News for hackers. Stuff that matters.
Re:Web3? I have my DAOts by TrackerFF on Monday December 06, 2021 @05:28PM (#29466536)
RE: Censorship

You often see advocates of decentralization hail networks for being pro-immutability, battling censorship.

How does it deal with data you absolutely do _NOT_ want to be shared and propagated around? I'm talking about things like CP, terrorist media, fake news, scams/frauds, and what not.

Re:Web3? I have my DAOts by etaioinshrdlu on Monday December 06, 2021 @05:35PM (#29466604)
Crypto proponents are in favor of there being no technical restrictions that prevent such content being posted.

An interesting possibility is that illegal content gets permanently inserted into a blockchain, which could make running, for example, an ethereum node very illegal.

Re:Web3? I have my DAOts by api on Monday December 06, 2021 @05:37PM (#29466623)
> An interesting possibility is that illegal content gets permanently inserted into a blockchain, which could make running, for example, an ethereum node very illegal.

I've heard this called a "pee in the pool attack."

Block chains like Ethereum and Bitcoin have one intrinsic defense: they don't support very large data objects. So that makes inserting CP problematic. But someone determined enough and willing to spend money could insert a really horrible image as a series of transactions.

Re:Web3? I have my DAOts by thebean11 on Monday December 06, 2021 @05:39PM (#29466644)
At that point you'd need additional data (which transactions) and software in order to stitch things back together, at which point is it the (disjointed, seemingly random) data that's illegal, or the instruction set that allows you to assemble it into something illegal?
Re:Web3? I have my DAOts by account-5 on Tuesday December 07, 2021 @02:02AM (#29469764)
If it was the disjointed seemingly random data that was illegal I think that would make the number π illegal too.
Re:Web3? I have my DAOts by dredmorbius on Wednesday December 08, 2021 @12:26PM (#29487637)
Mens rea vs. factus rea.
Re:Web3? I have my DAOts by wildbook on Monday December 06, 2021 @05:55PM (#29466823)
How about cases where there's not much data involved but it's still questionable whether or not the data is legal to share?

Leaked encryption keys for example come to mind, but I'm sure there's other examples.

Re:Web3? I have my DAOts by corobo on Monday December 06, 2021 @06:11PM (#29466972)
That one Blu-ray code would be interesting to see play out in a web3 world.

E: I realise after digging it back up it's what you said with encryption keys but maybe someone else wants to look at the link too or whatever

https://en.wikipedia.org/wiki/AACS_encryption_key_controvers...

Re:Web3? I have my DAOts by madeofpalk on Monday December 06, 2021 @10:02PM (#29468695)
Has there been a case of an encryption key successfully being censored?

They tried to censor the blu-ray key, but that survived 3 years before bitcoin was invented

Re:Web3? I have my DAOts by adamrezich on Monday December 06, 2021 @05:55PM (#29466816)
has there been a documented case of this happening yet? one would think that there must have been, at some point, by now. but then I suppose if someone were to make a program that accesses intentionally-inserted distributed immutable data in a blockchain and reconstructs an illegal file (probably an image), then I suppose that executable or source repository itself would then be taken down by authorities and its author(s) prosecuted. but to my knowledge, this hasn't actually happened yet...
Re:Web3? I have my DAOts by dogma1138 on Monday December 06, 2021 @06:01PM (#29466892)
You don’t need a program to do that, you can easily embed a BMP or an SVG without a complex executable needed to decode the image heck even for more complex file format a BASE64 decoder can do that.

Also if say CP is currently distributed through compressed archives even if they are PW protected it’s not like that 7zip then somehow becomes the illicit material. If you host the archive you are on the hook of distributing CP even if it’s encrypted…

Re:Web3? I have my DAOts by cesarb on Monday December 06, 2021 @06:32PM (#29467167)
At least for Bitcoin, there's another defense: what the blockchain actually stores on each block is the root of a Merkle tree which has the transactions as leaves. It's possible to discard unwanted transactions, and that only loses the ability of verifying newer transactions which chain to these discarded transactions. (AFAIK, the original intention was that most nodes would discard old "spent" transactions, to reduce the size of their local database.)
Re:Web3? I have my DAOts by lottin on Tuesday December 07, 2021 @04:28AM (#29470564)
How do you verify new transactions without checking every single past transaction? As far as I understand, you need to know the current balance of every wallet in order to prevent double-spending.
Re:Web3? I have my DAOts by Khartoum on Monday December 06, 2021 @06:59PM (#29467452)
Or adding someone's personally identifying information.. birthdates, addresses, SSN, etc.
Re:Web3? I have my DAOts by Sirened on Monday December 06, 2021 @09:17PM (#29468451)
Or by running your botnet's C2 on it. There's no kill switch or sinkholing your botnet without killing the entire blockchain.
Re:Web3? I have my DAOts by Tepix on Tuesday December 07, 2021 @12:20AM (#29469297)
You could cut off access to the blockchain instead
Re:Web3? I have my DAOts by dustintrex on Monday December 06, 2021 @07:17PM (#29467600)
This has already happened. Nobody seems to care.

https://www.theguardian.com/technology/2018/mar/20/child-abu...

