Slashdot Mirror


Gnutella2?

Anenga writes "A Windows (and somewhat WINE compatible) Gnutella client, Shareaza, has released a public preview of its next version which includes a re-designed Gnutella protocol they call "Gnutella2". Gnutella2 (or "G2") dumps the Gnutella broadcast model and uses a new global searching method with UDP connections. It also features compression to limit hub-to-hub (G2 Ultrapeers) bandwidth, Tiger Tree Hashing etc. Shareaza has released a small description of the revised protocol here, but plans to release a full spec to the GDF after the release of v1.7 Final. Gnutella2, which is really a revised Gnutella protocol, will also be free and open for anyone to use in their clients. Shareaza and G2 may give Gnutella - an open and free P2P protocol which has been struggling to keep up with the times against Kazaa, eDonkey and other P2P spin-offs - the stability and power it needs to attract the closed and commercial FastTrack Network users when or if the network folds."

265 comments

  1. YAY UDP! by Anonymous Coward · · Score: 0

    now, the few complete files i get will be corrupted.

    1. Re:YAY UDP! by Anonymous Coward · · Score: 0

      It says the searches use UDP, not the downloads.

  2. It's pretty fast... by Anonymous Coward · · Score: 4, Interesting

    I've tried the beta release and G2 hubs operate faster than the G1 hubs. I was able to get faster and larger searches. If only the other clients included supportf for G2 in the future. Better not be Coke II!

    1. Re:It's pretty fast... by TOGA!+TOGA+TOGA! · · Score: 1

      while that may be true, i wonder how much it will mess up individual user connections. the old gnutella clients were pretty bad in that department.

    2. Re:It's pretty fast... by iofire · · Score: 5, Interesting

      Did anyone else notice that on the beta download page (visit the "next version" link at the top of the page) that there is a button to download it via gnutella? It's nice to see someone make use of this as a way to download software.

      --
      --Avoid metagame thinking, browse with scores hidden (This sig is in violation of itself)
    3. Re:It's pretty fast... by gravelpup · · Score: 1

      Unfortunately, the link only works if you already have the previous version of Shareaza. I even tried searching for the install file in Gnucleus -- nothing so far.

      --

      Things are more like they are now than they ever were before.

    4. Re:It's pretty fast... by Anonvmous+Coward · · Score: 3, Interesting

      "It's nice to see someone make use of this as a way to download software."

      Kazaa does that. Their mini-installer logged into the P2P network and pulled the files down from one of the peers. When I started Kazaa again, the first thing that happened was people started downloading it from me.

      I thought it was kinda cool. Far less bandwidth use on their part.

    5. Re:It's pretty fast... by pod · · Score: 2

      The installer does that, and they also offer this capability as a service. It's called CloudBurst, of something like that, and lets people pay to upload their content to the Kazaa nodes, where it's stored in a special shared folder, and it's downloadable with a specially written Kazaa client.

      --
      "Hot lesbian witches! It's fucking genius!"
    6. Re:It's pretty fast... by zonker · · Score: 0

      forgive me for my ignorance, but does it do an md5 or something to make sure you are getting the 'approved' version instead of something that might be trojaned? just seems like a good way to spread something like that across the network.

    7. Re:It's pretty fast... by sgtsanity · · Score: 1

      The coolest thing ever is on the forums for Shareaza, they've enabled you to use those "magnet links" (which contain the hash or UID of the file). People are posting images of UI changes that should be made, but instead of linking it to some web host where it gets overloaded easily, they're posting magnet links, which download just as fast over the G2 network. Exponential bandwidth availability growth is really cool!

    8. Re:It's pretty fast... by inerte · · Score: 1

      Yes, it does.

  3. Hopefully downloads are better with G2... by pilot1 · · Score: 1

    I remember when I first tried Gnutella clients, they were awful and i've never been able to download a thing off of one on my Windows or Linux PC, so I finally broke down and used Kazaa, which works fine. Hopefully G2 downloads things better, or else it won't catch on.

    1. Re:Hopefully downloads are better with G2... by bpd1069 · · Score: 5, Funny

      I even got my girlfriend, boss, and brother using Bearshare.

      You got a girlfriend, boss and Brother from a P2P applications! Wow what search are you using?!

      --
      --
    2. Re:Hopefully downloads are better with G2... by fault0 · · Score: 5, Informative

      > I even got my girlfriend, boss, and brother using Bearshare.

      Congratulations, you made them install quite a bit of spyware too.

      I would recommend something like XoloX, which has absolutely no spyware.

    3. Re:Hopefully downloads are better with G2... by Anonymous Coward · · Score: 2, Funny

      "Skank", "Ogre", and "Homosexual".

    4. Re:Hopefully downloads are better with G2... by Anonymous Coward · · Score: 2, Funny

      I even got my girlfriend, boss, and brother using Bearshare.

      I'll bet all three are the same person ;-)

    5. Re:Hopefully downloads are better with G2... by sgtsanity · · Score: 3, Interesting

      G2 is very, very good. The main improvement is that it has a global search radius. Normally, in G1, you can only see about 20% of the network at any one time. This is due to the design, and to the bad clients (i.e. Morpheus) polluting it. G2 has special techniques (a modified & extended GUESS) to see everything in the network at once.

      There are other advancements that improve upon this, but they aren't really the thing that has the biggest impact now, like Tiger Tree Hashing, etc. Shareaza has already improved the network by providing a high-speed, high-efficiency backbone to the rest of the Gnutella network. The Shareaza clients freely connect to the other clients on the network, and so provide a way to see more of the network at once.

      So, any way you spin it, it's good for the Gnutella network, especially considering that the specs will be released soon. And everyone who complains about this, even though their complaints may be valid, aren't seeing the tremendous improvement this makes to the workings of Gnutella.

    6. Re:Hopefully downloads are better with G2... by golrien · · Score: 3, Informative

      To be fair, Shareaza has no spyware either. What's more, it's almost the *only* P2P client that doesn't eat up half the system resources - Kazaa, Bearshare, XoloX, Grokster (which installs more spyware than I thought was humanely possible anyway) and many others are all huge and silly. Shareaza (and at least one other Windows Gnutella client, though I forget the name) will happily multitask.

      FWIW, Bearshare doesn't install insane amounts of spyware. Okay, it's not as good as the 100%-free clients, but they seem to have said "Hey, let's sell an improved version of this to make money" rather than, "Hey, let's piss off all our users to make money"

  4. Variety of standards by pc_plod · · Score: 3, Insightful

    Anything that is a move to keep a variety of standards out the in the P2P world is a positive move, stopping record companies finding a way to stop the whole movement by blocking a single protocol, (a la Napster). The more the better.

    --

    Help the scientists free the world from the evil curse of the dracula
    1. Re:Variety of standards by Nerant · · Score: 3, Informative

      While you have a point, I must point out Napster wasn't strictly a peer to peer network system. Napster had a centralised set of servers, and was only peer to peer in the sense that it utilised the bandwidth of those sharing to upload those files to you and vice versa. As far as I know, these centralised servers are in fact what led to litigation against napster.
      True peer to peer networks like Gnutella have no real centralised points: the process of discovery of new nodes does not require a a centralised server or servers, unlike Napster.

      --
      Be kind. There are too many mean people out there already.
    2. Re:Variety of standards by pc_plod · · Score: 2, Insightful

      Of course, but pressure on client distibution can be equally damaging, as well as the adding of corrupt files to the network and other such underhand tricks. Having a central server to shut down made Napster an easy target but real P2P systems are vunerable as well, especially if one standard emerges

      --

      Help the scientists free the world from the evil curse of the dracula
    3. Re:Variety of standards by adamshamblin · · Score: 3, Insightful

      I just hope the whole "gnutella2" doesn't end up being vaporous. More interesting than yet another client is enhancements to the protocol, but the gnutella2 web site is 'opening soon', and the 'Full specifications will be available soon', but there is already this Shareaza client out there?

      I've been a user and supporter of the Gnutella Network since the beginning ( back when it didn't work that well :) ), and I've seen enough clients come and go to know that it takes a well documented protocol/specification to see network growth and improvement.

      Until we have the specs, it's just hype.

      --
      http://iratepublik.com
    4. Re:Variety of standards by Anonymous Coward · · Score: 0
      Anything that is a move to keep a variety of standards out the in the P2P world is a positive move, stopping record companies finding a way to stop the whole movement by blocking a single protocol, (a la Napster). The more the better.

      Unfortunately the more protocols there are the less actual selection you'll have. When there was basically just Napster nearly everyone wanting to trade music was on it. Now you've got people fragmented back into Gnutella, eDonkey, Fasttrack, IRC, FTP sites, etc. Napster was so good because you could almost always find what you were searching for. If we further fragment the networks then the terrorists... errrrr.. the RIAA, will have already won!

    5. Re:Variety of standards by Anonymous Coward · · Score: 0

      The specs will be out in one or two weeks.
      When the beta testing of the v.1.7 will end and the final 1.7 is out.
      SO we need only tow weeks to know if Mike is true.

    6. Re:Variety of standards by buswolley · · Score: 3, Interesting

      Design the "Trillian" of P2P. One that works on many networks at once.

      --

      A Good Troll is better than a Bad Human.

    7. Re:Variety of standards by Ari+Rahikkala · · Score: 2, Insightful

      Remember one fact about real P2P networks: They have a lot of overhead for searching and, in the case of Gnutella, pinging/ponging. IM networks are centralised enough to not have that overhead, so being logged in to several of them doesn't use that much bandwidth. But unless you have insane amounts of bandwidth or are going to be connected only to very few computers in each network at once, you do NOT want to be in more than one P2P network at the same time. Even if you do have a lot of bandwidth, it's a better service to be a supernode to one network than a normal node to several networks.

    8. Re:Variety of standards by The+J+Kid · · Score: 2

      You want giFT.

      It currently only has the OpenFT protocol as plugin, but you're free (or anybody else for that matter) to write a Gnutella2 plugin or whatnot, and it still connects via the same nice GUI of choice!

      --
      Moderation: +4. Modded 70% Funny and 30% Overrated. 100% Saturated.
    9. Re:Variety of standards by peerogue · · Score: 1

      You're seeing only the aspects of connecting to the "network" and be able to search and locate files.

      You're not seeing the "sharing" aspects. For instance, Gnutella uses HTTP for file transfers, but adds special headers to help assist in the transfer (alternate locations, SHA1 URNs, etc...).

      I don't know what a "plugin" can do in giFT, but it would need to do quite a lot to be able to act as a Gnutella server.

      The only value I see in giFT then is the decoupling of the GUI and the network processing node. I know the gtk-gnutella folks have been planning on doing
      that for more than a year now.

      Personally, I'm not interested in using a protocol like openFT, because it is a marginal protocol with few users. It does not have the critical mass Gnutella has today.

      Thinking!

      -- Peer

    10. Re:Variety of standards by The+J+Kid · · Score: 2

      You're not seeing the "sharing" aspects. For instance, Gnutella uses HTTP for file transfers, but adds special headers to help assist in the transfer (alternate locations, SHA1 URNs, etc...).

      Ah, but OpenFT does that too! HASH search, and HTTP for file transfers, etc. It's just that because of the more stable network (it is based on Fasttrack..) there isn't any need to send all those special headers.

      I don't know what a "plugin" can do in giFT, but it would need to do quite a lot to be able to act as a Gnutella server.

      The existing "plugin", openFT, can be a Fasttrack-like Index, Search or User node, so that shouldn't be a problem.

      Personally, I'm not interested in using a protocol like openFT, because it is a marginal protocol with few users. It does not have the critical mass Gnutella has today.

      Ah, but what is the critical mass of Gnutella? Because of the limitations of pureP2P you can only see a small part of the whole network and if you get mixed with good old Morpheus nodes, you ain't gonna see anything in this lifetime!

      With openFT (hint, the FT stand for FastTrack, like in KaZaA) the network is far more stable and you can actually see the whole network all the time. And, as of this moment there is a mass of 3.6 TB with 8.2 GB/user ratio. (It has been 5.1 TB, but because of developement it breaks with older versions. (only CVS at the mo)

      But to go back to the point, a G2 plugin in giFT would bind both networks together to make Gnutella more stable and give openFT more mass.

      It's a win-win situation.

      --
      Moderation: +4. Modded 70% Funny and 30% Overrated. 100% Saturated.
  5. Other OS P2P technologies by jfrumkin · · Score: 4, Interesting

    I've been working with the JXTA project for a bit now, and they seem to be taking a very nice approach to designing a p2p network that is implementation independant (can be implemented on different platforms, devices, etc.). Besides gnutella (and g2), and JXTA, are there other open P2P networks out there? And if there are, what's the best project?

    --

    "What we have here, is a failure to communicate." - Cool Hand Luke
    1. Re:Other OS P2P technologies by iofire · · Score: 5, Informative

      I'm surprised that no one has mentioned it, but giFT is a very nice open protocal modeled after the fasttrack network. (originally it used the actual fasttrack network, but now they use an open protocol called OpenFT)
      Check it out at http://gift.sourceforge.net
      The ncurses based frontend giFTcurs is very nice, but there also are graphical and even web-based frontends to it.
      I use it under linux and have been very happy with it.

      --
      --Avoid metagame thinking, browse with scores hidden (This sig is in violation of itself)
    2. Re:Other OS P2P technologies by Anonymous Coward · · Score: 2, Informative

      I've had nothing but problems with giFT. Finally started booting back into Windows and using Kazaa.

    3. Re:Other OS P2P technologies by WWWWolf · · Score: 2, Interesting
      I've had nothing but problems with giFT. Finally started booting back into Windows and using Kazaa.

      Curious. I've had very few problems with the CVS version of giFT. In fact, i've found it to be the best-working p2p app on Linux since Napster. Doesn't eat all of the bandwidth for nothing, and downloads are *really* fast compared to *any* Gnutella client. I've actually downloaded things with this thing! =)

      The problems have mostly been like "okay, today it didn't work, tomorrow it'll work again"; I think the biggest outage in my case was recently when the new interface protocol was introduced and all clients seemed to work only day or two later.

    4. Re:Other OS P2P technologies by Anonymous Coward · · Score: 0

      Well there's mnet which would benefit greatly from some non transient nodes and some patches. It's currently a public beta with version 0.6 coming out soon, which has a new way of searching. Do check it out. It's an interesting project.

    5. Re:Other OS P2P technologies by kz45 · · Score: 1

      I'm surprised that no one has mentioned it, but giFT is a very nice open protocal modeled after the fasttrack network. (originally it used the actual fasttrack network, but now they use an open protocol called OpenFT)
      Check it out at http://gift.sourceforge.net The ncurses based frontend giFTcurs is very nice, but there also are graphical and even web-based frontends to it.
      I use it under linux and have been very happy with it.


      I think the gift project when downhill after they stopped reverse-engineering the kazaa protocol. Why bother with a totally new protocol, when we can use gnutella?

      just my 2 cents

    6. Re:Other OS P2P technologies by PureFiction · · Score: 3, Interesting

      are there other open P2P networks out there?

      Yes, the ALPINE Network uses a UDP based social discovery mechanism to implement fast, effective searches with minimal bandwidth and dual NAT support.

      Some of the features include:

      - High concurrent connection support (over 10,000).
      - Adaptive configuration for enhanced accuracy and quality of responses.
      - True peer to peer network. No hierarchy, no central servers.
      - Low communication overhead (small UDP packets, no forwarding).
      - Module support to allow extensions to query and transport operations.

      You can read an overview of how alpine works here . There is also a frequently asked questions and plenty of developer information .

      Enjoy!

    7. Re:Other OS P2P technologies by nameinuse2 · · Score: 1

      some nice reading there and a promising architecture ... thanks.

