Lots of exciting #decentralization protocols and technology out there. Some are not ready for usage, others are not following the paradigm I prefer, I love that we're spoiled for choice.

IMO I still love #SecureScuttlebutt, for me it is still the best offline-first local-first gossip protocol out there. Yes, it has dangerous corners and design issues, but it works and I can build apps with it for my friends.

I find it has pretty intractable scaling problems. So like... it works... at first. But gets bigger and slower pretty much exponentially. What was that non-blockchain network... Briar I think?

https://briarproject.org/
Secure messaging, anywhere - Briar

Secure messaging, anywhere

@cy
> What was that non-blockchain network... Briar I think?

Briar is a neat experiment, but they've never shipped apps for anything but Android. The problem with depending on one proprietary OS ought to be obvious, Goggle's recent decision to start farming Android app devs is a good example;

https://keepandroidopen.org/

So until it's cross-platform, Briar is a fun toy, but not suitable for production use.

@soapdog

Keep Android Open

Advocating for Android as a free, open platform for everyone to build apps on.

Can't say I've looked into it before. I got tired of nodejs projects back when they switched to the new module format. Good to know, at least!

In my opinion, a good project would write programs, not "ship" "apps." Dunno what one would be good though.

CC: @[email protected]

@cy
> Dunno what one would be good though

Depends on your use case/ threat model. Ask yourself questions like; who do I want to communicate with and why? Are you looking for software for an existing group/ network of people who can make and action decisions about where to communicate? Are you wanting to adopt an app to make new contacts among its current network? How sensitive are the communications? Etc, etc.

@soapdog

I just use the Fediverse, nothing else seems worth bothering with. I kind of gave up a while ago. I don't have an existing group, or anyone at all really. Met some nice people on the Fediverse though. (None of them are interested in whatever network I might propose.)

CC: @[email protected]

@cy
> I just use the Fediverse, nothing else seems worth bothering with

Same. Other than email and SMS, and occasional use of Matrix and even less often XMPP.

@soapdog

@strypey @cy the fediverse is indeed cool, but it is not the p2p I aim for. It is very costly to run an instance in terms of bandwidth and also it is server to server and that is just federation, which is cool in its own way but not comparable. It has the best of both worlds and also the worst.

@soapdog
> the fediverse is indeed cool, but it is not the p2p I aim for

Pure P2P networks have been the holy grail of every new generation of cypherpunks since the 90s. They've never worked out. Everything that's turned out to be practical for use beyond dogfooding has some kind of supernode, and that's not even a bad thing;

https://bridgeseat.substack.com/p/in-defence-of-servers

> It is very costly to run an instance in terms of bandwidth

If you use Mastodon, sure. There are much more efficient fediverse servers.

@cy

In Defence of Servers

Why pure peer-to-peer networks aren't always better than federated ones

Bridge Seat Cooperative
Supernodes aren't bad things, but gatekeeping supernodes with no deniability are. That's why the Fediverse uh... sucks. That and we're tied to one specific supernode.

Also substack are Nazis so don't read them.

Secure Scuttlebutt works just fine for p2p. My only complaint is it uses a blockchain for no reason other than it makes it somewhat more difficult to erase what you've said in the past. Which is like the opposite of good from a privacy standpoint.

CC: @[email protected]

(1/3)

@cy
> gatekeeping supernodes

The option is there to be your own gatekeeper, eg with a GoToSocial instance. Most people *choose* to outsource this work. But no one is forced to.

> with no deniability

Huh?

> we're tied to one specific supernode

Not if you use Hubzilla, Streams, Forte, or other apps in theZot/Nomad branch of the 'verse.

Folks are working on FEPs for enabling other AP apps to become nomadic;

https://wedistribute.org/2024/03/activitypub-nomadic-identity/

@soapdog

(2/?)

@cy
> Also substack are Nazis so don't read them

I'm aware of the issues with SS;

https://disintermedia.net.nz/ghosting-substack/

Haven't yet had the time and spoons to republish those Bridge Seat posts so I can stop linking to SS. Hope you'll make an exception for the sake of this discussion.

