[freenet-dev] [RFC] Freenet Summer of Toad

2015-04-10 Thread Arne Babenhauserheide
Am Freitag, 10. April 2015, 06:22:50 schrieb xor: > On Thursday, April 09, 2015 09:27:32 PM Steve Dougherty wrote: > > What would we want to direct this development time toward? My opinion is > > that more code / features is not what Fred needs most right now. > > Full ACK on not having him work

[freenet-dev] [RFC] Freenet Summer of Toad

2015-04-10 Thread Arne Babenhauserheide
Since it’s relevant: There are still 2.5k€ in my account from SUMA which I want to send to Ian. That they aren’t there yet is completely due to me being slow talking to my bank and then sending Ian a mail with the data I need from him to send the money. Best wishes, Arne Am Donnerstag, 9.

Re: [freenet-dev] Github and code review

2015-04-01 Thread Arne Babenhauserheide
Am Dienstag, 31. März 2015, 22:29:24 schrieb Ian: On Mon, Mar 30, 2015 at 3:16 PM, Arne Babenhauserheide arne_...@web.de wrote: It’s work from paid contributors for which we need structures which reduce the cost of code-review compared to what you propose I haven't heard of any proposal

Re: [freenet-dev] Github and code review

2015-03-30 Thread Arne Babenhauserheide
Am Sonntag, 29. März 2015, 13:43:42 schrieb Ian: Nothing you are advocating will change anything if we simply don't have enough people willing to do code reviews. At least with my proposal it will be a much less painful process than it appears to be today. Florent put that pretty well:

Re: [freenet-dev] Github and code review

2015-03-28 Thread Arne Babenhauserheide
Am Samstag, 28. März 2015, 11:32:30 schrieb Ian: I agree with Bombe that it’s not nice to lose the history, but with git that’s the best we can do. It’s a limitation of the tool. It's not a limitation of the tool, it's a limitation created by your desire to misuse the tool. We have a

Re: [freenet-dev] Github and code review

2015-03-28 Thread Arne Babenhauserheide
Am Samstag, 28. März 2015, 02:57:48 schrieb Steve Dougherty: # Authors squash commits into high-level changes making up final version; review pull request as commits. My stance is: Keep the commits if they are clean enough to be reviewed, refactor them mercilessly if that’s necessary to avoid

Re: [freenet-dev] fcp rewrite code review

2015-03-08 Thread Arne Babenhauserheide
Am Sonntag, 8. März 2015, 10:20:17 schrieb xor: I assume you made this suggestion of marking the new API unstable because: 1) you then wouldn't have to wait for me to reply to your review results 2) you didn't remember whether the review results contain any blocking issues when you talked

[freenet-dev] next breaks freesitemgr (pyFreenet FCP error)

2015-02-25 Thread Arne Babenhauserheide
Hi, As reported in mantis, the current next breaks my site uploads with pyFreenet ( https://bugs.freenetproject.org/view.php?id=6457 ): This happens to me with two freesites: NODE: PutFailed NODE: ExtraDescription=Already closed NODE: Fatal=true NODE:

Re: [freenet-dev] Release of build 1468

2015-02-17 Thread Arne Babenhauserheide
Am Dienstag, 17. Februar 2015, 16:48:34 schrieb Matthew Toseland: Generally fair, but just to be clear: When API changes are a necessary part of a paid developer's work, they should not generally be expected to fix unofficial plugins. Obviously if an official plugin is broken by core fred

[freenet-dev] Freenet received the SUMA Award 2015 (press release draft)

2015-02-12 Thread Arne Babenhauserheide
-Beuermann with Arne Babenhauserheide, long-term Freenet contributor, as representative of the award winner. Photo: Michael Christen in Hamburg, Lizenz: CC0. Sources: [1] congress of SUMA-EV: http://searchstudies.org/de/suma2015.html [2] SUMA-EV: http://suma-ev.de/en/index.html [3] SUMA

[freenet-dev] long hanging fruit: size limit for darknet messages

2015-01-25 Thread Arne Babenhauserheide
Hi, If you’d like to do some smaller scale volunteer work on freenet which helps with some problems which crop up in real darknet usage (likely with one-day solutions for someone who knows the source), improving darknet N2NTM's could be a pretty high-impact change: -

Re: [freenet-dev] Java/ C++ bugs for beginners

2015-01-18 Thread Arne Babenhauserheide
Hi Abhinav, Am Montag, 19. Januar 2015, 00:24:59 schrieb Abhinav Gupta: I would like to contribute and I am good at coding in Java and C++. Since I haven't contributed to any open source project earlier, I wanted to know if there are any issues in Java/ C++ projects that I can start with.

Re: [freenet-dev] adding freenet to funding-platforms?

2015-01-17 Thread Arne Babenhauserheide
Am Freitag, 16. Januar 2015, 16:03:23 schrieb Michael Grube: Patreon is an excellent platform. We could fund at the feature or bugfix level. Or on a per-report level. Writing a news entry every week about the development during that week. It would help doing the reporting people are often

[freenet-dev] adding freenet to funding-platforms?

