News for hackers. Stuff that matters.
Re:Ways to surf some of the decentralized web by superkuh on Saturday April 11, 2020 @06:38PM (#22844744)
The decentralized web isn't using non-web projects or web abstraction layers. The decentralized web is everyone hosting their own webserver from home. It's easy, everyone has a fast enough connection, and without the motives and requirements of a business it's safe.

Opera, back in it's old age before dying and becoming a Chinese owned Chrome skin approached this. It allowed anyone to easily and simply host their own content by running a webserver in the browser. Opera handled the human-compatible naming/look-up side but realistically even IP addresses that change are fine.

Re:Ways to surf some of the decentralized web by vbuterin on Sunday April 12, 2020 @07:47AM (#22847595)
> The decentralized web isn't using non-web projects or web abstraction layers. The decentralized web is everyone hosting their own webserver from home. It's easy, everyone has a fast enough connection, and without the motives and requirements of a business it's safe.

This attitude is IMO exactly why the decentralized web movement outside of the blockchain/crypto space has not come further than it has in the last two decades. I run my own website out of a VPS and even that is nontrivial: occasional outages due to SSL certificates expiring, the VPS getting shut down because my credit card expires so the auto-payments stop working, troubles with the server software itself, etc etc. Meanwhile, if you just dump stuff onto one of these decentralized layers or even just a blockchain, you publish once, it's easy and it's there forever.

I truly believe that for "fully decentralized" to be viable, it must mean "serverless" (as in no servers, meaning no single computers whose IP addresses or DNS names or equivalents are explicitly referenced in a line of client-side code, not meaning that AWS lambda stuff). That does mean you're making significant efficiency tradeoffs for the foreseeable future; for some types of applications it's worth it and for others it's not.

Re:Ways to surf some of the decentralized web by superkuh on Sunday April 12, 2020 @11:46AM (#22848957)
See, that's your problem. You use a VPS. You use centralized SSL certs (instead of self-signing for a decade), you don't pay for the totally not required VPS. All that stuff if absolutely unneeded complexity and cost. This isn't a business you don't need 2 TB of bandwidth/month and all the nines uptime. There's no need for paying someone to host for you it just makes it harder.

self-host. Don't have someone else "self"-host for you.

Re:Ways to surf some of the decentralized web by kdtsh on Monday April 13, 2020 @08:26AM (#22855215)
You can't tell me that $5 a month for a VPS is more expensive than the administrative overhead of self-hosting in your own house. The average person on this website probably earns that in less than 10 minutes. On the other hand, it'll cost you $25 to get a Raspberry Pi and at least a few hours to get your Linux distribution of choice flashed and running so that it's project-ready. That's before you even get httpd installed, start stuffing around with port forwarding and firewall rules, configure dynamic DNS, etc. Of course, most VPS providers will also give you PaaS, so you don't need to do any sort of system or application configuration whatsoever - you can just actually run your website.

I personally self-host because it's neat and interesting to me, but not because it's simple and cheap - if you want to actually get a website or some other service running on the WWW going, VPSs are a god-send. Also, consider the fact that unless I do actually use a Raspberry Pi, which is very flexible but underpowered, I'm going to be paying for potentially quite expensive new hardware and electricity if I self-host, as well as bandwidth. These are all non-issues with a VPS.

Also, SSL certs are necessarily centralised, because they operate on a web of trust in a world where we don't know who to trust or not. If you have a website using a certificate which is self-signed, I'm not going to trust it unless I know you personally, because if I don't know you personally I have no way of determining that you are who you say you are - only a trusted CA is going to do that. That's why a green-padlock in your browser means 'One of a limited number of root CAs trusted by the distributors of this browser says this site is owned by who it says its owned by', not just 'this site is owned by who it says its owned by'.

