Hacker Newsnew | past | comments | ask | show | jobs | submit | daraosn's commentslogin

This is great. I already understood most of BTC and ETH protocols, but learned some new bits, thanks for sharing!


That's what Tezos is doing, using OCaml for their smart contracts.


Actually they use OCaml for the blockchain implementation and their own functional and provable language "Michelson" for smart contracts.

Fun fact: Michelson was the guy that disproved aether :)


Brendan Eich, the inventor of Javascript and co-founder of Mozilla, launched this recently: https://www.basicattentiontoken.org/index.html

It's a token for advertisement that rewards the user, to be used at Brave browser: https://brave.com https://github.com/brave


I love the idea but if we can't get 70% of the population to use ad blockers, what chance do we have of people moving over to a new, unheard of browser?

People switched to Chrome because Google told you it was a better experience every time you made a search. I don't see how people of my parents generation (60s) will ever hear about Brave.


The BAT is for more apps, Brave is just first.

Do your parents like paying half their data plan ($23/month in the US) to load tracking scripts and ads? See https://medium.com/@robleathern/carriers-are-making-more-fro.... Brave is 3-7x faster on top news/media sites than Chrome on Android.

All this and more is discussed at https://basicattentiontoken.org/.

How do small faster browsers get big? Marketing. To counter, big browsers have to block by default and none will (Apple comes closest and is our best ally). They're all beholden.


Yes, cryptocurrencies and tokens have a lot of speculation from a dollar price perspective, and there are still non-believers and manipulators, but the blockchain and smart contracts technology is brilliant and the idea is already on people's mind, and it will only become stronger, despite of the price.

Social Network: For years I've seen people complaining about Facebook, others building alternatives. If there is one way that Facebook could be defeated and decentralized is by using a P2P blockchain social network. Take for example Steem, not perfect but proof of concept works.

Advertisement: another example is BAT (by the JS inventor), funded in 30 seconds, it could be a real threat to Google. Just pair it with Mist browser and ENS, and you can see the potential.

...

I think it's no longer about Bitcoin, it's about a profound decentralization of the Internet. Some call it the Web 3.0.


Why do you need a block chain for a decentralized social network?

Also what actual benefits would a "decentralized" social network bring? Facebook works because it got a lot of things right it let people communicate and share ideas rather than being a glorified geocities where bands come to die like MySpace and it got a critical mass of users which drove it home.

Blockchain will not decentralize the internet it might decentralize the World Wide Web, but even then considering the power costs and the fact that bandwidth still costs a ton of money even in developed nations why would you want to "decentralize" a bandwidth rich service in the current landscape.

I can understand the usefulness of a blockchain for certain applications e.g. clearing houses. But every time some one says it's like X but decentralized and runs on the hot new blockchain I just want to head bang a wall, I could be too old or too dumb to get my head around it but it simply looks to me that there is a cool toy that every one wants to use as a hammer which makes them look at everything that they want to build as a nail regardless if it makes sense or not.


[Edit: Moved paragraph to top] I agree, too many people throw around "blockchain" as if it was a magic incantation.

However, focusing on the "decentralized" part of social networks, here are some possible goals/benefits:

1. You control your own content, in the sense of having a "walk away with my photos and posts" primary copy at all times.

2. Users can publish -- and subscribe -- without a single-point-of-censorship owned by a corporate or governmental gatekeeper.

3. More direct control over your "feed" of information so you can get what you want/need and be done, as opposed to Facebook's algorithms which put a higher priority on keeping you hooked into a stream of advertising.

4. Less "one platform to rule them all" lock in. Fundamentally Facebook doesn't want you to ever click out to another site with content. They want to do their best to force you to re-publish the same content in their own framework for their own ads.


1) your content and posts are online it doesn't prevent anyone from copying them, not to mention that while you can design a blockchain and that allows you to permanently delete content it doesn't prevent anyone from storing revisions of the blockchain that had that content or republishing that content again; sure it won't be signed with your key but those drunk photos you took during spring break will still be there.

2) There is still a single point of censorship; distributed internet isn't distributed unless you control the physical infrastructure a government can simply shut your blockchain down.

3) RSS

4) What does this has to do with a blockchain?

Again nothing here requires a blockchain, some of it might actually be harder to implement in the manner you speak off with one.


> Again nothing here requires a blockchain

Yes. That's intentional. Did you read my post fully before replying?


I read you both and I didn't see you address the primary question:

Why do you need a block chain for a decentralized social network?


You seem to be having problem following the conversation. Please look at the first two sentences of Dogma1138's post, which contain two questions: (A) Why blockchain (B) Why decentralized.