  6. Muahahaha.. Slashdot? With a sense of humor??? by Bowie+J.+Poag · · Score: 5, Funny



    Anyone here find it just a wee bit ironic that a postabout BMG and their so-called "copy protection" (*chuckle*) is followed immediately by a rather technical article on a new, faster, better, low-density P2P client?

    Hell, they haven't even managed to shut the _first_ version down!

    Cheers,

    --
    Bowie J. Poag

    1. Re:Muahahaha.. Slashdot? With a sense of humor??? by bizitch · · Score: 1

      kewl wallpaper page dude - very nice.

      --
      ---- "Logoff! That cookie shit makes me nervous!" - A. Soprano
    2. Re:Muahahaha.. Slashdot? With a sense of humor??? by Anonymous Coward · · Score: 0

      Bowie, you're an idiot.

  7. 'bout time by natron+2.0 · · Score: 0

    I have been using Shareaza for quite some time now and this will be a much needed improvement. One thing that Gnutella has lacked is a faster systems for searching and sharing. I still don't think it will be able to compete with the easy to use GUI of Kazaa or Morpheus. Either way it is a decent step in the right direction for P2P sharing.

  8. It Would Be a Real Shame.... by CatWrangler · · Score: 5, Funny

    if people tested out this network by trading only BMG files at first. Have to beta test and all though I suppose.

    --

    ---
    When you come to a fork in the road, take it! --Yogi Berra--

  9. The Gnutella innovation I like by Anonymous Coward · · Score: 5, Informative

    Is the Gnutella Web Caching System. It allows clients to find other gnutella peers without any sort of central gnutella server.

    1. Re:The Gnutella innovation I like by Anonymous Coward · · Score: 0

      There was a similar distributed Gnutella host caching system (Java-based, IIRC) called XCache that came before the Gnutella Web Caching system. It seemed to work pretty well and was open source too, but never seemed to catch on for some reason. Maybe it was ahead of it's time. It can be found at http://xcache.sourceforge.net.

  10. Crossing fingers by ceranta · · Score: 3, Informative

    Let's hope that this gnew version of gnutella will be better and more scalable than the previous one.

    Points from the gnutella2.com site:

    Level One: A New Protocol

    Gnutella2 introduces a flexible new protocol to support current and future P2P technologies. Packets are compact binary trees of named data items, which allow multi-vendor information nesting and augmentation, selective digital signing and other exciting features. Existing data structures can be modified and improved without disrupting deployed software, and advanced topics such as UNICODE support are handled in a uniform manner.

    Level Two: A New Data Transport Architecture

    Gnutella2 provides two interdependent data transport mechanisms: reliable compressed TCP streams, and an unreliable and semi-reliable UDP transport provider. The combination of these two systems allow higher level G2 constructs to take maximum advantage of network conditions to deliver data packets quickly and efficiently, with or without assured delivery, within bandwidth requirements and without unnecessary overhead.

    Level Three: A New Set of Base Services

    Gnutella2 takes full advantage of the first two levels to deliver an exciting new set of distributed peer-to-peer services. Controlled global object searching is implemented using an iterative walker approach, with selective out of band response delivery and translation. Combined with an abstract component interest/response query model, this system goes beyond what is available in any other P2P platform. The Gnutella Addressing System (GAS) provides the ability to reach arbitary nodes based on a known identifier, regardless of their connection method.

    Level Four: A New Implementation Standard

    One of the problems facing the legacy Gnutella network was the varying level of support for critical network features in different clients. The Gnutella2 Standard requires clients to implement the first two levels completely, as well as the dual transport providers with some form of intelligent bandwidth control, 1-bit universal QHT, simple search response, basic metadata (at minimum), simple query language, link compression, root tigertree as the primary URN, HTTP/1.1, partial transfer and sharing. If able to operate as a hub, the full set of generic routing rules must be supported. Support for G1 is recommended but not required.

    CLICK ME!

    1. Re:Crossing fingers by Adam+Fisk · · Score: 2, Informative

      Almost all of these protocols are existing standards that have been developed by the rest of the Gnutella community. In face, not one of the primary protocols has actually been developed by Shareaza -- they're basically just repackaging the existing collection of newer protocols and calling them "Gnutella 2."

      The only new additions proposed here are the binary tree structure for packets and the node addressing system. Otherwise, all of these protocol have been developed by other members of the Gnutella community. "Gnutella 2" is a marketting gimmick aimed at doing things like getting on Slashdot.
      That said, it's not all bad. The perception of Gnutella should change, as the network is continuing to develop rapidly, with powerful protocols including the Hash/URN Gnutella Extension (HUGE), the Gnutella UDP Extension for Scalable Searches (GUESS), and the Ultrapeer proposal.

      Perhaps the more important issue at hand, however, is whether or not Gnutella will remain an open, interoperable protocol, or whether it will disintegrate into proprietary schemes. As yet, none of the new parts of Gnutella 2 have been posted in public specifications. This is really a first for Gnutella -- the Gnutella community works because standards are published publicly and go through a review process among all Gnutella developers. Gnutella 2 may bode ill for the future of Gnutella as an open network, but I really I hope not. I hope that Mike (Shareaza) will quickly publish any new specifications that he has to alleviate the fears of myself and everyone else in the Gnutella world!

      --

      Adam Fisk

    2. Re:Crossing fingers by 0x0d0a · · Score: 5, Informative

      Yup. Raphael Manfreti (of gtk-gnutella fame) and the Limewire team (also major GDF developers), get no credit, and these "Sharezilla" wankers get a Slashdot link.

      Well, *here* is credit where credit's due:

      GTK-gnutella

      LimeWire

      Gnutella started out as an "interesting project". It is now one of the most heavily developed an analyzed projects -- somewhat less centralized than the Freenet project, but far more skill (and variety of clients) on this than, say, FastTrack and the much-lauded Kazaa.

    3. Re:Crossing fingers by Anonymous Coward · · Score: 0

      The LimeWire people didn't submit the story to Slashdot, dear.

    4. Re:Crossing fingers by Anonymous Coward · · Score: 0

      It seems to me that, while Mike may not have invented all of the new technology in G2, he's certainly the first to take the lead and implement it into a Gnutella client. The reason I was never a big supporter of Gnutella was that the clients developed too slowly (Too much arguing over what was and wasn't legal for a Gnutella client to do on the network.) and the network suffered greatly because of it. While Mike may not have done things "properly" because he didn't get his ideas approved by the community first, he's at least willing to test new ideas in an attempt to improve the network (And judging by the performance I'm getting out of Shareaza 1.7, G2 is definitely an improvement over the current Gnutella network.).

      Besides, as far as I know, Shareaza 1.7 is completely backwards compatible with other Gnutella clients, so why are you so worried about the integrity of the network?

  11. Kazaa vs. eDonkey by T-Kir · · Score: 5, Insightful

    Ever since I've been using Broadband (Optimum Online yeah baby!), eDonkey has won me over vs. Kazaa(lite).

    Alhough eDonkey needs a little more work than Kazaa to operate, the file hashing/segmented downloads/no leeching is far better than Kazaa, plus the amount of file corruptions I get using Kazaa is way too much (especially with very large files). I've also started trying Overnet, but still have loads of downloads I'm clearing through the Donkey (Yes I have tried using the donkey downloads for Overnet, but only half register in the download tab).

    I've tried using Gnutella/Gnucleus on numerous occasions, bit given up due to a lack of being able to do anything with it compared to the other P2P programs... I just hope Gnutella2 will become a viable option for me to use it.

    --
    Are you local? There's nothing for you here!
    1. Re:Kazaa vs. eDonkey by Anonymous Coward · · Score: 0

      I can't understand how people have such a hard time using Gnutella. It has got to be the client you are using. I have had nothing but success. If I do a search on say something like Creed, I get like 500 hits. I pick the bitrate I want and usually in a couple of minutes I have the song. I think a lot of people who try Gnutella tried it 2 years ago when it was still in its relative infancy.

    2. Re:Kazaa vs. eDonkey by Arker · · Score: 5, Informative

      If you have a *nix box (even an apple if it's OS X) you can use mldonkey which is a very nice client. You can operate it remotely from another box, it uses both edonkey and overnet protocols simultaneously, it's partially open source (there is a key component kept secret for security reasons, the one flaw in thes protocols is that they require trusted clients unfortunately) and it really gives you the best of edonkey and overnet both, as well as supporting the move to overnet since anything you're downloading from edonkey or sharing out will also be shared to overnet.

      --
      =-=-=-=-=-=-=-=-=-=-=-=-=-=-
      Friends don't let friends enable ecmascript.
    3. Re:Kazaa vs. eDonkey by Jugalator · · Score: 4, Informative

      Same progress for me - i.e. Kazaa to eDonkey to Overnet. The biggest advantage with eDonkey over Kazaa IMHO are the "MD5 URL's" or whatever you should call them, where clicking on an URL adds the download to the eDonkey queue, by using the MD5-style checksum. So you're 100% sure it's not a fake file. You can also be 100% sure that's it's not a partial file as well.

      I guess the downside with eDonkey is that it requires up to date server lists, although that's a minor hassle really. And that's where the serverless Overnet comes in, which owns Kazaa any time except for the occasional music searches perhaps.

      --
      Beware: In C++, your friends can see your privates!
    4. Re:Kazaa vs. eDonkey by bluehell · · Score: 2, Informative

      it's partially open source (there is a key component kept secret for security reasons, the one flaw in thes protocols is that they require trusted clients unfortunately)

      That's not true anymore. Since emule, anonther edonkey client, released its source code, the mldonkey author decided to open-source the remaining code.

      --
      -- To bloody go where no man has gone before.
    5. Re:Kazaa vs. eDonkey by Arker · · Score: 2, Interesting

      Wow, that's a big change. I wonder where that leaves the security issue though, that's of course always been coming, but now I guess it's upon us... the network relies on the fact that even those who try to be leechers can't avoid sharing the parts already downloaded while waiting for the rest... if the complete source is out it will be much easier for someone to put together a full leecher client... and if that becomes very popular the whole network will become untenable. :(

      I never thought security through obscurity was a viable philosophy longterm, but it's better than nothing. What now? Have any of the developers addressed this that you know of?

      --
      =-=-=-=-=-=-=-=-=-=-=-=-=-=-
      Friends don't let friends enable ecmascript.
    6. Re:Kazaa vs. eDonkey by golemite · · Score: 1

      mldonkey is an excellent client for linux, but for windows users there's eMule, which has garnered alot of buzz lately in the eDonkey community (both positive and negative)

      for those having problems with the normal windows client, i suggest it may be checking out

      --
      http://www.s4biturbo.com/
    7. Re:Kazaa vs. eDonkey by Lord+Crc · · Score: 1

      if the complete source is out it will be much easier for someone to put together a full leecher client... and if that becomes very popular the whole network will become untenable. :(

      I never thought security through obscurity was a viable philosophy longterm, but it's better than nothing. What now? Have any of the developers addressed this that you know of?


      They have. EMule has also introduced a credit system, where you remember who you've downloaded from and how much, and based on that, give the person an elevated queue position should he want to download from you again. This is fairly hacker proof, as there's no way you can cheat yourself to download more than you should.

      The actual effect on the network is still beeing evaluated afaik, but around 80% of the ones I upload to, are clients I've gotten something from.

    8. Re:Kazaa vs. eDonkey by athakur999 · · Score: 2

      For Kazaa, etc. you can try out sig2dat, which works similarly to the MD5 checksums. You click on a sig2dat link and the program will generate a .dat file with a checksum in it, which Kazaa will use to search for the file.

      It's not perfect though, since you have to shut down and restart the client to get it to see the generated .dat files. It's nice when using sites such as Fast Track Movies.

      --
      "People that quote themselves in their signatures bother me" - athakur999
    9. Re:Kazaa vs. eDonkey by A5un · · Score: 1

      Quick question:
      Does anyone know how to integrate edonkey client with one of mozilla/konqueror/galeon? Say I'd just click on an edk link and it'll send the queue to mldonkey?

    10. Re:Kazaa vs. eDonkey by mlinksva · · Score: 2

      I don't know, but I'd love to. I'd also like to be able to have mozilla hand off MAGNET links to Lime, gtk-gnutella or the like.

    11. Re:Kazaa vs. eDonkey by Anonymous Coward · · Score: 0

      Shareaza supports magnets (sha1 hash) links which can be found on bitzi.com . Shareaza also supports edonkey/emule links. There is talk of supporting sig2dat links in shareaza soon.

      Gnuclues will also be supporting magnets soon. Bearshare should be as well in the next version.

    12. Re:Kazaa vs. eDonkey by Galvatron · · Score: 2
      Okay, on your (and others) advice, I just gave it a try. It doesn't seem to have very many files. "Babylon" (to find Babylon 5 episodes) turned up 0 results. "Terminator" only showed 1 result, and that was supposedly a screener copy of T3: Rise of the Machines.

      Kazaa-lite, on the other hand, has enabled me to watch virtually all of Babylon 5 (I've just got the last half season to go). What am I missing, how is eDonkey better?

      --
      "The question of whether a computer can think is no more interesting than that of whether a submarine can swim" -EWD
    13. Re:Kazaa vs. eDonkey by VoiceOfRaisin · · Score: 1

      if you are gonna use the edonkey network, get emule: http://emule-project.net

      its only been out a few months, vs a few years for edonkey and it already makes up 1/4 to 1/2 of the network. its been the #1 sourceforge download for weeks, and with good reason. it kicks edonkeys ass!

    14. Re:Kazaa vs. eDonkey by T-Kir · · Score: 2

      OK, first off there is a little knack to searching on eDonkey. You first have to make sure that your firewall will accept connections through ports 4662-4663 (and forwarding to the machine running the donkey)... most of this info is on the eDonkey site.

      When it is up and running, you can do a search when you are connected to a server (a good idea is to get an updated serverlist, one of the places I go to is The Donkey Network). If there aren't any of the files there, then click the 'Extend Search' button that pops up to the left of the search button... to do more searches, click the button then press and hold down the enter key for less than a second, do more short bursts to let any server search results get through.

      A lot of the files will be dependant on what people are sharing, and the more blue the colour, the more people have the same file. A great place I've recently found that lists certain Sci-Fi files is Varelse's Sharepool, and another site for other links is ShareReactor.

      A lot of the server work (updating lists, etc) has been automated in Overnet, but I haven't been using it at all yet. As I said in the first post, it takes a little more work to learn eDonkey, but I've found the quality of files that are being shared far superior to the FastTrack network (esp. for very large files). There are times that I can't find stuff on the Donkey network, so Kazaa still comes in handy.

      --
      Are you local? There's nothing for you here!
    15. Re:Kazaa vs. eDonkey by Joe+Tie. · · Score: 1

      Not exactly what you're asking and I don't know if this is common knowlege to everyone but me, but I only recently found out that you can drag and drop edk links from mozilla to the gtk edonkey gui.

      --
      Everything will be taken away from you.
    16. Re:Kazaa vs. eDonkey by Anonymous Coward · · Score: 0

      edonkey = pile of horseshit

    17. Re:Kazaa vs. eDonkey by Anonymous Coward · · Score: 0

      I totally agree with that. I've used eDonkey for a while now, only recently I've found eMule, and it really kicks ass, much better download speed than eDonkey.

    18. Re:Kazaa vs. eDonkey by jacobjyu · · Score: 1

      I have two words for you, Direct Connect. I've seen over 40TB online at once, the connections are reliable, everyone is required to share a certain amount (depending on the server you go on), and everyone is required to have a certain number of download slots.

  12. Very Interesting by EpsCylonB · · Score: 1

    It's going to be dificult to compare shareza's performance to edonkey and fastrack because of the difference in size, especailly since at the moment shareza is the only gnutella client to use G2.

