News for hackers. Stuff that matters.
Re:Freenet: A Distributed Anonymous Information Storage and ... by simcop2387 on Tuesday December 18, 2018 @02:44PM (#18709824)
I've always loved the ideals and design of Freenet for what it does, but the main issues I always ran into when I'd check it out were that discoverability was horrible and then once you did manage to dig into things and find content it was usually stuff I wouldn't want to find to begin with. That's left a lot of bad impressions on people I think, and caused it to have a reputation for only illegal things on it.
Re:Freenet: A Distributed Anonymous Information Storage and ... by mirimir on Tuesday December 18, 2018 @04:28PM (#18710751)
Yes, the public Freenet opennet contains lots of horrible content. But then, Freenet's focus has always been censorship resistance. Content gets distributed and replicated according to its popularity. It's a lot like BitTorrent, but with serious transport encryption and randomized routing.

And arguably it's worked pretty well for that, given that there's been consistently lots of horrible content for 18 years. Content providers (and users) have been busted, but that hasn't eliminated much of their content.

However, being a pure P2P system, you only have "anonymity" through plausible deniability. And that's a dangerous game to play. Criminal investigators have used modified Freenet nodes to track chunks of illegal content, and have prosecuted users whose nodes processed those chunks.

The Freenet Project argues that it's impossible to reliably determine whether nodes are requesting those chunks, or merely relaying requests from other nodes. But if you end up in court, you'll need an expert witness to convince the jury of that. So you'll likely end up with a plea bargain.

So anyway, it's safest to run Freenet on anonymously leased VPS, and access its webGUI as a Tor .onion service. Just as you'd prudently run a BitTorrent seedbox.

Re:Freenet: A Distributed Anonymous Information Storage and ... by chocolatebunny on Tuesday December 18, 2018 @07:24PM (#18711906)
I think there needs to be a way to have personal filters on P2P systems. I don't want censorship but I don't want to support the distribution of child pornography, not because it's illegal but because it doesn't align to my personal moral compass.
Re:Freenet: A Distributed Anonymous Information Storage and ... by FakeComments on Tuesday December 18, 2018 @07:52PM (#18712061)
We already have that — it’s normal communication.

There’s no way to make the change you’re proposing without seriously compromising the set up of such digital, secure communications, though. You’re asking to MITM the secure net, as a feature.

You and the feds, both.

Re:Freenet: A Distributed Anonymous Information Storage and ... by mirimir on Wednesday December 19, 2018 @12:02AM (#18713155)
I get your concerns, but I believe that would require a major rewrite of the codebase. And it would likely introduce serious security vulnerabilities. It's been a recurring request, over the years.
Re:Freenet: A Distributed Anonymous Information Storage and ... by athrun on Tuesday December 18, 2018 @07:02PM (#18711798)
Is it even possible to anonymously lease a VPS?

I guess you would need to use cash, at a minimum.

Re:Freenet: A Distributed Anonymous Information Storage and ... by mirimir on Tuesday December 18, 2018 @07:19PM (#18711880)
Sure. Do everything via Tor, using Whonix to avoid leaks. Hit Tor through nested VPN chains. Buy some Bitcoin, and then mix two or three times. Use a different Whonix instance for each mixing step, and a different mixing service.

Then lease your VPS. And if it really matters, you can daisy chain VPS via Tor .onion SSH.[0]

0) https://www.ivpn.net/privacy-guides/onion-ssh-hosts-for-logi...

Re:Freenet: A Distributed Anonymous Information Storage and ... by cypher_ on Wednesday December 19, 2018 @04:24AM (#18714377)
> Buy some Bitcoin, and then mix two or three times.

Simply exchange them to Monero. If you want, mix them, but only a single pass is needed. A mixer is a trusted 3rd-party, which introduces serious counterparty risk, and vulnerable to multiple forms to input-output correlation attacks, in the worst case, provides no security.

