infinity0 has quit [Remote host closed the connection]
Crocodylidae has quit [K-Lined]
arpu has quit [Ping timeout: 240 seconds]
infinity0 has joined #ipfs
infinity0 has quit [Remote host closed the connection]
infinity0 has joined #ipfs
infinity0 has quit [Remote host closed the connection]
infinity0 has joined #ipfs
espadrine has quit [Ping timeout: 240 seconds]
infinity0 has quit [Remote host closed the connection]
infinity0 has joined #ipfs
infinity0 has quit [Remote host closed the connection]
infinity0 has joined #ipfs
infinity0 has quit [Remote host closed the connection]
arpu has joined #ipfs
infinity0 has joined #ipfs
vtomole has joined #ipfs
HostFat_ has joined #ipfs
cemerick has quit [Ping timeout: 248 seconds]
HostFat__ has quit [Ping timeout: 255 seconds]
rickygee has joined #ipfs
wallacoloo____ has quit [Quit: wallacoloo____]
Brender has joined #ipfs
tmg has joined #ipfs
robattila256 has quit [Ping timeout: 256 seconds]
Hoosilon has joined #ipfs
_MMM_ has joined #ipfs
_MMM_ has quit [Client Quit]
HostFat__ has joined #ipfs
Aranjedeath has quit [Ping timeout: 255 seconds]
HostFat_ has quit [Ping timeout: 245 seconds]
MikeFair has joined #ipfs
Aranjedeath has joined #ipfs
Aranjedeath has quit [Client Quit]
Brender has quit [Remote host closed the connection]
travisperson has quit [Ping timeout: 258 seconds]
demize has quit [Remote host closed the connection]
aquentson has quit [Ping timeout: 264 seconds]
demize has joined #ipfs
tperson has joined #ipfs
<MikeFair>
Can anyone tell me why there isn't an "ipfs key add" command for importing independently generate keys?
<MikeFair>
Actually; nm, I just realized that my use case is likely better served by hacking the code directly to add what I'm looking for. (Though I still think "add" or perhaps "import" would be a useful thing)
tmg has quit [Ping timeout: 255 seconds]
mguentner has quit [Quit: WeeChat 1.6]
MikeFair has quit [Ping timeout: 255 seconds]
mguentner has joined #ipfs
john1 has quit [Ping timeout: 252 seconds]
MDude has quit [Read error: Connection reset by peer]
MDude has joined #ipfs
chris613 has quit [Quit: Leaving.]
<Kubuxu>
and he left ..
<SchrodingersScat>
rest in ping
MikeFair has joined #ipfs
<SchrodingersScat>
MikeFair: welcome back, we were so worried about you.
<MikeFair>
LOL! Thanks! :)
<MikeFair>
Me too! (it kinda sucks when you completely lose power immediately after asking a question on IRC ;0 )
<SchrodingersScat>
that's what happened? terrible. is there something going on? Will you be safe tonight?
mguentner has quit [Read error: Connection reset by peer]
mguentner has joined #ipfs
<MikeFair>
SchrodingersScat: Oh yeah, I'll be fine; I've got a 2ns (or is it 3rd) hand laptop that I'm primarily using these days; and the battery only keeps about a 15 minute charge and the power connector is wonky/a loose fit; so if I'm not careful, the thing just turns off in the middle of doing something
<MikeFair>
Keeps me ofcused and on my toes ;) [though arguably could be more productive if I wasn't rebooting in the middle of things quite so often]
<SchrodingersScat>
write a little, save a lot
* MikeFair
checks the botlogs to see what he missed.
<MikeFair>
hehe "Rest in Ping" I like it :)
<SchrodingersScat>
I wasn't aware this channel was logged, please remove everything I've said.
<MikeFair>
So back to my question though; importing keys
<MikeFair>
SchrodingersScat: Second Item from the last on the topic
<MikeFair>
Kubuxu: Still here?