    What are Shareza's long term business plans ?, are they going to take advantage of the network by selling their user's distributed proccesing power like sharman networks are planning to ?, or postion themselves as a legal media distribution system once DRM and Palladium are implemented ?.

    1. Re:Very Interesting by Anonymous Coward · · Score: 0

      What are Shareza's long term business plans ?

      1. Come up with new P2P protocol/architecture
      2. ??
      3. bankruptcy

    2. Re:Very Interesting by 0x0d0a · · Score: 2

      WTF would any users donate their disk/bandwidth to a DRM-using legal media distribution system?

      That might get IPO dollars, but it's not going to work.

    3. Re:Very Interesting by EpsCylonB · · Score: 1

      Why ?, cause once DRM is implemented a customer could buy a licence to watch a movie and instead of the company hosting the data themsleves the use a p2p network to distribute.

    4. Re:Very Interesting by 0x0d0a · · Score: 2

      That's why the company would want to do it. Where's the incentive for the user?

    5. Re:Very Interesting by EpsCylonB · · Score: 1

      Well it seems that judging by how popular p2p is that ppl like downloading movies and music. And the incentive to use it once DRM is implemented is the fact that DRM will make any alternative impossible (paticularly the current system of downloading for free) .

    6. Re:Very Interesting by xQx · · Score: 1

      muahahahahahahahahahahahahahahaha!!!!!

      What, are you a MSFT or RIAA employee??

      Thank you for your attempt to brainwash us, but you're going to have to try harder next time.

      For your next trick will you tell us that Windows XP product craptivation has eliminated global piracy of Microsoft's latest operating system?

    7. Re:Very Interesting by EpsCylonB · · Score: 1

      I sincerely hope that DRM isn't implemented, all I am illustrating is one possible business model for a p2p network. You have to admit that p2p is an incredibly effiecient way of distributing data, if the whole licencing system is introduced and their is no threat of piracy (at least not on the scale their is today) then it becomes attractive to companies that would otherwise would have to foot the entire bill of hosting and bandwidth.

      Didn't see the DMCA coming till it was too late did ya ?

    8. Re:Very Interesting by 0x0d0a · · Score: 2

      No, I mean where's the incentive for the customer in using P2P at *all* if they aren't saving money by not paying for the item (or paying less)?

      I would imagine that once the feeling of a "community" working together, where everyone pitches in some bandwidth and everyone saves money, goes away, people are just going to want to buy the product directly from the company (possibly electronically) or from bricks and mortar.

      Witness Napster trying to charge for access...

    9. Re:Very Interesting by 0x0d0a · · Score: 2

      I'm not *arguing* that it's attractive to the company providing the service. P2P is great for them. The problem I have is why on earth the *consumer* would want to pay *and* pitch in time, effort, and bandwidth.

    10. Re:Very Interesting by EpsCylonB · · Score: 1

      Well as I said before ppl like downlaoding movies and music, perhaps they will continue to do so in DRM licenced enviroment if their is no alternative.

      Why would they want to use their own bandwidth ?, they might not have much of a choice if the application they use to access (download) and view the content is combined and the only option they have. Bear in mind that if DRM happens the way content produceers want it to it will be at least five years at the earliest, broadband should be more common so bandwidth won't be so much of an issue.

      You seem to be completely missing the point that none of the business minded p2p companies are expecting to make money tomorrow, they are all gambling on the long term, with the distribution power of a dominating p2p network they could potentially become very profitable.

      If family computers and living room entertainment systems converge you could replace a trip out to blockbuster with a download from p2p network (the download would of course have a licence that makes it unplayble after one viewing or a 24 hour period).

      Sharman networks are the best example, they are already promoting DRM licenced music and video on the start up page in Kazaa.

  13. Changes by SystematicPsycho · · Score: 1

    New legal loopholes, number of law suits hopefully will be reduced. Bugs fixed, patched up and worked a fix for delaying litigation for as long as possible. TODO, find more legal loopholes that will not put an end to p2p, serialz, crackz and bibtex entries also to be added to sharing.

    --
    Analytic & algebraic topology of locally Euclidean meterization of infinitely differentiable Riemmanian manifold
  14. Re:YOU FAIL IT by Anonymous Coward · · Score: 0
    I guess that makes it:

    Post 3, Gnutella 2.

    so I do win! God, life is beautiful!

  15. Just wondered... by Anonymous Coward · · Score: 4, Interesting

    Does anyone actually use P2P networks for legal uses?!?!?!?!?!? e.g. not mp3/porn..

    If so, can you list what you use it for?

    1. Re:Just wondered... by psavo · · Score: 2

      mp3 is perfectly legal. many bands share their music via p2p networks. I also download some drivers & game demos from p2p, as it's often faster way to get them.

      --
      fucktard is a tenderhearted description
    2. Re:Just wondered... by roryh · · Score: 2, Insightful


      MP3s are not inherently illegal. I download classical music for which there are no copyright issures that I'm aware of.

    3. Re:Just wondered... by Anonymous Coward · · Score: 1, Interesting

      How about distributing subscription software i.e. where the software is free but the service costs money.

    4. Re:Just wondered... by Jugalator · · Score: 4, Funny

      Does anyone actually use P2P networks for legal uses?!?!?!?!?!? e.g. not mp3/porn..

      *thinking hard*

      Downloading .nfo's and .cue's?

      AFAIK, those aren't illegal. :-)

      --
      Beware: In C++, your friends can see your privates!
    5. Re:Just wondered... by Troed · · Score: 2, Informative

      If an orchestra records a classic that recording is (of course) copyrighted.

    6. Re:Just wondered... by Elledan · · Score: 1

      Exploring music, 'nuff said.

      If it weren't for P2P-programs (and FTP-servers, IRC, etc.), I would probably never have found out about over 99% of the bands currently in my playlist.

      Furthermore, I have, and will do so again in the future, buy CDs of bands I really like.
      With the junk they sell in the average CD-shop, however, I have to order every CD, making them more expensive than they already are, therefore I only use the backup copies I make of each CD I buy, and have the songs on the CD ripped to .ogg so that I can listen to them on my PCs. The CD is then safely stored away, out of harm's way.

      Presto, a legal use of P2P, a backdraw of the current, way too high prices for CDs, the new lows being reached in the commercial 'music'-scene and fair-use of media you own, all in one post.

      --
      Site & blog: http://www.mayaposch.com
    7. Re:Just wondered... by Anonymous Coward · · Score: 0

      actually, even though I mostly download MP3s, 99% of them are already songs on one of my 300+ CDs :) As far as I know, that's perfectly legal, but I don't know much about law... until I break one and someone tells me ;)

      ~CODEmage~

    8. Re:Just wondered... by aonaran · · Score: 1

      Well, here are the things I use P2P for

      Illegal:
      Downloading Southpark and Osbournes episodes before they air in Canada.

      Downloading music from bands I've heard about but haven't heard their music yet so I can decide if I want to buy the CD (that one shouldn't be illegal but it is)

      Legal:
      Downloading MP3s distributed by bands without a major record label.

      Downloading e-texts (most of the ones I've found on P2P networks are freely distributable

      Downloading Divx/mpg movie trailers when I can't get on the sites.

      Downloading Divx/mpg videos that were created to be freely distributed

    9. Re:Just wondered... by aonaran · · Score: 1

      ... as a follow-up, what I'd LIKE to use P2P for is ISO images for new Linux distributions and other large, timely downloads, but not enough people share this sort of thing.

    10. Re:Just wondered... by Anonymous Coward · · Score: 0

      I find that I can often download game demos, like Unreal Tournament 2003, faster through p2p than by trying to use the developers website. You also avoid being placed in a 'download queue' and other inconveniences.

    11. Re:Just wondered... by Captain+Morgan · · Score: 1

      Does anyone actually use P2P networks for legal uses?!?!?!?!?!? e.g. not mp3/porn..

      Since when was porn illegal? mp3 is just a file format, there are loads of stuff in mp3 form that is legal like bootlegs, private recordings etc.

    12. Re:Just wondered... by Anenga · · Score: 4, Interesting

      Now that Shareaza has global searches (and nativly hashes in SHA/MD4/ND5/TTH) we can post up the hash of linux distro's and begin downloading from the Linxu distro site.

      People can download off that person using partial file sharing, people can download off that person using partial file sharing etc. It will save the main site a hell of a lot of bandwidth and you'll be downloading the distro swarming from 10+ people rather than one slow FTP site.

    13. Re:Just wondered... by TheDormouse · · Score: 0

      Some old *sheet* music may be in the public domain, but a recording's copyright starts when the recording was released, not when the piece was composed.

      And the classical musicians making money from those recordings are quite likely not the multi-millionaires of pop music. They are more likely trying to support a family on $30,000 a year. So if you believe it's OK to pirate music just to "stick it to the rich whining music biz" then classical recordings are probably the LAST thing worthwhile to pirate.

    14. Re:Just wondered... by falzer · · Score: 2, Informative

      As far as I know, the mp3s here are free. But many recordings are indeed copyrighted.

      Also, in case anyone is interested in sheet music that fell out of copyright, check out this link.

    15. Re:Just wondered... by Ost99 · · Score: 1

      In civilized countries in the free world, you are allowed to:
      1. Copy music / movies from a bought cd/dvd and share with friends, family and others you have a established relationship with (ie. have talked with on IRC, the DC chat etc.)
      2. Distribute captures of TV shows/movies from open channels (if you do it for free)

      Now, that makes most of what I do on P2P networks legal where I live. With Gnutella / Kazza you're not on solid ground (how can you argue that you know everyone dl from you, and everyone you dl from?), but with DC(++) you have a limited number of people in a "closed" community with regular communication (chat, messages). Now all you have to do is: don't share DVD-rips or mp3s if you don't own the original, don't share software (unless it's share/free/open ware).

      Tada! All legal. The US is trying hard to remove these laws in free conties through WTO, but we won't take it.

      - Ost

      --
      ---- Sig. gone.
    16. Re:Just wondered... by Sebbo · · Score: 2

      I've downloaded a lot of MP3s of music that I already have on cassette. Since making personal-use copy of works you own is legal, I believe that activity is covered.

      I'm sharing out a lot of MP3s I got from mp3.com and Amazon free downloads.

      There are also a lot of movie trailers and video samples from pornsites out there

    17. Re:Just wondered... by Anonymous Coward · · Score: 0

      > Does anyone actually use P2P networks for legal
      > uses?!?!?!?!?!? e.g. not mp3/porn..
      > If so, can you list what you use it for?
      >

      What is illegal about porn? :P
      (Well, I guess most porn on those networks is copyrighted and not meant for distribution. hmm)

      Thats what I started using it for, however kazaa(lite) has disapointed me greatly in that area as well, so I cant really say thats a _good_ use for it.

      Now that i think of it, I guess thats the same argument mp3 sharers use; "Its not all illegal"

      Oh well, nevermind

    18. Re:Just wondered... by afree87 · · Score: 1
      Downloading P2P clients?

      ;)

    19. Re:Just wondered... by reflector · · Score: 2

      yes, lots of legit uses. here are some:

      -downloading tv shows (futurama, the simpsons, south park, etc.), which is no different than recording the shows on my vcr, except has the advantage of being more easily organized and no commercials.

      -downloading copyrighted works that i already own on another media such as cassette tape or vhs that i want in digital format.

      -i'm sharing a lot of public domain works that i've downloaded from project gutenberg (plato, aristotle, descartes, thoreau, etc).

      -downloading/sharing star office 5.2, which sun no longer offers for free on their web site.

      there's probably other uses that don't come to mind at the moment...

    20. Re:Just wondered... by Zathruss · · Score: 1

      Anyone using BeOS can tell you that a helluva lot of the links on BeBits are broken.. Sucks. So, I use Bebits as a sort of catelogue, and locate the files with BeShare. Which, in my completely biased opinion, is the best p2p software I've ever had the pleasure of using. And, WRT your point; there is more legitimate content on there than not.

    21. Re:Just wondered... by Zathruss · · Score: 1

      I second that. When you're sitting with a connection speed like mine, a standard download is not an option.

    22. Re:Just wondered... by NightHwk1 · · Score: 1

      I don't remember porn being illegal...

      Anyway, there are bands who don't mind their music being traded, independent films that are only released online, etc.

    23. Re:Just wondered... by aonaran · · Score: 1

      Are you trying to DL one now? which distro? I might be able to mail you a copy for a small fee.

    24. Re:Just wondered... by Abreu · · Score: 2

      How about the latest Mandrake to Mexico City?

      I'll mail you back the blank CD-Rs to replace the ones you used and some postcards, along with your small fee.

      --
      No sig for the moment.
    25. Re:Just wondered... by aonaran · · Score: 1

      E-mail me @

      rod@powergate.ca
      I'll do it for $10US ($15 Canadian if that's easier)including the shipping. I'd send it airmail through the post office.

  16. Download! by Anonymous Coward · · Score: 0

    Get it while you can! Before the RIAA/MPAA go hound our Republican war-mongering big-business-loving government into launching an airstrike on the servers.

  17. Gnutella2 - The real story! by smd4985 · · Score: 5, Informative

    I'm a engineer at Lime Wire LLC so I can debunk much of this submission. Shareaza's Gnutella2 isn't so much the second iteration of Gnutella - instead, think of it as a improved Gnutella . In fact, the improvements were actually proposed by Lime Wire LLC (consult the GDF and look for messages about 'GUESS'). The GUESS protocol is a UDP based protocol we developed to allow for Gnutella network crawls/walks. We introduced it for public comment on the GDF *before* releasing it because we understand that Gnutella, as a open protocol, needs support from all Gnutella developers. I'm not sure what exactly Shareaza has implemented (because they HAVE NOT released the specs yet), but it sounds a lot like GUESS.

    So this isn't so much Gnutella2 as a improved Gnutella. Perhaps one day it will evolve into Gnutella2 more formally, but at the moment this talk of Gnutella2 is premature.

    --
    smd4985
    1. Re:Gnutella2 - The real story! by Adam+Fisk · · Score: 5, Interesting

      Seconding Susheel's comments, "Gnutella 2" appears to be primarily a marketting gimmick. Gnutella 2 is really just a collection of protocols, most of which have been in use on Gnutella for some time. The one apparently new protocol is a version of the Gnutella UDP Extension for Scalable Searches (GUESS) open standard, that was proposed by LimeWire some time ago, as Susheel mentioned, and that is in experimental stages. That said, perhaps "Gnutella 2" makes some sense as a name, as the computing community seems to be out of touch with how rapidly developments are happening on Gnutella. The collection of protocols used on Gnutella today make it a vastly different network than what people typically think of as Gnutella. If Gnutella 2 changes that perception, then it's great. Just keep in mind that "Gnutella 2" has little to nothing to do with Shareaza -- they primarily contributed the name. The new protocols in use on Gnutella are the result of countless hours of work from many Gnutella developers around the world.

      --

      Adam Fisk

    2. Re:Gnutella2 - The real story! by YrWrstNtmr · · Score: 3, Interesting

      I'm a engineer at Lime Wire LLC...

      So when are you guys going to remove all that crapware & stealware from the LimeWire client?

    3. Re:Gnutella2 - The real story! by Lukey+Boy · · Score: 3, Insightful
      Judging by your comment and your associate's, it seems that you fellows feel as if your toes are being stepped on a little :-) Honestly though, Shareaza came out less than a year ago and is outpacing Limewire and Gnucleus (which was my previous favorite client), and it's written by one guy. Oh, and, NO SPYWARE.

      At first I saw that you worked for LimeWire, and felt a small amount of respect - then I remember the bullshit hoops I had to go through to clean my system of the utter crap it installed through my system directories and the registry.

      As for calling something like Gnutella2 premature, um, no. The standards of the web were written down by the W3C, just as the Gnutella standards are written by the GDF. But if Shareaza comes out with something radically different and is accepted by the majority of users, it becomes the standard much in the same way that IE (unfortunately) did in the browser war. Now the W3C is playing catchup - and maybe the GDF is as well.

