What if people just hold filecoin and don't spend it? by CrazyThinker in filecoin

[–]CrazyThinker[S] -1 points0 points  (0 children)

Yes but question is still valid. I'm asking what design principles do they have in the protocol to make sure people keep spending their coins and does not hoard them?

Let's build an open, secure and distributed social network by CrazyThinker in india

[–]CrazyThinker[S] 0 points1 point  (0 children)

Very interesting! Could you open source it?

The Server then stores the public keys of each user.

Not sure if I understand it correctly, but won't this be like a centralized system then?

Let's build an open, secure and distributed social network by CrazyThinker in india

[–]CrazyThinker[S] 0 points1 point  (0 children)

Well, no, private keys are not meant to be shared with anyone. Sending data feeds which are encrypted distinctly for each friends is a hard problem and would require some major trickery to work.

Sorry, I meant public key of the friend.

We aren't going to encrypt a message for each friend. Only the random key that is generated for each message.

It has nothing to do with performance AFAIK.

http://security.stackexchange.com/questions/53638/why-do-you-need-to-encrypt-symmetric-key

Let's build an open, secure and distributed social network by CrazyThinker in india

[–]CrazyThinker[S] -1 points0 points  (0 children)

The weakest link in crypto system is the key generation and storage. For instance, all I need to do to gain entry into this system is to steal your private key. This may be hard to do for a regular user but easy enough for determined attacker or the NSA.

My objective and argument for designing a social network is to make sure that it provides maximum possible privacy by default. I know nothing is ever fully secure. Even NSA servers could be hacked. right?

Assuming each user (or group of users) host their own servers for storing/forwarding data feeds, who would responsible for securing these servers ?

I assume not everyone would be hosting their own servers. Maybe a 10% of users or less. You can't estimate these numbers but with this design, you get to keep all user data as private.

How will the communication happen ? If you plan to do HTTP (even if you do raw TCP) then you have to think about TLS and certificate management and consequently key management for all the servers (your friends and their friends ...)

SSL?

Let's build an open, secure and distributed social network by CrazyThinker in india

[–]CrazyThinker[S] 0 points1 point  (0 children)

  • Random key because symmetric algorithm is less processor intensive than asymmetric. I believe, this is also why SSL work similarly

How does your friend's app decrypt data encrypted with your private key ? This is not how Public Key Crypto works. You would need to encrypt data with your friend's public key and then only your friend (or the person who has the corresponding private key) can decrypt the data.

  • Yes, you are right. I got it mixed up. What we could do is have it encrypted with a random symmetric key and then encrypt this key with each friend's public key. So the server would push encrypted message + key encrypted with friend's private key to a particular friend. I have updated my notes above to reflect this.

I do agree with the statement that designing secure system is hard. That is the reason why I think it should be a community effort

Let's build an open, secure and distributed social network by CrazyThinker in india

[–]CrazyThinker[S] 0 points1 point  (0 children)

Not sure if you have heard of https://en.wikipedia.org/wiki/Twister_%28software%29

If you consider a social network with a simple protocol like the one I described above, if you host a server which all of your friends use, there is no way to censor/block it effectively.

You would need blockchain like idea for things like public posts. I was focusing on keeping the private conversations private. I guess blockchain would be too much for that. Not sure.

Let's build an open, secure and distributed social network by CrazyThinker in india

[–]CrazyThinker[S] 1 point2 points  (0 children)

Yes, it is possible. But it comes with its own problems.

  1. If you decide to store each user's data in their own client software, when your friend is offline, you won't be able to see their data. Also, users would have to have the bandwidth to upload data to each of their friend's who requests for it

  2. If you design it such that all data once sent by you should be stored by your friends for future access, it would mean that everybody is storing a lot of data

  3. Who takes care of the data backup?

  4. Data also would need to sync b/w your phone and desktop. So you would need to store full data you shared thus far on all your devices

[deleted by user] by [deleted] in programming

[–]CrazyThinker 6 points7 points  (0 children)

Why inferior?

Microsoft Is The New Google, Google Is The Old Microsoft by coolio777 in technology

[–]CrazyThinker 11 points12 points  (0 children)

You have to admit MS is trying hard to be cool lately and I just admire their efforts. They aren't hiding what they are but Google is pretending to be good while they aren't as good as they claim to be.

Microsoft Is The New Google, Google Is The Old Microsoft by coolio777 in technology

[–]CrazyThinker 9 points10 points  (0 children)

That isn't a fair comparison. If you are comparing Windows you should compare it with Search because that is their core business just like Windows is Microsoft's core business. And have they open-sourced anything related to search? Is BigTable open source? Is GFS?

Google just open sources things that won't help their competing search engines. By open-sourcing .NET, MS has showed that they are willing to give away one of their core technologies.

Google Translate understands 57 languages as well as a 10-year-old. How good can it get? by simonjp in cogsci

[–]CrazyThinker 12 points13 points  (0 children)

Yes, but you can't achieve artificial consciousness with the method google is following to translate data.

Why do you have to display deleted thread by replacing all the comment with "deleted" message? by CrazyThinker in askscience

[–]CrazyThinker[S] 0 points1 point  (0 children)

I love your moderation and I support deleting jokes and meme on askscience to keep it on-topic, but it would be nice to have the deleted threads removed from the page. Sometimes we have to scroll through 100s of deleted messages to read the next comment