<Kubuxu>
MikeFair: currently there is no defined function for importing and exporting keys
<Kubuxu>
but IIRC they are just stored in fs
<MikeFair>
So I think I figured out a reasonably easy way to make password protected archives
<Kubuxu>
in IPFS_PATH/keys
<Kubuxu>
or somethign
<MikeFair>
Kubuxu: Yeah I saw those there; I just wasn't clear on what other metadata was required to give it a name and whether or not the hash of the pubkey was dynamic or stored
<Kubuxu>
the name is from the filename
<MikeFair>
(and how to make that hash if I need to store it)
shamb0t has joined #ipfs
<Kubuxu>
and the hash is embeded in key format and/or derived from the key
<Kubuxu>
this would be hackey solution
<Kubuxu>
best to create issue in go-ipfs for introduction of such API
<MikeFair>
I was thinking patch, issue, and PR altogether; it seems like key gen is actually "more compilcated" so stripping stuff out of that function for "import" shouldn't be a difficult task
* MikeFair
hears the quote "Famous Last Words" (tm) ring through his skull.
<Kubuxu>
nah, it should be quite easy
<Kubuxu>
I think
<MikeFair>
I think just being able to have this keystore can create transparent "password protected" encrypted archives for security purposes
Foxcool has joined #ipfs
<Kubuxu>
currently keystore handles only asymmetric keys
<Kubuxu>
ok
<Kubuxu>
I am gone for tonight, it is 5:30 am here :D
<MikeFair>
You can encrypt the data blocks (using one of these keys); you then create a directory that has two entries
<MikeFair>
"data" and "<thehashofthepublickeyusedtoencryptthedata>"
<MikeFair>
err not data blocks; the thing that you're adding
<MikeFair>
If your local peer has the keys for referenced by the hash, then it can decrypt the files
<MikeFair>
Otherwise, despite knowing the blcok address, you just get encrypted data and a hashkey
<MikeFair>
Thank you for the info; g'night!
dysbulic has joined #ipfs
pfrazee has quit [Remote host closed the connection]
GrodGod has quit [Killed (Sigyn (Spam is off topic on freenode.))]
amsty has quit [Killed (Sigyn (Spam is off topic on freenode.))]
DioSoft has quit [K-Lined]
Pestilence has quit [K-Lined]
kriskringle has quit [K-Lined]
Guest40015 has quit [K-Lined]
wesTT has quit [K-Lined]
brainsucker has quit [K-Lined]
Frederick has quit [Killed (Sigyn (Spam is off topic on freenode.))]
Chilean has quit [K-Lined]
eloton has quit [K-Lined]
_whitelogger has joined #ipfs
lol_lilo has quit [K-Lined]
rickygee has quit [Quit: im not really sleeping everyone!]
<lgierth>
MikeFair: on the ipfs.io gatewazs
<lgierth>
it'll soon-ish be ipfs-cluster backed by a few machines
_whitelogger has joined #ipfs
<MikeFair>
lgierth: sweet
arkimedes has quit [Ping timeout: 248 seconds]
<MikeFair>
I'll have to look into ipfs-cluster; I don't suppose that's something that would let me throw together a collection of peer-ids to make some kind of aggregated backend storage unit (for example pinning would let me say "ensure a pinned block always has at least 3 copies available" within the cluster of peers -- I don't care which peers are used exactly; just that 3 copies on different machines are maintained)
arkimedes has joined #ipfs
bastianilso has quit [Ping timeout: 255 seconds]
tmg has joined #ipfs
A124 has quit [Ping timeout: 255 seconds]
vtomole has quit [Ping timeout: 260 seconds]
aquentson has joined #ipfs
aquentson has quit [Ping timeout: 240 seconds]
apiarian has quit [Ping timeout: 264 seconds]
aquentson has joined #ipfs
drwasho has joined #ipfs
drwasho has quit [Client Quit]
rickygee has joined #ipfs
rendar has joined #ipfs
Caterpillar has joined #ipfs
pfrazee has joined #ipfs
john1 has joined #ipfs
rickygee has quit [Quit: im not really sleeping everyone!]
