Topic: [BBR] Boolberry: Privacy and Security - Guaranteed Since 2014 - page 242. (Read 1210779 times)

95% of bids pulled just before CZ announced the no announcement.  Maybe that had something to do with it?

ETA"  the price had not gone up due to the announcement of the announcement.  Would you like to try again?

People were asking questions. I offered answers if they wanted. They're still welcome to them, if they want.
Since you ask, I imagine the dumps are fairly easily explained by panic sellers bailing after the ANN they thought would make them lots of money failed to materialise. Perhaps they thought everyone else would sell and wanted to get in first. Keynesian beauty contest. What's hard to understand about that? It's crypto, it's driven by sentiment.
Now if only there were initiatives that understood fundamentals were important, and realised collaboration was so much better than competition...

"There needs to be vetted math, science, crypto and code for all to see."
Well the code is here: https://github.com/jl777/libjl777
I use standard crypto: nacl and libtom

Right now I am debugging on  a test scale network. Cassius will be documenting the API. I have a technical roadmap, but I do not have the skills to explain it to nontechnical people, so I will just push forward and implement it. I dont have time to deal with baseless accusations that I am some snake oil guy.

###
https://forum.thesupernet.org/index.php?topic=154.msg1111#msg1111

I finished debugging all the DHT calls. Ended up adding data compression to the loop, along with out of band binary data beyond the JSON in the onion packets. Also, a lot more difficult that I thought it would be, but finally got all packets to be the same size, thus removing a leak of info about the type of commands you are sending.

./BitcoinDarkd SuperNET '{"requestType":"getpeers"}'
./BitcoinDarkd SuperNET '{"requestType":"getPservers"}'
./BitcoinDarkd SuperNET '{"requestType":"ping","destip":"209.126.70.156"}'
./BitcoinDarkd SuperNET '{"requestType":"findnode","key":""}'

./BitcoinDarkd SuperNET '{"requestType":"store","name":"","data":""}'
./BitcoinDarkd SuperNET '{"requestType":"findvalue","name":""}'

This weekend I implemented a variant of http://www.cs.rice.edu/Conferences/IPTPS02/109.pdf, using 64bit NXT addresses for the hash, eg. least significant 64bits of sha256. collision resolution is something for a layer above this level to do. I plan to add some simple file API on top of this so we can get a nice decentralized storage along with sending of files.

of course all this is under heavy encryption, but still the IP addresses are not shielded yet. The sendmessage API appears to be working in simple topologies, should work with more layers, but need a larger network to test this.

./BitcoinDarkd SuperNET '{"requestType":"sendmessage","dest":","msg":"","L":}'

Using the sendmessage api, it should be pretty easy to make an encrypted chat application.

####

yesterday I did this:

Since there was no large network for me to test with today, I decided to make two new API calls that allow for cloud storage of files. They are massively encrypted and also M of N is supported to deal with hash collisions, sybil attacks, offline nodes, etc. With the proper M and N settings, I think this will be quite a resilient file storage appropriate for the files you just cant lose. The comms with the cloud are via the DHT API from this weekend and the L parameter is for the max number of onion layers to use and all the packets are the same size, so there is no leakage based on packet size.

char *savefile[] = {  "filename", "L", "M", "N", "usbdir", "password", 0 };
char *restorefile[] = { "filename", "L", "M", "N", "usbdir", "password", "destfile", "sharenrs", "txids", 0 };

./BitcoinDarkd SuperNET '{"requestType":"savefile","filename":"","L":0,"M":1,"N":1,"usbdir":"","password":""}'

The savefile will print (and save in usbdir) the required sharenrs and txids JSON fields to use for the restorefile.
The "destfile" field is where the file will be reconstructed.

If the "usbdir" parameter is set, then local backups are made (highly recommended!) and it is used to check the data coming back from the cloud. After you verify that the cloud has a proper copy, then you can partition the various parts from the usbdir directory to various places to have two full backups, one under your local control and one in the cloud.

The max value for N is 254 and M has to be less than or equal to N. The M of N parameters are independent of the "password" field. If you are using M of N, then unless the attacker gets a hold of M pieces, they wont be able to reconstruct the file. Without the txid list, the attacker wont know how to reconstruct the file.

