cover photo

elmussol

elmussol@elsmussols.org

Red on GNUSocial

elmussol
 Xerta last edited: Wed, 21 Mar 2018 18:53:54 +0100  
Conversations about and touching Red are happening on GNUSocial. @mmn asked the following question in this thread (which I couldn't answer, so am looking for guidance):

Has #zot been peer reviewed by experienced cryptographers and security specialists yet? I had some glances on the protocol spec but didn't feel very comfortable. But I'm not a security or cryptography specialist either, just a paranoid conservatist.
 red
Mike Macgirvin
  

"Let any one of you who is without sin be the first to throw a stone...”
-- John 8:7
Mike Macgirvin
  
I just find it hilarious that we get so much critique from statusnet/gnusocial. Our network deletion model isn't perfect. they're right. It's not. They've got none at all. It's also possible to create malicious edits if you allow edited posts. They're right. They don't let you fix your typos at all. And since you can't delete them, you just live with every mistake you've ever made. Lovely.

There is no perfect solution to these problems in a decentralised world, so instead if you can't have perfection, nobody can have anything - even a solution that works just fine more than 99% of the time.

Let's put this into perspective. You can't build a perfect car or airplane that will never crash and never cause an injury. So nobody should ever be allowed to drive or fly? No - you do the best you can and you try to make it better.

Next it's our security and privacy implementation. It is pronounced flawed because somebody who isn't an expert took a quick look and didn't feel comfortable - whatever that means;  and suggests we have it peer reviewed/audited.  Again, let's set the context - this is from somebody who is comfortable using statusnet/gnusocial. Our privacy implementation isn't good enough for them. Does anybody else see the irony? Stop it, you're killing me.
zottel
  
Exactly. And $largeamountofmoney is the point. I always wonder where people who ask this question think this would come from.
another good list of reasons you should get Zot

elmussol
 Xerta last edited: Thu, 22 Mar 2018 13:17:36 +0100  
Seth MartinSeth Martin wrote the following post Mon, 21 Apr 2014 04:24:42 +0200

Facebook is screwing all of your favorite Facebook pages.
The days of thriving Facebook pages are coming to an end quickly. If you run your own Facebook page you’ve already experienced this problem of reaching your own fans. These people who opted in and want to receive your updates won't ever see them now unless you pay money.

These two videos reveal the shadiness of what’s happening on Facebook right now. The videos explain why we often don't see each other’s posts, why all of our pages are filled with fake users, and how Facebook makes more money because of it.

[youtube]http://youtu.be/oVfHeWTKjag[/youtube]
[youtube]http://youtu.be/l9ZqXlHl65g[/youtube]
The solution is of course to abandon the decrepit, privacy abusing, centralized walled gardens like Facebook. The free and open internet now has all of the social networking features of Facebook available without the problems and limits.

The most feature-rich option is the r#:

The Red Matrix is a decentralized network where the people using it are in charge and the size of your server farm and wealth do not offer any comparable advantage. Anybody may participate on a level playing field. Cloud storage, file sharing, communications, content creation and management belong to everybody and can be shared with anybody (or somebody, or nobody). This is only a representative sample of the services that the Red Matrix plans to offer. In an internet where creativity is allowed to flourish and corporate overlords have no power, the door is open to entirely new forms of expression and applications. The Red Matrix software is free and open source; created by volunteers and distributed under the MIT license.

And the Red Matrix has Got Zot.

So what the heck is Zot? I'm glad you asked...

Your identity is your own. One identity across the network.
Zot is a revolutionary protocol which provides decentralized communications and identity management across the matrix. The resulting platform can provide web services comparable to those offered by large corporate providers, but without the large corporate provider and their associated privacy issues. Communications and social networking are an integral part of the matrix. Any channel (and any services provided by that channel) can make full use of feature-rich social communications on a global scale.