2015-01-16 Thread Arne Babenhauserheide
Hi, In recent years quite a few new funding platforms appeared, and since people actually donate there, it might be useful to allow funding Freenet development on them. The amount of money per platform is likely not that high, but if it’s low maintenance, even 2 Bitcoin can make quite some

Re: [freenet-dev] Freenet 0.7.5 1468-pre1

2015-01-07 Thread Arne Babenhauserheide
Am Dienstag, 6. Januar 2015, 22:11:06 schrieb Steve Dougherty: Going forward I will be very loud and angry at proposals which break API. I applaud that! Especially when it’s plugin API. And I’d like to point out that it’s awesome that you manage to pull this off despite the complications!

Re: [freenet-dev] Autostart on Startup

2014-12-19 Thread Arne Babenhauserheide
Am Donnerstag, 18. Dezember 2014, 21:30:08 schrieb Steve Dougherty: I assume it was inadvertently changed in the InnoSetup reimplementation of the setup and no one brought up that it was a significant policy change. Fixed in 52ea28d. [0] Cool - thank you! Best wishes, Arne -- singing a part

Re: [freenet-dev] Autostart on Startup

2014-12-18 Thread Arne Babenhauserheide
Am Mittwoch, 17. Dezember 2014, 21:39:39 schrieb Steve Dougherty: The concern I had with this is that Freenet startup is fairly I/O heavy and we don't want to significantly extend users' time between boot and a responsive system. [0] Could we use a delayed autostart: Just add a sleep time of

Re: [freenet-dev] Autostart on Startup

2014-12-18 Thread Arne Babenhauserheide
Am Donnerstag, 18. Dezember 2014, 21:32:04 schrieb xor: On Thursday, December 18, 2014 03:27:41 PM Arne Babenhauserheide wrote: Am Mittwoch, 17. Dezember 2014, 21:39:39 schrieb Steve Dougherty: The concern I had with this is that Freenet startup is fairly I/O heavy and we don't want

[freenet-dev] Autostart on Startup

2014-12-17 Thread Arne Babenhauserheide
Hi, I just had one of my new darknet contacts call me, saying “my Freenet site does not work anymore. It says the host localhost does not exist.” I was stupefied for a moment, until I realized that my darknet contact had just restarted the computer for the first time since installing Freenet.

[freenet-dev] Fwd: Re: Freenet funding and this summer

2014-11-18 Thread Arne Babenhauserheide
This should have gone to the list… sorry for the delay. -- Weitergeleitete Nachricht -- Hi, I think there is one feature which works really well and which we are horribly underselling: darknet node-to-node messages. They provide confidential communication between friends,

Re: [freenet-dev] Kickstarter

2014-11-18 Thread Arne Babenhauserheide
Am Montag, 17. November 2014, 16:38:57 schrieb Michael Grube: I hate to put it this way, but let's be coldly rational here. Please do not take this as an offensive question: What can we offer that maidsafe cannot? I’d like to answer that with a quote from

[freenet-dev] What Freenet already offers

2014-11-18 Thread Arne Babenhauserheide
I think we should make a list of the things we already do *well*. I’ll start with a quote from IRC today: - nextgens: I agree with your post on devl: Let’s publish what we have, not what we want. - xor-freenet: I really don’t want to wait for Sone to be ready for the next release. We already

Re: [freenet-dev] Freenet 0.7.5 build 1466 released

2014-11-10 Thread Arne Babenhauserheide
Very cool! Thank you for taking up the releases! Best wishes, Arne Am Sonntag, 9. November 2014, 20:34:28 schrieb Steve Dougherty: Highlights for this build: signature.asc Description: This is a digitally signed message part. ___ Devl mailing list

Re: [freenet-dev] Build 1466-pre1 released

2014-11-06 Thread Arne Babenhauserheide
Hi Steve, Thank you for taking this up! I’m happy to see the new release progressing! And I love “squishy humans” ☺ Am Dienstag, 4. November 2014, 23:37:15 schrieb Steve Dougherty: I was hoping to write a hey you just upgraded, here are links to the release notes alert, but haven't gotten to

Re: [freenet-dev] beehive paper: representation of freenet and gnutella in the introduction

2014-08-05 Thread Arne Babenhauserheide
Dear Venugopalan, dear Emin, Please excuse my email. I got your paper as PDF and assumed that it was a current paper. You did in fact represent the state of P2P networks in 2003 correctly. Please accept my apology. Best wishes, Arne Am Dienstag, 5. August 2014, 15:18:08 schrieb Arne Bab.:

Re: [freenet-dev] DoS resistant WoT introductions

2014-07-30 Thread Arne Babenhauserheide
I answered out-of-band (in german): - freenet-sticks with direct posting-ability - DoS can currently keep out new users - people want to switch IDs monthly or so. Am Mittwoch, 11. Juni 2014, 18:18:09 schrieb xor: That is a whole lot of text, thank you :) I stopped half-way reading it due to

