Slashdot Mirror
Anonymous Network I2P 0.7.2 Released
Mathiasdm writes "The Invisible Internet Project, also known as I2P, has seen its 0.7.2 release (download). I2P uses multiple encryption layers, and routing through several other computers to hide both sender and receiver of messages. On top of the network, regular services such as mail, browsing, file sharing and chatting are supported.
This release (and all of the releases since 0.7) is at the start of a new development period, in which the I2P developers wish to spread the word about the secure network. This new release includes performance improvements, a first edition of an experimental new desktop interface and security improvements (by limiting the number of tunnels a single peer can participate in)."
By abbreviating I2P instead of IIP they save a whole zero characters.
Does this mean I can live without fearing the RIAA?
I initially read that as "Anonymous Network 127.0.0.1 Released" and thought "did I miss April Fools this year?"
"And then I visited Wikipedia
I'm in a bit of a rush but how is this any different then say TOR? I read over the about I2P page and it sounds like a similar setup. If I'm wrong (which I most likely am) please correct me.
This is far from the first P2P to attempt hiding IP etc. I have not used this system, but all the others that have done (and do) the same thing end up with the same problem -- the system ends up being painfully slow to use.
Oh well, maybe THIS one will not be?
Still exclusively for
Chinese dissidents*
*who like little boys
There, fixed that for you.
Clearly nicolas.kassis, _Hellfire_, SalaSSin, areusche, and blahbooboo haven't gotten the message.
Yeah, I know how this is gonna be received:
"Shit, the people of our country might be able to share free and uncensored speech and information among themselves.
Wait, I know how to fix this! Headlines! "OMG Secret Pedophile and Terrorist Network" - anyone who wants to be anonymous on the internet /must/ be a pedohile or a terrorist. If you have no pedophilia or terrorism plots to hide, you have nothing to hide!"
I designed one of these about a decade ago and did some prototyping. Since I don't seem to have the time to realize it, here are a few extra features that could be added (if i2p does not already include these).
Encrypted-file-fragmenting, auto-globally-migrating, auto-redundant replicating "virtual" data store layer. Stored files automatically seek to be replicated enough times to be guaranteed perpetually persistent, and also seek to move to newer and better physical storage sites, and to globally distribute themselves, and auto-cache near user when needed.
With this addition, we may have the basis for, for example, a Facebook-like on-line identity avatar which is not owned by a single company like Facebook but just floats around all over the P2P network, and is truly owned by the person who it is about.
With that freeing up of the online identity from external control, we could extend it to include important identity information needed for the citizen to function in society. Medical records, different identity numbers for different government agencies, your real-world address, etc. All of these properties about you could be placed online by you following standard protocols and placed only onto a secure virtual site in the i2. Permission model would of course be default no permission, opened incrementally to authorized and authenticated other parties.
If we had this, the onus could now be placed on governments, medical systems, post offices, etc. to come to your avatar and request permission to know your address, or your medical number etc. No more change of address rigamerole. No more problems in your paperwork or medical history maintenance because you happen to move to another state or country.
etc.
It all relies on the open standards for the info and privacy protocols, and on the confidence of the person to put their info into a secure, encrypted, and non-owned virtual internet location.
Where are we going and why are we in a handbasket?
"Terror is many one"? What is THAT supposed to mean?
Sheesh, Slashdot tags are getting more and more obscure every day...
Okay, you want a faster network that doesn't have multiple layers, encryption, etc.? Fine -- use the NSA, CIA, FBI, DHS, ABC, NBC, LMNOP supported and approved network. Sorry to break it to you guys, but a global, multinational, digital, and public communications network is going to have interests on it you aren't going to like or want to see what you're sending. This is true no matter who you are. That's the nature of a PUBLIC communications network. Suck it up. Our governments inability to protect our rights, combined with the corporate and multinational interests killed so-called freedom. Now we have to pay a premium to have it back.