Re:Ways to surf some of the decentralized web by superkuh on Monday April 13, 2020 @11:10AM (#22856490)
Just use your normal desktop computer.
Re:Ways to surf some of the decentralized web by kdtsh on Tuesday April 14, 2020 @07:13AM (#22864632)
Like many people, I only have a laptop.
Re:Ways to surf some of the decentralized web by z3t4 on Saturday April 11, 2020 @07:18PM (#22844921)
One problem is that many ISP's use NAT, meaning that other computers can't connect to your computer! Unless your computer initiated the connection. Most ISP's will give you a public IP if you ask though.

This is probably for the good though, as most software don't take security seriously, example listening on a public port by default, with the default password.

Re:Ways to surf some of the decentralized web by pmlnr on Sunday April 12, 2020 @03:26AM (#22846597)
Every single router I ever had, including ISP provided ones had the option to port forward.
Re:Ways to surf some of the decentralized web by hunter2_ on Sunday April 12, 2020 @09:49AM (#22848225)
Not MiFi or other cellular connections, unless you get a special type of service. Might not be NAT, but it's definitely firewalled upstream against opening ports for listening.
Re:Ways to surf some of the decentralized web by bscphil on Saturday April 11, 2020 @10:47PM (#22845707)
> One problem is that many ISP's use NAT, meaning that other computers can't connect to your computer! Unless your computer initiated the connection. Most ISP's will give you a public IP if you ask though.

Actually, my experience has been the exact opposite on both points with every ISP I've ever had (in the United States). I've never had a problem setting up a dynamic DNS server to access my home network from outside. Likewise, I've never had an ISP that will give you a static IPv4 address. Maybe it's just luck on my part, but I was under the impression mine was the most common experience these days (for this country).

Re:Ways to surf some of the decentralized web by rzzzt on Sunday April 12, 2020 @04:21AM (#22846739)
Carrier grade NAT might be a problem. In some networks, IPv4 traffic goes over a non-unique public IP address assigned to multiple users.
Re:Ways to surf some of the decentralized web by zzo38computer on Saturday April 11, 2020 @11:26PM (#22845851)
I live in Canada. I have a public version 4 IP address, although it is dynamic, but does not change that often. However, they once changed it to use NAT, but I was able to disable NAT easily enough on the modem, so that I could use a proper internet connection.
Re:Ways to surf some of the decentralized web by icedchai on Saturday April 11, 2020 @11:19PM (#22845825)
In most places, you need a "business" connection to get static IPs. I have several at home.
Re:Ways to surf some of the decentralized web by input_sh on Sunday April 12, 2020 @04:39AM (#22846805)
Assuming that an IP address is only assigned to you and not to other users (via a NAT that you have no control over), it's easy to occasionally ping your DNS server with your IPv4 address and assign a hostname to it.

If your DNS provider has an API, it's probably the first example in the API documentation. If not, there's DuckDNS and similar.

Re:Ways to surf some of the decentralized web by icedchai on Sunday April 12, 2020 @12:09PM (#22849129)
This is true, though there are still often port limitations. For example, with residential connections here, port 25, 80, and 443 are filtered incoming, so you can't run a web server or SMTP server on a normal port. Also servers technically violate the AUP. Business connections have no such restrictions.
Re:Ways to surf some of the decentralized web by grifball on Saturday April 11, 2020 @11:55PM (#22845956)
Isn't NAT managed by your router? Or do you mean the "public ip" for your home is actually a local ip inside your ISP's network?
Re:Ways to surf some of the decentralized web by el_programmador on Sunday April 12, 2020 @01:36AM (#22846273)
Static IP isn't necessary for hosting from home but a "Non-NAT" connection is. If you don't have a static IP, you can use a service such as dynaDNS or something which runs on your server and keeps informing your subdomain to use the ever changing dynamic address. But if your device sits behind a NAT, then its not accessible from outside at all (unless the device initiates the connection), thus its impossible to host if your ISP has placed you behind a NAT. But the plus point, on the other hand, is increased security which is probably good for the majority of people.
Re:Ways to surf some of the decentralized web by pmlnr on Sunday April 12, 2020 @03:27AM (#22846601)
Or you use Amazon|DigitalOcean|anyproviderwithanapi with low TTL and set up your own dynamic DNS.
Re:Ways to surf some of the decentralized web by z3t4 on Sunday April 12, 2020 @04:08AM (#22846700)
One problem for ISP is that there are not enough IP addresses. local IP's have been used for mobile connections for a while, and now also for stationary connections.
Re:Ways to surf some of the decentralized web by jasode on Sunday April 12, 2020 @07:03AM (#22847377)
>The decentralized web is everyone hosting their own webserver from home. It's easy, everyone has a fast enough connection,

I don't think it's that "easy" regardless of whether you're talking about cable-modem/router port-forwarding, or new IPv6 addresses, or even turnkey web host appliances.

In any case, I'll copy&paste one of my previous comments on NAT or ease-of-use not being the real barrier people think it is:

>Even if this thread's article's vision of IPv6 improving direct connectivity were to happen, I still claim the overwhelming majority of programmers would continue to choose something like Github rather than host their repositories on personal home servers. Personally, I wouldn't want my repo to be traced back to my home's ip address. I don't want China DDOS'ing my home ISP connection if they don't like my iPhone app that monitors Hong Kong. If I was a female, I wouldn't want my home git repo to give away my ip address and invite digital stalkers. I'd use Github just for the ability to shield my home's IPv6 address for privacy and safety.

>If the programmers -- which we can think of as technical thought leaders -- aren't leading by example (with git) for decentralization, why would we realistically expect other mainstream consumers to adopt decentralized setups? Yes, there will always be decentralized communities but it will always remain niche.

Re:Ways to surf some of the decentralized web by superkuh on Sunday April 12, 2020 @11:53AM (#22849017)
The idea that your IP address should be kept secret and that you should only interact with the rest of the internet through corporate third parties for protection is both obscene and absurd.

In 20+ years of home self-hosting I've never been DoS'd except on my tor hidden service (also served from home) and because it was tor all I had to do was change 1 number in my config file to limit it. Super easy.

Re:Ways to surf some of the decentralized web by jasode on Sunday April 12, 2020 @12:19PM (#22849183)
>The idea that your IP address should be kept secret and that you should only interact with the rest of the internet through corporate third parties for protection is both obscene and absurd.

If I want to publish a web page with some anonymity and I'd prefer that readers not know whether it's in Kansas vs New York, then my home ip address is one less piece of information readers don't need to know about. It's totally reasonable for my particular preferences. Of course, the ip privacy is not absolute but relative -- and that can be good enough. Github/Youtube/HN will know my home ip address but everybody else interacting with those sites don't need to.

I'm not going to give up some privacy of my ip address just to fulfill your ideals of "decentralization". That's not a good enough reason. And looking at your webpsite, your self-report of 20-years of no DDOS attacks is irrelevant to what I might want to publish. Maybe I want to write essays on more controversial topics than what you chose to write about.

I find it interesting that you posted a previous comment about not wanting "trackers":

https://news.ycombinator.com/item?id=22835625 : >I have never carried a cell phone (smart of otherwise) in my life. I leave my dumb phone at home or take the battery out. I hope that these tracking bracelets which others voluntarily carry will not be forced and required in the future.

Re:Ways to surf some of the decentralized web by superkuh on Monday April 13, 2020 @11:15AM (#22856539)
Knowing the approximate state or county your ISP is in is not tracking. It's location.

Cell phones with base station multilateration track the cell phone's location 24/7/365 and in the USA that data is accumulated for 2-5 years. Over that time they get to know you and your averaged patterns of movement (<100m) very, very well.

Your IP is how you interact with the internet. Trying to 'hide' it or whatever because you worry about someone knowing your ISP's general location is shooting yourself in the leg. And after you'll start relying on third party services to do what you can't do anymore because of gimping and give away even more private information.

