P2P Privacy. Check it, geeks!

[1e-]

Combining BitTorrent With Darknets For P2P Privacy:

"Currently popular peer-to-peer networks suffer from a lack of privacy. For applications like BitTorrent or Gnutella, sharing a file means exposing your behavior to anyone interested in monitoring it. OneSwarm is a new file sharing application developed by researchers at the University of Washington that improves privacy in peer-to-peer networks. Instead of communicating directly, sharing in OneSwarm is friend-to-friend; senders and receivers exchange data using multiple intermediaries in an overlay mesh. OneSwarm is built on (and backwards compatible with) BitTorrent, but includes numerous extensions to improve privacy while providing good performance: point-to-point encryption using SSL, source-address rewriting, and multi-path and multi-source downloading. Clients and source are available for Linux, Mac OS X, and Windows."

http://yro.slashdot.org/article.pl?s...45231&from=rss

[Sydney-Floyd]

interesting. whats the speed like?

[1e-]

Originally Posted by Sydney-Floyd

interesting. whats the speed like?

I'll let you know, going to install it tomorrow. Actually had a real live person over tonight. He's sleeping now and ive sneeked off to the warm glow of my true love - my PCs and Zoklet.

[Dr Gonzo]

Interesting find, I myself have stopped torrenting now, due to an ever growing paranoia.

For this to work though, wouldn't everyone who was normally seeding a regular torrent, need to seed through oneSwarm instead?

[HowlinJayByrd]

I use peer guardian, not anonymous but keeps all those unwanted ip's away from you

[zuperxtreme]

The Hydra project is superior:

http://code.google.com/p/hydraproject/

Anonymity and privacy precautions:

* User IP addresses are never stored on disk or the database
* Email addresses are never collected
* Password hashes are stored in the database with a random salt for each password hash (to curb the feasibility of widespread rainbow attacks)
* Uploaded .torrent files are not associated with users
* User information of who seeded/uploaded particular torrents is never stored
* User share ratio information is, however, kept (bytes downloaded/uploaded)
* One requirement of private trackers is to lookup IP Addresses to correlate username (last login from IP) with torrent client IPs
* For this problem we use memcached, which only ever stores the IPs in system RAM: http://www.danga.com/memcached/
* Web server configuration is up to the user; it is highly advised to disable IP and/or request logging altogether.

Survivability:

* Multiple private THP domain owner/operators ("admins") grant trust rights to fellow private tracker operators, which both must use the THP sync protocol
* At anytime, a server admin can remove a tracker from its list of trusted THP trackers (i.e. in the event of a raid or server compromise)
* User accounts (including password hash information) are shared across all trusted domains and are synced periodically; thus allowing users to login to any known site in the network
* Share ratio information (bytes upped/downloaded) is shared across all trusted servers; note: which files were downed/upped are never stored for obvious privacy reasons.
* Torrents are shared across servers. TBD: exactly how this works, including data synchronization and category push/pull mechanics, etc.
* .torrent files are modified to include a list of all (or a specified subset) of the tracker announce URLs for the trusted trackers. Thus if a single tracker goes down, the .torrent file should still be valid if at least one of its announce URLs is still operational. (Experimental)
* TBD: how to propagate bans or other user management actions across trusted trackers.

http://torrentfreak.com/bittorrent-s...-of-the-hydra/

*awaits*

[HowlinJayByrd]

Sounds awesome, but I'm wondering, what's with the spanish life death quote?

[EricFGregory]

Originally Posted by zuperxtreme

The Hydra project is superior:

http://code.google.com/p/hydraproject/



http://torrentfreak.com/bittorrent-s...-of-the-hydra/

*awaits*

Problem: no mention what-so-ever of anonymity.
Ok, they don't store IP addresses (does anyone?), but what's to stop the RIAA/MPAA/FBI/CIA/NSA/ATF/ect from connecting and monitoring who uses what torrents simply by joining the swarm?
The idea of a darknet is to provide absolute deniability, the data coming from you could be from your machine, or a machine halfway around the world, with no way to tell.
Anyways, OP's technology sounds a bit like an i2p knockoff. I'd need to actually look at the specs to be sure.
At least it isn't TOR or Freenet. Still going to be a pedophile zoo.

[Mutant Funk Drink]

Originally Posted by zuperxtreme

* For this problem we use memcached, which only ever stores the IPs in system RAM: http://www.danga.com/memcached/

For this reason alone, it sounds like it would be piss easy for the MAFIAA to just log whoever connects to their machines.

[amer]

People should just get on private torrent sites. I got a couple invites if anyone needs one PM me.

[Prometheum]

Private torrent sites can be infiltrated. They offer no security. Peerguardian is a good idea, but that's just a race -- they'll always be able to be one ahead.

A protocol is only truly anonymous if it can function without trust demands on any members of the mix. GNUnet is so far the fastest anonymous p2p app I've used, and it can operate in f2f mode, uses any means necessary to communicate data, is 100% encrypted, and can generate cover traffic to thwart timing attacks.