Hacker News new | past | comments | ask | show | jobs | submit login
[flagged] How to build a website/shop that cannot be shut down by Law enforcement (filebase.io)
18 points by mrshadow on Nov 12, 2022 | hide | past | favorite | 23 comments



Can anyone explain how an “NFT domain” compares to Namecoin?

I’m very interested in decentralised and censorship resistant hosting but it really feels like very little progress has been made here. It still seems like the best setup is a tor hidden service. It’s not decentralised but it’s a whole lot more practical and private from what I can see.

I assume IPFS is using some kind of torrent like DHT where it’s trivial to see what files people are accessing.

From my perspective, completely decentralised hosting is not actually very important. A website typically has a central owner who adds content and maintains it, they can often also host some software on a computer somewhere. The hard part is the transport between the owner and the user.

As we have seen, networking infrastructure is widely weaponised for censorship. Tor services avoid this but the accessibility massively drops so you won’t have much of a user base if you rely on tor.


There are max. 2 millions TOR users, but everybody can access the website hosted on IPFS (7 billions). TOR is sensitive to DDoS attack, IPFS; it is not. Ipfs is permanent web.

BTW. Onion sites are not private. Law enforcement can access the onion sites in the same way as others. It just appears private. A cop in undercover can appear like an ordinary citizen and purchase dope from a dealer.


> There are max. 2 millions TOR users, everybody can access the website hosted on IPFS (7 billion)

Only via a centralized relay, giving up the other nice properties.

> TOR is sensitive to DDoS attack, IPFS; it is not.

To DDoS a ToR website you'd need to overload the server(s) the website owner set up. To DDoS IPFS you'd need to overload the whole network. Harder, but not impossible. See [1].

> Ipfs is permanent web.

Sort of, but you have to address pinning.

> Law enforcement can access the onion sites in the same way as others ... A cop in undercover can appear like an ordinary citizen and purchase dope from a dealer

Yes. Solving this would require implementing an evil bit[2]. I don't think IPFS has solved that problem?

[1]: https://github.com/ipfs-inactive/faq/issues/171#issuecomment...

[2]: https://www.ietf.org/rfc/rfc3514.txt


What does max 2 million tor users mean? Anyone can install the Tor browser or view it through Brave browser. I assume you mean the existence of IPFS http gateways? Well there is nothing preventing a tor gateway from exisiting in exactly the same way. I assume the only reason it’s not common is the gateways would receive too many abuse reports due to the content typically hosted on onion sites. This has nothing to do with tech though.

DDoS resistance is an issue on Tor but it has been shown that you can mitigate it. That’s one thing IPFS should win by default.

And for privacy, Tor is pretty much the best you can get. It’s not bullet proof but it is the safest tech in existence. For DHT based technologies you can literally query the DHT and get the ip address of every single person who has a copy of the files. This is way way less private than tor, it’s less private than a standard clearnet website.


I am not advocating for IPFS gateways. Gateways are centralized, I already mentioned somewhere.

You can access the website directly via its CID (ipfs://CID), or via its decentralized domain (domain.eth, domain.x). But of course, you will need a browser with native support for IPFS (Opera, Brave). Currently for other browsers you need an extension called ipfs companion.


and anyone that can get that working is also capable of installing Tor Browser.


To me, .pdf of unknown/web3 provenance is right up there with .docx or other virus vectors unless I can use PDF.js in a browser.

Not sure what I'd recommend as an alternative though, .html?


Don't be silly. Why would anyone consider a .html file for delivery of information on a website?


I made a PDF tutorial and it is accessible here: https://ipfs.filebase.io/ipfs/QmVSogrzAaRLumnhXjuD9VGN3ViP2S...

Please feel free to share it so maybe somebody finds it interesting.


Problem is that lawmakers can simply make the whole technology illegal to use.

China banned trading and mining of all public blockchains (except those it controls) in 2021.


In USA Clinton's attempted Clipper Chip failed, and PGP was found to be speech. How can USA ban speech and math?

https://archive.epic.org/crypto/clipper


I believe the DMCA and the WIPO Copyright Treaty for the rest of the world is what lets specific kinds of math (in a different field) be banned. DeCSS tested this back in '99, with legislation that prohibited publication. Civil disobedience to protest/circumvent this ruling were rife, including the discovery of an illegal number.


> How can USA ban speech and math?

Biden just passed the CHIP act. It's just banned speech and math towards China.


> filebase.com > Decentralized Storage Made Easy

It is hosting company that is operated from U.S. jurisdiction under sauce of Decentralized Storage, and it is laughable in context that presumably it can not be shut down by Law enforcement.

> Everything you upload is public and it is online forever!

It is 'forever' only until people operating these services interested in making money, it is gone after that.


Let's say you upload files via a Pinning Service (Filebase or Pinata). Let's say this website has some traffic. Now let's say this pinning service removes your website, or the pinning service ban your website, or the pinnging service gets bankrupt.

This happens: If someone requests a file or a webpage, a copy of the file is cached on their node. As more and more people request that data, more and more cached copies will exist. Subsequent requests for that file can be fulfilled by any node —or combination of nodes—that has the file on it. The burden of delivering the data and fulfilling the request is gradually shared out among many nodes.


Wouldn't the pinning service be the thing keeping the site on ipfs and thus the place that someone could take you offline?

Also, I'm pretty sure most ipfs gateways that expose ipfs to http requests do comply with DMCA and other takedown notices. The content might be in the ipfs, but it won't be accessible on every gateway (which might break your url)


"I'm pretty sure most ipfs gateways that expose ipfs to http requests do comply with DMCA and other takedown notices"

Correct. 1. there is a lot of IPFS gateways outsite of USA 2. you can access the website directly "ipfs://CID" from Opera, Brave browser

This way it is fully decentralized. IPFS gateways are centralized.


> Because of this, the only way for the Law enforcement to disable websites is to disable all nodes across the world. And this is impossible

Woe to him or her who is harassed by such a web site.


I'm seeing a lot of single points of failure in Figure 1.

What am I missing?


They forgot the step where you add your website to cloudflare to cache it. That away it propagates across their servers. Plus protects from ddos.


at this point one has to wonder if cloudflare acts as a Single Point of Failure.

A CDN provider can decrypt a large portion of Internet traffic, connect to real IP of most services, cached most of the web's content.


It is mildly ironic that the site's admin has blocked my VPN's IP address and is asking this question.


[flagged]


Please don't do this here.




Consider applying for YC's W25 batch! Applications are open till Nov 12.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: