I'm the creator of Seedit and I'm here to share how it works and clear up some Concerns/FUDS (github.com)
from EstebanAbaroa@lemmy.world to selfhosted@lemmy.world on 21 Jun 16:18
https://lemmy.world/post/31787906

Seedit is a selfhosted peer-to-peer Reddit Alternative using IPFS

doesn’t rely on any servers or instances .

We mainly use 3 technologies, which each have several protocols and specifications:

IPFS (for content-addressed, immutable content, similar to bittorrent) docs.ipfs.tech specs.ipfs.tech

IPNS (for mutable content, public key addressed)

docs.ipfs.tech/concepts/ipns/

Libp2p Gossipsub (for publishing content and votes p2p)

docs.libp2p.io/concepts/pubsub/overview/

They also have a youtube channel where they cover how most of their tech works:

www.youtube.com/c/IPFSbot

the problem with federated social media is that each federated instance is just a regular centralized sites. They can censor each other, they can get taken down at any moment, and they are hard to run and manage. Whereas on p2p tech like bittorrent or bitcoin or plebbit, the p2p nodes don’t require domains, they just work straight out of the box. On plebbit, you open the app, and you’re instantly receiving p2p connections right away, just like a bittorrent client, no domain or server required. Users connect to your node directly, p2p, and nobody can stop you. P2P also scales infinitely, which is the reverse of centralized websites like federated instances: the more users there are, the faster it gets. And it’s impossible to censor at scale.

Seedit is not Nostr

nostr isnt p2p, the relays can censor you, the relays can run out of money and shut down, the relays can get DDOSed, they earn no money to serve your content.

the people running the relays are probably legally obligated to censor you by their jurisdiction. for example in the UK you go to jail for mean tweets. the person running the relay with mean content would probably go to jail if they set foot in the UK.

CP

it’s the same as bittorrent , this p2p tech can’r prevent people from sharing stuff, but on seedit you can’t share media, it’s text-only so the liability falls to the centralized provider of the embedded media from the link the user shares as text. Also being p2p, seedit is not private, so it can’t really be used for illegal activity

About ActivityPub

the problem with federated social media is that each federated instance is just a regular centralized sites. They can censor each other, they can get taken down at any moment, and they are hard to run and manage. Whereas on p2p tech like bittorrent, p2p nodes don’t require domains, they just work straight out of the box. On seedit, you open the app, and you’re instantly receiving p2p connections right away, just like a bittorrent client, no domain or server required. Users connect to your node directly, p2p, and nobody can stop you. P2P also scales infinitely, which is the reverse of centralized websites like federated instances: the more users there are, the faster it gets. And it’s impossible to censor at scale.

Also the code is fully open source

github.com/plebbit/seedit

#selfhosted

threaded - newest

HelloRoot@lemy.lol on 21 Jun 16:29 next collapse

the protocol is text only, to embed media, you need to host it on the regular ( Centralized ) internet

except we already figured out how to encode images (or any file) as text when E-Mail was created. That is how images in E-Mails, attachment or embedded, are done. I can easily imagine a userJS script that will render them in the browser, but even if not you just copy the text and decode.

if a community is badly moderated, the user will never see it, it wont be recommended to him. the user can visit bad communities directly just like you can visit a bad website directly, but it’s not recommended to you so it’s safe to use.

Ah… so you’re guaranteed to have a dark CSAM subculture on there at some point.

being p2p, seedit is not private, so it can’t really be used for illegal activity

As if that has ever stopped anybody. See all the people that got caught for sharing it on the clearnet. Or on Signal, Telegram or similar, where you have to enter your phone number, which is personally tied to you.


All in all - Great way to adress the concerns, by admitting they are in fact possible. “Hurray crypto” or whatever.

EstebanAbaroa@lemmy.world on 21 Jun 17:16 next collapse

you can’t encode base64 images on seedit, each fiels has a character limit. Obviously centralized links, from which media is embedded, will be taken down by the relative centralized website.

henfredemars@infosec.pub on 21 Jun 18:07 next collapse

Then use decentralized links or hashes, which is what IPFS uses to identify content. A character limit doesn’t solve this problem fundamentally. Indeed, it’s been a tough problem to solve for decentralized services.

Tolookah@discuss.tchncs.de on 21 Jun 18:10 next collapse

So it’ll be distributed more like Usenet as I understand it

atzanteol@sh.itjust.works on 21 Jun 19:18 collapse

Kids… You ever wonder how “rar” came about?