If you are paranoid, create multiple Monero wallets, and send the funds back and forth, each time with a randint(1, 100) hours delay to frustrate timing analysis. Please note that you should only run full node Monero, and must run it inside Whonix, otherwise, the unencrypted Monero traffic is exposed. The situation of P2P-level encryption of the entire cryptocurrency world is a disaster, almost all traffic is clear.

Ring-CT is possibly not the best cryptographic implementation of transaction anonymity, but currently the best practical implementation available. CoinJoin is a P2P version of mixer, but has no wide deployment, zn-SNARKs involves cutting-edge cryptography and provides 80-bit security (read, not confident), but 90% of Zcash transactions are clear transactions, makes private transactions vulnerable.

Or, once GNU/Taler is available, making an anonymous payment would be as easy as using PayPal.

Re:Freenet: A Distributed Anonymous Information Storage and ... by mirimir on Wednesday December 19, 2018 @01:18PM (#18717875)
Thanks. Gotta start using Monero, I guess. It's still no where near as widely accepted as Bitcoin. But you can just convert, as the final step.
Re:Freenet: A Distributed Anonymous Information Storage and ... by tbrownaw on Tuesday December 18, 2018 @08:18PM (#18712220)
[...] Then lease your VPS

... With a credit card (which of course has your name on it), since AFAIK the providers tend to only accept bitcoin for established accounts.

Re:Freenet: A Distributed Anonymous Information Storage and ... by mirimir on Tuesday December 18, 2018 @09:07PM (#18712443)
No, of course not. I've found lots of VPS providers who accept Bitcoin. Just search a while, and you'll find them. Some of them have rather "unsavory" reputations, I admit. And you want to avoid the ones that charge a huge premium for being "bulletproof".
Re:Freenet: A Distributed Anonymous Information Storage and ... by oldgregg on Tuesday December 18, 2018 @11:38PM (#18713045)
Vultr is good and cheap. You have to use a disposable visa gift card for your first $20 payment, but affer that bitcoin payment is enabled. the best visa cards are the $500 ones from simon malls-- 2.99$ activation fee and no ongoing or expiration fees. pay cash.
Re:Freenet: A Distributed Anonymous Information Storage and ... by wx13p on Wednesday December 19, 2018 @01:02AM (#18713443)
Also good:

Cockbox (Bitcoin and Monero) at https://cockbox.org/

HostSailor (cards, transfers, Bitcoin, etc) at https://hostsailor.com/

Pulse Servers https://www.pulseservers.com/

Trilight Zone (cards, transfers, Bitcoin, etc) at https://www.trilightzone.org/

VPS.BG (PayPal, Bitcoin, etc) at https://www.vps.bg/en

Re:Freenet: A Distributed Anonymous Information Storage and ... by JoshTriplett on Tuesday December 18, 2018 @03:26PM (#18710216)
That's rather inherent: if you create a network whose primary feature is anonymity and lack of rules, your early adopters will be everyone barred by the rules of other services, which means you become a cesspool.

Tor did a good job with marketing and optics early on, to make its intended use cases highly visible.

Re:Freenet: A Distributed Anonymous Information Storage and ... by infinity0 on Tuesday December 18, 2018 @03:58PM (#18710495)
> That's rather inherent: if you create a network whose primary feature is anonymity and lack of rules, your early adopters will be everyone barred by the rules of other services, which means you become a cesspool.

> Tor did a good job with marketing and optics early on, to make its intended use cases highly visible.

I used to work on Freenet. The mechanic you're pointing out doesn't have to be the dominant effect if the system performs as well as the alternatives. If everything else is equal (speed and convenience), users would of course prefer to have more security than less. If the performance and usability is only slightly worse, users may still be willing to choose security over that (e.g. Tor) - people today are becoming more aware of just how much their data can get abused.

Unfortunately for Freenet the technology wasn't capable enough - the security wasn't worth the usability and performance tradeoffs for most users. That doesn't mean strong security inherently attracts unpleasant types.

