65793744ba https://support.microsoft.com/en-us/office/delay-or-schedule... through Apple Mail https://www.igeeksblog.com/how-to-schedule-email-on-iphone-ipad-mac/ https://www.igeeksblog.com/how-to-schedule-email-on-iphone-i... through Proton Mail https://proton.me/support/schedule-email-send https://proton.me/support/schedule-email-send