Usenet had limits on its text only post size as well.

null_dot@lemmy.dbzer0.com on 21 Jun 18:43 collapse

This seems kinda harsh.

CSAM distribution is possible on pretty much any platform.

As long as the platform isn’t obfuscating a user’s IP address then I don’t see how it’s any worse than any other platform.

A few weeks ago everyone in this community was fawning over some dev’s new anonymous zero-knowledge file sharing platform and no one seemed to care that it would be overrun with CSAM.

teawrecks@sopuli.xyz on 22 Jun 01:28 next collapse

If it’s not obfuscating your IP address, then you’re open to getting targeted by anyone you interact with on a reddit-like platform. That sounds like a circle of hell I’d rather not visit.

HelloRoot@lemy.lol on 22 Jun 02:51 collapse

They claimed there will be no CSAM because of the given reasons.

I wanted to highlight that those reasons do not actually prevent it.

My tone might be harsh (the sarcasm at the end definitely is) because this is a marketing push for their crypto platform. “marketing” - as in they will be making money from users, so it is in their interest to tell lies or ignorant half-truths, to make more users come over.

Any normal platform tackles this problem with proper moderation. Platforms that make money, often hire moderators.

[deleted] on 21 Jun 17:24 next collapse

.

henfredemars@infosec.pub on 21 Jun 17:54 next collapse

I’m concerned about the large amount of low quality, vaporware/crypto applications built on IPFS which is the same core technology used here. It’s concerning how many clicks it takes to get technical specs for the underlying work, like libp2p for the network layer, which itself espouses only vague ideas on its main website that seems to focus a lot more on presentation than technical merit. Even the GitHub admits that the spec that most of these apps are relying upon is, well, unspecified.

Your project source downloads and runs an executable. That’s a little bit SUS; it would be much better if you compiled/built this core code as part of your build process, else, it’s not much in the way of source code, no? But, it works. It seems to delegate just fine, and few understand how to actually talk IPFS directly. But, this is the most important part!

I think the biggest tell that IPFS borders on vaporware is that there’s very little discussion about concrete specifications and the main problem faced by all DHTs: how you get your data to actually stay hosted on the network over time. These ideas are not new, and you may be better served building your app on technology that has spent vastly more time understanding the fundamental problems.

specs.ipfs.tech

This is how you write a spec without actually writing a spec. And I’ve written a lot of specs.

geti2p.net/spec

This is how you write a spec. Excruciating detail of what actually gets sent over the wire at different levels of the design starting from the very bottom.

Anyway, just my 2c. It’s cool you’ve got functionality at this level and that’s commendable, but I feel it’s built on shoddy foundation of an immature technology. At least it should be easy to migrate to something else in the future as the distributed technology is offload to a separate binary anyway.

Note: Various edits for clarification and to ensure I focus on the code and not the human.

klu9@piefed.social on 21 Jun 18:34 next collapse

I do like the idea of a P2P system. I used to be on ZeroNet but there were just too few people and too little content to stick with it. I hope something like this takes off.

atzanteol@sh.itjust.works on 21 Jun 19:11 next collapse

Peers can connect to your subplebbit using any plebbit client, such as Plebchan or Seedit. They only need the subplebbit’s address, which is not stored in any central database, as plebbit is a pure peer-to-peer protocol.

Do I need a new plumbus or will my existing one work?

drkt@scribe.disroot.org on 22 Jun 01:55 next collapse

I’m going to post it again.

For anyone else looking for a reason to stay away from plebbit- uh, look at their X account x.com/getplebbit It’s 4chan crypto hashwash

the problem with federated social media is that each federated instance is just a regular centralized sites. They can censor each other,

Also, this is a feature. This is intentional.

idriss@lemm.ee on 22 Jun 03:14 next collapse

I am really impressed. Thanks! I will be having a deeper look.

Side note: lemmy.world people are irrationally triggered by some stuff you mentioned: blockchain and cryptocurrencies (this is the same as being triggered by ssh 🤣), or religion, … Keep that in mind while you read 'the feedback" here.

ter_maxima@jlai.lu on 22 Jun 03:33 collapse

The most important thing about social media is the first word : it’s social.

This sounds like a technically impressive medium, but if it fails to get a healthy community (which means, not just 4chan bros) then it will die.