    4. Re:Gnutella2 - The real story! by Adam+Fisk · · Score: 4, Interesting

      I think you're right -- our toes were stepped on a little =) -- ours and everyone else's in the Gnutella world who put in most of the work to come up with "Gnutella 2," many of them open source programmers who donated their time to the effort.

      Mike has done a hell of a job on his client and is a very nice guy, but he simply is not the originator of the vast majority of the standards being branded as "Gnutella 2."

      The key word in your last paragraph is "unfortunately." Yes, it was unfortunate that IE created it's own standards and bypassed the w3c. Are you truly advocating proprietary standards over open standards? Am I misinterpretting you?

      --

      Adam Fisk

    5. Re:Gnutella2 - The real story! by Lukey+Boy · · Score: 1
      Not exactly. But I'm taking the same stance as Linus Torvalds in respect to Bitkeeper - in some cases, I just won't let ideologies get in the way of progress - or more simply, in the way of raw usefullness. I do think it's a shame that Shareaza is not open source, and that Mike is not waiting for all of the GDF participants to agree on new protocol standards... but if he can do a hell of a good job on his own, well, hats off too him.

      Don't get me wrong, in the previous example of IE, it sucked. Netscape was completely stagnant at 4.x, and there was absolutely no progress from the developers of the browser. Than IE started destroying Netscape in terms of features - which in turn forced everyone else to speed up the specification and development process of web standards. If it weren't for Microsoft ignoring standards when building IE, I wouldn't be using a shiny new Mozilla build today.

      As far as peer to peer applications go, I feel the entire Gnutella network has fallen behind the eDonkey network. Every feature that is on the todo list of the major clients (Gnucleus, Limewire, GTK-Gnutella, and so on) has already been done by Jed (or is it Jeb?) long ago in the Donkey software. And now, since the official eDonkey application has lagged behind we have a reverse scenario - programs like eMule and mldonkey have popped up adding a ton of features to the network. And both are open source.

    6. Re:Gnutella2 - The real story! by Anenga · · Score: 2, Informative

      Since you work for Limewire, then you'll know that Mike (the developer of Shareaza) was contacted by you with your GUESS proposal as he was working on his own similar proposal (wish is now used in Shareaza). I know those e-mail logs are lurking somewhere at Limewire LLC. Perhaps your accusations that Mike "stole" or "took" the GUESS protocol are a little too "immature"?

      Come now. I think were all quite tired of the poor attitude the GDF has shown towards Mike. There is no rule in the GDF against further development of the Gnutella protocol. I could of course have apathy for why your upset (Mike hasen't released the specs yet, or consulted the GDF before hand) but there is no putting off the actual facts: I get better results on G2 than G1. Less bandwidth, more fruitful results, etc etc.

      GUESS will be included in Shareaza soon enough as other clients start using it (in Shareaza's G1 capability). If you dislike the G2 design, that's fine. But we also hope that you could put aside your personal matters and actually embrace the network as really a better path to take than currently working with the mess which is G1.

    7. Re:Gnutella2 - The real story! by Adam+Fisk · · Score: 1

      Entering the inevitably losing battle of discussing bundled sofware, LimeWire bundles one piece of software on Windows - TopMoxie. This is far less than Kazaa, Morpheus, Bearshare, etc. The install is optional during LimeWire installation. That's about the last I'll say on the topic. Believe me, the technology itself is just so much more interesting. Is there any chance we can focus on that?

      --

      Adam Fisk

    8. Re:Gnutella2 - The real story! by Adam+Fisk · · Score: 3, Interesting

      I agree with you to some degree -- the key is coming out with the best technology for everyone in the end. It's just that open standards are typically what make this possible. This is as much of a social issue as anything else -- the Gnutella world is a pretty tightly-knit group that relies on trust to a large degree, but maybe it needed a little shake-up.

      As far as Gnutella vs. other networks, this is really the crux of the issue. Gnutella has lagged behind in some ways precisely because it is open -- it just takes forever for people to agree. I would argue, though, that it's worth it. Why? Because you come up with better standards in the end. Gnutella is the one network that has a public set of RFC-style specifications precisely outlining how the various protocols should work. This takes time, but it allows interoperability.

      eDonkey (and Overnet) are great counter-examples. They work very well, but they are proprietary standards for the most part. This has meant things like the eDonkey web URIs not really being standards compliant. But, then again, they're everywhere, so does it matter? Maybe not.

      It's my belief that open standards win in the end because they allow unforeseen innovation and creativity to be built on top of them.

      --

      Adam Fisk

    9. Re:Gnutella2 - The real story! by Adam+Fisk · · Score: 1

      The point is that Gnutella is based on open standards. Open standards, however, rely on those standards going through a "standardization process." The w3c exists for a very good reason. The GDF exists for a very good reason.

      This is not a personal issue. I like Mike and think Mike has done a great job with Shareaza, and I applaud him for it.

      --

      Adam Fisk

    10. Re:Gnutella2 - The real story! by Lukey+Boy · · Score: 1
      Hm. It's not exactly a hard-core belief of mine that open standards will win in the end - but I believe that they should win. Of course when talking about P2P applications such as eDonkey, reverse engineering and then extending the protocol takes very little effort. There's even a tool on Sourceforge specifically for decoding eDonkey network traffic.

      But I defintely will keep cheering for the open standards. Like I said, I'm running Mozilla, Linux, KDE, and so on.

      I have another question. You were kind enough to respond to me several times and discuss the swing from proprietary to open and so on. But you left out any comments on one topic: spyware. What's with that? Does the revenue from spyware/adware actually provide you with a valid business model?

      I'm not trolling - I'm completely serious. It amazes me to see people grabbing utilities and programs off Download.com and what not that they see as invaluable (for instance Gator) - and then when I take a look at their machine, it's completely fucked thanks to the extraordinary amount of garbage that piggybacks on the install.

      You LimeWire coders seem like you definitely know where it's at - I've picked through most of the code line by line, and it's great. But come on - spyware?

    11. Re:Gnutella2 - The real story! by yomegaman · · Score: 0

      If they removed the stealware there'd be nothing left!

      --
      ...wearing a skin-tight topless leather jumpsuit, with cutaway buttocks and transparent crotch panel.
    12. Re:Gnutella2 - The real story! by Adam+Fisk · · Score: 5, Informative

      On the spyware topic, we originally started bundling software purely out of the need to survive -- we needed to bring in money, or we would have closed down. Since then, we came out with LimeWire Pro and now only bundle TopMoxie with LimeWire, and it's an optional install. TopMoxie really is not spyware in the way people typically use that word. It basically does one thing -- it has affiliate programs with multiple web sites, and when you visit those sites, it pops up a really innocuous window (that times out and disappears) asking you if you would like your purchase to support LimeWire. If you click yes, we get the affiliate revenue. If you ignore it or don't notice it, nothing happens. TopMoxie is primarily used by schools and charities to raise money for them.

      So, the short answer is that we would prefer not to bundle anything. As a result, we now only bundle one program that we feel is really innocuous to the user and that they have the option not to install. On all operating systems other than Windows, LimeWire has no bundled software.

      --

      Adam Fisk

    13. Re:Gnutella2 - The real story! by Lukey+Boy · · Score: 1

      Thanks for the straight answer Adam. I guess that's the price to pay for working at a company that actually produces cool software.

    14. Re:Gnutella2 - The real story! by zapfie · · Score: 2

      So when are you guys going to remove all that crapware & stealware from the LimeWire client?

      When a good amount of people are willing to pay decent money for a client?

      --
      slashdot!=valid HTML
    15. Re:Gnutella2 - The real story! by Anonymous Coward · · Score: 0

      So when are you guys going to remove all that crapware & stealware from the LimeWire client?

      I don't think you understand. That is what pays the bills. This is the problem with the Slashdot crowd. Everything should be free, there should be no ads, and capitalism sucks. Get real.

    16. Re:Gnutella2 - The real story! by YrWrstNtmr · · Score: 2

      Get real

      "I, LimeWire the user, agree to allow LimeWire, LLC, to redirect authorized funds from a 3rd party during the completion of a transaction."

      How is that not stealing? If you tried this at a store, the owner would have you arrested.

      If LimeWire, LLC's business model sucks so bad as to not be able to generate enough income to pay their employees, that makes it OK to take money from a 3rd party (who certainly did not agree to this)? Bull.

      A crappy business model does not make stealing OK.
      If you don't make enough money to support your family, stealing from the supermarket is OK?

    17. Re:Gnutella2 - The real story! by 0x0d0a · · Score: 3, Funny

      At first I saw you worked for LimeWire, and felt a small amount of respect - then I remember the bullshit hoops I had to go through to clean my system of the utter crap it installed through my system directories and the registry.

      I hate to say it, but I'm starting to get a pretty good chuckle every time I see some poor Windows user griping about the amount of pain they go through to get "good downloadz". I hear whining about "pop up" or "pop under" ads. I hear complaining about "spyware". I hear complaining about "mandatory sharing" in P2P apps. I hear people frantic that newer P2P apps can "fake" shares (like on Direct Connect) because of piss-poorly designed architectures involving trusted remote code.

      It's all really funny to those of us who have been using open source P2P clients and Mozilla on Linux. *We* haven't seen a single one of these problems, and *we* aren't suffering.

      But, you know what? I encourage pop-ups. And intrusive advertising, spyware, and everything else. Why? It doesn't affect me in the least, and it means that *you* are subsidizing the good life for me. Each pop-up you see funds another good, clean pop-up free page for me.

      Of course, someday you people are going to catch on. You're going to use Mozilla, use Linux. You're going to use better P2P clients. But until that day, the rest of us are going to enjoy the good life.

      Until then, thanks for everything!

    18. Re:Gnutella2 - The real story! by 0x0d0a · · Score: 2

      Sharezilla is more than welcome to use their "G2" protocol. They can communicate with the other "Sharezilla" users out there. Woohoo!

    19. Re:Gnutella2 - The real story! by Anonymous Coward · · Score: 0

      IIRC it isn't in the publically available source....

    20. Re:Gnutella2 - The real story! by peerogue · · Score: 1

      It uses less bandwidth because it implements the Gnutella traffic compression that Raphael Manfredi (of gtk-gnutella) designed and pioneered in a first implementation.

      Note that contrary to Shareaza, Raphael did publish the specifications for negotiating traffic compression among peers.

      Commenting!

      -- Peer

    21. Re:Gnutella2 - The real story! by Adam+Fisk · · Score: 2, Interesting

      We also don't mean to imply that Mike "took" GUESS in any way. I fully understand that he was working on a separate protocol when GUESS was being developed -- I understand because I'm the one who had those conversations with him.

      The point is that GUESS is a public specification for searching on Gnutella. Hopefully, whatever Mike is doing will soon be public as well. Then again, if it's not GUESS but is very similar to GUESS, then it'll create a standardization nightmare that we've worked very hard to avoid -- the type of incompatibility that wastes everyone's time. We need to have an open network that evolves and innovates rapidly. Perhaps Gnutella 2 will be a positive part of that, but it's not off to a great start.

      --

      Adam Fisk

    22. Re:Gnutella2 - The real story! by Jeremi · · Score: 2
      A crappy business model does not make stealing OK.


      That's a little rich, coming from a p2p file sharing advocate.... ;^)

      --


      I don't care if it's 90,000 hectares. That lake was not my doing.
    23. Re:Gnutella2 - The real story! by YrWrstNtmr · · Score: 2

      P2P has nothing to do with it. That technology could be piggybacked on any application.

      OBTW, I much prefer emusic.com to any 'file sharing'.

    24. Re:Gnutella2 - The real story! by Anonymous Coward · · Score: 0
      I'm a engineer at Lime Wire LLC

      When's the pink slip party?

    25. Re:Gnutella2 - The real story! by dphoenix · · Score: 1

      Oh yeah? Well... uh.. I can use Office XP.. it has the paperclip guy, Clippy - he's really helpful! .. yeah, ok, you guys win for now.

    26. Re:Gnutella2 - The real story! by karlm · · Score: 2

      Interesting... any way to tell if a site is a TopMoxie affiliate? Any way to set the appropriate TopMoxie information for an order without the official TopMoxie client?

      --
      Copyright Violation:"theft, piracy"::Anti-Trust Violation:"thermonuclear price terrorism"<-Overly dramatic language.
    27. Re:Gnutella2 - The real story! by Adam+Fisk · · Score: 1

      The LimeWire/TopMoxie affiliates are listed on the LimeWire web site here.

      Linking to these through the LimeWire web site goes directly to our affiliate links just like they would with any other web site. Those links are also listed directly on our home page.

      --

      Adam Fisk

    28. Re:Gnutella2 - The real story! by Anonymous Coward · · Score: 0

      So, you want LimeWire LLC to follow the /. business model?

      1. Remove profitable parts of software
      2. Give software away for free
      3.
      4. PROFIT!!!

    29. Re:Gnutella2 - The real story! by vandel405 · · Score: 0

      Just a note on the Direct Connect thing. I happen to know a bit about it :). The "mandatory sharing" is something that users have added through scripts, there is no support for it at the protocol level. So the protocol isn't "piss poor".

    30. Re:Gnutella2 - The real story! by Lukey+Boy · · Score: 1

      I do use Mozilla. And Linux. Work has me using Windows 2000, which I install various P2P apps on, and then I write about them. I've been using Linux for many, many years and have several *BSD boxes at home too. Read the whole thread next time, and thanks for coming out pal.

  18. No comment by tswinzig · · Score: 1

    "Gnutella2, which is really a revised Gnutella protocol..."

    --

    "And like that ... he's gone."
  19. UDP and firewalls by elliotj · · Score: 5, Interesting

    I wonder how this client will perform for people behind firewalls? Many firewalls are setup to deny UDP traffic because most Internet activity is TCP and having UDP open has been unnecessary up to this point.

    I wonder if this will halt the spread of Gnutella2? With P2P, it's all about getting as many people online as possible.

    1. Re:UDP and firewalls by Anonymous Coward · · Score: 0

      Most firewalls will open UDP connections if they are used from 'safe' side of the firewall.

      I'm not sure how UDP traffic is going to be used but maybe nodes could advertize their ports and then try to ping each others to their known ports.

      Packets will flow when both sides send them. It doesn't matter if there are firewalls or not.

      Of course not all firewalls work like this, but it would work with connection tracking ones.

    2. Re:UDP and firewalls by Adam+Fisk · · Score: 5, Interesting

      Firewalls block most incoming UDP traffic in the same way that they block incoming TCP traffic -- there's really no difference. Incoming traffic is generally denied except for specific ports.
      So, with both UDP and TCP, only outgoing data will not be blocked as a general rule. With TCP, this poses less of a challenge because once you've established a connection, data can be passed both ways. With UDP, you cannot establish a connection in the same way. That said, most firewally will allow incoming UDP from a specific endpoint if you've sent outgoing data to that endpoit "recently." In this way, a quasi-connection can be established.
      All that aside, though, the short answer is that non-firewalled hosts, and specifically "Ultrapeers" on Gnutella, act as proxies for firewalled hosts, allowing firewalled hosts to behave on the network almost exactly like hosts without firewalls.

      --

      Adam Fisk

  20. Another alternative... by fault0 · · Score: 4, Interesting

    is OpenFT from the giFT project.. as people may recall, giFT was originally an open implmentation of parts of the FastTrack protocol, used by Kazaa, et al. This was an year ago, and KaZaA was not at all happy about this, so they updated a few times to break giFT (see KaZaA version 1.33).

