Freenet is the second most paranoid piece of software
I have ever seen - only OpenBSD beats it. However I
was reading that the developers of freenet are
actively trying to find a way to allow the authors of
content to issue remove requests into the network.
This is just not a good idea. It is an equaly bad idea
to allow the authors to issue update commands into the
network.

Imagine this scenario and it is very clear why this is
not a good idea. Frank the freenet user gets his hands
on some information that his native government does
not want him to have or distribute. Frank knows that
freenet is a secure place and he can upload this
information with out worry of getting cought. The
network accepts the information and people request it
- everything is good.

Now a couple weeks later Frank's computer is
confiscated in a raid by his government under
questionable circumstances. This is a very oppresive
government though so there is nothing anyone can do.
The Minister of Computer Security gets his hands on
Frank's computer and knows all about freenet. He
immediatly uses the quantum computer provided by the
secret security agency that the public has no idea
exists (the computer or the agency) and breaks the
crypto that Frank was using to protect his private
key. The Minister of Computer Security now issues kill
requests on all information frank uploaded that they
want to remove.

If the ability to remove information exists on the
network it can be exploited. This is a can of worms
that is best left unexplored. I know it is a pain in
the ass to not be able to update/remove information,
especialy when you make mistakes on your inserts, but
do you really want to develop tools that your enemy
can use against you?

Tyler

=====
AIM:rllybites    Y! Messenger:triddle_1999

__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com

_______________________________________________
Tech mailing list
[EMAIL PROTECTED]
http://hawk.freenetproject.org/cgi-bin/mailman/listinfo/tech

Reply via email to