As part of my master-thesis "Growing secure peer-to-peer networks" I
have created a facebook plugin that allows a user to share his darknet
node reference with facebook friends. This is not a part of GSoC. I
wrote most of the code a couple of months ago and have used the
two last days to complete it.

The plugin creates a note in the users profile. With default profile
settings new notes are visible to networks and friends of the user. The
visibility can(and should) be made more restrictive. The plugin looks at
the notes of the users friend and if any friend have a reference
published it allows the reference to be added easily. After a
reference is added the plugin sends a notification to the friend. This
allows the friend to add the users reference if it isn't already added.
The plugin also allows invitations to be sent to users that doesn't
have any references published.

The main security issue with the plugin is that it includes the
application secret in clear text. Most facebook-applications are
web-based and keeping the application secret secret isn't a problem.
For desktop applications it's more complicated. Including the
application secret isn't an optimal solution, but it isn't uncommon for
desktop applications. The alternative would be to have a centralized
authentication server, but that isn't desirable.

The source code is available at http://github.com/ljb/freenet-facebook/
A compiled version is available at
u...@f0pp-fi59njwps49kq0rrk0n~0xrtaspfec2nrvoozy,F0ITawjY891qBUmZqInNlgO2Ipa2MD8PwGZkUXUb6wQ,AQACAAE/facebook/-8/Facebook.jar

Is anyone interested in testing it? Don't spread the plugin to the
general public. I want to do an official release first when the plugin
is known to work well.

If you want to test it feel free to add me as a friend on facebook. I
have created my facebook account solely for the purpose of developing
this plugin. You can find me by searching for my e-mail address. I have
the references of three nodes published.
_______________________________________________
Devl mailing list
[email protected]
http://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl

Reply via email to