    So, some of giFT's developers decided to abandon fasttrack, and make their own protocol, OpenFT. giFT went from "giFT is not FastTrack" to "giFT: Internet File Transfer". This protocol, primarily written by jasta of gnapster fame, has been development for the last ~8 months. A publically released version of giFT with OpenFT is not available yet, but right now, the CVS version works quite well.. even in some ways better than FastTrack does.

    There are also some great advantages to giFT. First of all, it enforces a seperation between the client and the network code. giFT is a daemon that handles most of the interaction with the outside world. There are also a multitude of giFT frontends, which are very easy to write, as no network code has to be created. giFT is also modular.. you can put in bridges or even full support to other protocols and networks.

    1. Re:Another alternative... by Anonymous Coward · · Score: 0

      While OpenFT is a good protocol, their support for casual users (even of the linux variety) is rather hostile. Jasta (one of the people that maintain the source) has been quoted in OpenFT/giFT's documentation as saying [paraphrasing]: "If you can't understand this, learn to read."

      The core development team undoubtedly has the talent to write the code, and giFT might have many great technical features, but, unforunately, they seem to lack the social skills to support the users of the giFT daemon.

      So, move along, this is not one of the alternatives you are looking for.

    2. Re:Another alternative... by RPoet · · Score: 2

      I call bullocks on you. While the giFT project leader and main coder may appear a little antisocial and semi-narcissistic, he and his team are highly skilled (and well aware of it, which may be a little politically uncorrect). giFT is highly usable even now, and it gets better for every cvs update I do.

      It's certainly very useful for music downloads, ranging from everything from the latest Pop Bimbo to classical Strauss. While the number of users on giFT range only in the hundreds, these are an idealistic crowd, not free-loaders like on KaZaA. Each user shares in average around 8 gigabytes! And you won't find a higher .ogg ratio on any other network. Ditch those mp3s!

      If you haven't, try giFT today! And if you're even more interested in the project, join the discussions at #gift @ freenode (and get a taste of that "attitude" you've been hearing so much about ;).

      --
      "Oppression and harassment is a small price to pay to live in the land of the free." -- Montgomery Burns.
    3. Re:Another alternative... by fault0 · · Score: 2

      > While OpenFT is a good protocol, their support for casual users (even of the linux variety) is rather hostile.

      This is mostly because the new giFT is not really supposed to be used by the wide public yet, as there is not a general release yet. You are welcome to test it right now, and thus help improve it, but it's not in a stage where the developers like jasta can give support for it, especially when it's still changing relatively rapidly.

      Anyways, giFT is still worth trying. It is really shaping up as quite a project. I've been following it since before the beginning, when a mysterious group of people called the "givers" had reversed the FastTrack protocol, and donated it to a group called kazaa-linux who had been working to make kazaa or a variant work in Linux. It's still unknown who the givers were.

  21. UI by Mr_Silver · · Score: 2, Informative
    It's a small thing, but my biggest complaint about these p2p programs is that the user interface just sucks.

    Sure, it's useable, but it's horrific. Kazaa's is aweful, eDonkey's just blows and WinMX, urgh, don't get me started.

    Admitially I never really investigated Gnutella after trying the original Nullsoft version. The UI was ok, if a little plain, but the time it took to hook up to a bunch of stable nodes, the slow download time and frequency of dropped downloads just put me off.

    So really, all i'm asking is that whilst you're concentrating on making an excellent protocol, please don't employ a 7 year old with a crayon to do the UI. Hell, I'd happily help out on an OSS project, however I can't use VC++ to save my life and most people wouldn't like submissions on Visual Basic frm's - i'll probably end up standing on the sidelines shouting but having no-one listen.

    There are a few examples of technically inferior applications that do better than others simply because their UI is clean, consistent and works. Lets have that, please!

    --
    Avantslash - View Slashdot cleanly on your mobile phone.
    1. Re:UI by Anonymous Coward · · Score: 0

      Beggars can't be choosers.

    2. Re:UI by Anenga · · Score: 2

      Whaa? I actually think Shareaza has the best UI out of all Gnutella clients.

      Though, there is that one Searching Status I begged Mike not to put in, which was put in anyways =)

      Your suggestions are welcome on the forum.

    3. Re:UI by Anonymous Coward · · Score: 0

      So you're a VB hack?
      If you're so worried about UI design, maybe its time you picked up a different IDE.

      I have no experience with vb.net, but using vb 3-6 was about the worst way to desing a user interface. Primarily because the forms generated were static. No component layout managers to provide for form resizing. If you could gaurantee that the end user would be in a certain resolution and would not want to resize the application, then you were fine. Unfortunately for the VB programmer, it never worked out that way.

    4. Re:UI by 0x0d0a · · Score: 3, Funny

      It's a shame that all the Windows P2P clients use things that look like their UI designer is an ex-web designer.

      UNIX P2P clients don't suffer from this problem.

    5. Re:UI by j_d · · Score: 1
      Primarily because the forms generated were static.

      This is inaccurate. There's many bad things to say about VB, but the inability to resize forms was not one of them.
    6. Re:UI by Pinky · · Score: 2, Interesting

      I get a half dozen complaints about the GUI in my p2p program called Myster every few months. I have asked people to do mock-ups of what they would like to see in a GUI and have not yet received any. Personaly my ideal p2p GUI is in Myster (well, with some more intellegent window behavior). Many simple windows for a small learning curve and ability to do many things at once. or not.. :-)

      OSS no spyware Unicode everywhere (lots of japaneese stuff)

      www.mysternetworks.com

    7. Re:UI by Anonymous Coward · · Score: 0

      I don't mean just stretching the window out, I mean having the components within the the window stretch in a logical manner as well.
      If you stretch out a form, or maximize it, you should not be left with components up in the corner and alot of grey space.

      Some third parties have tried to solve this by creating VBXs or OCXs of "elastic" componets that are placed on a form before the other components, but the resizing that occurs often happens in both the x and y dimensions and is not always the desired effect.
      For example, If you have a custom text field, placed onto a form, it would only make sense to resize in the x-dimension with its parent form.
      Visual basic does not provide for this without a lot of hacking on windowing events.

  22. spyware? by groundpig · · Score: 1

    Anybody who knows want to comment on whether Shareaza is loaded with spy/adware? Thanks in advance.

    1. Re:spyware? by Lukey+Boy · · Score: 2, Interesting

      It's actually got a clean record, from day one. Amazingly enough.

    2. Re:spyware? by Jugalator · · Score: 2

      Anybody who knows want to comment on whether Shareaza is loaded with spy/adware?

      What's stopping you from clicking the link in the article to find out on the web page? ;-)

      --
      Beware: In C++, your friends can see your privates!
  23. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  24. This... by jmu1 · · Score: 2

    coming from a company who installs spyware? I don't use p2p filesharing apps, but I've had to clean several machines of users who do. Although I fully understand the desire to rob people blind through their own stupidity; I'm in technical support for crying out loud, I just can't see how anything that comes from you guys(or any other company willing to put that sort of trash on a person's machine) could be truthful.

  25. Just wondering... by Anonymous Coward · · Score: 1, Interesting

    When will somebody make a p2p gateway which will allow different p2p protocol to interacted at a different layer and interact with one another despite whatever p2p protocl they are using

  26. The problems with Gnutella 1 by evilviper · · Score: 5, Interesting

    The (solvable) problems with Gnutella:

    Bandwidth Usage (for searches)

    Search results. You only get about 4-7 hops. Assuming 4 hops & 4 non-redundant connections per node, that means you are only searching about 256 nodes. Being able to search everyone would make Gnutella for more useful for less-common files.

    Fifo queuing. You may have been requesting a file for the past 24 hours, but someone that just requested a file may get lucky, and take what should have been your spot.

    Messages. We need messages to tell people that slow nodes downloading from our node gets disconnected, that you are 2nd in the queue, etc.

    Upload settings. Each node should be disconnected after a set period of time to prevent slow nodes from causing bottlenecks, or RIAA employees from abusing the limited open slots.

    Bandwith Min/Max for Uploads/Downloads. A limit on the min/max speed for each file download/uploaded, and a min/max for the TOTAL of all downloads/uploads.

    Dynamic determination of REAL IP (if behind NAT with dynamic globally valid IP).

    Solution to the 'PUSH' fiasco. Is there a way that 2 firewalled nodes can connect to a third (non-firewalled) party to open the connection, then tranfer data directly? I don't think so, but worth including here.

    Any more?

    --
    Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    1. Re:The problems with Gnutella 1 by evilviper · · Score: 2

      Hmm, I've left a few out...

      Metadata. So that you can find mp3s/oggs via the value in their id3 tags. e.g. Search for Artist:Megadeth

      Searching by (sha1) hash. Some have it, ALL need it. Slackware could put their latest ISO on gnutella, and distribute the (sha1) hash on their website. You then find the file on many nodes, and can download from any or all of them. Instant , easy, free, file mirrioring.

      And while I'm here... Long live Napshare!

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    2. Re:The problems with Gnutella 1 by glesga_kiss · · Score: 3, Interesting
      Solution to the 'PUSH' fiasco. Is there a way that 2 firewalled nodes can connect to a third (non-firewalled) party to open the connection, then tranfer data directly? I don't think so, but worth including here.

      Not possible. The only way it could work is if the third party connection acted as a proxy for all of the data, because neither side can initiate the TCP transfer. The PUSH idea is actually a pretty neat solution to getting around firewalls, but I never liked the way Gnutella used it, you rarely got a successful push.

      It won't work if both clients are firewalled, and this is in keeping with the point of the firewall, i.e. preventing incomming connections.

      My solution is to run p2p on a sacrifical PC, that only has limited access to my network i.e. read-only access to SAMBA shares. I do this anyway because it's a public PC in my living room, and with lot's of random people around from time to time, it's a good idea to protect my data. My firewall forwards the p2p ports to this host, so I basically can access all of the nodes on the network. Should it ever get "rooted", then my exposure is not quite as bad as it would be for a trusted machine.

      Running p2p behind a firewall severely limits the number of people you can access. I see this as a good thing, because it means less people are fighting over the resources that I personally can use. ;-)

    3. Re:The problems with Gnutella 1 by chrohrs · · Score: 4, Insightful

      What may not be clear to many Slashdot readers is that the Gnutella protocol has been steadily improving over the last few months. Let me correct the previous poster on a few points:

      Search results. You only get about 4-7 hops. Assuming 4 hops & 4 non-redundant connections per node, that means you are only searching about 256 nodes.

      Your math is way off here. Try 7 hops with 6 connections, plus an extra factor of 100 or so from ultrapeers. That said, we are always looking for ways to improve searching. Ultrapeers were one step along that path.

      Fifo queuing. You may have been requesting a file for the past 24 hours, but someone that just requested a file may get lucky, and take what should have been your spot.

      Many clients (e.g., LimeWire, BearShare, Shareaza, Gtk-Gnutella) have supported this for some time now. They all interoperate too.

      Bandwith Min/Max for Uploads/Downloads. A limit on the min/max speed for each file download/uploaded, and a min/max for the TOTAL of all downloads/uploads.

      All decent client have features like this. But note that this is an implementation issue, not a protocol issue.

      Search by hash

      This has been supported for many months, thanks to Gordon Mohr's HUGE proposal.

      Metadata

      LimeWire has had XML-based metadata for over a year. I believe Shareaza uses the same scheme.

      As these examples show, the GDF has been quite successful at driving innovation on the Gnutella network. But caution is sometimes in order; it can be hard to predict the result of thousands of clients running a new protocol. It would be good for Shareaza to submit its new extensions for peer review before rolling out thousands of clients. It is easy to build a client that gets more search results; it is harder to do that without hurting the entire network.

      Christopher Rohrs
      LimeWire

    4. Re:The problems with Gnutella 1 by XNormal · · Score: 2

      Not possible. The only way it could work is if the third party connection acted as a proxy for all of the data, because neither side can initiate the TCP transfer.

      I've seen an article somewhere describing a system that exploits the little-known TCP feature of simultaneously opening a connection from both sides to allow two machines behind NATs to talk TCP to each other. It's very tricky and starting the connection requires the assistance of a third party that is capable of sending packets with spoofed IP addresses. After the connection is open, though, the two participants can talk directly without additional help.

      It may not be practical, but it is possible.

      --
      Stop worrying about the risks of nuclear power and start worrying about the risks of not using nuclear power.
    5. Re:The problems with Gnutella 1 by volkris · · Score: 1

      Something about this was posted to Slashdot years ago. I've looked for it a couple of times but never found it.

    6. Re:The problems with Gnutella 1 by Anonymous Coward · · Score: 0

      "and with lot's of random people around from time to time" drug dealer?

    7. Re:The problems with Gnutella 1 by evilviper · · Score: 2
      we are always looking for ways to improve searching. Ultrapeers [limewire.com] were one step along that path.

      Supernodes are anything BUT a solution IMHO. It is simply taking the heavy bandwidth usage from one node, and passing it to another. Far from idea. Besides, you should consider exactly how much bandwidth is used up to provide 6 simultaneous connections with a hop-count of 7. It's more than many broadband users can muster, even if that's the only thing they are dedicating their bandwidth to.

      GDF has been quite successful at driving innovation on the Gnutella network

      Not really. The only places there have really been improvements is in client-side changes. The bandwidth-heavy 'broadcast' method has been in-use (and despised by everyone) since the very begining. I wouldn't call 'superpeers' anything more than a nasty hack that just shifts the problem around a bit.
      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
  27. This is missing the point by TerryAtWork · · Score: 4, Interesting

    The whole point of a p2p network is not to share files but to not get caught sharing files.

    Last February I got a bigfoot letter from my ISP, Rogers, who had been contacted by the Canadian equivalent to the MIAA, whatever it's called.

    I was sharing tons of stuff, 8,000 mp3s, on DalNet and they wanted me to stop. What bothers me is they never contacted ME, they went straight to my ISP and tried to get me kicked off the Internet.

    The letter from Rogers said you're in violation etc, stop now etc, or else etc.

    So, I stopped.

    This close call ruined my career on Dalnet where I had built quite a rep, and trashed my source of free music.

    And not popular music either - ancient stuff you cant get anymore, like Robert Crumb and his Cheap Suit Serenaders. Buy THAT at your local CD shop...

    Since then the point has been made moot by the fact that my cable modem has been capped at about a FIFTH of it's previous speed. (I am investigating DSL)

    However - the crux of the whole matter is this - the record companies hired people to go on the internet and score music for them. Then these people, who, and this is crucial, have the IP of the music source, use that IP to run down the source down and then use legal means to try and get that person kicked off the internet.

    IT DOESN'T MATTER HOW FANCY YOUR PROTOCOL IS OR HOW GOOD YOUR CRYPTOGRAPHY IS, IF THEY CAN GET YOUR IP YOUR SCREWED.

    I have NEVER seen a p2p system address this issue.

    --
    It's Christmas everyday with BitTorrent.
    1. Re:This is missing the point by Jugalator · · Score: 2

      IT DOESN'T MATTER HOW FANCY YOUR PROTOCOL IS OR HOW GOOD YOUR CRYPTOGRAPHY IS, IF THEY CAN GET YOUR IP YOUR SCREWED.

      *ears ringing*

      I have NEVER seen a p2p system address this issue.

      No, it would probably require changing the IP layer to something more exotic. And don't say CPIP-based solutions doesn't work! :-)

      --
      Beware: In C++, your friends can see your privates!
    2. Re:This is missing the point by Lukey+Boy · · Score: 3, Interesting
      I have NEVER seen a p2p system address this issue.

      I have - it's called Freenet.

    3. Re:This is missing the point by AshuBhai · · Score: 1

      Well this shows that ISP's/RIAA are going after users having tons of media on their hard disks. Well one way to circumvent this is by not allowing " view all the shared files of this user" option. This would prevent guys from knowing "how much" is being shared. The interface should be designed to only show individual files when serached.