Re:Freenet: A Distributed Anonymous Information Storage and ... by nickpsecurity on Tuesday December 18, 2018 @09:39PM (#18712577)
I'm glad they did. The "Who uses Tor?" page is still what I give to people thinking privacy/anonymity tech is only for crooks. I always point out it helps cops, folks fighting terrorism, journalists, and victims of domestic abuse. And that the only way it works right is if lots of people are using it so they can hide in the crowd. I add that crooks can use it, too, but they also use cars, cameras, cheap phones, and so on. Doesn't mean we keep those things public or under government control. These pieces together in the argument gets agreement or at least sympathy out of lots of people who media freaks out about Tor, etc.

https://www.torproject.org/about/torusers.html.en

Re:Freenet: A Distributed Anonymous Information Storage and ... by FooHentai on Tuesday December 18, 2018 @04:03PM (#18710543)
VOAT turning into a cesspool of everything that was being banned from Reddit is another example of that, too.
Re:Freenet: A Distributed Anonymous Information Storage and ... by nyolfen on Tuesday December 18, 2018 @04:57PM (#18710961)
“The moral of the story is: if you’re against witch-hunts, and you promise to found your own little utopian community where witch-hunts will never happen, your new society will end up consisting of approximately three principled civil libertarians and seven zillion witches.”
Re:Freenet: A Distributed Anonymous Information Storage and ... by zrm on Tuesday December 18, 2018 @09:21PM (#18712504)
The solution to that may be to separate the hosting from the discovery.

If the hosting is anonymous and censorship-resistant then you'll get every type of content, but for anybody to use it they would first have to find it.

Then you have a slew of independent discoverability portals. Some are created for child pornography, so the FBI hacks into them and then uses them to arrest everybody there. Others are created to replace Tumblr and YouTube and refuse to link to child pornography, so child pornographers have no reason to go there and the people disgusted by child pornography can safely use them.

But setting up a discoverability portal is a lot less expensive than setting up a hosting service (because a link uses much less bandwidth than high quality video), so there should be more competition, and in particular it should still be difficult to censor anything that has more than a modest amount of popular support.

Re:Freenet: A Distributed Anonymous Information Storage and ... by ArneBab on Wednesday December 19, 2018 @04:20PM (#18719759)
This is what Freenet already provides with three different messaging systems and anonymously run indexes.
Re:Freenet: A Distributed Anonymous Information Storage and ... by zrm on Wednesday December 19, 2018 @05:36PM (#18720525)
Are you aware of any YouTube-equivalent? Something that allows you to search user-generated/submitted content and content feeds and has a builtin player to display them.
Re:Freenet: A Distributed Anonymous Information Storage and ... by ArneBab on Friday December 21, 2018 @11:26PM (#18738905)
I am aware that we are just one release away from serving video in a video-tag. That’s not as convenient as youtube (because it takes time to load), but much closer than before.

For convenience, we need m3u lists of video-chunks and a simple player shipped, since browsers cannot play m3u out of the box.

Re:Freenet: A Distributed Anonymous Information Storage and ... by mdpopescu on Wednesday December 19, 2018 @01:22AM (#18713525)
It is amazing that we're still not used to the idea that freedom has drawbacks, and that even with those drawbacks it's still preferable to the alternative.
Re:Freenet: A Distributed Anonymous Information Storage and ... by mirimir on Wednesday December 19, 2018 @01:06AM (#18713460)
Some of my best friends are witches ;)
Re:Freenet: A Distributed Anonymous Information Storage and ... by shittyadmin on Tuesday December 18, 2018 @04:23PM (#18710701)
> Tor did a good job with marketing and optics early on, to make its intended use cases highly visible.

Even with their site saying one thing, the result in the media is clearly different. It's got a public reputation for only two things to those who've heard of it: darknet markets and ransomware payments.

Re:Freenet: A Distributed Anonymous Information Storage and ... by zzzcpan on Tuesday December 18, 2018 @04:29PM (#18710762)
It doesn't have bad reputation beyond some smear campaigns from law enforcement in some countries.
Re:Freenet: A Distributed Anonymous Information Storage and ... by yason on Tuesday December 18, 2018 @03:31PM (#18710259)
It's no wonder really. If you build a system that allows anonymity and untraceability you will end up hosting everything that can't normally happen without anonymity and untraceability.

Hackers marvel at the idea of complete anonymity and untraceability because it's technically exciting and fits so well with the hacker thinking. I mean, why should you have to reveal who you are because of mere accountability? Everyone knows hackers don't cause harm and when they do it's only a good deed because the system they "broke" was obviously broken already. But the same technology is a much more prominent tool for criminals, molesters, and such. So that's what you will get on the anonymous networks and not so much hackers with good intentions.

Re:Freenet: A Distributed Anonymous Information Storage and ... by 6nf on Tuesday December 18, 2018 @10:39PM (#18712828)
‘Information wants to be free’
Re:Freenet: A Distributed Anonymous Information Storage and ... by notacoward on Wednesday December 19, 2018 @08:15AM (#18715349)
Interestingly, many of that principle's strongest proponents are selective in its application. While they're adamant that information in the sense of content should be free, they're equally adamant that information in the sense of identity should be strictly limited and controlled by its owners. Unfortunately, as soon as you remove identity you also remove accountability, and while there are edge cases (e.g. political dissent) where that's a good thing, most of the time it's not.

Personally, I think anonymity sucks. I'm all for pseudonyms, which have some continuity and reputation and thus some accountability. Modern cryptography provides ways to prevent impersonation, and even to claim a pseudonym if the owner desires, but when you consider methods such as traffic analysis it's not trivial. These are problems Freenet tried to address, but then they took a bit of a wrong turn toward complete anonymity. That, and the bad taste left in people's mouths by positioning a message system with some accidental persistence as a true data store, is why other systems eclipsed it.

Re:Freenet: A Distributed Anonymous Information Storage and ... by ArneBab on Wednesday December 19, 2018 @04:22PM (#18719781)
Pseudonymity is what you get when you allow people to tightly control their own information. This is what Freenet uses: You have a private key to which you can upload and which you can use as pseudonym in messaging systems.
Re:Freenet: A Distributed Anonymous Information Storage and ... by notacoward on Tuesday December 18, 2018 @03:19PM (#18710165)
Similar impressions here. Freenet was an impressive vehicle for exploring some very important topics and ideas. Unfortunately, besides the problems you mention, the community around it was ... unpleasant. On a good day they could seem a bit overzealous. On a bad day they were downright crazy, and they were always hostile to any advice or criticism from others even in their own field. For example, Freenet isn't a permanent data store. It's more like a cache; if something isn't requested long enough it just ages out. That's actually fine considering the goals of the system, but any time anyone mentioned it Ian and others would go a bit ballistic. Not sad that Freenet and its promoters have faded into obscurity.
Re:Freenet: A Distributed Anonymous Information Storage and ... by renegadus on Tuesday December 18, 2018 @03:34PM (#18710282)
> That's actually fine considering the goals of the system, but any time anyone mentioned it Ian and others would go a bit ballistic.

The system did not and could not store information permanently, if it did it would fill up, which is a non-starter when it depends on people volunteering their hard disk space.

I don't know about going ballistic, but since this issue is addressed directly in their papers (section 3.4 of the linked paper) I can see us getting irritated by people re-asking questions that have already been answered.

Re:Freenet: A Distributed Anonymous Information Storage and ... by pdimitar on Tuesday December 18, 2018 @07:42PM (#18712002)
I would think you should have long ago learned the lesson that if you don't have a FAQ page somewhere with huge titles and colorful answers, people will never read a paper.

Hell, most people don't read FAQs either.

Re:Freenet: A Distributed Anonymous Information Storage and ... by notacoward on Wednesday December 19, 2018 @07:35AM (#18715164)
Despite the fact that it was mentioned in the paper, developers continued to deny that it was a serious problem or claim that it had been solved since. Periodic re-insertion and date-based redirects were both touted as answers.