My reply can be summarized as: (A) I agree, blockchain isn't needed (B) ...but decentralization can help in these areas.


But how is it different from hosting my own homepage (on tor or freenet)? It does everything you described without the blockchain fanciness.


> But how is it different from hosting my own homepage

How is a "distributed social network" different from "a homepage"? ...Really?

It implies a hell of a lot more than a static website. Subscriptions. Message-passing between nodes. Establishing (and breaking) bidirectional friends-links. Protocols for content-types, privacy restrictions, and metadata...

> without the blockchain fanciness

Yes, that is intentional. Like I said in my post, I'm very cynical about how much "blockchain" actually brings to the table. I'm focusing purely on the "decentralized" part.


I think people might have been interpreting your comment about blockchains as being along the lines of "people try to apply blockchains to /other/ things that they don't help much with", rather than meaning that they don't seem to do much for social networking sites.

Also, while I like blockchains for some stuff, I agree with much of what you are saying here.


Look at steemit.com (steem.io) for a glimpse of the application of blockchain to social media.

Basically: the blockchain's ability to represent value turns upvotes into microdonations.

Suddenly writers of popular content are rewarded in liquid tokens for their efforts. That's a pretty big deal.

The internet itself is a shiny new hammer. Turns out you can bang on a lot of different things with it and actually cool things happen.


First, it's not what I want, it's what I perceive – only my opinion.

Why a blockchain for social network? To really control my data and my online persona. It doesn't have to be a public blockchain, can be private and shared to my friends, if I wanted to.

I agree with you, that in poor countries the infrastructure is not prepared yet, but the world wasn't prepared also when the Internet was on dippers, this is just the beginning, I believe.


> To really control my data and my online persona.

But HOW does blockchain give you "control over your data" in a way that uniquely requires a blockchain? You can do a heck of a lot just with existing tools, like asymmetric crypto and hashing.

The only use I can think of right now is to globally prove that user X really did publish Y at some time Z in the past. In other words, preventing anyone from "backdating" a piece of content.

Now, while that may be useful, it's not really offering you more control over your public persona. It's really just restricting what everyone can do in order to curb a certain kind of abuse.


But again what technical (as in operational, functional etc.) benefits would a social network built on a blockchain would have vs a standard website?

Unless you'll use some sort of a thick client you would still need an application server that would take the data which I'll assume you'll store in the blockchain and present it to the user.

How would a distributed database that need to hold even 0.001% of the information stored in say Facebook be even feasible on consumer devices? Why would you want to wrap that data with expensive PoW/PoS algorithms and how would this give you any sort of control over your personal information considering it's a public (even if it's a private blockchain) database that anyone with access to it can store any copy or revision of it they would like.

I'm not trying to be coy or rude I simply do not understand the point of using a blockchain for any purpose other than finance, it gives you account consolidation, compliance, transaction and balance ledger all in one tool this is great but for anything else... I simply can't see it.


While I think we ought to be skeptical of "tons of money poured in, therefore it's a good idea" sort of arguments, I agree that there is definitely value here.

Cryptocurrencies promise to nativize scarcity on the web. The absence if which has led to some amazing things, but has also caused some troubles. Ideally, we'll now be able to capture the best of both worlds. A free and open internet, but with opt-in monetary incentives and scarcity.


There's definitely value in cryptocurrencies, in the sense of significant promise of being useful for new types of financial instruments and transactions. This does not preclude the possibility of there being a crypto bubble, i.e. demand/excitement causing the price of the currency to rise far far above its current level of usefulness.

The ultimate usefulness of cryptocurrencies is determined by things that may take years or decades to figure out a way to do: everything from 'is it a good store of value' to 'can I shop with it on Amazon?' to 'can I use it to issue equity for my startup?' This gradual growth in usefulness does not really match the tendency of coins to double in price in very short periods of time, so the question is whether the temporary bubbles and disappointments are severe enough to disrupt the gradual growth in base value. This is no different from real estate bubbles potentially making things painful for people who just want to buy a house to live in it.


Ya, definitely agreed. Although I would add the caveat that the rapid growth in value of these coins is not necessarily that crazy. The market cap of the entire ecosystem is still less than 100 billion. Which, no question, is a lot but it's still less than 1/7th of Apple, which is only a single company. So while I agree we might be in a bubble, I don't think the current crypto valuations are at least prima facie necessarily a bubble.


My advise: don't focus so much on how to build it, focus on how to grow it... REALLY!