    4. Re:This is missing the point by /dev/trash · · Score: 3, Funny
      This close call ruined my career on Dalnet where I had built quite a rep, and trashed my source of free music


      Your career? Huh? You were distributing files illegally. What career is that????

    5. Re:This is missing the point by TerryAtWork · · Score: 1

      Dude, it's all bit strings. When it's easy to copy them, they get copied. Period.

      Remember Smith's Law of P2P - Physics beats ethics.

      --
      It's Christmas everyday with BitTorrent.
    6. Re:This is missing the point by Anonymous Coward · · Score: 0
      This close call ruined my career on Dalnet where I had built quite a rep, and trashed my source of free music.

      Oh you poor baby....

      Actually, I was running a private ftp dump for fairlight, and stopped when the bug warez bust went down last year. Kinda killed my irc career and rep too.

    7. Re:This is missing the point by Anonymous Coward · · Score: 0

      the "crowds" software solves just this problem, here is a link to an article about it and other NG p2p.
      http://www.wired.com/news/privacy/0,1848,537 99,00. html

    8. Re:This is missing the point by burbilog · · Score: 1
      IT DOESN'T MATTER HOW FANCY YOUR PROTOCOL IS OR HOW GOOD YOUR CRYPTOGRAPHY IS, IF THEY CAN GET YOUR IP YOUR SCREWED.

      I have NEVER seen a p2p system address this issue.

      Ever heard about freenet? It's too unreliable for now, but it's improving with time, and one of its goals IS to solve this issue.

    9. Re:This is missing the point by brainsik · · Score: 1

      I have NEVER seen a p2p system address this issue.

      This is exactly the issue that FreeNet addresses.

  28. Re:great! by thopo · · Score: 0, Offtopic

    GIVE ME MORE! waste your moderator points on me!

    i have plenty of karma to spare! muhahahaha!

    --
    keep it simple.
  29. Yeah , anything you';d use ftp for by Viol8 · · Score: 0

    Eg , source or binaries for various programs. Unlikley I admit but the potential is there. P2P is basically the old archie protocol combined with ftp , whereas archie searched for stuff and told you where it was but didn't go get it , P2P does both.

  30. Gnucleus & GnucDNA by DeadBugs · · Score: 5, Informative

    Gnucleus has been a solid Gnutella client for me.

    They are also working on GnucDNA a component for building your own P2P applications.

    --
    http://www.kubuntu.org/
    1. Re:Gnucleus & GnucDNA by sshore · · Score: 2

      I thought Gnucleus was pretty good too, but on my computer it crashes after a short time if I share any files. It appears to crash while hashing the files and performing queries on those files. If I let it finish hashing the files before connecting to the network, it works just fine - right up until I actually download something and it hashes the download to verify it.

      I believe someone on the Gnucleus forum tracked it down, something to do with the shared file lists changing between the start of a hash and the end.

      I've been waiting a long time for a Gnucleus 1.8.5 to fix this problem. Nothing's available so far.

  31. MOD PARENT UP! by yoz · · Score: 2

    At last, a straight answer from Limewire people about spyware.

  32. Mac User: Thanks, Limewire! by Anonymous Coward · · Score: 0

    Sorry guys, but I use Mac OS 9 on my high-bandwidth connection and X on dialup. I never have to deal with LimeWire spyware, and the company produces the most prominent Mac filesharing client.

    Without Limewire, good filesharing implementations are few and far between, and I really appreciate them being around. Because otherwise, there'd be almost nobody.



  33. Ignore him, Adam by 0x0d0a · · Score: 2

    This guy is a troll. He's pushing IE, closed source, propriatary standards, and the domination of MS over the W3C and standards committees. He's saying that product "foo" is better than your product to try to sting you a bit, and then bashing the GDF, which *developed* the stuff he's lauding.

    Don't bite.

  34. eMule by apankrat · · Score: 1

    For those Windows people who prefer an open-sourced alternatives, there is an eMule ed2k network client.

    2c

    --
    3.243F6A8885A308D313
  35. For the Mac, we have ... by Amiasian · · Score: 1

    For OS X, there's a nice GNUtella client called Acquisition . It's got a clean interface, does find files, has resumable transfer, works, etc.
    I've been able to download a couple of DivX/AVI files off of it, as well as some apps. Gnutella's probably the best protocol we have on the Mac, at this time, and hearing complaints about the others (WinMX for Windows, or KazaA, etc.) I really don't think it's that bad.

    1. Re:For the Mac, we have ... by Anonymous Coward · · Score: 0

      FYI - Acquisition uses the LimeWire core so yes, it is up to date.

  36. Generally speaking by apankrat · · Score: 1

    If a number of people are extensively working in the same area of knowledge, it quite often leads to a simultaneous and independent discoveries of the same or very similar ideas. This is especially true on the frontiers of the research, where an initial idea is merely a seed used to start an iterative refining process, which results in an 'optimal' solution.

    The situations like this require great deal of tact from either party not to blame each other in stealing the idea, especially if there was a cooperation happening in some form.

    Your comment seems to be biased and based solely on the fact that someone else gained the publicity you were aiming for. Too bad :-/

    --
    3.243F6A8885A308D313
    1. Re:Generally speaking by Adam+Fisk · · Score: 1

      I really don't want credit. The issue is more that these standards were developed almost entirely by members of the Gnutella community other than Shareaza -- including Ultrapeers, compression (GTK-Gnutella and Swapper), UDP-based searching, etc, and most of them are not particularly new. That's what marketting seems to be all about, though, so maybe it's fine.

      --

      Adam Fisk

  37. True, but on other hand by apankrat · · Score: 1

    Standartization takes a loooot of time, and involves a lot of politics. Participating and contributing people want the credit, whether we as general public like it or care about it or not (take a look at IKE for example). If not given - some of them tend to stall the process. It is not a technology issue, it's a basic pshycology.

    I think it is perfectly legitimate practice to produce a proprietory protocol, put it through internal revision with number of people you know and then release to the public. How you would call it - it's a different issue, but - hey - Gnutella2 is as good name as any.

    --
    3.243F6A8885A308D313
  38. Spyware Free Limewire by asv108 · · Score: 2

    Well I assume if your posting on /. you are familiar with CVS? Go to this page and grab a copy of the source. All you need to compile is the java sdk and the ant build tool.

  39. A *real* anti-leech/anti attacker system proposal by 0x0d0a · · Score: 5, Interesting

    no leeching is far better than Kazaa

    I seriously doubt that. Any current "no leeching" mechanisms I've seen are severely flawed and rely on trusted remote code.

    People who whine and bitch that people are bypassing them are ignoring the fact that the design is fundamentally wrong. You cannot trust code on another computer. Period. It *will* be broken.

    It is possible to build a trust web (where you have metered trust, instead of just a binary "trusted" or "not trusted" a la PGP). Have each user generate a public/private key pair. Have each person maintain a list of trusted users. These users are identified by their public keys. "Trust values" are assigned to each user in the list-holding user's trust list. The scale is arbitrary -- maybe "100" means trust a lot and "1" means trust a little, and "0" means no trust. Trust is generally positive (more on that later).

    When you want to determine "absolute trust" of a user, you run out and download the trust lists of all the users from them in your trust list (this spans only two hops out on the web of trust...you could go further, though I think this is sufficient). Person can grant absolute trust to person B as following: (points of trust A gives B in A's local trust list)/(total points of trust A gives A's local trust list)* (points of trust A has in our local trust list).

    Then, attackers like the RIAA will be excluded from the network of trust, having low or no trust values, as they hand out corrupted files.

    Trust lists can be redownloaded whenever. Cache 'em for weeks if you want.

    Clients could automatically add a point of trust per data unit downloaded succesfully from a remote client...then, if it's a bad download, the local user could strip all trust away.

    Trust could be used for ranking priorities to let people download from you, determining which copy of a file is "authentic" and which is bogus, etc.

    Other possibilities: the reason we don't allow negative trust or blacklists -- only whitelists -- is because it's usually fairly easy to regenerate a new IP, and this results in bloating attacks against users maintaing blacklists. If a user can present something that "costs" them something to obtain, like a VeriSign cert or other "expensive" (i.e. can't regenerate on your computer easily) proof of identity (doesn't have to be your RL name -- could be a signed cert endorsing a 'nym from Zero Knowledge), then give them automatically a certain number of points of trust (client configurable). Why? Because it's much less likely that they're running out and buying a new Verisign cert for each attack. They're opening themselves up to blacklisting.

    You could purge year-old entries from your local trust list to stay up to date...oh, there's tons of possible tweaks.

    The trust network simply sits on top of another P2P network. It does not require that users not download from users with zero trust -- it simply provides some extremely useful information which is essential to implementing strong antileech/anti network attack protections, or what have you. It is also very difficult to attack. PGP is much more vulnerable, since you just need one stupid person in your web of trust to okay someone, their binary trust bit flips to 1, and they're in your web. If you don't trust someone much, and they give someone else a little tiny bit of trust...that person is only very slightly trusted.

    Drawbacks:
    My analysis of this approach has found only two drawbacks. First, there is some disk and memory overhead to store cached trust information locally. Gnutella clients already store IPs for much of the network, so it shouldn't be prohibitive, though -- we don't have to handle the whole network, just *trusted* users.
    The second one is that letting people download your trust list -- crucial to the functioning of the system -- can leak some information. It means that you "trust" some user on the network. If that user provides nothing but, say, child porn, anyone on the trust network has circumstantial evidence that you have downloaded child porn. Of course, you could have granted the person trust for any number of other reasons, but it is a small amount of information leakage, and worth mentioning.

    I welcome comments.

  40. How exactly does TopMoxie work? by Weaselmancer · · Score: 1

    ...it has affiliate programs with multiple web sites, and when you visit those sites, it pops up a really innocuous window (that times out and disappears) asking you if you would like your purchase to support LimeWire. If you click yes, we get the affiliate revenue.

    So, if I read this right - let's say for instance that amazon.com is an affiliate. And I make a webpage with a lot of information about baking cookies, including a link to a book at amazon.com with a lot of good recipes.

    A LimeWire/TopMoxie user surfs my site and likes it. Wants to buy the book. Clicks the link to buy it.

    Now, if I read this right TopMoxie will pop up when I try to buy the book and ask if the user would like to redirect the bonus from the sale to LimeWire.

    Is my understanding of this correct or not?

    --
    Weaselmancer
    rediculous.
    1. Re:How exactly does TopMoxie work? by Adam+Fisk · · Score: 1

      The first versions of TopMoxie worked that way. The newer versions, however, will not overwrite links from other web pages.

      --

      Adam Fisk

    2. Re:How exactly does TopMoxie work? by Weaselmancer · · Score: 1

      So how exactly does the newer version work? And does my flowchart-ish example with the cookies apply? If it doesn't, what part do I have wrong?

      --
      Weaselmancer
      rediculous.
    3. Re:How exactly does TopMoxie work? by Adam+Fisk · · Score: 1

      In the scenario you described, TopMoxie would not come into play at all. It will not redirect links from other web sites, so it won't affect the affiliate revenue of other web sites at all.

      --

      Adam Fisk

    4. Re:How exactly does TopMoxie work? by Weaselmancer · · Score: 1

      Maybe I'm not understanding how TopMoxie makes any money at all then. Their website says this:

      TopMoxie is a small program that runs autonomously on your computer. It simply notices when you land on selected sites and sends a message asking you if you want to shop on behalf of your favorite cause. At your request, the service then takes you directly to the merchant's page

      So in my example assuming amazon.com is a "selected site" or affiliate or whatever the correct term is, a user clicks the "buy a book" link on the cookie baking page. TopMoxie will pop up and say something to the effect of "Would you like this purchase to be on behalf of LimeWire" or some such, right? And if the user clicks Yes, the book is purchased but LimeWire gets the commission.

      If I'm wrong about how this works please let me know where I'm wrong.

      --
      Weaselmancer
      rediculous.
    5. Re:How exactly does TopMoxie work? by Adam+Fisk · · Score: 4, Informative

      The difference is in the link. In your example, the user links to Amazon from another web site. In this case, TopMoxie does nothing. If the user goes directly to Amazon by typing it in a web browser, though, TopMoxie does prompt the user for whether or not he or she would like the commission to go to LimeWire.

      --

      Adam Fisk

    6. Re:How exactly does TopMoxie work? by Weaselmancer · · Score: 1

      In your example, the user links to Amazon from another web site. In this case, TopMoxie does nothing.

      Ah, so TopMoxie in no way hijacks other people's commissions then. Good. This needed to be cleared up. Especially since this was the previous behavior, and a major sticking point with a lot of folks. Glad to see this fixed.

      --
      Weaselmancer
      rediculous.
    7. Re:How exactly does TopMoxie work? by Adam+Fisk · · Score: 1

      Me too!

      --

      Adam Fisk

  41. Archie! Live! by 0x0d0a · · Score: 3, Interesting

    I want archie back. Current web-based FTP search engines suck. I like the command line search...pop in the name of a software package like openoffice, and it spits back several sites.

    After a lot of work, six months ago I got an archie client compiling. Took some work on the source, but got it up. Then I took another two weeks to find a working archie server. It was the last public one, I'm fairly certain.

    Two months after that, it went down. I was probably the only person that used it in ages, and probably the admins were wondering what was going on.

  42. Download Mirror by nstrom · · Score: 3, Informative

    Download link http://download.shareaza.com:8825/Shareaza1701.exe seems impossibly slow -- I'm getting 276 bytes per sec on my DSL connection. For anyone who wants to check out the 1.7 prerelease, here's a mirror:

    http://nstrom.chaosnet.org/Shareaza1701.exe

    1. Re:Download Mirror by reflector · · Score: 2

      i'm sharing 1701 on gnutella, as are many people. that's the fastest way to download it if you already have a client that understands magnet links:
      magnet:?xt=urn:sha1:QQB67YHOQV5BSLCFS7JYV6 2QAPLWCF RB&dn=Shareaza1701.exe

    2. Re:Download Mirror by reflector · · Score: 2

      take out the space between the wcf and the rb&.
      for some reason slashdot inserts a space when i post a magnet link.

  43. OK by chegosaurus · · Score: 2

    So does this mean I get more pr0n, or less pr0n?

  44. Finally! by Anonymous Coward · · Score: 0

    Finally we'll be able to trade pictures of naked women across the internet.

  45. Has been reviewed by 0x0d0a · · Score: 2

    I've run this by one of the gtk-gnutella developers, who's said that this seems like a good idea.

  46. Anonymity: A problem with Gnutella by erl · · Score: 1

    A major problem for me with Gnutella is anonymity. I would like to be able to download and upload files without revealing my IP number.
    I suppose it is debatable whether this is solvable without changing Gnutella's properties beyond recognition.
    I know Freenet is an alternative, and I havn't tried the latest version, but I think Freenet would have problems implementing a search function like Gnutella's.
    Some ideas of how to run something like Gnutella anonymously are:

    * using something like the Anonymizer. However, I'd have to trust the anonymizer :-(

    * Running over IPv6, getting an IPv6 address that is harder for the bad guys to track/convert to IPv4 than using a normal IPv4 address.

    * Designing a protocol where data travels through several clients on its way from source to destination. Each client doesn't know if the next client is the final destination or not, the clients basically act as routers and only know the next hop to take on its way to its destination. This is similar but not equivalent to FreeNet (no encrypted resource identifiers, each node holds exactly the data which it serves (not encrypted)).
    This would be less efficient than current Gnutella. It would require some reasonably efficient self-organizing routing scheme (this seems like the most difficult part of an implementation). But it could hopefully be more efficient than Freenet.
    Personally, I would value anonymity enough to sacrifice a fair amount of performance.

    Comments?