A124 has joined #ipfs
pfrazee has quit [Ping timeout: 255 seconds]
A124 has quit [Client Quit]
A124 has joined #ipfs
reit has quit [Quit: Leaving]
anbora has joined #ipfs
dysbulic has joined #ipfs
arkimedes has quit [Ping timeout: 245 seconds]
ygrek has quit [Ping timeout: 276 seconds]
maciejh has joined #ipfs
drwasho has joined #ipfs
Encrypt has joined #ipfs
reit has joined #ipfs
drwasho has quit [Client Quit]
robattila256 has joined #ipfs
<bart80[m]>
hi i have one question how run ipfs daemon on ext ip. I change "API": "/ip4/127.0.0.1/tcp/5001", to "API": "/ip4/my-ip/tcp/5001", and cant see network status - my system is armbian (cubieboard)
maciejh has quit [Ping timeout: 240 seconds]
dysbulic has quit [Ping timeout: 255 seconds]
chriscool has joined #ipfs
johnhix has joined #ipfs
<johnhix>
hi. where i can find some kind of network explorer?
<johnhix>
Can I find someone's files without direct link?
<H3ndr1k[m]>
bart80: you should not run the Api on the internet, because one can control the whole node with the Api.
<H3ndr1k[m]>
You want to expose the swarm-port, which is 4001 and should already listen on 0.0.0.0/::
<bart80[m]>
i want access to webui all no internet only my local network
<bart80[m]>
i want access to only webui all, no internet ,only my local network
dysbulic has joined #ipfs
maciejh has joined #ipfs
will has joined #ipfs
drwasho has joined #ipfs
drwasho has quit [Client Quit]
<H3ndr1k[m]>
You could put the internal IP there like 192.168.*.* or 10.*.*.* don't know how your Network is set up.
<H3ndr1k[m]>
Then you should be able the access the webui over lan.
<bart80[m]>
"API": "/ip4/127.0.0.1/tcp/5001", is on localhost. How i modify to 192.168.2.X ipfs i work but in webui i not see status network, 0 peers itd
<AphelionZ>
Kubuxu: interesting. is there a different option or flag I need to pass to ipfs get to download binary data?
<Kubuxu>
Hmm
msornay[m] has left #ipfs ["User left"]
<Kubuxu>
aah
maxlath has joined #ipfs
<Kubuxu>
hmm, it looks like I was wrong
<Kubuxu>
hmm
<Kubuxu>
interesting
maxlath has quit [Ping timeout: 240 seconds]
maxlath has joined #ipfs
<AphelionZ>
what's up Kubuxu ?
<SchrodingersScat>
where are you getting the keys?
maxlath has quit [Ping timeout: 240 seconds]
<AphelionZ>
SchrodingersScat: from ipfs refs local
G-Ray has quit [Quit: G-Ray]
mildred has quit [Ping timeout: 252 seconds]
Foxcool has joined #ipfs
john2 has joined #ipfs
oma[m] has joined #ipfs
john1 has quit [Ping timeout: 240 seconds]
antipneumococcic has joined #ipfs
pfrazee has joined #ipfs
<AphelionZ>
...is that not right?
maciejh has joined #ipfs
pfrazee has quit [Ping timeout: 255 seconds]
Caterpillar2 has quit [Quit: You were not made to live as brutes, but to follow virtue and knowledge.]
joelburget has joined #ipfs
<joelburget>
I'm trying to figure out some stuff re ipld:
<joelburget>
* is there a way to get ipfs to transitively retrieve objects? for example, follow all links to depth 3?
<joelburget>
* for the last example on the ipld page: https://github.com/ipld/specs/tree/master/ipld , how do i put this in ipfs as an object? `ipfs object` only recognizes json / protobufs?
<joelburget>
* should i be using the `ipfs object` commands?