Re:Web3? I have my DAOts by MisterBastahrd on Monday December 06, 2021 @11:52PM (#29469180)
> Crypto proponents are in favor of there being no technical restrictions that prevent such content being posted

This is precisely why they'll fail (aside from technological issues): the rank and file person on the internet does NOT want a Wild West when they go to visit a news feed. Hell, the average person doesn't even really like curated content. They want a chronological list of things they decide to be relevant and nothing else. Just look at all the complaining every time Instatwitter changes an algorithm and hides the method for sorting by most recent.

And what they don't know yet is that all these big companies, if they use this technology, they're going to use them in very focused ways to reward people and prevent them from abandoning their platforms. Because "free" has many meanings, but none of them are inherently exclusionary from corporate competition.

Re:Web3? I have my DAOts by jeroenhd on Monday December 06, 2021 @05:36PM (#29466621)
In most cases, the answer is simple: you don't.

For example, IPFS "solves" this by allowing requests for takedowns per gateway. The upside of IPFS is that you can go after every host, the downside is that everyone knows what content you visit. The network still propagates the illegal content, so you end up with a witch hunt.

It's probably a good thing paedophiles haven't widely discovered IPFS+TOR.

Re:Web3? I have my DAOts by pezezin on Monday December 06, 2021 @08:47PM (#29468264)
> It's probably a good thing paedophiles haven't widely discovered IPFS+TOR.

Paedophiles discovered Freenet long time ago. Source: I took a look at TOR, I2P and Freenet years ago, and noped the fuck out.

Re:Web3? I have my DAOts by Daishiman on Monday December 06, 2021 @06:50PM (#29467366)
What makes you think they haven't?
Re:Web3? I have my DAOts by tshaddox on Tuesday December 07, 2021 @01:07AM (#29469516)
The “witch hunt” aspect is no different than BitTorrent, right? Or even just people repeatedly uploading the same content to various online hosts and sharing links via any channel whatsoever.
Re:Web3? I have my DAOts by chrisco255 on Monday December 06, 2021 @06:09PM (#29466961)
IPFS would make it easier to identify non-modified content hosts since the hash is always consistent. It's far easier to bury something using standard HTTP or HTTPS or even FTP.
Re:Web3? I have my DAOts by gfodor on Monday December 06, 2021 @06:00PM (#29466876)
You know how most web2 sites never delete data, but just flag it as hidden? The web3 argument is to create systems whereby this is the norm, when one chooses, with the lowest layer being durable and immutable, but a variety of higher level layers (some centralized) having the freedom to mask that data when they choose.

Ultimately, the relevant question is if the root layer of open data systems should allow erasure. There are good arguments to be had on both sides. If you feel that if we don’t have systems that are fundamentally censorproof, the net result will be an eventual all consuming global censorship regime in the limit given enough time, then there is little choice, however.

Re:Web3? I have my DAOts by sanderjd on Monday December 06, 2021 @11:35PM (#29469102)
> You know how most web2 sites never delete data, but just flag it as hidden?

Not the ones I've worked on... Flag as hidden and delete after some number of days is the best practice which I think (and hope) is commonly done?

Re:Web3? I have my DAOts by dredmorbius on Wednesday December 08, 2021 @12:24PM (#29487595)
This is simply not true.

Practices may vary by organisation and type of removal requests, but the claim that no removals occurs is absolutely false.

For legally-proscribed content, platforms will go to extraordinary lengths to remove not only the backing store but all possible CDN copies of content. This can ammount to millions or billions of items of content (multiple sizes and versions, replicated across multiple geographic locations).

Other instances in which UGC / USC (user generated/supplied content) have been removed are quite public, as with Google's shutdown and data deletion of its Google+ social network.

Re:Web3? I have my DAOts by BadCookie on Monday December 06, 2021 @07:38PM (#29467749)
If the data belongs to an individual consumer, the data must actually be deleted at the customer’s request to comply with GDPR and CCPA.
Re:Web3? I have my DAOts by gfodor on Monday December 06, 2021 @09:05PM (#29468368)
A great theory but in practice in this specific case the legal system will be forced to capitulate. Either a country has to ban all crypto mining or not enforce GDPR on chain nodes. Seems obvious which way it will land in the long run.
Re:Web3? I have my DAOts by not2b on Monday December 06, 2021 @10:14PM (#29468739)
Unless much more energy-efficient methods are developed, it seems in the long term crypto mining is going to be banned almost everywhere. The alternative would be cooking the planet.