[freenet-dev] Fwd: Re: Measuring Freenet: Diskussion von Freenet Entwicklern

2014-07-07 Thread Arne Babenhauserheide
= From: Stef Hi Arne, switching to english, in case you want to forward. from looking over the logs¹ (I hope I found all the points concerning us ;) ), one main point of discussion is the simulation study about the impact of a suboptimal distance distribution on the routing. 1) The study

Re: [freenet-dev] Measuring Freenet: Diskussion von Freenet Entwicklern

2014-07-07 Thread Arne Babenhauserheide
Hi Stef, I forwarded your message to devl. Am Sonntag, 6. Juli 2014, 23:01:00 schrieb Stef: from looking over the logs (I hope I found all the points concerning us ;) ), one main point of discussion is the simulation study about the impact of a suboptimal distance distribution on the

Re: [freenet-dev] [RFC] Regular Release Schedule

2014-06-16 Thread Arne Babenhauserheide
Am Montag, 16. Juni 2014, 06:00:07 schrieb xor: On Sunday, June 15, 2014 07:46:37 AM Steve Dougherty wrote: Maybe this is something that's not helpful until we have more active developers, but I'd be up for making regularly scheduled releases. Fixes for security or stability problems could

[freenet-dev] Fwd: GSoC Improving the Web Interface (Winterface)

2014-05-19 Thread Arne Babenhauserheide
-- Weitergeleitete Nachricht -- Betreff: FW: GSoC Improving the Web Interface (Winterface) Hallo Arne! Looks like my email (misaaki...@yahoo.gr) still gets banned from the list for some reason. Will wait till tomorrow midday and try again with a different one. Have a nice

[freenet-dev] meltdown (what’s happening)

2014-05-18 Thread Arne Babenhauserheide
Hi Matthew, I just saw you peek into #freenet-chat and ask what’s happening. Are you up to date on the meltdown? If not (I did not see a post about this on devl): - http://draketo.de/english/freenet/meltdown-2014-04 -

Re: [freenet-dev] Argh

2014-04-16 Thread Arne Babenhauserheide
Am Donnerstag, 10. April 2014, 13:21:35 schrieb Matthew Toseland: On did I miss something, that you also assume every non-core node has at least one connection to the core, and will with 100% certainty route a request thereto? The proposal was that we only route high HTL requests to core

Re: [freenet-dev] Argh

2014-04-16 Thread Arne Babenhauserheide
Am Freitag, 11. April 2014, 11:30:52 schrieb Matthew Toseland: Doesn't answer the question - do we still need route high htl requests only to core nodes if we have tunnels? It still offers added security against MAST for anything which does not go through a tunnel - and since tunnels are

Re: [freenet-dev] How to beat MAST

2014-04-01 Thread Arne Babenhauserheide
Am Montag, 31. März 2014, 19:53:27 schrieb Matthew Toseland: Large files are divided into thousands of blocks. The blocks' locations are effectively random. Therefore you're bound to receive some requests So you monitor all insert requests and when you later see a key for a file, you know

Re: [freenet-dev] How to beat MAST

2014-03-31 Thread Arne Babenhauserheide
Am Samstag, 29. März 2014, 18:21:46 schrieb Matthew Toseland: Depends on what sort of Sybil attack you mean. The simplest Sybil attack on the current network is to connect to everyone and log every request. That only requires a hundred or so nodes, with only minor modifications. Could you

Re: [freenet-dev] adding a friend: default values for visibility and trust

2014-03-31 Thread Arne Babenhauserheide
Am Montag, 31. März 2014, 15:52:20 schrieb Matthew Toseland: As identified at CTS4, it is *our* job to define the default value for that, because new users have no chance of understanding the implications of taking either choice. It is? How are we supposed to know the risk tolerance / risk

Re: [freenet-dev] adding a friend: default values for visibility and trust

2014-03-31 Thread Arne Babenhauserheide
Am Montag, 31. März 2014, 15:52:20 schrieb Matthew Toseland: It is? How are we supposed to know the risk tolerance / risk profile of every single user? What is the danger of saying HIGH trust? What is the added safety I get when saying LOW trust? What is the danger of saying YES (FOAF)? Can

Re: [freenet-dev] Freenet educational video series

2014-03-31 Thread Arne Babenhauserheide
Am Sonntag, 9. März 2014, 08:46:26 schrieb Matthew Toseland: 10. Writing of the plugins (this will be done at a later date than others in all likelihood) This was discussed in detail at the conference in October. I believe people here will be able to give you an outline? There was some sort

Re: [freenet-dev] Bring more users to Freenet

2014-03-31 Thread Arne Babenhauserheide
Am Samstag, 4. Januar 2014, 17:00:50 schrieb Steve Dougherty: A section on tasks to perform in the first run setup? That's an interesting idea. They are available from the plugins page in this way, but it's a good point that it'd make sense to not make people dig around for the option. There