But why take any chances. so I made the password field use an iterative method to create what I think is a pretty practical encryption method, which is based on the name of the file, your pubNXT acct passphrase and the password itself. The length of the password determines the number of ciphers that are applied

        namehash = calc_txid(name,strlen(name));
        len = strlen(password);
        passwordhash = (namehash ^ calc_txid(keygen,strlen(keygen)) ^ calc_txid(password,len));
        for (i=0; i        {
            expand_nxt64bits(key,passwordhash);
            cipherids = (password % NUM_CIPHERS);  // choose one of 18 ciphers
            privkeys = clonestr(key);
            if ( i < len-1 )
                passwordhash ^= (namehash ^ calc_txid(key,strlen(key)));
        }
   
Since the keygen is the pubNXT password, which in turn is a dumpprivkey for a BTCD address, this assures high entropy and the filename being encrypted is added to the passwordhash so that different files will have different encryption keys. By using the password to modify the initial password hash and to determine the number of ciphers and their sequence creates a lot of impact from even a short password, like a PIN

When M of N is combined with password, the attacker would need to get a hold of the name of the file, M fragments, the list of txids, the randomly generated sharenrs array and the password you used. Unless your computer is totally compromised and you divulge your short password, this seems like a pretty good level of security.

Now with the DHT there is the chance of collision, sybil attacks, inaccessible nodes, etc. I think using M of N side steps all of these issues. Also, the txid (calculated like NXT does) is based on the contents being stored, so it would take a lot of computation to be able to even get control of the nodes needed to block access to any specific content and near impossible to spoof anything. Maybe someone can come up with a sybil attack that can be done? However, without knowing the hash values of all the fragments, where will the sybils setup their attack? And will they be able to invalidate M copies that they dont know the txid for?

The following are the ciphers:
    "aes","blowfish","xtea","rc5","rc6","saferp","twofish","safer_k64","safer_sk64","safer_k128",
    "safer_sk128","rc2","des3","cast5","noekeon","skipjack","khazad","anubis","rijndael"

####

I apologize for only working 16 hours per day and not having the proper skills to explain everything perfectly clearly.

I am just a simple C programmer

James

P.S. The fundraising idea did not work out, but this has nothing to do with the tech. SuperNET is not a one dimensional thing.

Perhaps you can also explain what happened with the dumps then?  Stop using this thread for advertisements.

I don't pretend to speak on behalf of anyone, but I've done a certain amount of work for jl777 on both Teleport and SuperNET documentation.
I'm not a dev, I'm a writer, and I understand them both pretty well. They are both excellent ideas. They are very simple in theory - elegantly simple, in fact.
There is a lot of complexity to get through to reach that simplicity, though
If you have specific questions, please ask them. Better still head over to the SuperNET forum and ask there, as I won't have lots of time to answer stuff here. There will be other folks who can help out there. There's also a SuperNET thread here, though mostly it's pretty quiet as everyone left for the SuperNET forum after some rabid trolls made it impossible to get anything done.

If someone is able to use BBR via SuperNET then why do we need to get BBR individually? Pure Anonymous transactions are what we have all been after since this space was discovered, but don't forget that it is also mostly about an agreed upon, unanimously chosen store of wealth.

I respect your posts EN. At this point I would ideally like CZ, James and or someone who speaks on behalf of them to come forward and start making a lot of sense.

You are way off base if you think that I'm posting as romanornr.  I haven't sold a single BBR and in fact I picked up more.  I think BBR is the best of all the Cryptonote coins and have supported BBR by mining, buying on the exchanges, and making donations to bounties for open sourced miners and developer funds.  What have you done except try and play detective?  A bad one at that.  As it stands, I am firmly behind BBR.  I don't post in the BBR thread because I don't want trolls to follow me here and clutter up this thread with nonsense like you posted.  I am ready to donate more for the development of BBR as soon as I get a grasp on what is going on regarding the future of BBR/Supernet, etc...  I noticed that BBR was still listed as a core coin in the latest Supernet newsletter and I am hoping that is the case.  I can understand the falling out that CZ had with windjc "if that is actually the case" but that should not impact going forward as a core coin in Supernet.

I think the best thing would be for CZ to get this information out there as soon as possible regarding Supernet and BBR.  As soon as I have an understanding on what is going on with BBR and what plans there are going forward I am ready to donate even more BBR and BTC to the developer.  I hope that this drama is resolved sooner rather than later.  I also think that Supernet is a great opportunity for BBR and one that should be taken.  As far as funding and marketing is concerned, there are ample BBR supporters more than capable of these tasks.  So it's time for people to put up or shut up.  The last dozens of pages in this thread have been nothing but crap about name changes and soap opera like drama.  This shit needs to end.  What needs to happen now is people need to get behind CZ, help support the coin, and donate or help raise funds for development.  I'm sure there are many others that feel the same way I do.

Now back to your regularly scheduled programming.


    





 

That's fine if it's not sufficient. I didn't mean to say that it was. I was mainly replying to the assertions that no one understood it.

There's no rush here. It's being developed and no one is telling anyone to buy anything.

The only thing I'm advising people to do here is wait and see and let results speak for themselves.

The SuperNet will be vetted. You will get all of that. Maybe just not as fast as you'd like. But you'll get it.