We use the full power of the matrix to offer friend suggestions and directory services. You can also perform other things which would typically only be possibly on a centralized provider - such as "wall to wall" posts and private/multiple profiles and web content which can be tailored to the viewer. You won't find these features at all on other decentralized communication services. The difference is that Zot also provides decentralized identity services. This is what separates the men from the boys, and what makes life in the matrix so awesome.

Zot's identity layer is unique. It's like OpenID on steroids. It provides invisible single sign-on across all sites in the matrix; as well as nomadic identity so that your communications with friends, family, and business partners won't be affected by the loss of your primary communication node - either temporarily or permanently. The important bits of your identity and relationships can be backed up to a thumb drive and may appear at any node in the matrix at any time - with all your friends and preferences intact. These nomadic instances are kept in sync so any instance can take over if another one is compromised or damaged. This protects you against not only major system failure, but also temporary site overloads and governmental manipulation. You cannot be silenced. You cannot be removed from the matrix.

As you browse the matrix viewing channels and their unique content, you are seamlessly authenticated as you go, even across completely different server hubs. No password dialogues. Nothing to type. You're just greeted by name on every new site you visit. How does Zot do that? We call it "magic-auth" because it really is technology that is so advanced as to be indistinguishable from magic. You login only once on your home hub (or any nomadic backup hub you have chosen). This allows you to access any authenticated services provided anywhere in the matrix - such as shopping and access to private information. This is just like the services offered by large corporate providers with huge user databases; however you can be a member of this community and a server on this network using a "plug computer" like a Rasberry Pi. Your password isn't stored on a thousand different sites where it can be stolen and used to clean out your bank accounts.

You control your data. Red Matrix enforces your permissions.
Zot's identity layer allows you to provide fine-grained permissions to any content you wish to publish - and these permissions extend across the Red Matrix. This is like having one super huge website made up of an army of small individual websites - and where each channel in the matrix can completely control their privacy and sharing preferences for any web resources they create.

Example: you want a photo to be visible to your family and three select friends, but not your work colleagues. In the matrix this is easy. Even if your family members, work colleagues, and friends all have accounts on different hubs.

Currently the matrix supports communications, photo albums, events, files, chat rooms, content management services (web pages) and WebDAV cloud storage facilities. Every object and how it is shared and with whom is completely under your control.

Again, this type of control is available on large corporate providers, because they own the user database. Within the matrix, there is no need for a huge user database on your machine - because the matrix is your user database and for all intents and purposes has infinite capacity and is spread amongst hundreds, and potentially millions of computers. Access can be granted or denied for any resource, to any channel or any group of channels; anywhere within the matrix. They do not need to have an account on your hub.

Reclaim your privacy. Red Matrix is built for you, not governments and corporations.
Your communications may be public or private - and we allow your private communications to be as private as you wish them to be. Private communications comprise not only fully encrypted transport, but also encrypted storage to help protect against accidental snooping and disclosure by rogue system administrators and internet service providers.

Want more? You can fully encrypt your messages "end to end" using your choice of encryption ciphers and using a passphrase that only you and the recipient(s) know - in addition to our standard multi-layer encryption.

Want more? Our end to end encryption is pluggable. You can define your own chain of multiple encryption steps with multiple keys, and include algorithms known only to you and the recipient. At some point even the US National Security Agency will have to throw up their hands. There won't be enough computational power available in the universe to decode your private message.

We also provide optional message expiration as a standard feature. When the expiration date/time passes, your message is removed from the network.


Another great decentralized option is a social network called Friendica, which was created by the same developers prior to the Red Matrix but has less features and is often used because people are familiar with the simple social network permissions. Friendica also federates with other decentralized social networks like diaspora*.

#Facebook #Fraud #Social Networking #Decentralization #Open-Source #Communication #Friendica #RedMatrix #CMS #WebDAV #Zot #GotZot? #GetZot @LibertPod_Test_Channel+ @Laissez-Faire_Capitalism+