Be glad speed is the only thing you're losing in this deal. Historically, you stood to lose a whole lot more for these kinds of innovations. Like your life.
#fuckbeta #iamslashdot #dicemustdie
Since most ISPs are now metering (and arguably DRMing) by GB transferred rather than just going by bandwidth, the same thing will happen anyway.
I would make sure to create (covertly of course) a whole bunch of these I2P, Tor like projects. And of course infiltrate all the existing ones. Finally I would make sure we had our own botnet based high speed Tor. (Whoops! I forgot to post this via Tor! Black and silent helicopters approaching...)
Sounds like its similar, does it also encrypt its local store?
---- Booth was a patriot ----
My vision is to create, first of all, a network where any node can connect to any other node (unlike the current Internet, which has been infested by NAT).
Then, on top of that network, various interesting services can be built, including one that provides anonimity.
In interface, it could all be compatible with current IP networks, so that existing software can be used for it.
Does such a network exist already?
I've made some baby steps in implemeting one myself, but without much progress. One difficulty I've run into is that I can't seem to get tap devices to work (i.e. create something that looks like a network interface and then process the packets that go over that interface in my software). I get the device created and set up, but I'm not seeing any traffic on it.
Please correct me if I got my facts wrong.
From their FAQ:
Sorry, I had to laugh a bit there. That's VERY naive. In anonymizing networks, HTTPS is the only thing that protects you from possibly corrupt exit nodes by encrypting the traffic between your browser and the destination webserver. To claim I2P doesn't need HTTPS support is misleading or at least ill-phrased.
What are their countermeasures against sniffing exit nodes?
Why are they suggesting this is secure at all? The only thing this secures according to the information is the information in transit between proxies and between the user and the end proxy. After that it's all going to be regular plain text transmission.
It would be trivial to setup one of these proxies and use something like wireshark to intercept the requests. If you are the last proxy stop (it sounded like they use multiple proxies) it's going to send the data to the server in plain text so you can record everything.
I laughed at their reply to no HTTPS support as well. "Within I2P, there is no need for HTTPS, as all traffic is encrypted end-to-end."
These guys seem absolutely clueless about security.
It will make much more sense to the (to be) victims.
Also talking about anime and such non-documentary porno, I believe this is waste of time and tax resources to prosecute the distribution and consumption.
xkcd
Yes, it is designed to handle high bandwidth protocols including, but not limited to, BitTorrent.
1 out of 3 of the BitTorrent trackers only allows legal porn, specifically no child porn. 1 out of 3 of the trackers does not allow porn at all. 1 out of the three is an open tracker, but there is currently no other indexing site. That means 3 out of 3 are not for paedophiles. Go away troll.
Speed and Privacy. Thank you! :P
Let's face it: Either tools are developed to enable private communication, or we're stuck with the panopticon state forever. In my view there's two types of tools that would be very useful:
1. "One-Time Pad Chat" (OTPChat). Party A plugs in a USB key to load it with encryption codes. His chat program registers this. Party A gives this plug to party B, and a later date publicly tells party B his IP address. Party B transmits a start request using the first key on the list. Every message in the chat is then encrypted by a different key. These keys are wiped from party A and party B's USB keys as they are used, to make the messages unrecoverable. You should be able to get a whole lot of encryption keys on a 1gb disk.
The way I envision this setup would be that you always see which of the "keys you have distributed" is being used by whom, you are able to see how much of each USB key has been consumed, you are able to erase keys in case they get lost, you are able to run the service invisibly on any port and only acknowledge connection requests when they are accompanied by the next key in the list.
2. The second is more a concept: At the moment, governments must be assumed to have full oversight of all internet traffic. Even TOR is highly unlikely to be reliable - the number of servers on there are actually quite small, and considering that Germany can have 150 police officers involved in infiltrating a single political party, what would be the cost of some government simply funding 2/3 of all the servers? A few thousand dollars a month. Correlating transmissions would be extremely easy and it would surprise me if this is NOT the case already.