[freenet-dev] DoS resistant WoT introductions

2014-03-29 Thread Arne Babenhauserheide
Hi, This should have been a brief draft for DoS resistant introductions to WoT, but it grew a bit when I added the math. Its objective in terms of spam prevention is that if I am in good standing I can authorise a limited number of introductions from my peers, in such a way that I can't

[freenet-dev] freenet description for potentioal funding

2014-03-26 Thread Arne Babenhauserheide
Hi freenetters and interested, Over the last few weeks I discussed with a few people about help in getting funding (thanks to Sandra from OpenITP for making the connections!). During these exchanges I wrote some stuff about freenet which I want to share. This will be unstructured, because my

Re: [freenet-dev] merging transport plugins

2014-02-21 Thread Arne Babenhauserheide
At Thu, 20 Feb 2014 17:26:33 +, Matthew Toseland wrote: To avoid losing that great work, it would be important to get it merged quickly. Bitrot only gets worse if it is ignored. There are a number of serious issues, mostly related to locking. I believe I have sent the correspondance to

Re: [freenet-dev] merging transport plugins

2014-02-21 Thread Arne Babenhauserheide
Hi Chetan, At Thu, 20 Feb 2014 20:22:20 +0530, Chetan Hosmani wrote: I don't have the time to merge these changes and technically not allowed to without obtaining explicit exception from my firm. But I have said several times that I can actively help anyone who is willing to do this. … I

Re: [freenet-dev] Funding for Freenet - Limiting funders?

2014-02-21 Thread Arne Babenhauserheide
At Thu, 20 Feb 2014 17:24:59 +, Matthew Toseland wrote: freenet → Funding for freenet - limiting funders? We need your opinion I am in favour of accepting government funding, provided that we don't become totally dependant on it. I don't believe government introducing backdoors and

Re: [freenet-dev] Funding for Freenet - Limiting funders?

2014-02-21 Thread Arne Babenhauserheide
At Thu, 20 Feb 2014 11:30:48 -0800, Travis Wellman wrote: Seems to me that it's less 'who' that matters and more 'what terms'. Most significantly the objectives of the project should not be under influence, I think so, too - as toad said, we must not grow too dependent, and we must ensure

[freenet-dev] merging transport plugins

2014-02-20 Thread Arne Babenhauserheide
Hi, The transport plugin code from chetan is slowly bitrotting in the chetan-transports branch. When trying to merge it into next, there are already merge conflicts, but it does not look serious (just some parameter changes). I did not have the time to fix them, though - it would have sent me on

[freenet-dev] Funding for Freenet - Limiting funders?

2014-02-20 Thread Arne Babenhauserheide
Hi, After CTS4 I started thinking about getting funding. When now Steve had to start looking for a job, I asked Sandy for help on getting funding, and she connected me to some people who know their stuff and are willing to help. For this I asked on FMS last week if people would want to set

Re: [freenet-dev] Death to activelinks!

2013-08-07 Thread Arne Babenhauserheide
Am Montag, 5. August 2013, 19:06:42 schrieb Matthew Toseland: On Monday 05 Aug 2013 18:51:39 Arne Babenhauserheide wrote: it will make the index’ container bigger. Slightly. These are really small images. the site will show without all images loaded Depending on how the browser feels

Re: [freenet-dev] Death to activelinks!

2013-08-05 Thread Arne Babenhauserheide
Am Montag, 5. August 2013, 14:31:15 schrieb Matthew Toseland: Also the activelinks have a huge advantage over including the images: The site first loads, with missing images but all structure intact. AFAIK Including the images in the site would make the initial download slower and that

Re: [freenet-dev] Death to activelinks!

2013-08-04 Thread Arne Babenhauserheide
Hi toad, I actually like activelinks: They provide persistence for referenced sites. And when I look at the stats form digger3, I thnk we need the persistence. Also each activelink shows that the page is still available. Index authors can decide not to use activelinks (as linkageddon does),

Re: [freenet-dev] Infocalypse WoT Usage

2013-07-31 Thread Arne Babenhauserheide
Am Mittwoch, 31. Juli 2013, 15:50:17 schrieb Matthew Toseland: Okay. The difficulty here is that there might be more than one p0s. We should always use the p0s we used last time, for security's sake. This is probably part of the reason why e.g. git has a list of remotes for each repository.