<lgierth>
joelburget: use `ipfs dag`
<joelburget>
lgierth: i get 'Unknown command "dag"'
<joelburget>
maybe i should back up: are there installation instructions for ipld somewhere?
<joelburget>
how is `ipfs dag` different from `ipfs object`?
bastianilso has quit [Quit: bastianilso]
<lgierth>
ipfs object is the old merkledag format, which ipld succeeds
<lgierth>
i think you need to update to 0.4.5-rc1 to get `ipfs dag`
<lgierth>
the naming is quite unfortunate :)
antipneumococcic has quit [Ping timeout: 264 seconds]
Aranjedeath has joined #ipfs
johnhix has quit [Ping timeout: 252 seconds]
johnhix has joined #ipfs
aquentson1 has joined #ipfs
aquentson has quit [Ping timeout: 255 seconds]
TheWild has joined #ipfs
TheWild has left #ipfs [#ipfs]
<joelburget>
Still working on the ipld stuff: every variation i try of `ipfs dag put -- btc.json` fails with "Error: multihash too short. must be > 3 bytes"
<AphelionZ>
Kubuxu: what's the best way to support and improve the network. I'm already planning a multi-region node rollout to indirectly support my own app
<AphelionZ>
how else?
<Kubuxu>
testing stuff, participating in design discussions, rising needs
<Kubuxu>
if you plan multinode setup, you might be interested in https://github.com/ipfs/ipfs-cluster/ it is still really WIP but we will be starting to get some mileage on it soonish
<AphelionZ>
yeah that looks good. I want to make sure my assets get served optimally but then i want to support the global ipfs network as well
<AphelionZ>
was wondering if simply keeping my nodes up and running and my content pinned would be enough
<Kubuxu>
probably
<AphelionZ>
haha ok. i'll still look at ipfs-cluster anyway
<muvlon_>
I wanna built the trashiest, cheapest ipfs cluster possible
<muvlon_>
with sd cards, pen drives, anything
Mateon2 has joined #ipfs
Mateon1 has quit [Ping timeout: 240 seconds]
<AphelionZ>
hell yeah
<AphelionZ>
i want to build an incredibly sturdy one 🕶
Mateon1 has joined #ipfs
shamb0t has quit [Read error: Connection reset by peer]
shamb0t has joined #ipfs
Mateon2 has quit [Ping timeout: 248 seconds]
<muvlon_>
I wonder if it's a good idea to run ipfs on top of a "traditional" DFS such as GlusterFS or LizardFS or if it's better to just use ipfs-cluster
<muvlon_>
I'll try that out once I get some hardware
shamb0t_ has quit [Read error: Connection reset by peer]
Foxcool has quit [Ping timeout: 248 seconds]
vapid has quit [Read error: Connection reset by peer]
vapid has joined #ipfs
Goniodoridae has quit [Ping timeout: 252 seconds]
dignifiedquire has quit [Quit: Connection closed for inactivity]
shamb0t has quit [Remote host closed the connection]
shamb0t has joined #ipfs
dignifiedquire has joined #ipfs
<AphelionZ>
joelburget: how'd you do the /link part of your dag
<AphelionZ>
-w?
shamb0t has quit [Ping timeout: 260 seconds]
<nicolagreco>
daviddias: you around?
shamb0t has joined #ipfs
ygrek has joined #ipfs
shamb0t_ has joined #ipfs
shamb0t has quit [Ping timeout: 264 seconds]
ygrek has quit [Ping timeout: 276 seconds]
aquentson1 is now known as aquentson
shamb0t_ has quit [Remote host closed the connection]
mildred has joined #ipfs
matoro has quit [Ping timeout: 245 seconds]
Ciblia has left #ipfs ["User left"]
ygrek has joined #ipfs
matoro has joined #ipfs
esph has quit [Read error: Connection reset by peer]
rickygee has joined #ipfs
gde33 has quit [Read error: Connection reset by peer]
<mildred>
hello
gde33 has joined #ipfs
<mildred>
I'm getting quite a dependency hell with gx ... how do you solve that?
rickygee has quit [Quit: im not really sleeping everyone!]
