you are viewing a single comment's thread.

view the rest of the comments →

[–]bobbobbybob 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (16 children)

Zeronet auto downloads whole sites, not just the bits you are looking at. That's the issue

[–]tabesadff 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (15 children)

That's not necessarily true, there is a thing called "optional files", which makes it so you don't have to download the entire zite. Not to mention, there's ways for TLAs to get people to download images without their knowledge on the normal web too.

Also, I'm pretty sure that would again, only be a problem if you're accessing a zite where there's no moderation against CP taking place. These critiques are maybe applicable to certain specific zites, but I'm not convinced that they really apply to ZeroNet as a whole, just as I don't think the existence of malicious sites on the normal web should be seen as though it was representative of the entire web or a reason to never use any website at all.

[–]bobbobbybob 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (14 children)

how do you KNOW you are not currently hosting CP?

[–]tabesadff 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (13 children)

I mean, you're asking me to prove a negative. How does ANYONE who hosts an ordinary website KNOW that they aren't also hosting CP? TLAs can hack into pretty much anything they want, including ordinary web servers, or whatever device you use, hell, how do YOU know that CP hasn't been planted on your device by the CIA? Also, if they can hack into your email account (not really an "if", they can do that easily), they can use it to send CP to others, so now you're distributing it too! The only assurances that any of us have is that TLAs do have limited resources, so they can't go after EVERYONE, and we're not really interesting enough for the CIA to even bother, and even if we were, and never used ZeroNet even once, they have PLENTY of other tools at their disposal. Fuck, they can even hack into someone's car and assassinate them by causing it to crash. Staying off of ZeroNet isn't going to protect you from TLAs if they're after you, but it will ensure that you're only getting info from websites that these TLAs are allowing to stay up on the normal web.

The only way an ordinary person would reasonably have to worry about unknowingly hosting CP is if they go to a zite that allows images to be uploaded by anyone, and where there's no moderation taking place, and that isn't making use of optional files. So in other words, don't go to places like 8chan, and maybe be cautious of clicking random links from people who you don't trust. Same applies to the normal web too! To me, it really seems a lot of these arguments are basically no different from saying "there's some bad websites on the web, so therefore, stay off the entire web".

[–]bobbobbybob 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (12 children)

I mean, you're asking me to prove a negative.

Not really. I know that I'm not HOSTING CP, as I don't host any websites. There may be CP on my computer if a TLA has put it there, but that requires a pretty active attack, and does not result in further sharing. Of course, if you invent ever more complex scenarios, it could be that my computer is running web hosting via some obfuscated method that bypasses my local and network firewalls, doesn't show up in my task manager or registry and evades various anti-malware and anti-viral protections, but now we are getting into silly territory.

If I used zeronet, I'd have no idea what i was hosting, and any compromised website out of thousands may have resulted in my machined downloading and then sharing CP without my knowledge or consent. Of course, I'd be responsible, because I would have fucked myself by installing zeronet in the first place, and enabled all the image downloading and sharing protocols.

What I was doing was highlighting the difference in attack surfaces, and the risk profile. Since this is so obvious, it seems to me that zeronet is being deliberately unsafe in not allowing fine control over the site download and sharing settings.

If you were honest with yourself, you'd recognise this increased risk and perhaps share concerns, instead of fanboying it.

Unless you glow....

[–]tabesadff 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (11 children)

Of course, if you invent ever more complex scenarios, it could be that my computer is running web hosting via some obfuscated method that bypasses my local and network firewalls, doesn't show up in my task manager or registry and evades various anti-malware and anti-viral protections, but now we are getting into silly territory.

You're the one who brought up TLA-related scenarios, not me, and I agree, it is in silly territory, which was the entire point I was making.

If I used zeronet, I'd have no idea what i was hosting

You can easily look at every file that ZeroNet downloads by looking in the data directory, it's not that hard, just like you can look at any data that gets downloaded when you visit a normal site, and you can even configure ZeroNet to block certain sites, you can easily delete all the data from any site you visit, etc. You're also not hosting anything unless you're actually running ZeroNet, and again, the risk you're talking about would only be applicable in instances where you visit a site that ALLOWS CP and doesn't use optional files for images with a "click to view" system. All of the criticisms you're making are maybe applicable to certain, specific sites on ZeroNet, but are definitely not representative of the entire thing.

If you were honest with yourself, you'd recognise this increased risk and perhaps share concerns, instead of fanboying it.