Perhaps this problem can be solved somehow, but the alternatives have their problems.

Re:Web3? I have my DAOts by gls2ro on Tuesday December 07, 2021 @12:27AM (#29469325)
I really don't think a legal argument can be made in case of GDPR breach saying "we cannot enforce GDPR because our tech does not support this"

I think if you are a business you should choose technology that allows you to be compliant with the law.

Re:Web3? I have my DAOts by CryptoPunk on Tuesday December 07, 2021 @07:33AM (#29471714)
>>I think if you are a business you should choose technology that allows you to be compliant with the law.

Unless the law violates personal liberty, which GDPR does.

Re:Web3? I have my DAOts by gls2ro on Tuesday December 07, 2021 @09:07AM (#29472567)
How does GDPR violate personal liberty?

I am very curious if you can pinpoint what exactly from it violates personal libery.

Re:Web3? I have my DAOts by CryptoPunk on Tuesday December 07, 2021 @09:55PM (#29480786)
It violates the right to offer a service in exchange for permanent access to the private data the user discloses to you.

It's a cookie cutter rule that restricts contract liberty to create more regimented social interaction.

Re:Web3? I have my DAOts by malermeister on Tuesday December 07, 2021 @03:31PM (#29477824)
It also seems obvious to me, but I don't think we came to the same "obvious" conclusion.
Re:Web3? I have my DAOts by remexre on Monday December 06, 2021 @09:53PM (#29468664)
didn't china already ban mining lmao
Re:Web3? I have my DAOts by cblconfederate on Monday December 06, 2021 @08:09PM (#29467997)
I d like to see them try to enforce the GDPR across the entire internet simultaneously

People should realize that writing a law on a piece of paper doesn't make it real or enforceable

Re:Web3? I have my DAOts by TrackerFF on Monday December 06, 2021 @08:37PM (#29468194)
In many countries, it is possible to force ISPs to block content - and in the end, I guess it's easier for ISPs to simply not offer you their service, than face gov. mandated fines.

It's a bit like cryptocurrencies and banks. Because it becomes such a big burden for banks (to prove that the money obtained by selling crypto is not related to funding terrorism, crime, etc.), many banks simply refuse service to customers dealing with crypto. Either closing accounts, freezing money, or whatever.

Re:Web3? I have my DAOts by cblconfederate on Monday December 06, 2021 @08:53PM (#29468299)
not easy with distributed systemd. That's how the internet upended text / books/ music/ video. and now money
Re:Web3? I have my DAOts by ccamrobertson on Monday December 06, 2021 @05:40PM (#29466663)
If you view 'decentralization' as a bucket of technologies underpinned by cryptographic primitives and blockchains, it doesn't.

This is similar to other technologies like cash, paper, and computers* which also don't, as technological phenomena, implicitly include censorship as a feature.

*it looks like consumer computing is moving away from general 'free' computing to ASICs from folks like Apple which likely will include built-in censorship features moving forward.

Re:Web3? I have my DAOts by jedimastert on Monday December 06, 2021 @05:36PM (#29466616)
I think if you look at the current decentralized options, especially Tor, the community has already made these decisions.
Re:Web3? I have my DAOts by GrayShade on Monday December 06, 2021 @05:36PM (#29466622)
How are they dealt with today? I haven't followed the blockchain tend, but IIRC there were programs that could encode arbitrary data into the blockchain history. What happens if someone puts CP in there?
Re:Web3? I have my DAOts by outside1234 on Monday December 06, 2021 @07:32PM (#29467705)
Does that stuff make them Dogecoin?

If so, they are ok with it.

Re:Web3? I have my DAOts by cblconfederate on Monday December 06, 2021 @08:07PM (#29467977)
before the internet, the police would find you and put you in jail.

Why is it normalized that all our communications are bugged and analyzed? This is not something that people should expect if there is going to be correspondence between the physical and the virtual world.

Re:Web3? I have my DAOts by rglover on Monday December 06, 2021 @06:05PM (#29466927)
> How does it deal with data you absolutely do _NOT_ want to be shared and propagated around?

That is censorship. The correct answer is you don't. When you obscure evil, it propagates. When you shine a light on it, it disinfects. Awareness of the thing leads to discernment of the thing. Unless you think people are default evil, bad ideas will stay bad ideas without an intermediary forcing their will upon them.

Re:Web3? I have my DAOts by malermeister on Monday December 06, 2021 @06:25PM (#29467106)
That is an incredibly naive view of the world. Just look at all the disinformation rampant on Facebook and the antivax hellscape we now live in. You can't possibly look at that and think things got "disinfected" through awareness.

> Unless you think people are default evil, bad ideas will stay bad ideas without an intermediary forcing their will upon them.

This is also not correct. People aren't neccessarily evil by default, but they are stupid and easily manipulable. Just look at QAnon for another example.