[freenet-dev] Clickable structures without Javascript (for the redesign)

2013-07-30 Thread Arne Babenhauserheide
Hi, If you want to make the redesign a bit less relialt on Javascript, you could use the wonderful clickable CSS example from the Trojita Mail client: - http://jkt.flaska.net/blog/Collapsing_long_mail_quotes_in_pure_CSS_and_other_new_features_in_Trojita_0_3_92.html A very simple example for

Re: [freenet-dev] Distributed Version Control Project Update #3

2013-06-26 Thread Arne Babenhauserheide
Am Dienstag, 25. Juni 2013, 14:28:57 schrieb Matthew Toseland: Like on github, the most important thing is that *the published repository* has some indication of where it was forked from, no? Telling the person you forked from about it is a bonus. I think it’s also important to have those

Re: [freenet-dev] [gsoc2013] UPDATE WEEK#1

2013-06-26 Thread Arne Babenhauserheide
Am Dienstag, 25. Juni 2013, 14:23:13 schrieb leuchtkaefer: My plugin is very basic yet but a good point for start interacting with freenet and tests. It creates one new menu and one page (the name of the menus are buggy, need to fix). It implements FredPlugin, FredPluginL10n,

Re: [freenet-dev] Distributed Version Control Project Update #3

2013-06-18 Thread Arne Babenhauserheide
Hi Steve. I only now learned that you had oral surgery today. I hope everything went well! What you did till now looks really great! \o/ About the pull-requests: Can you check when a user pushes, if that user has a freemail (v2) address for that ID, and if not then just create it? And monitor

Re: [freenet-dev] GSOC 2013 Idea: Android P2p sharing through Wi-Fi Direct

2013-04-20 Thread Arne Babenhauserheide
Hi G. Nitesh Bharadwaj, Am Samstag, 20. April 2013, 12:21:37 schrieb Nitesh Bharadwaj: Please reply if you find this an interesting project for GSOC. Also, you could give suggestions to improve my idea. Your proposals sounds pretty interesting, I think, though for starters especially the part

Re: [freenet-dev] GSoC 2013 - Transport Layer Improvements project

2013-04-16 Thread Arne Babenhauserheide
Hi Vlad, Am Dienstag, 16. April 2013, 18:38:28 schrieb Vladislav Sterzhanov: Perhaps I got something wrong, moreover, I bet that there is much more work to do that I've already found out, so I need to know what do you think about it? That sounds quite interesting. I think the first step for

Re: [freenet-dev] How to fix broken 1439 nodes was Re: NullPointerError after OOM or disk-full

2013-04-02 Thread Arne Babenhauserheide
Hi Toad, Am Dienstag, 2. April 2013, 00:45:17 schrieb Matthew Toseland: On Monday 01 Apr 2013 22:12:27 Arne Babenhauserheide wrote: jvm 1| WrapperManager Error: Error in WrapperListener.start callback. java.lang.NullPointerException … This is because of a severe (but trivial) bug

[freenet-dev] NullPointerError after OOM or disk-full

2013-04-01 Thread Arne Babenhauserheide
Hi, I got the following null-pointer error on startup after having some problems with my disk and memory: … jvm 1| In particular: YOU ARE WIDE OPEN TO YOUR IMMEDIATE PEERS! They can eavesdrop on your requests with relatively little difficulty at present (correlation attacks etc). jvm 1

Re: [freenet-dev] Freenet UI

2013-03-28 Thread Arne Babenhauserheide
Am Donnerstag, 28. März 2013, 06:52:05 schrieb Paulo Makdisse: The current freenet UI cannot be changed without breaking the interface consistency, that's why I believe that the best approach is a fresh start. I don't know how can this be done though. The idea to start fresh with a strong

Re: [freenet-dev] Google Summer of Code 2013

2013-03-02 Thread Arne Babenhauserheide
Am Sonntag, 17. Februar 2013, 21:38:14 schrieb Steve Dougherty: I hope to work with ArneBab on the Infocalypse project as proposed last year. [0] [0] https://wiki.freenetproject.org/Google_Summer_of_Code/2012#Integrating_DVCS_via_Infocalypse_.28Mercurial.29_with_the_Web_of_Trust Just to have

Re: [freenet-dev] Adding exit node capability to Freenet

2013-01-27 Thread Arne Babenhauserheide
Am Sonntag, 27. Januar 2013, 00:46:12 schrieb vmonmoonsh...@gmail.com: After all Freenet let you download malicious executables (unlike let say gmail) and then you can run them on your computer without restriction, why plug-ins should gets different treatment? I think the automatism is the

Re: [freenet-dev] Pitch Black Attack - Analysis, Code, Etc.

2013-01-27 Thread Arne Babenhauserheide
Hi Snark, Thank you for posting! Your analysis looks pretty good. Am Sonntag, 27. Januar 2013, 00:02:17 schrieb Michael Grube: Not bad! There is obviously still some influence but the location distribution has evened out noticeably. There is one down side to this solution, however, and that

Re: [freenet-dev] X-Vine summary was Re: Pisces and X-Vine: Tunnels and better routing on darknet?

2013-01-26 Thread Arne Babenhauserheide
Am Freitag, 25. Januar 2013, 21:08:44 schrieb Matthew Toseland: - Simulations show Freenet deals with this situation adequately, suggesting it gradually moves from the pocket being peripheral to it being a part of the network proper as more connections are added. Hence IMHO we have some

Re: [freenet-dev] X-Vine summary was Re: Pisces and X-Vine: Tunnels and better routing on darknet?

2013-01-26 Thread Arne Babenhauserheide
Am Freitag, 25. Januar 2013, 21:08:44 schrieb Matthew Toseland: - X-Vine appears to rely on every message being signed by its sender. Hence it is pseudonymous Does that mean, that it does not allow more than one ID per node? And that it does allow tracking requests to find out which ID might

Re: [freenet-dev] Distributed censorship attack was Re: Really secure inserts?

2013-01-08 Thread Arne Babenhauserheide
Am Montag, 7. Januar 2013, 18:11:14 schrieb Matthew Toseland: wouldn’t the pre-insert keys never be requested, so they would drop out anyway after 14 days on average? (following digger3’s stats) Yes. I didn't think it was that bad though. :| I don’t think it’s really bad. It is an essential

Re: [freenet-dev] Distributed censorship attack was Re: Really secure inserts?

2013-01-08 Thread Arne Babenhauserheide
Am Dienstag, 8. Januar 2013, 11:42:48 schrieb Matthew Toseland: But I think I forgot, that it is not reinserted, when the request succeeds from cache… Successful requests are reinserted randomly. That’s nice! So as long as something is in the caches it is at least potentially healed (if

Re: [freenet-dev] FMS: Surrounded nodes and opennet was Re: Really secure inserts?

2013-01-08 Thread Arne Babenhauserheide
Am Samstag, 5. Januar 2013, 23:41:33 schrieb Matthew Toseland: Ah, OK. I’m also interested in the case where we have exactly *one* darknet friend: The one who introduced us into freenet. If we now introduce someone else, FOAF does not help, because we also only know one person. But we

Re: [freenet-dev] FMS: Surrounded nodes and opennet was Re: Really secure inserts?

2013-01-05 Thread Arne Babenhauserheide
Am Donnerstag, 3. Januar 2013, 17:31:12 schrieb Matthew Toseland: - Create lots of (malicious) nodes cheaply/quickly. That probably means a single datacentre/host, i.e. on the same AS. Am I right in thinking that this is likely hard to distinguish from 1.000 students in a single university

Re: [freenet-dev] FMS: Surrounded nodes and opennet was Re: Really secure inserts?

2013-01-05 Thread Arne Babenhauserheide
Am Donnerstag, 3. Januar 2013, 17:31:12 schrieb Matthew Toseland: …seednodes… This is fairly complex and will eventually run into scalability problems. That’s exactly what I thought. Also it sounds too complex for a decentral system. Interaction between many nodes is already complex enough with

Re: [freenet-dev] FMS: Surrounded nodes and opennet was Re: Really secure inserts?

2013-01-05 Thread Arne Babenhauserheide
Am Donnerstag, 3. Januar 2013, 17:31:12 schrieb Matthew Toseland: MAJOR ATTACKS FOR OPENNET (stuff we could maybe limit by tinkering with announcement etc) - Announce to chosen location. Component of many easy attacks, e.g. MAST, some published stuff. Can’t this be mitigated decentrally if

Re: [freenet-dev] FMS: Surrounded nodes and opennet was Re: Really secure inserts?

2013-01-05 Thread Arne Babenhauserheide
Am Samstag, 5. Januar 2013, 17:24:03 schrieb Matthew Toseland: These are all fairly close together so I'll answer them together. That’s fitting, yes… I just wrote them after each other. 1. I'm not talking about darknet here AT ALL. I'm only interested in opennet: The case where we have no

Re: [freenet-dev] FMS: Surrounded nodes and opennet was Re: Really secure inserts?

2013-01-03 Thread Arne Babenhauserheide
Am Donnerstag, 3. Januar 2013, 16:31:40 schrieb Matthew Toseland: The problem is hashcash is very expensive for regular users (who may have slow CPUs) and very cheap for attackers (who have fast GPUs). So it's not really a usable solution. That’s just what I thought: We can make it more

Re: [freenet-dev] Really secure inserts?

2012-12-29 Thread Arne Babenhauserheide
Am Samstag, 22. Dezember 2012, 02:17:24 schrieb Matthew Toseland: Hmmm, what about DoS attacks against the pre-insert cache? Maybe we should use the store; we do want to free up the slots when we've inserted successfully though (in spite of random replacement this still makes the store more

Re: [freenet-dev] FMS: Surrounded nodes and opennet was Re: Really secure inserts?

2012-12-28 Thread Arne Babenhauserheide
Am Dienstag, 25. Dezember 2012, 07:49:51 schrieb Fabio Gonzalez: Darn, 10.000€ is just what the BKA (german central police) spends yearly to surveill skype… So they could easily afford making every second freenet node a police-node. If each node to ask others give the plain text,

Re: [freenet-dev] FMS: Surrounded nodes and opennet was Re: Really secure inserts?

2012-12-28 Thread Arne Babenhauserheide
Am Montag, 24. Dezember 2012, 21:11:55 schrieb Robert Hailey: With that being said, the scarce resource (in theory) would be location (detectable by network address), because an attacker simulating many nodes would likely have them in a very confined space (like a server closet or a few

Re: [freenet-dev] Depth-first announcement

2012-12-28 Thread Arne Babenhauserheide
Am Mittwoch, 21. November 2012, 19:22:25 schrieb Juiceman: This would be an automated system that wouldn't require users emailing someone to add them to the list. Do you know the Gnutella UDP Hostcaches? They are a distributed but serverbased system for getting first connections. One example:

Re: [freenet-dev] Fwd: DNS block

2012-12-28 Thread Arne Babenhauserheide
Am Donnerstag, 27. Dezember 2012, 16:52:18 schrieb Ian Clarke: Had this conversation with a provider of wifi-hotspots in Austin. I had initially sent an email complaining that http://freenetproject.org/ was blocked in a coffee shop I frequent. Thank you for forwarding! I passed the URL to

Re: [freenet-dev] Fwd: DNS block

2012-12-28 Thread Arne Babenhauserheide
he has the latest information. Ian. On Fri, Dec 28, 2012 at 8:30 AM, Arne Babenhauserheide arne_...@web.dewrote: Am Donnerstag, 27. Dezember 2012, 16:52:18 schrieb Ian Clarke: Had this conversation with a provider of wifi-hotspots in Austin. I had initially sent an email complaining

Re: [freenet-dev] FMS: Surrounded nodes and opennet was Re: Really secure inserts?

2012-12-25 Thread Arne Babenhauserheide
At Mon, 24 Dec 2012 17:46:57 +, Matthew Toseland wrote: I am skeptical that you could fit 20 nodes on a 20W system; that's using what, a low-end laptop processor? If you'd like to, I can do a real test till new year. I use an ITX board with an ATI embedded thingy (I can dig for the specs

Re: [freenet-dev] FMS: Surrounded nodes and opennet was Re: Really secure inserts?

2012-12-21 Thread Arne Babenhauserheide
Am Freitag, 21. Dezember 2012, 19:46:00 schrieb Matthew Toseland: Without any way to make it hard to run lots of nodes, AFAICS our only option for really strong security is darknet. How much would it cost to run 10.000 freenet nodes for one year? Let’s try to answer that: From memory

Re: [freenet-dev] Really secure inserts?

2012-12-21 Thread Arne Babenhauserheide
A few comments: Am Freitag, 21. Dezember 2012, 00:31:25 schrieb Matthew Toseland: - Pad the small keys to be the same size as big keys, since there are likely mostly big keys. - Pad the keys with extra redundancy until you get to a standard number of keys. This will be some standard formula

Re: [freenet-dev] Nextgens' invite idea

2012-12-21 Thread Arne Babenhauserheide
Am Freitag, 21. Dezember 2012, 21:56:16 schrieb Matthew Toseland: That still allows anarchist groups to interconnect (they just need to hide their decision making structures, but not that they are in the group). Well, if the authorities seize your node, they will have your friends from your

Re: [freenet-dev] Nextgens' invite idea

2012-12-20 Thread Arne Babenhauserheide
Am Donnerstag, 20. Dezember 2012, 17:31:30 schrieb Matthew Toseland: The question is which trail. E-Mails are open to global surveillance. Connections not necessarily (they are much more work to track all the time). If you are targeted as an individual, they can tell who your friends are,

Re: [freenet-dev] Nextgens' invite idea

2012-12-18 Thread Arne Babenhauserheide
Am Dienstag, 18. Dezember 2012, 13:26:20 schrieb Matthew Toseland: I don’t think that this is strictly necessary. If your friend runs a corrupted build, you have a problem anyway. Another layer of security might be nice, anyway, though: Don’t make it too easy for people to infiltrate

Re: [freenet-dev] Packaging Freenet

2012-12-17 Thread Arne Babenhauserheide
Am Montag, 17. Dezember 2012, 16:38:53 schrieb Thomas Sachau: There are Gentoo packages, thanks to Thomas[D]. I currently don’t use them, because I have a special setup including ramdisk and stuff and did not yet migrate that to the official packages - and because I want to have the

Re: [freenet-dev] Nextgens' invite idea

2012-12-17 Thread Arne Babenhauserheide
Am Freitag, 14. Dezember 2012, 13:40:53 schrieb Robert Hailey: Couldn't we programmatically detect: (a) that the port is not forwarded, or (b) if their IP has recently changed, or (c) if they are a low-uptime node ...and deny/warn/hide the invite feature if that is not the case? I think

Re: [freenet-dev] Nextgens' invite idea

2012-12-17 Thread Arne Babenhauserheide
Am Freitag, 14. Dezember 2012, 19:32:18 schrieb Matthew Toseland: - HTTPS ensures that the executable hasn't been tampered with. However, the friend providing it may be malicious, computer illiterate, or running a corrupted build they got from another friend. Trusting your friend is not

Re: [freenet-dev] SSK compatibility for infocalypse - was: What is the ideal size for SSKs?

