HNHacker News
TopNewBestAskShowJobs

silviaotar

2 karma · joined July 6, 2018

submissionscomments
silviaotar··on Codius – Open Hosting Protocol
> You can't verify what an individual host does. So you can either upload your application to a single host that you trust to run it (like everyone has been doing happily for decades) or you can write your application to by Byzantine fault-tolerant and upload it to multiple hosts.

There is a difference between trusting someone and have a contract with someone. If I use EC2, I'm using AWS, and they have policies and laws they have to comply with (data privacy is one of the first one that pops up in my mind). Technically, nothing stops a AWS engineer to put their hands in my application; Legally, they cannot do it, so they are liable if I find it out.

I'm not saying that AWS is the best. I'm saying that compared to AWS, Codius gives me less guarantees.

> [...] That's not possible with traditional hosting because the uploader generally gets admin rights at ALL hosts they upload to.

A Sybil attack seems to be quite cheap on Codius. I can have 10 hosts managed with 10 different identities and make people think the app is legit.

> Standardization, so you can upload to many hosts without speaking a dozen different APIs.

I don't mind having more tools to achieve that, but Docker/Kubernetes standardized the way devops deploy apps, you can use them on different cloud providers (or on your own machine[s]).

> You pay when you upload and your client is enforcing a certain max rate. The host could turn off your contract before the agreed-upon time so if you're worried about that you could only pay for e.g. two hours at a time using some cron job.

There is still no proof that the host charged me the correct amount of money. Even if I cap the money I put in the system, a host can still charge me much more than it should be.

> In practice, a lot of this will come down to host selection. If a host has been legit, reliable, etc. for years, it's unlikely to suddenly decide to screw you out of $10. That's why we think host trackers like codiushosts.com will play an important role. We're working on building our own host tracker as well.

Maybe I'm thinking too much about "blockchain" when I think about Codius, but reading "Decentralized apps" and "Smart contracts/programs" in the homepage doesn't help, I'd remove it.

silviaotar··on Codius – Open Hosting Protocol
How do I verify that the host is executing my application correctly?

How do I make sure that a host is billing me the right amount of money?

silviaotar··on Codius – Open Hosting Protocol
AFAIK Codius doesn't provide any tool to compare outputs from different hosts. Even if the outputs from different hosts is the same, you don't have a proof that the output is correct. For me the point is: why would I use a machine managed by an anonymous person/organization, with no guarantees on execution (and QoS in general) while I can run stuff on AWS EC2, where at least I have a contract with Amazon.

> Codius billing is resource-driven, you should see a very strong correlation between the load on your servers (and the number of servers required) and the amount of money earned. from https://codius.org/docs/running-a-host/why

Codius incentive system is weird to me. I am incentivized to be a "host" and run a codius node so I can make money when people use it, and I am incentivized in maximizing my profit by faking the amount of resources used by the apps I host.

I am not incentivized to be a "guest": how can I verify that the billing is correct? How can I verify that the host is running my application correctly?

silviaotar··on Codius – Open Hosting Protocol
How do I verify that the host is executing my application correctly?

They talk about smart contracts[1] but there is a huge difference between a single host executing an app and having the whole Ethereum network reaching consensus on the execution of a smart contract.

[1]: https://codius.org/docs/overview/for-contracts