Diaspora website redesign, now with more info about the project
joindiaspora.com
joindiaspora.com
I understand how one can build secure communications. That part is easy. So, I have a Diaspora account with "Awesomea" and you have a Diaspora account with "Crapula". It's easy to have communications between Awesomea and Crapula be secure. However, when you visit your Crapula page, you want to see my updates which means that Crapula needs to be able to decrypt my updates. Even if you have a different key for each user (ala public key encryption), for wide adoption the service providers (in this case, Awesomea and Crapula) need to be able to encrypt and decrypt that information (which means they hold the keys).
So, if I friend you and you're using Crapula, I need to trust both you and Crapula that you won't do bad things with my data.
Part of this is that the Diaspora project doesn't seem to have any technical information. They have lofty goals like, "you own your social graph, you have access to your information however you want, whenever you want, and you have full control of your online identity." However, they have scant information on how they plan to accomplish that. They say they're using GPG, but are they going to have a browser plugin with locally stored keys to decrypt the information? That's the only way I can see this being secure. If you're storing your key with Crapula and it's decrypting my information, it can store is as well as show it to you.
Even if the design is to use locally stored keys, what's to stop a provider from offering a "better" (better, in this case, means easier for non-tech-inclined users) Diaspora-compatible server which stores them on the server? And then I have to audit my friend requests to see how their server has set up security?
It's kinda like handing a friend a classified document and a photocopier. You tell them "please don't copy this" and they probably won't. But in this case you're handing that classified document to Crapula and saying "pass this along to my friend and don't copy it along the way". Yes, Facebook has that ability too, but it's one company that has a reputation to defend (to an extent) as well as a legal presence in the United States (which is good for me as a US citizen) and by posting in the first place I'm trusting them with that data. With Diaspora, I could start getting friend requests from all sorts of services run by people a lot shadier than the Facebook folk and I now have to deal with dozens of privacy policies rather than one.
BTW, this is probably the comment that I would most like to be proved wrong on. I want distributed, secure social networking that puts me in control of my data. It's just that I don't see how it works and the Diaspora website doesn't have any information on it either. If someone here knows how this will work, I'd love it! It's an exciting prospect, but I feel like it's the same as DRM: if people can read it/see it/hear it, it can be copied. Likewise, if a service provider is printing it on screen for one of their users, they can store it. If anyone has technical information on how this works, it would be really awesome!
I guess you just have to wait till September to have your answer (yeah someone can explain it, but the code can do it better).
I understand that service providers could just be morons who needlessly cling to their "intellectual property" for the sake of it.
I don't see, however, where a company's changes could be both differentiating and difficult to reproduce when everyone else is collaborating.
For various reasons, such as some of the DoD prototype implementations (classified ones), you don't want, or you're required by law to restrict.
As you implement the "next-generation system" you don't want the Diaspora guys to take your hard work and make profit of it, distrupting you immediately, because you just started (who are advantaged because they were the first ones, it's a bit like a monopoly, (if you can't see it, try to start a "one-click" hosting for wordpress, after they switch to AGPL)). [1]
The other reason is that, such a system is indispensable to this future to work. You would be required by gov law to classify all of your platform (there would be military guards at your data centers :P).
edit
[1] My point is that they're trenched in their market (the first one should be hosting for Diaspora). Think of it this way, all the people who donated, helped in the process of monopolization of a product they were told would be open (the code yes, but the product it's not).
(1) The DoD making sensitive software communicate with the global internet seems unlikely. And if they stick to private networks, the AGPL doesn't get in their way.
(2) I personally won't cry over lost monopolies. Your point was valid, though.
I was talking about the foreseeable future tough, maybe we will just evolve as very conscious responsible beings.
But, for the truly paranoid, it's theoretically possible (though not very usable/comprehensible) for profile/status information to only be decrypted in end-user's browsers.
The old Groove Networks product made a lot of similar promises about peer-to-peer security; if Groove published reusable details of their approach Diaspora might want to check that out. (OTOH, it's now part of MSFT and might be a patent-thicket.)
I've found it bizarre that there is so much support without any logical outline of what Diaspora is. We have their reasoning ( http://www.joindiaspora.com/project.html ) and their FAQ ( http://www.joindiaspora.com/faq.html ) .
I don't think this is sufficient to begin a successful project.
Possibly they have not documented their logic to the extent that it exists?
Or possibly I'm the exception and this is not an actual concern for the project's success?
And it's a pretty useless FAQ, at that. Most of the questions are about Kickstarter. (They sure do like raising more and more money, don't they?)
I suspect they don't plan to sell such devices. And I totally don't understand why not.
With Facebook, I have to read and agree to a single privacy policy. With Diaspora, I might have dozens (or more) policies that I'd have to read and track (if I care about privacy). Diaspora seems to say that I don't have to trust the other service providers. They're saying it's "privacy aware, personally controlled". They say that their "current implementations include GPG encryption". They say that "Diaspora knows how to securely share (using GPG) your pictures, videos, and more," and that, "When you have a Diaspora seed of your own, you own your social graph, you have access to your information however you want, whenever you want, and you have full control of your online identity."