I've done so many complex projects that at the end I couldn't sell, that's frustrating... please hear me: figure out first how to sell it (or at least get good traffic to a crappy wordpress site), then build a very crappy version and then improve it over time.

I read recently this, and I think is gold: https://www.blackhatworld.com/seo/making-money-online-it-all...


If you are starting I think it really doesn't matter, I like Ruby and did for a long time, but if you like the Python company and you say is bigger and you have friends there, then you should probably go for that offer. Plus Python is a nice language to learn too.

This is very important: Money should not be your priority at this stage, go for the company where you think you can learn the most, later you can find a better job or even consult, as you'll gain a lot of experience.

Good luck!


This is good advice. I'm a biased Pythonisto. Keep in mind that Python is used for much more than web stuff. Ruby is quite a bit more boxed in.


It will take time... Computers, Internet and new techs in general aren't mainstream in their beginings. Do you expect it to be perfect from its inception? Even planes crashed on their first flights, and look at us now, flying everywhere.


Disagree, even Hacker News has some attempts to have a better design while keeping the HTML site look.


> the HTML site look.

I love that phrase for all it implies about the point of view of the user thereof — to my knowledge, every site is an HTML site.


Why would you calculate hourly rate? I'd rather try to calculate the economic impact that this could have for the company, especially marketing costs to repair bad PR if something like private messages, pictures, info, etc. get breached. Do you think Facebook would spend $5,000 for that? Hell no, marketing budgets are in the magnitude of millions of dollars... I'm in no way supporting to exploit these vulnerabilities, and kudos to the OP (and many others) for finding these bugs and reporting to their companies instead of exploiting. I just think that big tech companies should pay bigger bounties.


The hourly rate is to make an apples-to-apples comparison to someone whose full-time job is to do that kind of security work, either salaried or contracted.

Would it make sense to award bonuses to every in-house security researcher based on an estimated, hypothetical worst-case cost? It doesn't take much imagination to see how that reasoning applies to other positions. Do accountants get big bonuses for avoiding multi-million-dollar errors? Lawyers for avoiding costly lawsuits? Operations (IT and otherwise) for keeping infrastructure running? Customer service for assuaging disastrous public interactions? Stretched to absurdity, would you pay for a taxi based on how badly you need to get to point B?

I believe saying "preventing these kinds of problems (doing this work) is what we pay you for" is a reasonable conclusion and paying a market rate for that general value makes more sense versus calculating a kind of commission per individual contribution. That does have a certain appeal (and I wouldn't mind seeing a discussion about it) but I haven't gotten the impression that's the perspective of those who think all* bug bounties should be higher.

*: Added caveat as I'd bet every researcher can name companies that pay poorly


I posted below (and got hardly and irrationally downvoted) that $5,000 is a joke. And your comment and others don't change my mind. A CSRF vulnerability, looking forward to reading a post on a SQL Injection next time.. I worked doing bots on my school days when I was a kid, and I saw the gray/black market can be unfortunately extremely profitable. $5,000 is nothing, we're not talking about a little startup here, it's Facebook, and they do have resources. Have you ever seen nasty content on Facebook on your wall, been spammed or even hacked? It's because of these kind of vulnerabilities get breached. Of course they can happen, but $5,000 is nothing considering the economic impact that can have if someone exploits it badly. A PR campaign to fix a mess wouldn't cost a few thousands, rather a few millions. Again: kudos to the OP for posting this and doing things the right way (reporting to facebook), but again, sadly good developers are getting underpriced...

PS: and by the way, I'm in no way circle jerking, this is not reddit, I'm here for a serious discussion on the topic.


As I said downthread, Facebook was the highest bidder for this interaction-required CSRF bug; the next-highest bidder would probably be $50.

There is virtually no market at all for serverside bugs, because they have no half-life: as soon as they're detected, they stop working against all targets instantaneously. Contrast that with browser clientsides, which have long half-lives.

A SQL injection bug in a Facebook service would not fetch much more than $50 from anyone but Facebook itself.


The price is not only what you can get on the black market, but it's also considering:

- How likely it is for someone else to find it (even internally)

- How long does it take for it to be identified and exploited, the impact of that, and time for mitigation/fixing


True, but it's also:

- How much would it cost to repair the trust of the users if the breach occurs. PR, marketing, organizational costs

Do you think a big company would pay $5k for a PR campaign to fix a mess due to a breach of private data? Not remotely.


It's always a question of probability: expected cost x expected probability gives you the end cost

You don't lock a $1000 bike with an $1000 lock, maybe with a $100 lock though


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: