News for hackers. Stuff that matters.
Re:Non-realtime publishing for censorship resistance by schoen on Saturday January 04, 2020 @09:07AM (#21954939)
One part that the author doesn't go into in detail is that low-latency interaction makes it much harder to be location-anonymous when an adversary can experiment on your service. Of the three examples given in the article, only Silk Road has tried to be location-anonymous by being exclusively available with Tor onion services. But for Silk Road and several other dark markets, it didn't work out because investigators were eventually able to locate the infrastructure.

I haven't looked into how that happened in detail, and I think it was quite varied in practice in each case, but there are known methods to take advantage of the low-latency thing to experiment on services and draw conclusions about where their infrastructure is located. One example is to try to attack different parts of the Internet (different links or different colocation facilities, for example, maybe by overloading them with a DDoS or trying to partition them from the Internet with a BGP routing attack) and see which ones cause the service's availability to suffer when they're under attack. When a service is available in real time, this kind of experiment is much more practical because it's possible to see directly whether each individual attack has had an impact.

I think Freenet has something along the lines of the author's zine concept, where people can publish signed pointers to the latest revision of a document or set of documents.

Re:Non-realtime publishing for censorship resistance by s4n1ty on Saturday January 04, 2020 @10:59AM (#21955562)
That is true re: Freenet, they are called "signed subspace keys" or SSKs.
Re:Non-realtime publishing for censorship resistance by xwowsersx on Saturday January 04, 2020 @12:45PM (#21956200)
I'm having a tough time following the logic exactly. Can someone ELI5? I would think the question of centralized vs decentralized would be the dispositive issue. I think I'm missing something basic.
Re:Non-realtime publishing for censorship resistance by fernly on Saturday January 04, 2020 @06:41PM (#21958474)
Yeah. Near as I can tell, it says "to safely publish something that can be considered illicit, don't put it on the internet." But to the obvious response, "ok, where then?" it doesn't answer, as far as I can tell.
Re:Non-realtime publishing for censorship resistance by Finnucane on Saturday January 04, 2020 @11:38PM (#21959658)
Someone would have to publish a digital Factsheet Five (zine of zines) to tell you where to send your digital stamps to get these zines.
Re:Non-realtime publishing for censorship resistance by nephrite on Saturday January 04, 2020 @07:03PM (#21958595)
Instead of creating a web site you make your data into a archive, sign it with your key and put it anywhere (internet included, i.e. file sharing services, google mail attachments etc). You don't have a web site and server hence they can't be taken down.
Re:Non-realtime publishing for censorship resistance by xwowsersx on Saturday January 04, 2020 @11:29PM (#21959633)
I see, thank you.
Re:Non-realtime publishing for censorship resistance by zozbot234 on Saturday January 04, 2020 @11:29AM (#21955748)
Wouldn't ipns and ipfs be enough to achieve most of this?
Re:Non-realtime publishing for censorship resistance by SamPatt on Saturday January 04, 2020 @10:53PM (#21959516)
Probably yes. In fact, a censorship-resistant marketplace that allows for asynchronous trade already exists built on top of IPFS. It's called OpenBazaar.

https://github.com/OpenBazaar/openbazaar-go