That said, I'm not against using anonymity networks. I host many tor onion services from the very desktop home computer I'm typing to you on. I also support i2p with bandwidth and bitcoin as a full node.

Re:Ways to surf some of the decentralized web by nulbyte on Sunday April 12, 2020 @09:42AM (#22848184)
> everyone has a fast enough connection

Only if by 'everyone' you mean 'not everyone.' Broadband is far from universal.

> The decentralized web is everyone hosting their own webserver from home.

Only of by 'decentralized' you mean 'centralized.' The point of decentralization is that there isn't one and only one place (a 'center') at which you can find a given resource.

Re:Ways to surf some of the decentralized web by superkuh on Sunday April 12, 2020 @11:52AM (#22849004)
I self-hosted my website on 56k for years and it was fine.

And no, the point point of decentralization is literally that. Decentralization. What you're talking about is business crap leaking into areas it shouldn't. Uptime, availability, CDNs. All completely unneeded. Might as well be making straw airplanes to go full cargo cult.

Re:Ways to surf some of the decentralized web by nulbyte on Sunday April 12, 2020 @12:50PM (#22849402)
> I self-hosted my website on 56k

Some can barely afford a cheap prepaid phone to make occasional calls, let alone a landline to tie up 24/7. Even then, running a web server is not trivial for most of the general public, a dial-up or DSL line is unlikely to come with a static IP address, and if folks don't know how to run a webserver, they certainly don't know how to set up a hostname with dynamic DNS.

> What you're talking about is business crap leaking into areas it shouldn't. Uptime, availability, CDNs. All completely unneeded.

No. You're talking about that. My point was much more basic.

Re:Ways to surf some of the decentralized web by superkuh on Monday April 13, 2020 @11:20AM (#22856580)
Anyone on 56k isn't going to be able to use tor or i2p or any of the other services any better. But unlike hosting from home those things all add overhead data use too. The majority of people in industrialized countries have a megabit or two.

As for "My point was much more basic", it doesn't count if you edit your post. That's a real jerk move to do after someone has already responded.

Re:Ways to surf some of the decentralized web by Mediterraneo10 on Sunday April 12, 2020 @04:20AM (#22846737)
Running a server from one's own home violates the terms of service of many ISPs. Even if you are not a business, ISPs expect you to pay more for their business plan if you want to run a server.
Re:Ways to surf some of the decentralized web by type0 on Sunday April 12, 2020 @06:59AM (#22847352)
This is the thing, so many people tell it's fine to run a server at home even if violated ISPs TOS. But it's not fine, if I'm away from home and need to access it, the worst that could happen is my ISP cutting that connection to my own machine. Even if things are great now, there's Wireguard, even baked in on linux with 5.6 kernel. There's just to many artificial boundaries that selfhosting at home can't catch on.

Last time I checked, I might violate the terms of my ISP, but that's by very strict definition. Remote access and "server hosting" could be one and the same depending on how you look at it.

Re:Ways to surf some of the decentralized web by rv-de on Sunday April 12, 2020 @07:00AM (#22847356)
That's where the subversive element comes into play. Exactly what the web needs.
Re:Ways to surf some of the decentralized web by mattlondon on Sunday April 12, 2020 @04:44AM (#22846825)
running a server at home is still centralised though - you have one central server, one point of failure. Power cut at home? ISP disconnects you? DDoS? Front page on HN and your ADSL cant handle the load? Government censorsip or other tin-hatery? Your centralised server is down and people can't see your stuff.

The point of decentralised stuff is there is no centralised server, but rather the content is decentralised and thus available when things inevitably go offline. So if your home server goes offline for whatever reason then no biggie - some other node on the network serves your stuff instead.