<mildred>
github and gx versions of the same package conflict with each other
vapid is now known as philosophy_exper
philosophy_exper is now known as no982982
matoro has quit [Ping timeout: 276 seconds]
Neiman[m] has joined #ipfs
rendar has quit [Quit: std::lower_bound + std::less_equal *works* with a vector without duplicates!]
no982982 is now known as filozofia
TheNain38 has joined #ipfs
<mildred>
each time I try to code on the IPFS codebase, I have these problems
takietam has joined #ipfs
takietam has quit [Client Quit]
rickygee has joined #ipfs
<Voker57>
do not use github version?
mikeal has quit [Quit: Connection closed for inactivity]
matoro has joined #ipfs
rickygee has quit [Quit: im not really sleeping everyone!]
<mildred>
I'm trying to vendor all the packages ...
aquentson1 has joined #ipfs
aquentson has quit [Ping timeout: 255 seconds]
<AphelionZ>
what do you guys think about user auth? is it a viable solution user ipld or ipfs?
<Kubuxu>
currently not
ylp has quit [Quit: Leaving.]
<nicolagreco>
AphelionZ: what do you mean?
<AphelionZ>
ok cool. then i'm thinking i'll use AWS Cognito or some such thing
ygrek has quit [Ping timeout: 240 seconds]
<AphelionZ>
nicolagreco: i need a decentralized solution i think
<nicolagreco>
for..?
<AphelionZ>
Cognito certainly is not, though it's pretty secure + good
<AphelionZ>
for user auth
<mildred>
I don't understand ... user auth over ipfs ?
<AphelionZ>
not necessarily... just something as decentralized under ipfs
<mildred>
for user auth ?
<AphelionZ>
yes
<mildred>
just use crypto
<mildred>
a secret key == an identity
<cehteh>
depends
<mildred>
fully decentralized
<AphelionZ>
and just store everything encrypted at rest?
<AphelionZ>
thats an idea
<mildred>
ask to sign a challenge for auth
<AphelionZ>
cehteh: what are your thoughts?
<cehteh>
i am thinking that there is currently no proof that todays cypto will be broken some day in future, sounds hard but we dont know, the better solution would be only to distribute files to nodes which can proof that they are authorized to see the content
Encrypt has joined #ipfs
<cehteh>
still i rely on crypto too, but imo for something like ipfs this may be some problem
<AphelionZ>
so some sort of relay between the nodes ports and the underlying ipfs daemon?
<cehteh>
currently this is completely unaddressed in ipfs iirc
<AphelionZ>
yeah lol, forging the wild frontier here
<AphelionZ>
i bet you could get a lot of mileage out of a secret key + application-level salt
tmg has joined #ipfs
<cehteh>
with single file encryption there are a lot attacks possible, yet alone if you know the exact size of a file you may get a proof of ownership
<cehteh>
mildred: you are the mildred from ooorg?