At the same time, we must acknowledge that the primary need for secrecy is in communication. The need to anonymously burn DVDs, anonymously run game servers, anonymously run a BitTorrent tracker, is really secondary. Communication should ideally also include the ability to surf the internet, or to access 'information catalogues' (e.g. web pages and search engines) rather than only accessing secure storages directly.
The problem we face however is that getting this level of secrecy is difficult and takes a good deal of IT skill. I'm not saying that it's impossible or even very hard, just that you need to know quite a bit about Linux and networking, or have someone you trust very well who does. This is a problem because many people who would appreciate being able to communicate securely may be good at different things than IT.
I therefore propose something like a cut-down version of Linux on a DVD, ready to install. This should include full disk encryption and only open source software. Key is also software to monitor the file system and file accesses, effectively a "hypervisor", possibly in a hardware card. For example, easily track any changes to the file system, have a secure file storage area where attempts to read from are logged. Files should be one of three types: Either read-only (system files, and any software modules installed), temporary files (internet files etc, which are wiped on reboot) or document storage. It should be possible to wipe the system and reinstall without wiping document storage.
I am not saying that this is currently not possible, just that anyone who wants to be able to have a secure PC and to communicate securely must be quite knowledgeable about IT. It should be possible to make this accessible to all.
I dream of a society where people (at least, the ones who have not been found guilt of serious crimes like mafia, terrorism, pedophylia) can walk down the streets with back masks over their faces, and this wouldn't be seen as a suspicious act, because anonymity would be seen as a fundamental right of the human being... I dream of TV channels where hosts and guests wear black masks, and do not try to appeal their audiences just with their fisical aspect, make-up, ecc..., but only with their arguments. Also, this would make shy people more willing to appear on TV (As an interesting psicological experiment, try to watch TV with the volume to 0, and tell me if it's not interesting to analyse human facial expressions and gestures, decontextualized from the content of their speeches. Human beings pay too much attention on how they look like, than what they say...). As a side question, do you know which is the most "anonymity-friendly" contry in the world? Maybe Austria? I recently read that in Austria you can put an advertisement on a newspaper, even a controversial one (like "no rent to black or muslim people"), and still there's no way for other people to know from the newspaper who put that ad... Despite all the dangers that it poses for misusage, anonymity should be regarded as a fundamental right of the human being...
Now we just need some fools running bittorrent through this and then we can DDOS the entire internet. Yaaaa....
Regardless that it is anonymous, in the end I am the one responsible for what my node does.
What we really need to move towards is a disconnected Mesh network, where I am not providing Internet Access. My AP connects up with X other AP's in the area and we create a mesh. That's the network. Starts out small, like the Internet did. Eventually everyone ends up on the mesh network, too. I can access CNN because it's got a mesh address. My traffic flows from my AP through perhaps hundreds others to get to CNN wirelessly.
True, today's speeds would impair this. Caching needs to be worked out. But this is where, IMO, the future is. No ISP fees. I pay for my AP and I'm online. I have a 1TB HDD cache. Content I get is SHA1'd and cached for others making the same request.
This would allow anonymous access. We just need to build it. Seems something that could be built into DDWRT to me.
I dream of a society where people (at least the ones who have not been found guilty of serious crimes, like Mafia, Terrorism or Pedophylia) can walk around with black masks on their faces, and this wouldn't be seen as a bad thing, because anonymity would be seen as a fundamental right of human beings.... On a side question, which is the most "anonymity-friendly" country in the world? Maybe Austria? I recently read that there people can put ads on newspapers, even controversial ones (like "no rent to black or muslim people"), and the laws protect your right to not have your identity spoiled by the newspaper to third parties...
Actually, I2P has no darknet feature at all. And is not really related to freenet.
It's more like tor, but not focused on outproxying to the regular internet. So performance inside i2p is higher than performance inside tor.
These are interesting idea, but i2p has no datastore. It is _just_ an overlay network ontop of the internet coupled with some basic services like dns and irc.