2012-12-17 Thread Arne Babenhauserheide
Am Mittwoch, 21. November 2012, 23:51:01 schrieb Matthew Toseland: GenerateSSK will generate the current kind of SSKs. I.e. the new ones. We may give it some parameters in future though. The lengths of the SSKs may change. Sounds good. Thank you for the info! Best wishes, Arne -- Ein Würfel

Re: [freenet-dev] Packaging Freenet

2012-12-15 Thread Arne Babenhauserheide
Hi xor, Am Freitag, 14. Dezember 2012, 02:32:17 schrieb xor: If I'm correct, there are no Linux package-management packages because There are Gentoo packages, thanks to Thomas[D]. I currently don’t use them, because I have a special setup including ramdisk and stuff and did not yet migrate that

Re: [freenet-dev] making darknet easy - was: Re: To mix or not to mix? was Re: Security

2012-12-11 Thread Arne Babenhauserheide
Am Dienstag, 11. Dezember 2012, 19:22:56 schrieb Matthew Toseland: Nobody uses darknet. That's not going to change unless it is BOTH easy to use/connect AND gives reasonable performance. I use hybrid and can already switch to darknet. But yes, it’s still too slow. The invitations are not only

Re: [freenet-dev] making darknet easy - was: Re: To mix or not to mix? was Re: Security

2012-12-11 Thread Arne Babenhauserheide
Am Dienstag, 11. Dezember 2012, 19:22:56 schrieb Matthew Toseland: Nobody uses darknet. That's not going to change unless it is BOTH easy to use/connect AND gives reasonable performance. I just decided to give that hypothesis a try. So I’m now on darknet only, with 3-7 friends (depending on

Re: [freenet-dev] making darknet easy - was: Re: To mix or not to mix? was Re: Security

2012-12-10 Thread Arne Babenhauserheide
Am Montag, 10. Dezember 2012, 21:15:29 schrieb Matthew Toseland: Treating stuff as text causes all sorts of problems. :( Sadly yes… Or use FOAFs to avoid the problem entirely. And with it the uptime problem too. Hm, yes. But having something now is better than having something maybe… That

Re: [freenet-dev] making darknet easy - was: Re: To mix or not to mix? was Re: Security

2012-12-09 Thread Arne Babenhauserheide
At Sat, 8 Dec 2012 22:55:54 +, Matthew Toseland wrote: I could actually put the CHK key on a business-card. You could in principle, but it's a rather long string. Maybe a KSK, although security issues? Or maybe one of the short references proposals, although they tend to depend on

[freenet-dev] making darknet easy - was: Re: To mix or not to mix? was Re: Security

2012-12-04 Thread Arne Babenhauserheide
Am Donnerstag, 1. November 2012, 21:30:35 schrieb Matthew Toseland: - More work on making darknet easy. Yes, please! How about automatic insert of my noderef as CHK, so I can just hand a friend an in-freenet-link to connect? That’s the way which works really nicely. It requires that people

Re: [freenet-dev] SSK compatibility for infocalypse - was: What is the ideal size for SSKs?

2012-11-19 Thread Arne Babenhauserheide
Am Sonntag, 18. November 2012, 21:01:02 schrieb Matthew Toseland: On Sunday 18 Nov 2012 02:58:55 you wrote: Wait, we're not going to maintain backward compatibility with SSKs? That doesn't seem wise... Current proposal in a nutshell: - Support existing SSKs for back compatibility. - New

Re: [freenet-dev] SSK compatibility for infocalypse - was: What is the ideal size for SSKs?

2012-11-17 Thread Arne Babenhauserheide
Am Freitag, 16. November 2012, 17:26:34 schrieb Matthew Toseland: I might re-implement SSKs via PSKs, but the effect would be the same. Certainly we'd want to keep some kind of SSKs. The payload size might not be exactly the same though. Do you need a specific block size? Infocalypse is

[freenet-dev] SSK compatibility for infocalypse - was: What is the ideal size for SSKs?

2012-11-16 Thread Arne Babenhauserheide
Sorry for being late to the discussion. I just now realized this: Infocalypse uses SSKs for the top-level keys and I don’t feel competent to change it to use another type of key. So it would be extremely important for me to have a compatibility layer which allows infocalypse to use SSKs exactly

Re: [freenet-dev] Summary of new key types / major forum optimisations, was Re: Sadao has found the solution to spam-proof forums/search!

2012-10-14 Thread Arne Babenhauserheide
Am Freitag, 12. Oktober 2012, 23:19:14 schrieb Matthew Toseland: Conclusion: The list of impossible things we need to do to make Freenet viable has shrunk dramatically in the last few months! I just realized, that this would allow us to add central infocalypse repositories - more exactly write

Re: [freenet-dev] Sadao has found the solution to spam-proof forums/search!

2012-10-14 Thread Arne Babenhauserheide
Am Samstag, 13. Oktober 2012, 05:41:25 schrieb xor: I strongly feel that this might be just a different model of the same stuff we do with current web of trust systems I thought the same at the beginning, but I now think it might actually have a different domain. In a web of trust, an update

<    1   2   3   4   5   6   7   8   >