News for hackers. Stuff that matters.
Re:My First Impressions of Web3 by magicalhippo on Friday January 07, 2022 @09:22PM (#29847935)
If the NFT contained the content hash, your and the creators public keys, a signed timestamp, and the signature of those parts by the content creator, then the content could be stored elsewhere no?

Obviously you'd want to keep a copy yourself, but at least you could then prove to others the file you have really is the one the creator sold, no?

No expert at these crypto things, in either sense, am I missing something?

Re:My First Impressions of Web3 by _heimdall on Saturday January 08, 2022 @02:17AM (#29849420)
Say you add all that information to the transaction, to verify it in the future you still need to run the original file through the same hash function to prove they match.

Its common for image files to be modified, many times even automatically by the hosting service. They might compress it, remove unnecessary metadata, or add metadata for themselves. Any of that would break the hash, so you'd need to make sure any host you use to store the original absolutely never changes the file.

Then what? Well the image exists and you can verify it wasn't changed off-chain since the transaction finalized, so that's good. There's now an image publicly available online BUT a specific block chain says you own it, so that's also cool.

But wait, that hash isn't guaranteed to be unique so really anyone could make another NFT pointing to the same URL and file hash, now they also own it? And anyone could just download the file, so they own it to? And there are no legal protections for NFTs, so what was the benefit of paying to have one block chain transaction say you own it in the first place?

Re:My First Impressions of Web3 by magicalhippo on Saturday January 08, 2022 @10:04AM (#29852284)
> so you'd need to make sure any host you use to store the original absolutely never changes the file

Which is trivial, just download the file. The place where you bought the NFT would ideally have some facility where they guarantee you can download the correct file, otherwise why buy from them?

> But wait, that hash isn't guaranteed to be unique so really anyone could make another NFT pointing to the same URL and file hash, now they also own it? And anyone could just download the file, so they own it to?

Preimage attacks are quite hard to accomplish from what I understand against modern, secure hashes. If the hash used is later broken and a preimage attack is possible then yeah you're screwed. That's a risk you take.

As for exclusive ownership, I forgot in my initial reply to add another aspect I thought about which was the license. That is, some well-defined licenses should be specified, similar to the Creative Commons stuff, and the NFS should specify one of them. Then you know if you get copyright or not etc.

Enforcement of the license would of course be similar to other digital assets, ie hard to do unless you're big, that's just the nature of digital things.

Now, just to be clear, please don't take this to mean I'm advocating NFTs. I just think the way they're currently used seems to make them completely worthless, while in theory it might be possible to make them not quite worthless.

Re:My First Impressions of Web3 by _heimdall on Sunday January 09, 2022 @03:30AM (#29861452)
What's the benefit of having the URL permanently stored on the blockchain in that case? If I have to download the original file as soon as the transaction completes to make sure they don't change the photo on me, why bother?

And then what am I spelling later? A transaction immortalized in a block chain with nothing more than a broken URL and, at best, a hash of the original file?

Edit: I realize I sound a bit dickish in how I'm replying. Don't take it that way, I'm really confused at how NFTs solve anything but really appreciate the conversations here and am glad to hear differing opinions!

Re:My First Impressions of Web3 by magicalhippo on Sunday January 09, 2022 @08:43AM (#29863111)
> What's the benefit of having the URL permanently stored on the blockchain in that case?

Not much as far as I can tell. I mean it would kinda be like a signature on a painting, in that it's a visual indication of who made it. But the proof would be in the digital, cryptographic signature.

> I'm really confused at how NFTs solve anything

I'm in the same boat. I'm just trying to figure out how they might be useful if they implemented them differently.

Re:My First Impressions of Web3 by _heimdall on Sunday January 09, 2022 @10:40AM (#29864153)
I don't even know if I like this idea, but it'd be a different ball game if NFTs held legal status. That goes pretty counter to many of the usual benefits claimed of crypto projects,but if an NFT was treated as legally binding ownership that could make them really useful
Re:My First Impressions of Web3 by magicalhippo on Sunday January 09, 2022 @12:06PM (#29865136)
Right but without any legal aspects, what use could they be?

Anything in them can be copied trivially, so on their own they are per definition not unique hence fairly worthless.

If they're only useful when two parties agree they are worth something during an exchange, how are they different from plain cryptocoins?

I mean this is a bit similar to the GPL, it would be useless if courts declared it can't be enforced.

Re:My First Impressions of Web3 by colordrops on Saturday January 08, 2022 @03:51AM (#29849895)
I thought we were talking about the problem of someone pulling the rug out from under you by changing the content at a URL. The hash solves the problem, but what you are talking about is an entirely different subject, and a problem which all NFTs suffer. Or not a problem, but just a general property of NFTs and crypto as well. The network effect is extremely important with blockchains. You could also fork BTC right now and claim you own everything on the chain. Doesn't mean people will honor it.
Re:My First Impressions of Web3 by _heimdall on Saturday January 08, 2022 @07:10AM (#29850914)
A hash doesn't really solve the core of the rug pull problem. If the hash doesn't match you know the file at that URL changed, but how was it changed? Was it just a metadata that didn't really change the artwork, or is it a totally different file?

And what does it mean for the transaction on the block chain if both the URL and the hash no longer match? Is it worthless now and unsellable? Or do you sell it with a note that says ignore the URL, ignore the hash, or both?

I did point out other issues and that may have been unnecessary, but a hash doesn't solve the rug pull problem if the art isn't part of the encrypted and (mostly) immutable transaction block.

Re:My First Impressions of Web3 by colordrops on Saturday January 08, 2022 @11:51AM (#29853439)
There doesn't have to be a URL.
Re:My First Impressions of Web3 by bambax on Saturday January 08, 2022 @06:12AM (#29850595)
> The hash solves the problem

Not really. The hash would prevent someone to pull the rug unnoticed, but it wouldn't prevent rug pulling in the first place.

With a hash, you would be able to prove that what's currently at that url isn't what you bought, but (since hashes are by definition non-reversible) you wouldn't be able to show or see what it was you bought (unless you stored it somewhere else yourself).

Re:My First Impressions of Web3 by magicalhippo on Saturday January 08, 2022 @09:49AM (#29852156)
> unless you stored it somewhere else yourself

Which is usually trivial.

Re:My First Impressions of Web3 by spyder on Friday January 07, 2022 @10:47PM (#29848431)
Yes, but the problem is many of them don't even include the hash, and you also need a way to verify the creator and his/her public key.