Entropy Project Closes Up Shop
k0fcc writes "In a disappointing move to privacy enthusiasts, the Entropy Project's creator has released a statement that the project is shutting down. Entropy was a very popular, and some say faster, alternative to Freenet which supported a number of different cryptographic protocols. The creator alluded to the possibility that the project could continue if a new owner could be found."
Does anyone else find it ironic that a project named 'Entropy' has come apart?
Considering I just got this installed, configured and working 5 minutes ago.. this is great news...
If it's open source, there's no problem. If it's open source yet the project still dies at that point, then that just means there genuinely wasn't interest in it succeeding.
If it ISN'T open source, well then, that's just that much more proof that projects of public importance such as this one should always be open source, so that something that potentially people come to depend on does not wind up with a single developer or development team as a single point of failure...
Freenet seems to me to be one of those ivory tower projects that has little relation to the real world. Proof? No search engine, and very little chance of ever having one. How the hell can it ever be useful? [/rm101 resists making a dig about their choice to implement in Java]
Sometimes it's best to just let stupid people be stupid.
My 11 year old VW Jetta is faster than Freenet. In 5 pm Bay Bridge traffic.
sulli
RTFJ.
...was a dim one.
It seems that only the crappy projects survive (behold Freenet). This is the excitement OSS brings to projects - not being sure there will be a tomorrow.
Now it's official.
Anonymous networks, like Freenet, Entropy and I2P, are all in their infancies. None of them claim to be ready for primetime. At some point in the future, they will be (hopefully). When that happens, each one has the potential to dominate peer to peer communication because people will no longer have to worry about the RIAA taking their baby away.
The freenet project has been a dead-end for over an year now. If you take a quick look at the mailing lists - http://news.gmane.org/gmane.network.freenet.devel you will see that they are full of aimless bickering and personal insults between the participants.
It is sad, because the Freenet had a great future. Unfortunately certain people involved in the project could not get over their sky-high egos and Freenet grew to be a project that does not know the meaning of the word "compromise".
Hopefully something will happen down the road and Freenet will be resurected, but most of the people currently working on it must go away.
"How ironic! Not only is there precipitation on the day of your nuptials, but the passage for which you'd previously paid was in fact complimentary! MUHAHAHA!" -Alanis Megatron
"I think so, Brain, but 'instant karma' always gets so lumpy." - Pinky
"Decepticons FOREVER!!!" - Ravage
GNUnet is written in C. One buffer overflow exploit could compromise the whole network.
Not quite true IMHO: it's obviously not sufficient to compromise one client/server to compromise the whole network. If it was, it would be a piece of cake to take the existing source code and use it to build this "compromised" client/server.
If you want to compromise the whole network with one buffer overflow exploit, I guess you will have to find an exploit that works with all versions of GNUnet, and you will have to run it against all (ok, most) clients/servers on the network (most of the traffic seen by one computer on the network doesn't make sense for it, it just relays the packets to other computers).
And there is also a Java implementation under development.
Furthermore, it is often the content which speaks more about the authorship, than the chain of technical events that leads to the publishing of the information. In Slashdot, for example, I have chosen not to show my e-mail, etc., but by reading my comments even a 10-years old kid can make a deduction about my real identity. Does it make sense for me to use IP-tunneling then?
Finally, I do not understand the author. He just seems pissed. Maybe he will reconsider his opinion and revive the project. Is he sick from the lies (?) about the crypto-protocols used in the software which is written? IMHO the theory proves quite stable and if there is a room for attacks it is more in the implementations than in the protocols themselves. How many broken cryptosystems do you recollect (I know, I know "the knapsack", but it got broken on the conference on which it was presented).
Still, even with this project retreating, the subject remains interesting.
...and quite frankly, for what it does, it is a hog. Yes, I realize it is mostly proof-of-concept but it is mostly a software router (ok, with encryption, software VPN router) with s LRU cache.
Of course, there's no point in nagging unless you actually have something better to suggest... which I don't. So if the choice is a slow Java project, or a C++ project which doesn't exist - I'll take the Java project...
Kjella
Live today, because you never know what tomorrow brings
Pros: IPv4/IPv6 based network, static IP addresses, free domain names, all traditional TCP apps work, easier to understand.
Cons: Still small, restrictions on who you can invite, win95/98 not supported very well, some dullards have trouble understanding how anonymity works (if it uses TCP/IP your address can be tracked!).
In particular, I need to find people that favor linux/unix (even OSX would be fine), would be willing to invite others, and plan on residing in any country other than the USA for the next few years. Bandwidth usage is negligible, and I'm willing to prove it.
I'd also be willing to mentor those interested in setting up their own similar network, the more the merrier.
if you have an idea for a search-engine in a (still) anonymous network you're free to submit it.
It is being worked upon. Not search engine, but a means to efficiently find content (that *wants* to be found, that has been posted publicly, mind you) within the context of the network itself. And no, I'm not talking about Frost/FMB which chokes on just a couple messages a day, but something ready to scale to become as large as the Internet itself. Speaking of which, something Freenet isn't able to do.
There are great things ahead. Within a year, much will have changed. It is not ready to go public yet, but it is taking shape. It will be the Napster of anonymous networks. Easy enough for everyone, and I mean everyone, to use. Sorry about the melodrama, but it has already been resolved in theory and simple simulations. You will know it, when it is complete.
Its a research project, and they are solving hard problems. Yes its not as easy to use as it could be, but either was Linux for a long time, and in many ways Freenet is much more complicated.