As for "can't" that's not accurate. You can certainly prevent old data from being pushed out, by returning an error on insertion of new data if there's no free space. That's how many other storage systems (e.g. every filesystem ever) work. While it's true that you can't fully protect against a reduction of capacity when nodes go offline, that's a very different issue. Freenet being cache-like rather than storage-like was a decision of convenience, not a technical necessity.

Re:Freenet: A Distributed Anonymous Information Storage and ... by renegadus on Wednesday December 19, 2018 @04:06PM (#18719619)
Filesystems don't rely on space voluntarily donated by others, and that's the critical difference here.

Freenet is designed for sharing information, not archiving it. You can't have both.

Re:Freenet: A Distributed Anonymous Information Storage and ... by notacoward on Thursday December 20, 2018 @07:51AM (#18724458)
Other systems have also relied on space voluntarily donated by others, and still made the choice to behave as storage systems instead of messaging systems with some history. Or caches that just happen to turn over slowly because the system's too slow and unusable to create cache pressure. If Freenet ever had really taken off, you would have had to deal with these issues. Sharing information doesn't work when the information falls out before the recipient can get it.
Re:Freenet: A Distributed Anonymous Information Storage and ... by renegadus on Wednesday December 19, 2018 @01:40AM (#18713583)
In future we'll use <blink> tags ;)
Re:Freenet: A Distributed Anonymous Information Storage and ... by ArneBab on Wednesday December 19, 2018 @04:24PM (#18719805)
"it’s like a cache" is what we’ve been saying as the default description for years. When did you last interact with the freenet community?
Re:Freenet: A Distributed Anonymous Information Storage and ... by notacoward on Thursday December 20, 2018 @07:53AM (#18724472)
> When did you last interact with the freenet community?

When it was still relevant, i.e. a long time ago.

Re:Freenet: A Distributed Anonymous Information Storage and ... by ArneBab on Friday December 21, 2018 @11:26PM (#18738906)
then you missed quite many changes
Re:Freenet: A Distributed Anonymous Information Storage and ... by nerdponx on Tuesday December 18, 2018 @03:00PM (#18709996)
I had a similar experience with various other peer-to-peer networks: I2P (except the I2P torrent scene is pretty good), Zeronet, GNUnet. Tor stands out as the only one to have caught on.
Re:Freenet: A Distributed Anonymous Information Storage and ... by bitwize on Tuesday December 18, 2018 @09:26PM (#18712524)
And this is why censorship is the future of the internet. If you run an online service and don't censor, you become a wretched hive of scum and villainy. Exhibit A: USENET. Exhibit B: Freenet.
Re:Freenet: A Distributed Anonymous Information Storage and ... by mirimir on Wednesday December 19, 2018 @12:25AM (#18713262)
There's a place for both highly moderated and free for all spaces. I prefer moderated discussion forums, because discussions work better without jerks. But I also value free for all spaces, because they guarantee that messages can't be silenced, no matter how unpopular and illegal they are.
Re:Freenet: A Distributed Anonymous Information Storage and ... by ArneBab on Wednesday December 19, 2018 @04:26PM (#18719824)
When did you last look at Freenet? When did you last check the moderated discussion boards? (FMS)

There’s a lot of original non-scum user content on Freenet nowadays.

Re:Freenet: A Distributed Anonymous Information Storage and ... by cantthinkofone on Tuesday December 18, 2018 @11:12PM (#18712952)
I'd like to see what can be done with anonymity but with more filters. When this software was first designed, AI-driven content classification was virtually nonexistent.

If bots can be designed to be moderators, I'm thinking if you were to fuse that functionality to an anonymous data storage, you would be able to ensure only productive content enters storage, and content that is irrelevant can be excluded. Of course that bot would need to know precisely what it should exclude from storage which seems hard to define.

Re:Freenet: A Distributed Anonymous Information Storage and ... by pnathan on Tuesday December 18, 2018 @06:06PM (#18711450)
That was my impression when I ran Freenet years ago. A few cool materials, a horrifying amount of pedophilia and other really skeezy stuff.