Este, thanks for your detailed posts.  I had the privilege of being on a 2 hour IRC last week with James and CZ where James laid out what BBR would mean for SuperNet and vice versa.  It's pretty amazing. In fact, imo, it has the potential to be a game changer for BBR, while making SuperNet's upcoming teleport system the most anonymous transaction system in the world.  And, yes, apparently Anonymint was quite impressed.

So SuperNet is complicated. People haven't seen it in action so they have a hard time comprehending it. But all in due time. These things will simply take care of themselves.

Meanwhile, just for the record, I have not sold 1 BBR that I own. I am still a BBR supporter.

This isn't satisfactory. This whole word of mouth explanation to individuals is not cryptography. There needs to be vetted math, science, crypto and code for all to see.

Did BBR get sucked into SuperNET due to jl777 being the biggest BBR holder and XMR showing him the door? Some of what XMR bullies did I definitely frown upon (mainly Poloniex not able to milk money from ICO after giving XMR all the life it has), but can you blame them for not supporting convolution?

Technical level, sure. I'm sure with time James and CZ will be able work together and James will be able to explain it to him. I mean I understand why CZ probably isn't thrilled with only having to look at a shitload of C on github and no technical documentation. Perhaps superNET needs to pay some one to do some technical documentation. That would probably add a lot of value.

On a user level it's fairly simple. It's going to be graphical interface where someone will be able to do a variety of things including:

-Ability to send BBR transactions with other currencies(which of course use CN's ring signatures and BBR's unlinkable outputs upgrade)
-Buy and sell assets with whatever currency you're using on the NXT decentralised asset exchange instantly with James' InstantDEX and MGW tech.
-Buy and sell crypto and fiat through the coinomat service. Which is apparently offering some sort of anonymous debit card which sounds pretty interesting(but I don't know much about it).
-It will be a platform where service providers will be able to integrate their service to be used directly from the superNET GUI. For example BTER exchange is planning on implementing their service to be fully usable from the superNET GUI.
-Integrating Bitmark's 'marking' reputation+trust system which integrates Martti Malmi's(sirius on here) Identifi. This will be helpful for using the asset exchange and to help rate any service provider on the network(or any object really).
-Decentralised peer to peer anonymous betting system via James' Privatebet tech.

And probably a lot more. Think of it as a portal for users of altcoins. Where different technologies can be plugged in to the network and made available for regular users who don't necessarily want to use 5 different crypto wallets, but might want to use their respective tech. It's an attempt to leverage the network effect and create an easy to use interface so that good cryptos can just join the network and not worry about fighting among themselves and splitting an already small user base.

So I think the idea behind it is good. The all the technical and security related questions are very valid and I hope that good communication channels get set up and some solid documentation written because it's going to be important.

My post wasn't an attempt to explain what superNET is intended to be from user's perspective. If people want me to explain what it is intended to be from a users perspective I can do that. I can't explain it from a technical perspective though and I've never claimed that I could. I have a general idea of some of the technologies that are going to be involved, some of which are already developed and working.

AnonyMint understood Teleport after James explained it to him.

SuperNET is not just a mega fund of any coin it lists and if you're thinking about it that way you're totally wrong. SuperNET as an investment is closer to an open source company that is attempting to generate revenue that's payed back in dividends to shareholders.

What fee are you referring to? There's currently only 1% of the fund allocated for operating expenses right now.

I've yet to see someone criticize superNET on a conceptual level after actually researching what it's about. Ever criticism I've come across on this forum has been based totally on peoples assumptions of what they think it is, not what it actually is.

CZ who despite "coding like there is no tomorrow"^TM fails to see what it is, can you blame anyone?

I might have started the SuperNET angle here, but I really don't know. We just need some clear/concise explanation and CZ's last post indicated that he is as confused as anyone. Someone dropped 50k out of nowhere and all major support was gone from the books. So yah ....

I donate via mining. Do you?

LMAO, suddenly no Engrish?

Confusius say "Whale who dump precious Boolberries, soon die on Moon."

there must be english speaking people in the team. i see tifozi often on irc. i dont know if he's a team member, but if he is, he could do it. if he isnt, he could do it also

Why don't you donate to CZ for this purpose?

If nobody understands it but james, maybe there is a problem with james?

Do you even understand it yourself? Because at no point you explained it. Your last post about supernet is just words and words that goes nowhere. So once again : there is no technology behind supernet. all this talk about technology and teleport (people are being nice to james when they say they dont understand it, they are just too polite to qualify it as a sham) are just here to hide its true purpose: supernet is just a mega fund that aggregates the value of any coin that it lists. There is no value for anyone using it since you pay a fee to james; and you miss most of the rise in value of the newly listed coins since it happens before the supernet listing. Basically, it is a paying pump and dump group where james is the only one with insider information.

At best, snake oil. At worse, scam.