TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Friends: a p2p, decentralized, secure messaging platform

103 pointsby kmfabout 10 years ago

13 comments

codahaleabout 10 years ago
* No confidentiality. All communications are sent plaintext. They plan to &quot;add support in the future when solid approaches emerge&quot;.<p>* Non-repudiable. Everything you send is signed with the public key on your GitHub account.<p>* Uses SHA1. (via the ghsign NPM module)<p>* Uses mDNS and BlueTooth LE and a gossip topology algorithm, so I&#x27;m not sure what would prevent a random third party from eavesdropping.<p>I would hesitate to market this as &quot;secure&quot;.
评论 #9461818 未加载
评论 #9461692 未加载
评论 #9461788 未加载
评论 #9463460 未加载
评论 #9461680 未加载
ecliptikabout 10 years ago
Brings back memories of WASTE... oh Nullsoft, what happened?<p><a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;WASTE" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;WASTE</a>
评论 #9463472 未加载
评论 #9463826 未加载
goericabout 10 years ago
BitTorrent already built something like this (but even better and more secure) called Bleep: <a href="http:&#x2F;&#x2F;labs.bittorrent.com&#x2F;bleep&#x2F;" rel="nofollow">http:&#x2F;&#x2F;labs.bittorrent.com&#x2F;bleep&#x2F;</a>
评论 #9462297 未加载
lighthawkabout 10 years ago
Neat service!<p>But, why does something saying it is p2p always seem to have some centralized dependency? In this case, it&#x27;s GitHub auth.<p>It seems that the initial authentication of you are who you say you are could be done via transferring a key to someone- by email, flash drive, whatever- and then after that, as long as you could connect to them, you could talk to them- with no other dependency except the network itself, which may involves a lot of significant dependencies, or may not, e.g. a cross-wired cable.
评论 #9462253 未加载
评论 #9463483 未加载
评论 #9462747 未加载
AgentMEabout 10 years ago
The number one thing I&#x27;m looking for in an open-source Skype alternative is persistent group chats with history (so when you sign in, you&#x27;re still in the same group chats you were, and the history of messages that were sent in that chat while you were gone are sent to you). I&#x27;m baffled that this seemingly necessary thing is such a rare feature, and I&#x27;d be all over this project if it gets this.
评论 #9462418 未加载
评论 #9463385 未加载
评论 #9463577 未加载
评论 #9462483 未加载
评论 #9462354 未加载
joshoabout 10 years ago
I love how you&#x27;ve simplified the problem space by delegating keys and key sharing to ssh and github. Nice way to get to MVP quickly!
jokoonabout 10 years ago
Don&#x27;t websockets require a server to work ? You can&#x27;t just directly connect to an host (obviously to prevent malicious scripts, I guess) using js.<p>So if I understand it right, if you make a P2P app in js using websockets, it still requires a server to spread IPs between hosts. So it&#x27;s &quot;decentralized&quot;, but you could still track users since the server has everybody&#x27;s address.<p>So when you chat, it&#x27;s P2P, but when you start it up, it&#x27;s still centralized.<p>Unlike kamdelia, bitcoin, bittorrent, bitmessage, you could still shut this down if it uses js. Not very interesting.
评论 #9464698 未加载
ploxilnabout 10 years ago
I suppose this isn&#x27;t oriented around file sharing, but it reminds me of<p><pre><code> * https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;RetroShare * http:&#x2F;&#x2F;freecode.com&#x2F;projects&#x2F;alliancep2p</code></pre>
madezabout 10 years ago
What are the advantages compared to Tox?
评论 #9462044 未加载
sktrdieabout 10 years ago
What&#x27;s the UI? I can&#x27;t seem to find the package here <a href="https:&#x2F;&#x2F;github.com&#x2F;moose-team&#x2F;friends&#x2F;blob&#x2F;master&#x2F;package.json" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;moose-team&#x2F;friends&#x2F;blob&#x2F;master&#x2F;package.js...</a><p>Is it <a href="http:&#x2F;&#x2F;nwjs.io&#x2F;" rel="nofollow">http:&#x2F;&#x2F;nwjs.io&#x2F;</a> ?
评论 #9467941 未加载
athenotabout 10 years ago
This sounds a lot like the <i>spirit</i> of Skype in its early days.<p>I could be wrong but now that the latter has been integrated into Microsoft&#x27;s tools, I think there&#x27;s an open gap for what Skype used to provide: a friendly P2P chat tool.
评论 #9463346 未加载
keith_erskineabout 10 years ago
Interesting, but I&#x27;ll stick with Twister: <a href="http:&#x2F;&#x2F;twister.net.co&#x2F;" rel="nofollow">http:&#x2F;&#x2F;twister.net.co&#x2F;</a>
adad95about 10 years ago
Any differences from Wicker?