[deleted]

Comments

• vrighter@discuss.tchncs.de ⁨1⁩ ⁨year⁩ ago

  do you have the full blockchain on your phone? no?

  Do you host the full blockchain on a server at home and access that through your phone? no?

  Then you’re consuming someone’s private api. They can send you whatever and you will trust it, because you don’t verify anything they return.

  source

  • iopq@lemmy.world ⁨1⁩ ⁨year⁩ ago

    If you connect to the internet through an ISP you can’t trust that either. That’s why we have encryption, you can only block the whole message from appearing completely, you can’t change its contents

    source

    • vrighter@discuss.tchncs.de ⁨1⁩ ⁨year⁩ ago

      using encryption in this case protects you from the isp messing with your communication to the api provider. The api can still lie to you and encrypt the lie.

      source

      • -> View More Comments
• al4s@feddit.de ⁨1⁩ ⁨year⁩ ago

  Here are some corrections:

  • Blockchain has nothing to do with P2P.

  Blockchains are federated ledgers that can’t be changed later, unless the majority of federated servers decides to. P2P means that two devices communicate without a server in the middle. Maybe you meant federated?

  • Blockchains can absolutely be hacked. You can gain majority control over the servers, in which case you can rewrite the blockchain as you want. Alternatively you can gain access to accounts/wallets by hacking the software that users store them in or by social-engineering people to give you their keys.

  • If proper end-to-end encryption is used, there is little security difference between server-based and P2P communication, but it’s much more inconvenient: You cannot save sent messages on the server for later retrieval, so if you’re trying to reach someone who’s currently offline, your device has to wait until they’re back before sending the message. Also if you use multiple devices, keeping them in sync is very complicated, because they have to be online at the same time.

  source

  • magic_lobster_party@kbin.social ⁨1⁩ ⁨year⁩ ago

    Alternatively you can gain access to accounts/wallets by hacking the software that users store them in or by social-engineering people to give you their keys.

    This is happening almost on a daily basis. The security of a system is determined by its weakest link, and blockchain has many such links. Only a small part of blockchain is “unhackable”.

    It doesn’t matter if your front door is unbreakable if you leave your back door wide open.

    source
• elbarto777@lemmy.world ⁨1⁩ ⁨year⁩ ago

  Blockchain is not the ultimate unhackable decentralized solution.

  P2P doesn’t need blockchain to work well.

  Unfortunately, blockchain stuff are definitely hackable. I’m sure you’ve read the many cases in which people have been hacked while using some blockchain based app.

  source
• Voroxpete@sh.itjust.works ⁨1⁩ ⁨year⁩ ago

  web3isgoinggreat.com

  Spend 5 minutes on this site, and then tell me that “no one can hack a blockchain”.

  source
• dsemy@lemm.ee ⁨1⁩ ⁨year⁩ ago

  I don’t see what this has to do with blockchains, SimpleX for example doesn’t even use blockchains.

  What’s preventing their widespread use is a combination of most of them being objectively worse than their non-decentralized counterparts (at least from a UX standpoint) and competing with established alternatives, as most people probably wouldn’t switch to a seemingly worse alternative to what they and their friends currently use.

  source
• RoyalEngineering@lemmy.world ⁨1⁩ ⁨year⁩ ago

  why not switch to these alternatives?

  Because nobody uses them.

  source
• despotic_machine@lemmy.world ⁨1⁩ ⁨year⁩ ago

  Nothing is unhackable, but I do think the new Veilid framework that Cult of the Dead Cow recently announced at Defcon looks very promising. Here are the internals:

  veilid.com/Launch-Slides-Veilid.pdf

  source
• smileyhead@discuss.tchncs.de ⁨1⁩ ⁨year⁩ ago

  Blockchain requires everyone to have global Internet connection, which is an assumption that is not always possible.

  What if I don’t nessesary need my posts to be replicated houndreds of times all over the world and providing from Raspberry Pi under the bed is enough? What if goverment cut off Internet on it’s borders for a month?

  Guess what blockchain nodes are using to connect to each other? IANA’s IP space, ICANN’s DNS system, global SSL system…

  If we want ultimate goal of decentralization, why not permissionless mesh networking without ISP dependency? GNUNet is closest to this idea, but in alpha development for 20 years.

  source
• WhoRoger@lemmy.world ⁨1⁩ ⁨year⁩ ago

  I use Session Messenger, on the Oxen network. Love it on principle even tho the implementation is a bit lacking in places.

  And there’s Tor… Which is what it is.

  source
• 3arn0wl@lemmy.world ⁨1⁩ ⁨year⁩ ago

  I use Tox P2P.

  source