    1. Re:Anonymity: A problem with Gnutella by evilviper · · Score: 2

      I was well aware of this concern, but I don't believe it is really solvable.

      The best solution is to have the Gnutella nodes work as routers. Each one passes the data off to the next.

      Let us assume that A wants to dowload from B. Well there are a few nodes in between them (4 hops). Well, how is one going to no what the next hop is? Either A or B is going to need to know the complete path the the other.

      For that small improvement in anonymity, you are now downloading at 1/100th the speed you would get from a direct connection.

      Additionally, the node working as the router directly connected to A or B could tell that they are the end nodes. So, on top of all that, you need encryption.

      I've spent some time thinking about it, and I haven't figured out any good scheme so far.

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    2. Re:Anonymity: A problem with Gnutella by erl · · Score: 1
      Thanks for your comments!

      You wrote:

      The best solution is to have the Gnutella nodes work as routers. Each one passes the data off to the next.
      Agreed. I think this is the only way it can be done.
      Let us assume that A wants to dowload from B. Well there are a few nodes in between them (4 hops). Well, how is one going to no what the next hop is? Either A or B is going to need to know the complete path the the other.
      With Internet routing, each node only knows what the next hop is, and doesn't have to know the entire path. I would think that we could port routing discovery algorithms in use on the Internet for routing between "Gnutella" nodes.
      For that small improvement in anonymity, you are now downloading at 1/100th the speed you would get from a direct connection.
      How did you arrive at that result (1/100th of the original speed)? It is not at all obvious to me what the speed impact will be.

      If the routing is organized such that most of the routing nodes are on the backbone, then the speed impact for end nodes on slower connections would not have to be affected so much. It would more be a question of latency rather than speed being affected, which is not so important.

      To reach this goal, a self-organizing routing scheme which can detect the speed (and maybe also hops) between nodes will be required.

      However, the total amount of traffic on the Internet will increase, because all the data will be transmitted more than once. However, if the routing organization is good, this effect can hopefully be compensated for.

      Additionally, the node working as the router directly connected to A or B could tell that they are the end nodes. So, on top of all that, you need encryption.
      I think you could do this without the routers knowing if the next hop is the final one.

      Each router only has local knowledge of where to go for the next hop. You could do something like this:

      Nodes: A - B - C

      A wants to fetch data from C. A can figure out that B is the next node on the path to C. A asks B to fetch a certain data from C (and gives this transaction a unique identifier).

      B then asks C to get the named data, and send it back to B. C won't know if B is the final destination, or not. Similarly, B can't know if A is the final recipient for the data or not. B can use the stream identifier to know that the next hop for this packet is to A.

      So as far as the transport protocol goes, I don't think you need encryption. However, maybe you would to prevent "bad guy" routing nodes to selectively drop certain data it is asked to route.

      I would be happy to continue the discussion...

    3. Re:Anonymity: A problem with Gnutella by Rysc · · Score: 1

      The solution is blind man message passing. In a room full of blind/deaf people whose feet are bolted to the floor, one blind man composes a message. On it he writes a name of the recipient. He hands it off to a blind man within reach who he thinks is the recipient (actually, it would end up being a random choice). The second blind man reads the recipients name, and if it is his own, decrypts and reads the message. If it is not, he hands it off to a random blind man (perhaps even the same one). Eventually, if both the recipient and the sender are in the room, and are connected by having a chain of people within arms reach, the message gets to the person for whom it was intended. The message itself retains no information about whose hands it has passed through. The person who just handed it off has no idea if who he handed it to was the end point (and the end point can always deny getting it/being the end point). If it was sensetive, it was encrypted, if not (ie, it was a part of an MP3) it was not.

      And there you have anonymous, asynchronos data transfer accross a network. The price is massive slowness/massive bandwidth usage. Eventually those factors will reduce themselves via something like moores law into irrelevence.

      I did not say it was a good solution.

      --
      I want my Cowboyneal
    4. Re:Anonymity: A problem with Gnutella by evilviper · · Score: 2
      With Internet routing, each node only knows what the next hop is, and doesn't have to know the entire path.

      That's not exactly true. You see, on the internet, each router knows the final DESTINATION. Obviously, that does not accomplish anonymity. Each node/router needs to know where to send it next, and there's no way to do that anonymously. A router doesn't know where to send it next unless it knows where it is ultimately going.

      How did you arrive at that result (1/100th of the original speed)? It is not at all obvious to me what the speed impact will be.

      If the routing is organized such that most of the routing nodes are on the backbone, then the speed impact for end nodes on slower connections would not have to be affected so much.

      For the speed, I made up a VERY CONSERVATIVE number. It's more likely that Gnutella would actually grind to a halt.

      There is no such thing as a backbone on Gnutella. Perhaps you are refering to the fastest nodes (with the least delay)? The problem is that a huge ammount of bandwidth is being used up for the nodes participating. People are furious about the current bandwidth usage, and this would make the broadcasts look completely insignificant. There may be some fast nodes, but even all of them combined couldn't handle a fraction of this traffic, and that's assuming they would be willing to dedicate their bandwidth to this.

      Sure, it could work for a handful of people, but it won't take long before it has saturated the network.

      But this whole point is moot. There is no way traffic can be routed from source to destination without the nodes being privy to that information.
      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    5. Re:Anonymity: A problem with Gnutella by evilviper · · Score: 2

      If you were willing to broadcast your file to all the gnutella nodes, then yes, you could establish some decent anonymity.

      But that's part of the reason I called my post "solvable" problems with Gnutella.

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
  47. What Linux P2P program is best? by Anonymous Coward · · Score: 0

    Having just switched over from Windows, I searched in vain for a Kazaa port. I guess there's Kazaa Lite. What do you recommend?

    1. Re:What Linux P2P program is best? by Anonymous Coward · · Score: 0

      gtk-gnutella

      Or The Circle. It has what? A couple users, but it uses a very advanced protocol and it has a lot of features. Oh, and it's written in Python!

  48. UDP and DDoS by sshore · · Score: 2, Interesting

    I haven't seen anyone mention the potential of abusing the UDP search extension as a massive DDoS reflector. Simply send a query for something very common, with a faked source address on the packet, to as many Ultrapeers as possible. (I'm assuming that Shareaza implemented the GUESS extension, as many people have suggested.)

    The documentation for GUESS is not reassuring:

    In the past, a principal objection to using UDP has been that it allows anyone to easily execute a DDoS attack on any target machine. This concern has been based on the assumption that queries would require an extension listing the IP address and UDP port to reply to, however. In this proposal, this extension is not required, as responses are always sent directly back to the node that sent them, rendering such an attack impossible.

    This totally ignores the fact that the only way to determine which node sent the packet is to use the source address on the UDP packet! Am I missing something here? Am I misreading the documentation?

    1. Re:UDP and DDoS by pclminion · · Score: 2
      What I don't understand is why spoofing is possible at all. Can't your uplink router just take a look at your spoofed packet and decide, "Well crap, there's no way in HELL a legitimate packet from THAT IP address could have come from THIS interface, so I'll just drop it on the floor."

      Ok, so you can still spoof the addresses of other people on your segment (or possibly subnet, if you are using dumb switches), but shouldn't routers be able to figure out when packets are OBVIOUSLY bogus?

    2. Re:UDP and DDoS by sshore · · Score: 2
      Ok, so you can still spoof the addresses of other people on your segment (or possibly subnet, if you are using dumb switches), but shouldn't routers be able to figure out when packets are OBVIOUSLY bogus?

      As the saying goes, "That would cost extra". It's one of those things that's only really useful if everybody does it, and it requires more intelligence and processing power in the routing hardware, which equals more dollars.

      Many networks already do Reverse Path Filtering, but that doesn't fix the networks that don't do it.

    3. Re:UDP and DDoS by Anonymous Coward · · Score: 0

      Actually Shareaza does not use GUESS, and I think the developer said he took those attacks into consideration when developing the protocol.

  49. Re:A *real* anti-leech/anti attacker system propos by karlm · · Score: 2

    Ever signed anyone's PGP key? There are 4 levels of trust. (at least with GPG) Check your facts.

    --
    Copyright Violation:"theft, piracy"::Anti-Trust Violation:"thermonuclear price terrorism"<-Overly dramatic language.
  50. Re:A *real* anti-leech/anti attacker system propos by 0x0d0a · · Score: 2

    True (I wasn't aware of this, and I'm not sure that there's actually *support* for this in any actual implementation), but not useful for what I'm talking about. It's still much too rough-grained.

  51. What about regex searching? by anarkhos · · Score: 1

    Gnutella is useless due to its limited substring search. I have to perform multiple searches for the same kind of file because of it.

    --
    >80 column hard wrapped e-mail is not a sign of intelligent
    >life
  52. Re:A *real* anti-leech/anti attacker system propos by throwaway18 · · Score: 1

    >Have each person maintain a list of trusted users.
    >Clients could automatically add a point of trust per data unit downloaded

    This is where your scheme falls down. In a real p2p net you constantly
    interact with people you have not communicated with before. You
    don't exchange files with the same people often enough for "you
    scratch my back, I'l scratch yours" to give a worthwhile benifit.

    The traffic required to gather the information needed to keep track
    of individual users is more of a burden than leeches.
    When user A uploads to user B only they know that it happened,
    if user A says he uploaded but user B says he didn't then who do you trust?
    You end up with a circular problem finding a critical mass of people
    you trust to rely on.

    There is also the privacy/incrimination issue of tracking individual
    users uploads and downloads.

    I thought about this a lot and tried to create algorithms for working
    out how much to trust someone.

    I'm mainly trying to come up with a workable distributed effective anti
    leech system. The only solution that seems workable to me is for the
    users to form groups. The group members trust each other. People who
    want the same sort of files will group together, groups of pr0nsters,
    electronica fans, ebook people etc.

    When people in group X have sent you more bytes than you have sent to them,
    you give people from group X priority in your upload queue.
    Group members are mostly people who upload a lot so being friends with a
    whole group generally works out ok.

    You need some crypto so that group members can prove their membership
    and people can't falsly claim to be a member of a group that uploads
    a lot.

    The implementation details will need tweaking after some actual s/w
    is written. My current vision is that a group grows from a single
    member who holds the group private key. The founder grants membership
    to people who upload to him. Group members send reccomendations to
    the founder for new members. When the group grows large it may be
    necessary to spread the private key to several members.
    I imagine a successful group having a couple of hundred members.

    When someone is given upload priority because they are in a group
    the uploader says "you get to jump the queue because groups members
    x,y,z have uploaded to me". That information is shared and used
    within the group. To get rid of people who stop uploading after
    joining a group, the members form a new group with a new key
    every month or so, they descided amongst themselves who gets invited
    into the new group based on who uploaded within the group and
    who enhanced the groups reputation with the rest of the net.
    This is also necessary when the keyholder stops using the net/formats his drive etc.

    People can be a member of multiple groups and new one are allways forming. You can only credit your uploads to a couple of groups
    so obviously you credit the groups that you have benifited from
    being a member of and drop membership of useless groups.

    With many people only being online part time and the need
    to find colleagues on dynamic ips to exchange info, things
    like forming a new group out of an old one may take several
    weeks.

  53. What is TTH? by emkman · · Score: 1

    Can someone in the know explain Tiger Tree Hashing, and what advantages it might have? Thanks

    --
    Moderation Totals: Flamebait=2, Troll=1, Redundant=1, Insightful=6, Overrated=1, Underrated=1, Total=12. (not mine)
    1. Re:What is TTH? by peerogue · · Score: 1

      TTH Stands for "Tiger Tree Hash". It's a hash tree, based on the Tiger hash. You can build a hash tree with any hash really: you could use MD5, or SHA1. Here, Gnutella chose Tiger to build its trees, in case SHA1 gets compromised one day. The tree is build thusly: say you want to hash a 16 KB file. You will split it into 1KB blocks, and hash them with tiger. You'll get 16 hashes. Then you group those hashes by 2, and compute the Tiger of their concatenation: this yields 8 hashes. You do the same on those 8, which will yield 4, etc... Until you reach one final hash, which will stand as the root hash. This root hash is then a unique identifier for the file, and is called TTH. What is interesting with tree hashes is not so much the final root hash, but the whole tree (or say, the topmost 10 levels). Knowing the intermediate hashes lets you verify that some piece of a file indeed belongs to the file for which you have the tree. In our 16KB file example, if I give you the tree and then hand you out a 1KB piece, saying it's the 4th block, you just have to hash it to know whether it is correct. If the file was 1 MB large, you would need log2(1024) levels, i.e. 10, to be able to verify any 1KB block (aligned on its natural boundaries). For larger files, you would need more levels, but then the tree becomes quite large. Gnutella has chosen to keep around 10 levels of the tree for verification purposes, and is using THEX, (Tree Hash EXchange format, which is a serialization format of the tree) to communicate the tree among peers. When this is widespread, you will be able to quickly verify that a piece you're getting from a servent is indeed the right one, and not a fake. You will also be able to identify the bad parts of a file once it is complete and its TTH does not match the expected one. Instead of re-downloading everything, you will be able to focus on the bad parts only. The open question then is: why did Gnutella standardize SHA1 first, and not TTH as the standard way to identify files? The partial answer is: it's easier to implement SHA1, and it augments the security, as we will have two independent hashes to tag a file. The concatenation of the SHA1 and the TTH will be known as a "bitprint", as introduced by www.bitzi.com. I think this simple explaination will do for now. If you want more details, please consult the litterature. Helping! -- Peer

    2. Re:What is TTH? by peerogue · · Score: 1

      [Sorry, I was misconfigured as HTML, but thought it was plain text]

      TTH Stands for "Tiger Tree Hash". It's a hash tree, based on the Tiger hash.

      You can build a hash tree with any hash really: you could use MD5, or SHA1. Here, Gnutella chose Tiger to build its trees, in case SHA1 gets compromised one day.

      The tree is build thusly: say you want to hash a 16 KB file. You will split it into 1KB blocks, and hash them with tiger. You'll get 16 hashes. Then you group those hashes by 2, and compute the Tiger of their concatenation: this yields 8 hashes. You do the same on those 8, which will yield 4, etc... Until you reach one final hash, which will stand as the root hash. This root hash is then a unique identifier for the file, and is called TTH.

      What is interesting with tree hashes is not so much the final root hash, but the whole tree (or say, the topmost 10 levels). Knowing the intermediate hashes lets you verify that some piece of a file indeed belongs to the file for which you have the tree.

      In our 16KB file example, if I give you the tree and then hand you out a 1KB piece, saying it's the 4th block, you just have to hash it to know whether it is correct. If the file was 1 MB large, you would need log2(1024) levels, i.e. 10, to be able to verify any 1KB block (aligned on its natural boundaries). For larger files, you would need more levels, but then the tree becomes quite large. Gnutella has chosen to keep around 10 levels of the tree for verification purposes, and is using THEX, (Tree Hash EXchange format, which is a serialization format of the tree) to communicate the tree among peers.

      When this is widespread, you will be able to quickly verify that a piece you're getting from a servent is indeed the right one, and not a fake. You will also be able to identify the bad parts of a file once it is complete and its TTH does not match the expected one. Instead of re-downloading everything, you will be able to focus on the bad parts only.

      The open question then is: why did Gnutella standardize SHA1 first, and not TTH as the standard way to identify files? The partial answer is: it's easier to implement SHA1, and it augments the security, as we will have two independent hashes to tag a file. The concatenation of the SHA1 and the TTH will be known as a "bitprint", as introduced by www.bitzi.com.

      I think this simple explaination will do for now. If you want more details, please consult the litterature.

      Helping!

      -- Peer

  54. Re:A *real* anti-leech/anti attacker system propos by 0x0d0a · · Score: 2

    In a real p2p net you constantly interact with people you have not communicated with before.