You're free to make whatever criticisms of ZeroNet you want, I just think they should accurate. I even have some criticisms of it myself, I think there are still too many single points of failure that need to be addressed (for example, there's not really any major forks of the code base, and there's also not very many authentication services). I even agree that with certain, specific sites on there, namely, ones that ALLOW CP, there IS a potential problem of hosting it if you visit those sites that ALLOW CP. My point though is that that is a criticism against those sites, not against ZeroNet as a whole, and there's ample moderation tools available that make it so that not every site on there is condemned to becoming a CP haven that forces you to host it in the way you're making it out to be. It all depends on the site owner and what they allow, and ZeroNet doesn't force you to visit or host any sites that allow CP, though it is possible maybe someone could trick you into going to one (a risk I don't think is very likely in the first place, and even less likely if you're taking precautions). It's clear to me that you haven't done much research into how ZeroNet actually works, because if you had, you'd realize it's just like any other p2p network where sure, some content on it may be illegal, and sure, maybe someone could trick you into seeding that illegal content for some amount of time, but as long as you're being careful, that's not going to be a particularly likely risk. If you're willing to accept the risks of something like torrenting, there isn't really much that's fundamentally different with the risks of that and the potential risks of ZeroNet. It seems to me you're just hyping up a lot of FUD.

[–]bobbobbybob 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (10 children)

there IS a potential problem of hosting it if you visit those sites that ALLOW CP.

I don't think you really understand the issue at all.

It's clear to me that you haven't done much research into how ZeroNet actually works,

i think that I stopped using it long before you started.

you'd realize it's just like any other p2p network where sure, some content on it may be illegal, and sure, maybe someone could trick you into seeding that illegal content for some amount of time, but as long as you're being careful, that's not going to be a particularly likely risk.

See, this is the bit where I did my due diligence. And where i ran into the issue that is the lack of control of downloading / seeding .

. If you're willing to accept the risks of something like torrenting, there isn't really much that's fundamentally different with the risks of that and the potential risks of ZeroNet.

Absolutely not the same at all. With a torrent, all files in that torrent can be inspected before downloading. Tell me, how many zeronet imageboards have you used? How many times have you looked at the image folder of a website before browsing the front page?

It seems to me you're just hyping up a lot of FUD.

Seems to me you are whitewashing an issue that has turned a lot of people off zeronet. Maybe do a bit of searching with the terms "zeronet" and "CP" to see that the problem has been around a long time and nothing has been done to allow users to mitigate the issue

[–]tabesadff 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (9 children)

I don't think you really understand the issue at all.

I understand the issue, I just don't think it's fair to characterize it as being something that's entirely unavoidable, or that it's so much a problem with ZeroNet as it is with those specific sites on there (though I do agree, ZeroNet could do better in terms of making it easier to have more control over seeding, and as I've said previously, I'd like to see more forks of it). There are ways to use ZeroNet without having much of a risk of that problem, but yes, with any technology, there are risks from bad actors that you need to worry about, and you need to exercise caution when using it.

See, this is the bit where I did my due diligence. And where i ran into the issue that is the lack of control of downloading / seeding .

But you're saying things like "Zeronet auto downloads whole sites", and that's not true, there are optional files which make it so you don't need to download a whole site. You also said "If I used zeronet, I'd have no idea what i was hosting", but it's definitely possible (in fact, even easy) to know what you're hosting, you can see every file that ZeroNet saves on your computer. Please forgive me, but those kinds of statements make me think that you haven't actually looked into these things.

Absolutely not the same at all. With a torrent, all files in that torrent can be inspected before downloading. Tell me, how many zeronet imageboards have you used? How many times have you looked at the image folder of a website before browsing the front page?

With any kind of file that you want to inspect from the Internet, you're going to need to download it before you can inspect its content, how do you think it works otherwise? Also, not every site on there is an imageboard, I personally avoid them since, yeah, I don't really have an interest in going to any sites where there's a potential risk of running into CP. Again, that is a problem with those specific sites on there, not with ZeroNet as a whole, and site owners have plenty of options when it comes to preventing CP on their sites, so it's not an inevitable outcome. I think that might help explain why we have such different views since we probably have very different use cases for ZeroNet.

Seems to me you are whitewashing an issue that has turned a lot of people off zeronet. Maybe do a bit of searching with the terms "zeronet" and "CP" to see that the problem has been around a long time and nothing has been done to allow users to mitigate the issue

I'm aware of all the FUD out there, and I'm not saying there is zero danger of that kind of thing at all if you go to certain sites on there (all good FUD has a kernel of truth), all I'm saying is that it is only a problem if you visit sites that allow CP, other than that, the fears about that are highly exaggerated. The solution is to only visit sites that you trust, just as is good practice on the normal web.

[–]bobbobbybob 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (8 children)

(though I do agree, ZeroNet could do better in terms of making it easier to have more control over seeding

yes

there are optional files which make it so you don't need to download a whole site.

expand on this in detail, to prove your argument

I personally avoid them since, yeah, I don't really have an interest in going to any sites where there's a potential risk of running into CP

so you accept that your use of zeronet is heavily limited?

we probably have very different use cases for ZeroNet.