But how is that? I don't expect them to fix the issue of one of my friends using cut and paste. However, they are claiming that I'm in control of my data. If other sites are able to decrypt that data, then those other sites will be able to store that data. How are they getting around that?
From my perspective, Diaspora is adding more privacy concerns since I now have to decide whether I trust my friends and my friends' service providers rather than just Facebook and my friends. It isn't just whether a company is going to be evil. Sometimes companies accidentally expose data and sometimes companies are breached.
Diaspora's grandiose statements seem to promise end-to-end security; that none of the servers between me and my friend will be able to decrypt the data. They claim that I'm in control of my online identity making it seem like if I delete something off of my Diaspora account on one provider, it will be removed from the feeds on other providers.
But I can't see a way that this would work. If I have a Diaspora server with you as a user and I go to get your friends' status updates from other Diaspora servers, isn't my server going to be able to decrypt that information in order to pass it along to you as text? You've elected to trust me with your information, but have your friends? Couldn't I store their status messages against their will? Couldn't I make them public against their will?
What I'm looking for is someone to tell me how Diaspora is going to keep my information private. Yes, I could decide which service providers to trust and weed my friends based on that, but that isn't the security that Diaspora is claiming. They're claiming that they're privacy aware, that I'm in control of my data, that it's being securely shared, that I'm in charge of my social graph and online identity. I just don't see how they're accomplishing it and their site offers no information on how.
Here's the base issue: I post a status update. Your service provider has gotten it from mine and put it in your feed. I delete it. Does your service provider just voluntarily remove it on their end? I don't want it there, but there's nothing I can do about it beyond appealing to their good graces. That isn't putting me in charge. If I'm to be in charge, when I delete that post, you have no more access to it (unless you used copy/paste or something else) and your service provider no longer has it in their database. Diaspora hasn't said how they're going to accomplish this. In fact, deleted posts would be the best thing to data-mine: they're things people don't want shared because they're embarrassing or whatnot. Think about it, you tag a photo of me and that gets cached by service providers. I do a remove-tag request on that photo - that's likely a photo I don't want people seeing. That remove-tag request gets propagated out, but rather than removing the tag, some service providers just put a date_to on the tag, others might just ignore it completely. I'm not in control of my data there. How is Diaspora getting around this problem (since they claim to be)?
Here is the article I speak of: http://news.ycombinator.com/submitted?id=williamjames
I agree with you that there should be some way to "quite easily" encrypt everything so that your recipient decrypts it only on its client software, though I doubt the situation will differ from the current one with emails. But "Freedom" lies in the effective ability to use it. Once all protocols are open your issue is more social than technical: for this see Elben Moglen's ideas on personal servers (tiny pluggable servers…) (even if we already have DSL boxes and even phones for small-bandwith data).
So there are no accounts with Awesomea or Crapula. Instead you have the diaspora software running on your own machine. Now Awesomea and Crapula have some social aspects on their site - for instance they want to send an update to your friends. So Awesomea and Crapula sends a request to your ip on the Diaspora port which includes the update message. Its now up to your computer to distribute that message to your friends, and Awesomea and Crapula have no idea who those people are.
Of course you'd probably want the diaspora software hosted externally, but the model could still mostly be the same. Now if Awesomea or Crapula need to compute something using private data, I don't know what happens, perhaps they can provide logic to be run in a diaspora sandbox somehow.
Say I want to find out what all my friends are up to lately. Since this information doesn't live in a (more or less) central place any more like it used to on Facebook, I need to go out and contact each node (in an encrypted, secure way) that my friends run/pay to host on an ISP and ask them, what they're up to lately. That information then gets merged by my local node (that I presumably access to view a news stream) and displayed to me.
Isn't that more than a bit inefficient? Hundreds of friends, means hundreds of connections going out, to grab friend updates, each with encryption overhead. And all those nodes have to be up and running of course.
OK, so let's assume your own node is smart enough to cache these updates. Maybe it even gets updates pushed to it when my friends update, so it's not constantly polling all of them in search for updates. That means if my friend withdraws permission to see their updates, I still have access to their cached info local to my own node.
So perhaps there's also a push update system that handles revocation. You remove permissions and send another message to those affected to forget your info. But what if I run a modified node that chooses to ignore this information? The whole thing is open source and anyone can tinker with their node code. Say I friend a malicious entity, decide I don't like them anymore, and take back their access. It could be too late.
See, this is the kind of technical detail I was hoping for. Real life examples and a vague outline of how they're going to tackle them.
The same issue crops up with email, letters ... hell, every way we've communicated for hundreds or thousands of years: there is no way to revoke access to information once granted, even if access to new information is withheld.
You might as well complain that someone could take screenshots of everything you say that shows up in their news feed.
The following is a list of features the future might bring (if I understand the project page correctly: http://www.joindiaspora.com/project.html)
OpenID
I assume this is the standard they will use for authentication? What about this encryption business? Do they intend to modify the OpenID protocol to do some sort of challenge/reponse step and exchange keys?