1. Find exploit
2. Create program exploiting said exploit, and to do the same to all nodes it connects to.
3. There is no step 3. You've compromised the entire network.
Kjella
Live today, because you never know what tomorrow brings
Okay, first impression was:
"Wow, great project!". It was like Freenet, only faster, lower latency, some stuff was cooler. It looked really promising. It was much easier to install in a chroot jail than Freenet.
However. From what I saw, I wouldn't trust it for any serious purpose. It looked like the author was only interested in using it for testing his own crypto algorithms, and as anybody who read on this stuff should know, rolling your own crypto is a really bad idea unless you're really, really good, and then make sure it gets well tested for a few years.
It had a nice possibility of restricting the node to chosen allowed crypto algorithms, but none of the available ones was in widespread use. I mean, AES, DES and Blowfish weren't in the list last time I checked. That makes me rather suspicious.
I voiced my concerns once in the Entropy forum, and the author replied saying this is basically a research project and not intended for serious use (IIRC).
If somebody does decide to continue with it, I certainly hope that one of the first things that will be done is to put some tested crypto in it instead of a bunch of homebrew methods. Nothing personal against the author, but I believe that if it was easier to trust it, it could become more popular.
Ack!
What are they doing to me???!
The sea changes color, but the sea does not change.
If you care to look there are several established 'listing engines' that are running.
A true 'search engine' might even be detrimental to the privacy goals of Freenet.
But yes, it is currently a bit esoteric for the average Joe, but that will change in time. Its already MUCH friendlier then in the beginning... ( and the speed troubles seem to improve with each release.. )
And don't bash the java thing without realizing that one goal was for it to run everywhere, and to be browser friendly.. Java ( in theory ) was at the time the best answer to that issue.
---- Booth was a patriot ----
Is there any way to copy out the full contents of the CVS repository itself into another archive? The full development (and not just the latest version of it) is valuable to programmers who wish to learn more about the development process itself that went into Entropy.
Is it a sign of the times or the miseducation among us o rour own stupidity that someone has come up with such a term? I mean one who values ones privacy is termed an enthusiast thus denoting that one is almost but not quite on the fringe of society when it comes to privacy issues. More like a gun enthusiast
Open source / free software/services projects need to think beyond their current organizer. This is a vulnerability that Microsoft and other proprietary providers will exploit.
All they need to do is put together a list of great applications and services. Take those to a client and get them excited about all this great stuff. And then hit them with the news that it's all defunct or unsupported.
(Someone's going to reply that the same is true of commercial software and services - but that doesn't matter - it's all about perceptions, and this is a way that free software/services are more vulnerable.)
Not sure what the solution is, but something is needed to give open projects more staying power.
So before I agreed that java was a piece of crap whose only saving grace was that it could be portable (plenty of java apps are not). Now that azureus works very stable (constant run since the last update) I must admit that java can work. HOWEVER
I also run freenet and the memory and CPU usuage is still insanely high. Of course this could simply be a freenet problem but it doesn't help java's image.
To me java is an intresting tool that can solve certain problems. It is not perfect and one of its imperfections is that it is a resource hog. Makes you wonder what is different between the java on linux/windows and the java on mobile phones.
Anyway to get back on topic, too bad but the time is not yet right for these kind of projects. If you actually use freenet and look around there is very little worthwhile on it. Just yesterday someone posted Slackware 10 on it. Yeah we need anonymous network to distribute linux. NOT. Maybe if SCO wins but today it just shows that people are just desperate to look for uses.
Current uses are file sharing (can be done far more easily through other means especially if the files are legal), child porn and similar (not exactly something most people consider a worthy cause) and weirdos. About the only "real" use are DeCSS and the Scientology papers (can easily be hosted by those living in free nations).
The problem of course is that while freenet may not be needed now if it is ever needed in the future it will be too late to write it.
By the time the dictator is in power it is too late to protest.
MMO Quests are like orgasms:
You may solo them, I prefer them in a group.
Step 1: Find exploit
Step 2: Compromise everyone
Step 3: PROFIT!
The Ludwig von Mises Institute. The reasoning individuals economics
There is one alternative called Mute, which solves one key problem with Freenet or Entropy which is that it is searchable.
3dinfo@maficstudios.com
Jeez, dood, this article was about Entropy... ;)
Show me on the doll where his noodly appendage touched you.
If you are looking for alternatives or an overview of the most important anonymous filesharing networks you should check out http://board.planetpeer.de Although it is living on a .de domain there are also english forums available.
I sure hope someone takes over Entropy.
... all in the name of freedom of speech and privacy from the government, you know, that stuff you have been giving up with your government's Patriot Act, which your politicians didn't even read before passing into law.
Without it, I'll have to go back to waiting for days for my child porn to download from Freenet.
I love how These networks let me store Child Porn on many people's computers who have no idea that it is there because of the encryption.
Ah the irony....
Buy Steampunk Clothing Online!
...well that was random!
Too bad this wasn't the 1950's, then the scarecrow of the day would have been communism & communists. Those were the days.
I remember visiting the Entropy web page about a year ago, quite interested, until I read a bit from the author 'proving' that SHA1 hashes are *always* unique, at which point I thought the project must be vapourware..
Sig out of date
the parent post was being ironic.
Dude, did you even bother reading that article? In fact, it says the exact opposite of that.
I'll quote from the conclusion:
The only thing that is non-anonymous about the protocol described is that the fact one is participating in the protocol is not anonymous. But any participant (or outsider) cannot ascribe an identity to anything that was published, and knows only that it was some member of the group of participants.
I2P is a far better system. You can run any normal TCP or UDP apps over it, it's just like an anonymous replacement for IP. http://www.i2p.net
IRC and HTTP work great over it.
Invisible IRC is back in operation:
http://www.invisiblenet.net/iip/