And there is the crux of the debate. Unless you are very much aware of exactly what zeronet does, the safety of zeronet is not assured, neither is the anonymity. SO not a safe replacement system for chan, twitter and facebook style sites AT ALL

and I'm not saying there is zero danger of that kind of thing at all if you go to certain sites on there

The real question is: which sites? does anyone really know?

The solution is to only visit sites that you trust

and how do you learn that trust?

just as is good practice on the normal web.

nope, not an equivalence there, at all. Zeronet is fundamentally a sharing service, not a browsing one. Whole different legal game there.

[–]tabesadff 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (7 children)

expand on this in detail, to prove your argument

An optional file is a file which isn't downloaded unless it is requested by a user. For example, any site owner can design their site so that images on their site are "click to view", so a user will only download an image if they click to view it. It also means that users can choose to delete (and therefore not seed) a single optional file without needing to delete (and therefore not seed) the entire site. I think it would be better to allow more user-control, and make it so any file can be removed as though it were an optional file without relying on a site owner to mark it as such (I suppose you could still do that just through the normal file system, but as far as I'm aware, not through ZeroNet's GUI), but there is always at least the coarse grain option of deleting an entire site to stop seeding it.

so you accept that your use of zeronet is heavily limited?

Sure, just as I accept that my use of the regular web is heavily limited. In both cases, I only use about 6 or 7 sites, and don't have any interest in going anywhere that's likely going to have CP on it. The main use case I have for ZeroNet is that it's one (of several) ways I use to get around Big Tech's censorship of political speech, and for that purpose, I think it is an excellent tool. Maybe it doesn't fully replace the normal web for me, I still am on here after all, but it is something I see as being useful nonetheless.

Unless you are very much aware of exactly what zeronet does, the safety of zeronet is not assured, neither is the anonymity.

Nor is it for the normal web, especially when you venture outside of the 4 or 5 sites that everyone else is on, and for anonymity, there is zero anonymity on the normal web unless you're using something like Tor, and even then, your anonymity can still be compromised, all it does is make it more difficult for that to happen.

SO not a safe replacement system for chan, twitter and facebook style sites AT ALL

Why do you think people are safe from accidentally downloading CP on Facebook or Twitter? It's probably not because nobody has ever uploaded CP to those platforms, it's much more likely because those platforms moderate the content that is allowed on them. ZeroNet allows sites to be moderated as well, just many site owners on there CHOOSE not to moderate them, and further, if someone were trying to create something like Twitter or Facebook on ZeroNet, it can be made so that the only content users see by default is from people who they follow, and that way, as long as you're not following a pedo, you would have nothing to worry about in that case even if there was no moderation taking place.

The real question is: which sites? does anyone really know?

So for one thing, sites such as ZeroTalk that don't allow images are obviously going to be pretty safe from CP since they're just text based. Also, there's some blogs on there that I read where only the site owner is able to upload images/videos, and these are people I trust to not upload CP to their own blogs. As of now, there's sadly not very many sites that I'm aware of which both allow user uploaded media content and also are committed to moderation of the site to make sure that things like CP don't get uploaded to them, but again, that's not really so much a problem with ZeroNet's design as it is a problem of that not being something that it really has much of yet, and I'm sure that would change quickly if it had more normal people on it.

and how do you learn that trust?

I mean, that's going to be something that's going to have a different answer depending on who you ask since a thing like trust is extremely subjective. If, say a trusted friend told me about a site they recommend, I think it likely wouldn't be a problem to visit it, but if I see a link some stranger posted (even on the normal web), I at least would try to do some research about it before I would consider visiting it, and if I can't find any info, or the info I found indicates it might have something I don't want to see, I just won't visit it. For example, I know to avoid 8chan despite having never visited it just because I've easily been able to find information about it online that indicates it's not a place I would want to go.

nope, not an equivalence there, at all. Zeronet is fundamentally a sharing service, not a browsing one. Whole different legal game there.

So IF you are on a site that allows CP AND that site doesn't make use of a "click to view" system with optional files, then sure, you would be at risk of potentially facing more legal consequences by seeding it than what you would for just merely downloading it, but it's also not like downloading CP on the normal web is exactly free of legal risks either. I don't think that the fact that someone can face significant legal risks for unintentionally viewing CP on the normal web is something that's the fault of the web so much as it is with the specific sites that don't take any measures (such as moderating content) to prevent CP from being on them. With that said, I agree that ZeroNet should give more control over seeding to its users, not because I think these "you could unknowingly seed CP" scenarios are particularly likely or unavoidable (maybe we can agree to disagree? seems like it might depend on specific use cases?), but because for one thing, it would do a lot to at least combat the perception of that being an issue, which would give more people peace of mind while using it, and for another thing, I'm always in support of software that puts more control in the hands of its users.