Re:Web3? I have my DAOts by heyitsguay on Monday December 06, 2021 @06:37PM (#29467230)
It also misses the point for a large class of data relevant to individual safety - if GP gets associated (truly or falsely) with [outrage of the week] and his buddy from HS recognizes the username, what happens when said buddy posts his address (or his kid's school address?) to an immutable data store. GP is a monster and the law isn't doing anything, we gotta take matters into our own hands!
Re:Web3? I have my DAOts by malermeister on Monday December 06, 2021 @06:44PM (#29467316)
There's a lot of things this misses. It also completely misses the point on stuff like CP.

I know CP is bad and I have no interest in seeing it. However, I do also know that there is a group of people out there that do want to see it. Is the "anti-censorship" approach to just "shine a light on it" and let those people watch CP that's on the immutable data store?

This whole post doesn't just assume that people are by default good, it assumes that there are no bad people. That's the only scenario in which the proposed "solution" would work. Personally, that's not a bet I'm willing to make, or even entertain.

Re:Web3? I have my DAOts by rglover on Monday December 06, 2021 @06:50PM (#29467363)
Right. If you can see it, you can catch it. If you push them further and further into obscurity, you're less likely to catch it. You're increasing the chances that it happens by censoring it, not reducing the chances.
Re:Web3? I have my DAOts by malermeister on Monday December 06, 2021 @06:53PM (#29467399)
It's not only you that can catch it. It's all other people too. Yes, you decrease your chance to shut down one individual perpetrator, but you also limit that one perpetrator's reach and they can't do as much harm.

It's the same thing as any other infectious disease, really. If you don't do any covid prevention and hang out with a bunch of unvaccinated people in close quarters, you're more likely to find out if somebody had covid, but at the cost of potentially infecting everyone.

This is about reducing harm by reducing infections.

Your argument boils down to "oh well, now there's CP forever accessible because its on this immutable data store, but at least we now know that somebody wanted to post CP".

Re:Web3? I have my DAOts by rglover on Monday December 06, 2021 @07:31PM (#29467701)
> This is about reducing harm by reducing infections.

That doesn't make any sense for CP. It's not like people who weren't into that crap before stumble upon it and are like "oh, now this is MY THING."

What I'd propose is having a "known bad content" (as flagged by users/operators) list that gives node operators a rating they can filter what they propagate by.

For example: if you have A, B, C, and D ratings (A being harmless, D being CP), you'd get a self-policing network because node operators could say "I only host/seed B+ content." Very few people given the choice would even want to seed D-rated content (and if I'm wrong, then we have a much bigger problem at a societal level).

It'd be imperfect, but so is blatant censorship. Arguably this approach would help you to find the worst stuff fastest.

Re:Web3? I have my DAOts by malermeister on Monday December 06, 2021 @07:36PM (#29467736)
It's not about making people pedophiles, it's about giving existing pedophiles material. Or about exposing people with right-leaning views to more and more extreme content, or whatever the dangerous material in question is.

What you are proposing is just censorship with extra steps, it seems to me, where the operators are the censors. What's the point, other than making everything more complicated and difficult to work with?

Re:Web3? I have my DAOts by rglover on Monday December 06, 2021 @08:07PM (#29467980)
> Where the operators are the censors.

In essence. Except it's by consensus, not by decree. That's my personal issue with censorship. One or a few people deciding "this is bad," which starts out with good intentions eventually gets abused and used to subjugate groups of people. In this design, it's voluntary. You can be on the network, but that doesn't mean your stuff will be propagated.

Re:Web3? I have my DAOts by malermeister on Monday December 06, 2021 @08:11PM (#29468008)
In a democratic society it is already by consensus. The consensus is established during elections.
Re:Web3? I have my DAOts by rglover on Monday December 06, 2021 @10:16PM (#29468751)
??? Who is elected has literally nothing to do with what happens on a decentralized or centralized network (short of indirect influence).
Re:Web3? I have my DAOts by malermeister on Monday December 06, 2021 @11:41PM (#29469125)
Consensus over who censors what is established at election time, by people voting for the party representing their views. No need for overengineered schemes.
Re:Web3? I have my DAOts by rglover on Monday December 06, 2021 @06:42PM (#29467284)
> That is an incredibly naive view of the world.

It's not. When you silence ignorant people, they get more radical and more willing to do things they otherwise wouldn't because they no longer have an outlet. Silencing a neo nazi forum increases the likelihood for "those f'ing j*s shut us down, let's get em!" behavior. And even if that didn't happen, it's far easier for law enforcement to surveil people planning violence if it's out in the open.

> Just look at QAnon for another example.

I know multiple people who went down this rabbit hole (one of them is still down it). And what I said above applied exactly when they started getting booted off social networks. Before then there was no plotting or aggressive stance. They just thought they were "on to something."