    But if you have a 200 entry trust list, and all the people on there have a 200 entry trust list, that's a pretty sizeable chunk of data. It isn't just those that you have to interact with.

    The traffic required to gather the information needed to keep track of individual users is more of a burden than leeches.

    Take the above scheme...200 lists, refreshed on at most a weekly basis...that isn't *that* much. A gnutella client generates more than that with search broadcasts in a short period of time.

    When user A uploads to user B only they know that it happened, if user A says he uploaded but user B says he didn't then who do you trust?

    Using files was just an idea, one of the many sources of deriving trust automatically. Originally my idea was to manually grant trust -- "Wow, this guy's serving me this great file! I'm giving him some points!". However, I suspect that people are more likely to be willing to do active negative moderation ("These files are fakes -- I'm stripping the guy of all the trust I gave him") and let the client slowly increase trust. It also makes it difficult for someone *cough* MPAA to serve deliberately corrupted files, since their goal is to serve tiny corrupted slices and damage large files -- to gain trust, they have to serve large chunks of data. There is no required, direct link between files downloaded and trust gained. Furthermore, the only person listened to is the person *granting* the trust. He is under no onus to grant trust if he downloads a file -- this isn't "credit" or "money", it's "trust". He could have a client that doesn't trust anyone except those he manually marks.

    There is also the privacy/incrimination issue of tracking individual issue of tracking individual users uploads and downloads.

    Yes, I mentioned that. It was some of some concern, but the fact that trust can derive from other sources helps obscure it. There's no log of transferred files ever moved around. The best you know is that Person A knows of Person B, and likely engaged in some transaction with them. Hell, they could have chatted with them and liked them and jacked their trust.

    I thought about this a lot and tried to create algorithms for working out how much to trust someone

    Same here, though my interest lies more in the field of improving resistance of P2P networks to organized outside attack, as the RIAA/MPAA have been hiring firms to do. The robust antileech stuff is a bonus that I suspect some people will be interested in.

    The only solution that seems workable to me is for the users to form groups. The group members trust each other. People who want the same sort of files will group together, groups of pr0nsters, electronica fans, ebook people etc. When people in group X have sent you more bytes than you have sent to them, you give people from group X priority in your upload queue.

    Actually, rather similar to what I'm doing in essence. My approach is a bit more fuzzy (outward spreading weakening webs of trust), since I'd like to automate as much as possible, which I feel is important for scalability reasons. People tend to interact with those that hae similar interests.

    You need some crypto so that group members can prove their membership and people can't falsly claim to be a member of a group that uploads a lot.

    [Nods] similar to my conclusions, and my design follows yours here. Note: one drawback of any auth system that I have a small amount of concern over is that suddenly, people are storing a standardized piece of data that has lots of value to crackers on their computer -- their keypair. I could see nasty worms erupting aimed at grabbing keypairs.

    The implementation details will need tweaking after some actual s/w is written. My current vision is that a group grows from a single member who holds the group private key. The founder grants membership to people who upload to him. Group members send reccomendations to the founder for new members. When the group grows large it may be necessary to spread the private key to several members.

    Again we're similar. A few differences -- I tried to avoid discrete trust level issues -- "I trust you" or "I don't", but no middle ground. You may not trust everyone that gets into the group -- an issue with PGP, for instance. Second, there is no single private key in what I'm proposing -- no person has rights to anything other than their own trust list. Third (this may in particular be interesting, since it could be better either way), with your system trust is transitive. If User A is in Group B, and User C is in Group B, then A and C both trust each other. I allow one way trust -- I can trust Bob the Enormous Fileserver Admin, though he may not trust me.

    Your idea sounds almost like a distributed version of Direct Connect. If you can get a userlist, it's like a distributed server...

    Thanks for the feedback and posting the ideas. There are precious few people interested in security issues on P2P (despite the fact that P2P needs security more than most areas), and it's really good to talk to someone else interested in the area. Most P2P types like "quick patch" solutions. :-(

  55. Re:A *real* anti-leech/anti attacker system propos by bramcohen · · Score: 1

    BitTorrent has real, working leech resistance, with no fancy certs at all. It just uses tit-for-tat.

    While it may make you feel authoritative to simply dismiss the technical problems of decentralized trust, that doesn't make them go away - Noone has to date gotten a decentralized cert system to work, period, and I predict noone will within the next decade.

  56. Re:A *real* anti-leech/anti attacker system propos by 0x0d0a · · Score: 2

    What technical problems are you concerned with?

    I have one major advantage -- I suspect that most people doing decentralized trust care about whether someone can be trusted absolutely or not. I'm willing to say "this person is a little trusted" even if there's not a lot of ground to go on (because someone you trust trusts them) or "this person is not trusted" even if they could be (the db doesn't have to be complete at each node). It's okay to have a certain error margin, because this is just used to assist the primary program. That would, I imagine, free me from the nastiest constraint involved...

  57. Sounds like a trust metric to me by raph · · Score: 2
    Hi,

    Interesting proposal, 0x0d0a. It's quite similar to the trust metric work I've been pursuing for my PhD thesis, and which is implemented in Advogato.

    In general, I find the attack-resistance of your proposal to be sound. However, because your horizon only goes out to a horizon of two, it's an easier problem to solve than the general trust case. If you try to extend your system to more hops, you'll probably find that the trust values fade very fast. This was one of the less expected results I found when I implemented the eigenvector-based diary ratings at Advogato.

    In any case, I encourage you to look at my trust metric work, and to use the code I've released as well as the trust graph available at Advogato. This will probably help you test and develop your ideas further.

    Here's a url with links to most of the other stuff I'm talking about: http://www.levien.com/free/tmetric-HOWTO.html

    --

    LILO boot: linux init=/usr/bin/emacs

  58. Re:A *real* anti-leech/anti attacker system propos by BradNeuberg · · Score: 1

    Bram, how does the tit-for-tat system work?

    Brad Neuberg

  59. Re:A *real* anti-leech/anti attacker system propos by bramcohen · · Score: 1

    That's explained in the protocol document.

  60. Has some trouble by Sycraft-fu · · Score: 2

    I actually remember e-mailing you about this back in the day, how because I was on a super high bandwidth line I ended up having upload traffic an order of magnitude greater than my download traffic.

    It's not entirely up to your program either as many connections these days are asymetric. Most cable will pull 1.5mbps or more down when not congested but is capped at 128k up.

  61. Interesting by 0x0d0a · · Score: 2

    Wow. Thanks for your time reviewing this.

    because your horizon only goes out to a horizon of two

    The horizon of two isn't a hard limit -- it might be extended to, say, three, or even be adaptive. However, I strongly suspect that trying to maintain any sort of local cache of an entire P2P network is a losing cause, unless distribution of the thing was a bit smarter (come to think of it, since there are public keys involved, this data can be signed...hmm, interesting, though it still might eat a lot of storage space).

    the trust values fade very fast

    How about a nonlinear trust degradation?

    Here's an url with most of the links

    I'll certainly read this (though because of two projects that I'm getting swamped with, it'll probably be a few days until I can properly give the stuff the attention it deserves). Still, thank you very much. This looks like exactly what I like poking around with.

  62. Your name is terry. End of story. by WeThree · · Score: 1

    That will be all.

    --
    --------------------------------
    Not all who wander, are lost.
  63. for dial-up users? by yerricde · · Score: 1

    With this credit system, how can a user who connects to the Internet through a dial-up provider and has never used an eDonkey client get better than a 6-hour wait? Many dial-up services kick a user who has been on longer than 6 hours.

    I'd prefer an answer other than "just get broadband" because the next step up from dial-up may be 128 kbps IDSL for $100/mo.

    --
    Will I retire or break 10K?
  64. 200 entry trust list? by yerricde · · Score: 1

    But if you have a 200 entry trust list

    How would one obtain a 200 entry trust list? On average, each adult human being in the world knows about 250 other adults personally in meatspace. And you assume that 80% of all your friends will use a given P2P network?

    --
    Will I retire or break 10K?
    1. Re:200 entry trust list? by 0x0d0a · · Score: 2

      You can partially automate this -- on a download, give a point of trust automatically, say. If the user says "this person screwed me", they can block the person from showing up in future results, and in doing so, set their trust to 0.

  65. Chat by Anonymous Coward · · Score: 0

    Since Gnutella is a distributed search protocol, are they going to expand it for searching for OTHER things then just files? Seems like that would be the natural evolution of things. I picture being able to search for people...maybe by a GPG key, and then being able to establish chat, video, or whatever kind of sessions with them. Now THAT would be a real gnutella2.

    Isn't that something YOU want to support?

  66. Re:A *real* anti-leech/anti attacker system propos by LostCluster · · Score: 2

    I see a hole in that. HoneyPot1 absolutely trusts RIAA1, RIAA2, RIAA3, RIAA4, RIAA5, etc. HoneyPot1 earns trust points by giving out the real thing very well, and then transfers that those points to servers that have the dud content by "trusting" them. Whats more, once HoneyPot1 gets up to its desired state of trust, it could flip itself into dud content mode as well. The attackers could repeat this process as many times as they want. A trust system dies the first time a turncoat gets a high-trust status.

  67. Damnit! by ball-lightning · · Score: 1

    From the EULA (that thing no one reads): f) High risk activities. The SOFTWARE is not designed nor intended for use in "High Risk Activities" where the failure of the SOFTWARE could lead directly to death, personal injury or severe physical, financial or environmental damage. The LICENSOR specifically disclaims any express or implied warranty of fitness for use in these activities.

    There goes my plans to run my homemade nuclear reactor off the Gnutella2 Network!

  68. Re:A *real* anti-leech/anti attacker system propos by 0x0d0a · · Score: 2

    The second issue is taken care of -- if HoneyPot isscrews me over, I zero his trust.

    The transitive trust is a good point. A is legitimate, but A trusts B, and B is bogus, and A (deliberately or otherwise) does not update his local trust list upon B going bad. Hm.

    Okay, here's a possible modification. Allow negative trust values. If I'm C, I trust A, user A trusts user B, and I consider user B a "bad guy" (negative trust), reduce C's trust of user A periodically.

  69. Re:A *real* anti-leech/anti attacker system propos by LostCluster · · Score: 2

    Zeroing out HoneyPot after the fact still didn't prevent you from getting a bogus file. Expanded outward, if ten of your twelve favorite servers all turn bogus for you at the same time, you will have a rather meaningless set of trust data with trustworthy sites with low ratings and bogus sites rated high. What's more, less frequent users will not notice when a HoneyPot flips, so they'll continue to transfer a false trustworthy status to that flipped HoneyPot.

  70. gtk-gnutella by Anonymous Coward · · Score: 0

    Actually, you seem to forget gtk-gnutella. It is not spyware (see the source: http://www.sf.net/projects/gtk-gnutella), and highly efficient (about 10% of CPU and 10MB of memory on my Duron800 PC).
    Pretty good! (And _stable_; even the CVS version.)

  71. Hmm.. the better, the better ;-) by Anonymous Coward · · Score: 0

    I don't really agree. If the system is well designed, it's better _not_ to have a lot of different protocols, because it doesn't work that way (would you like to use five p2p clients simultaneously?).

    I think G2 is such a well designed system. (Decentralized, supports different ports, among other things.)

  72. Encrypted searches / File transfers by Anonymous Coward · · Score: 0

    It would be nice to have encrypted searches and file transfers. Maybe via SSL ?

  73. Re:A *real* anti-leech/anti attacker system propos by Anonymous Coward · · Score: 0

    amazing.
    This is exactly what I just proposed higher above in the comments.
    Of course, since I only ever post as an AC, I'm never going to get karma (nor do I care for it).

    Even so - I'm glad someone else thinks this is a good idea. (And your comment is vastly more detailed than mine)
    I wonder - did you derive your idea from somewhere else? I ask, because I honestly thought this idea was not novel when I posted, but can't for the life of me remember where I'd heard it before.

    It certainly has the advantage of being non-centralized.
    And if you think about it - this is very much like the way people think in the real world. After all, I don't go to a centralized server to know who I trust. And I also tend to trust the people who are trusted by people I trust :)
    But sometimes I just don't agree with some of my friends about whom they choose to trust.

    This works exactly the same way.

    I'd like to contribute to some of the issues that were raised in the other comments :

    There are automated ways to contribute to the assignation of trust in the system.

    1/ Downloading files can use the Tiger Tree algorithm to determine the correctness of the file compared to other files claiming to be the same file. This could be an automated way of downgrading trust. The more files a host shares which fail this test, the more trust that host loses. This goes hand in hand with the ability for the software client to get files from multiple sources.

    2/ Secondary nodes should be able to be promoted to primary nodes in your trust tree. So if You trust A at 50% and he trusts B at 50% your transitive trust is only 25%, but that doesn't prevent you from trusting B as a primary node at 90% if your interactions with B warrant that level.

    3/ I totally agree that the individual client is the only repository of the trust list. I don't really like a formalized group structure with someone being the trust-manager of the certificate. It's just too open to problems IMHO. You have to trust the certificate manager 100%.

    4/ the issue of 'you scratch my back, and I'll scratch yours' is a non-issue. Trust isn't necessarily reciprocal. A can upload to B and B can deny that ever happened. who do you trust?
    Non issue. You trust whoever is in your trust list. You don't care that B denies ever downloading something if you trust A. Similarly, if you have A in your trust list, and he has B in his, then you have a decent chance to trust B. B never cares enough to tell you A didn't download from him.

    5/ The problem with groups is the over head. sounds like a very complicated system to formalize what is in essence, a dynamicly changing informal group structure. I guess your issue is that you don't interact with a particular node often enough to form a picture of their reliability. How is this different with a group ? If a group is only a few people in size, who may or may not be online when I'm on, how do I make it grow ? How do I choose who to "let in" to the group ? sounds like you need a centralized group leader who runs the group like a constant IRC channel.. And if you have that anyway, then there's no difference between joining his group and inspecting his trust list, because other members of the group are just as likely to be online at any given time as hosts in his trust list.

    6/ 200 Entry Trust list ?
    As you say, automation of trust assignation can make up for a part of this. Also, you can automate trust denial if the system can detect fake files with some sort of sharing algorithm like Tiger.

    7/
    Also I wonder what would happen if, instead of a mere 2 step hop of trust, we have a percentage cut-off?
    For example: If you have a cut off of 25%, and A trusts B 100% and B trusts C 50%, and C trusts D 50%, then A can trust D at 25%.
    But if A downgrades his trust of B to only 75%, then C gets downgraded to 37.5% and D drops off the list (18.75% is too low).

    There would have to be a limit of hops for 100% trust (or some upper level, maybe 85% and above)

    Of course, if you use any trust method, you have to be able to make trust adjustments so that derived trust is secondary to explicit trust.

    A trusts B @50% and B trusts C @50%.
    A has 25% derived trust for C, but might have 80% explicit trust.
    If Z trusts A 45% and B 55%, how much does he trust C ?

  74. Re:A *real* anti-leech/anti attacker system propos by Anonymous Coward · · Score: 0


    The solution ?
    Transitive trusts can be promoted to primary trust values. So A has a trust value for B of 50% and B trusts C 50%, A has a transitive trust of C of 25%, but can have a primary trust of C of 100% or 0% or whatever, which overrides any derived values.

    Example :
    Just because my best friend Johnny has a girlfriend doesn't mean I _have_ to like her :)
    Sure I might start out with a predispostion that way, because I trust his judgement, but after a few interactions I realize she's a complete bitch.

    I manually downgrade that node from a transitive trustworthy status to a primary untrusted status.
    No problems.

  75. Last Post! by alpg · · Score: 1

    * This is complicated. Has to do with interrupts. Thus, I am
    * scared witless. Therefore I refuse to write this function. :-P
    -- From the maclinux patch

    - this post brought to you by the Automated Last Post Generator...