News for hackers. Stuff that matters.
Re:Paaster – Secure by default end to end encrypted pastebin by derefr on Friday March 18, 2022 @04:31AM (#30719816)
AFAICT you could permanently trust a webapp loaded from an IPFS-scheme URI (as e.g. Brave can do), after it’s been audited once.
Re:Paaster – Secure by default end to end encrypted pastebin by fastball on Friday March 18, 2022 @04:43AM (#30719886)
But then if you're using an IPFS gateway instead of hosting your own instance then the gateway could serve you different content, no?
Re:Paaster – Secure by default end to end encrypted pastebin by fwtf on Friday March 18, 2022 @05:18AM (#30720049)
Since you request data by a hash, and your software should verify the downloaded data has the same hash, no.
Re:Paaster – Secure by default end to end encrypted pastebin by stavros on Friday March 18, 2022 @05:36AM (#30720143)
If you're using a gateway, you have to trust the gateway.
Re:Paaster – Secure by default end to end encrypted pastebin by arlort on Friday March 18, 2022 @05:53AM (#30720244)
You could probably have a pretty light wrapper around the gateway which verifies the hash.

It wouldn't be as easy as simply using a gateway but still much easier than hosting/implementing an IPFS node locally

Re:Paaster – Secure by default end to end encrypted pastebin by stavros on Friday March 18, 2022 @05:55AM (#30720257)
Well, to use the node locally you just run a binary, it's not like there's much to it.
Re:Paaster – Secure by default end to end encrypted pastebin by fastball on Friday March 18, 2022 @06:22AM (#30720399)
No, but getting at content can sometimes take a while if it's not very actively seeded, e.g. I've had to wait hours for images to load on IPFS.
Re:Paaster – Secure by default end to end encrypted pastebin by stavros on Friday March 18, 2022 @06:32AM (#30720456)
Yes, definitely. Discovery with IPFS is abysmal.