Ghosting SubStack

Why I finally decided to leave, and where I'm going next

Disintermedia

(3/3)

@cyd
> Secure Scuttlebutt works just fine

It works. But with *many* limitations, which is why other devs have moved on. These include;

* can't use one ID in multiple apps/ devices
* can't delete or edit posts
* rare but unavoidable netsplits that fork your ID

> My only complaint is it uses a blockchain

As @soapdog says, it doesn't. Social apps using a blockchain have been tried;

https://wiki.p2pfoundation.net/Blockchain_Social_Media_Apps

AFAIK they have to sync the entire network and get bogged down by chain size.

Blockchain Social Media Apps - P2P Foundation Wiki

@strypey

can recommend to use `dat` all the upsides, none of the downsides.

identity works multi device too. you can delete or edit posts too and nefsplits do nothing.

its not using blockchains or token either.

https://github.com/holepunchto/hypercore

"Hypercore is a secure, distributed append-only log."

Append-only log is a blockchain.

EDIT: Hypercore is a Merkle Tree, so it at least can verify recent posts without checking the whole log. Better than a blockchain, if still kind of pointless.

CC: @[email protected]
GitHub - holepunchto/hypercore: Hypercore is a secure, distributed append-only log.

Hypercore is a secure, distributed append-only log. - holepunchto/hypercore

GitHub

@cy @strypey

then ssb is a blockchain as well, even more so than dat. i understand that one can define it like that, but imho if there is no token/cryptocurrency involved i would not call it a blockchain. usually ppl hearing blockchain think of cryptocurrency.

if you'd call dat blockchain, one should be aware it means every peer usually creates loads of them and only they can write to it and also subscribes to loads of them only writable by others. consensus then means it was signed by owner๐Ÿคทโ€โ™€๏ธ

Sorry if there was any confusion. When I say blockchain, I mean blockchain. I don't like blockchains. They're unscalable and pointless.

Blockchains are only one of the reasons I don't like cryptocurrency!

It'd be fine if blockchains were optional. You mentioned hypercore as a uh... "core" module though, so I assume lots of things use it.

CC: @[email protected]

@cy @strypey

you can use the the dat p2p network without hypercore, but alao hypercore scales perfectly well, the more peers, the better it scales, just like torrents do, but then again in peer to peer you dont need global consensus.

i feel this is not really leading anywhere though ๐Ÿ™‚

I doubt it does scale, since you need the whole tree to verify the tree hasn't been edited. But maybe nobody does verify it? Because I'm cool with that. Just seems odd to even have it.

And I'll have you know this is leading somewhere I'm looking at the hypercore code right now :p

I have to admit, your advice to "make a small demo" doesn't fill me with confidence. If nobody has ever made a forum on dat before, then why would I be the first to succeed?

Still, I could give it a shot. But then we're back to dogfooding, and nobody using my demo but me...

CC: @[email protected]

@cy @strypey

no you dont.
you start with a hypercore's public key as its address to lookup peers and sync some log entries torrent style. you also sync a handful of "tree nodes" (=merkle proof) with a merkle root signature to verify data integrity using the pubkey you started with.

verifying means you can sync data from any random peer bittorrent style, but you know the data is exacty what the author published and wasnt accidently or maliciously changed.

@cy @strypey

plenty of apps exist. dat-ecosystem has dozens of them, multiple messengers, vpn's, radios, filesharing tools, p2p maps, p2p rss readers and even browsers and runtimes.

Does it have a forum, where you can talk to people about stuff?

p2p maps sounds cool.

CC: @[email protected]

@cy @strypey

every dat-ecosystem project has its own community.

since the keet p2p messenger is powered by the stack, you can find some technical support there.

The p2p maps project is called Mapeo.

But if anyone wants to try to build i can give some support as well ๐Ÿ™‚