Voice-over IP
I'm at a loss for what this means or how it is important to the project. Are they implementing a specific protocol, using a particular libary, or are they going to attempt rolling their own system?
Distributed Encrypted Backups
Backups of what? Distributed why? How?
Instant Messaging protocol
There are a plethora of existing protocols they could use. Since they haven't specified a particular one, does it mean they haven't decided which one to use yet? Are they planning to build their own "encrypted" protocol? Magic?
UDP integration
Whoa. Integration. With UDP? Mind-blowing. I'm assuming that they'll be building the broad-casting bits of the P2P architecture on UDP. It's what most distributed, encrypted P2P networks do.
Oh right, there are already dozens of them and have been for years. I guess these kids are just too young to remember:
- http://en.wikipedia.org/wiki/WASTE - - http://office.microsoft.com/en-us/groove/default.aspx (before it got bought by MS and turned into corporate turf) - soulseek, gnutella, freenet, etc.
Wonder how they're planning to break that extra 10x
sounds like pr-speak.
It's more like a throwaway line from a draft script for the Matrix.
There are so many hand-wavy stuffs in that site that it almost spells doomed.
In my opinion for boosting commercial adoption, a MIT license is truly needed. I know it's not in their interest to do so (they plan to build a wordpress.com-like hosting).
The issue is UX: Nobody - and certainly not Facebook - has come up with an effective interface that allows us to manage our interactions online with the fidelity that we want. And I doubt that these four kids are going to come up with a spell-binding piece of design that does this. They seem to be Ruby programmers, and certainly not designers - graphical, UX or otherwise if one is to judge by their website.
Far deeper analysis of the problem is needed that the reactionary "Facebook are arseholes, they're acting like a big corporation". The details of how we create multiple online publics[1] for ourselves, how we relate to them, and understand them is key to building any sort of infrastructure to manage those publics. The Diaspora guys seem to be treating this as purely a technical problem, when it most certainly is not.
[1] It's the other side of the coin to having multiple online identities, but to me, makes a bit more sense as a conceptual model for what we're dealing with.
I have sympathy for the Diaspora guys, I think if it went unnoticed and unfunded it could be a great learning project for some young coders, even if it didn't achieve practical success. Instead, it'll likely be (already is) a public embarrassment.
If I could give the Diaspora guys one bit of advice, I'd say this, don't take this too seriously; treat it like a fun summer project. The last thing you want to be is the next freenet (no offense Freenet guys, awesome concept, but it never really caught on).
Everyone needs to stop saying these guys are "well funded." $200k is nothing especially for a team of 4 people. It's certainly not enough for them to hire anyone else full time to join them. Yes, they didn't have to do much to get this money and I realize it's infuriating if you're really struggling to get your business off the ground when 4 nobodies get a chunk of money out of nowhere, but please recognize that the amount is so small that it doesn't warrant outrage.
Furthermore, they didn't even ask for that much. It got a big network effect in light of the recent facebook privacy issues, but it's a one time thing and most likely the last money they'll ever see for this project. I don't think their situation is repeatable in any sort of predictable way, so it probably doesn't warrant studying (please correct me if someone's figured out a way to do this, cause I think most of us would like to figure out how to get free funding). We should wish them the best of luck and only care when they make something people want to use.
I can already see the headlines of outrage when they don't produce something that destroys facebook overnight, or maybe don't release on time, or their code is really bad. Anyone who contributed to them only expected to give facebook a little jab. There are reasons to question their abilities, but jealousy over their gimmicky funding really needs to stop.
The launch date is in September, and so far the last update since the NY Times article was a redesign. The only technical information is that it's using Ruby, "a little bit of rails" and some "other" frameworks.
This feels to me like giving a kid $0.25 for a glass of lemonade, and him telling me he'll bring it to my house after he's built his lemonade stand, bought the ingredients and actually produced a beverage.
This is exactly the state of the project unless there is a whole lot that the Diaspora team has not publicly documented.
But, as far as I know, they have never stated that this was not the case. Their video made it pretty apparent they had yet to build the lemonade stand and buy the ingredients.
what are they spending all their time doing?
to having this horribly designed website?
They likely didn't even need to use the money they have to get a half decent design.
This is not instilling much confidence in these guys.
They surely have high caliber advisers at this point. The peanut gallery probably wouldn't be all that helpful as they try to lay the first foundations.
Once there's something complete to react to and build on, they'll release the code.
http://validator.w3.org/check?uri=http%3A%2F%2Fwww.joindiasp...
I have zero confidence in this group.
EDIT: http://validator.w3.org/check?uri=http://www.google.com&...
I suppose we should by this logic be 4 times more confident in Diaspora than Google, and 15 times more confident than HN.
I'm confused. So does anything that is not a start-up, and/or web application get a free pass on standards compliance? I was under the impression that the standards were meant to apply to all web pages.
This web application does not either: http://validator.w3.org/check?uri=http%3A%2F%2Fwww.facebook....