Re:Ways to surf some of the decentralized web by viraptor on Sunday April 12, 2020 @06:08AM (#22847129)
Depends what you mean by "server". Is the service you're interested in available only via that one server? Specifically, you could host your own twitter-equivalent handle from your own server, and the server going down wouldn't bring down the twitter-equivalent-service. Or your server with your blog going down doesn't bring down everyone's blog.

I'd say we should keep the decentralised and replicated-for-reliability concepts slightly separate. They are interesting together, but they're orthogonal.

Re:Ways to surf some of the decentralized web by glenstein on Saturday April 11, 2020 @07:39PM (#22845037)
>Opera, back in it's old age before dying and becoming a Chinese owned Chrome skin approached this.

I thought that Opera Unite was magical, and bewilderingly, it was pretty simple. It is my hope that Vivaldi attempts to bring it back.

Re:Ways to surf some of the decentralized web by valentin_ivan on Saturday April 11, 2020 @10:17PM (#22845615)
My experience with Vivaldi was not good. It was always the slowest browser. Brave was always the fastest. I don't trust Chrome because it's serving Google, his Evil Master (aka The Money Maker). I find Firefox the most trustworthy.
Re:Ways to surf some of the decentralized web by BlargMcLarg on Sunday April 12, 2020 @07:05AM (#22847387)
Working with Vivaldi right now. It's alright. Its nowhere near as fast as OG Opera used to be, though it at least feels faster than most other browsers on the market. Vivaldi also has a tendency to tack on unnecessary things and updates bit by bit, the same problem Opera had.

It feels like this is simply the cycle most new browsers go through now. They start out minimal and fast, then slowly fall for the issue of having to validate time spent developing, so they sell out.

(Or alternatively, we stop putting oversized JS frameworks/libs and ridiculous tracking systems inside our pages)

Re:Ways to surf some of the decentralized web by StavrosK on Saturday April 11, 2020 @06:40PM (#22844755)
It can be both, no need for false dichotomies.
Re:Ways to surf some of the decentralized web by superkuh on Saturday April 11, 2020 @06:46PM (#22844783)
Sure. But additional layers of complexity that don't add anything useful just makes it harder for people to participate and centralizes them into services that handle the complexity for them.
Re:Ways to surf some of the decentralized web by IggleSniggle on Sunday April 12, 2020 @01:37AM (#22846276)
So I finally took the plunge into learning what IPFS is about. And I must say.

Content-addressing is FAR easier to understand than location addressing. In fact, it's the way most people think of a url. I'm sharing "this picture." When you post to Facebook, you're "writing to your friends and family," not "uploading my stuff to a faceless corporation for them to monetize in whatever way they see fit." I mean, folks have a better understanding that that's what they're doing NOW, but a honestly IPFS seems closer to the way people intuitively use and think about the web.

Re:Ways to surf some of the decentralized web by StavrosK on Saturday April 11, 2020 @06:48PM (#22844793)
Personally, I find IPFS incredibly useful (when it works). Especially since it makes your content faster and more available than running your own web server at home.
Re:Ways to surf some of the decentralized web by brokenmachine on Tuesday April 14, 2020 @12:49AM (#22862846)
Maybe I'm missing something but how is your stuff replicated when you use IPFS? I thought you just shared a link to the content which resides on your own machine.

Otherwise, how are you paying for the hosting?

Re:Ways to surf some of the decentralized web by StavrosK on Tuesday April 14, 2020 @06:46AM (#22864488)
Whenever someone visits your content, they download and redistribute it, like a torrent. You can also pay for services like eternum.io to (additionally) distribute your content.
Re:Ways to surf some of the decentralized web by brokenmachine on Tuesday April 14, 2020 @08:28PM (#22873093)
Of course, that makes sense. Thanks.
Re:Ways to surf some of the decentralized web by matheusmoreira on Sunday April 12, 2020 @06:23AM (#22847184)
Most ISPs use NAT now. No home user is directly connected to the internet. Probably a good thing since consumer routers aren't exactly known for being secure.