rickygee has joined #ipfs
<AphelionZ>
but proof of ownership is kind of a weird concept in a content addressed system
<cehteh>
yes maybe ipfs is not meant for that
<AphelionZ>
im just worried about the encryption of the data, honeslty
<cehteh>
if one encrypts with his own key/salt then it breaks deduplication
<cehteh>
some simple encryption layer over ipfs should be simple as well, *but* it is certainly not sufficient for any use. it would be a bit dangeroud to go that road
<AphelionZ>
well let's say your 1 million record dataset is distributed across 1 million hashes
<AphelionZ>
the attacker would need - the complete list of hashes
<cehteh>
anyway i rather use git-annex for my current distributed-files needs
m3lt has joined #ipfs
<AphelionZ>
and then the decryption key
<AphelionZ>
haha no - the IRC-esque "why are you using this, use something else" doesn''t apply to my question
<cehteh>
i dont say that attacks are viable now
* AphelionZ
googles git-annex anyway
<AphelionZ>
right
<cehteh>
but ipfs claims that it is the 'permanent' web
<cehteh>
that means any encrypted content will not be revokeable
<cehteh>
and at least in theory there are attacks to todays crypto if quantum computers become available
<AphelionZ>
right
<cehteh>
thinkin about that together makes me feel bad
<AphelionZ>
when that happens i think we have much larger problems haha
<cehteh>
eventually it may happen, and everything is fine if there are ways to mitigate these problems
<cehteh>
like i saied, if there is some auth mechanism and data is only transfered to nodes which can auth themself
<AphelionZ>
yeah but that still centralizes everything under a handful of trusted nodes
apiarian has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<AphelionZ>
i guess that's fine but it kinda defeats the purpose
<cehteh>
depends
<cehteh>
dunno if it needs to be a handful
<cehteh>
could be way more with some crypto/auth systems
<AphelionZ>
if you could distribute the auth logic, yeah
<AphelionZ>
hmmmmmmmm
<cehteh>
i have no exact solution, there are certainly ways with keys, signs etc ... even revokeable
<cehteh>
but one should expect that anyone who ever sees a secret file may eventually gain the knowledge to decrypt it
<cehteh>
either via some advanced/future attack or by gaining access to the key
<cehteh>
for secret files it is prolly safe when they are only distributed between few trusted nodes only
<AphelionZ>
sure
<cehteh>
and differrentiate between distribution and crypto may be another step
<AphelionZ>
mm
<cehteh>
not everyone who has the auth to mirror it may actually also decrypt it
<cehteh>
like i may trust some cloud storage or rented server to backup my secure data, but it should still not be readable there
<AphelionZ>
yeah...
<cehteh>
anyway, i dont know if this is a goal for ipfs at all, currently its widely public
<AphelionZ>
no i dig it, im just trying to find a balance, as it were
<cehteh>
it might be just the wrong system for that, i dont evne know if such security fits nicely to it as afterthought
<lgierth>
muvlon_: neocities use ipfs on top of ceph (cc kyledrake)
<AphelionZ>
i dont want to centralize auth if i dont have to
<cehteh>
auth doesnt need to be centralized
<cehteh>
look at gpg
<AphelionZ>
thats interesting
<cehteh>
for example one doesnt need to have a prvate key which is required to auth for the data, it would be sufficient if he can show that his own key got signed with that key
<AphelionZ>
would i need to make a copy of each datum per signed key
<AphelionZ>
like if i wanted to share my data with a group of people?
<AphelionZ>
thats further down the road, but something i need to consider
<cehteh>
dunno .. i saied i have no complete solution for that yet, eventually you want some hierarcy of keys, maybe with per-file keys at the leafs
<cehteh>
but at least from my knowledge such looks feasible
<AphelionZ>
thank you!
<cehteh>
take a look at git-annex and/or tahoe-lafs too, maybe a bit bad to adverzize this here, but they are not exactly competitions, each one has its own strenths and weakness
<cehteh>
(git annex has a ipfs and a tahoe-lafs backend :DDDD)
bsm117532 has quit [Remote host closed the connection]
<cehteh>
is the ipfs fuse client fixed meanwhile? for me it always stalled and/or did odd things and looked pretty brittle
<cehteh>
havent tried recently
espadrine has quit [Ping timeout: 258 seconds]
<lgierth>
there have been a few patches a i think, nothing too substantial, but updates or something like that
<AphelionZ>
what's the probability that two pieces of content will derive the same base58 hash?
<AphelionZ>
i think its nonzero, but like... superstring-level small, right?
ygrek has joined #ipfs
<lgierth>
for sha256 it's 2^160
<lgierth>
that's the baseline
<lgierth>
with continuous research on the hash algorithm that complexity is usually brought down over time
<lgierth>
actually constructing data that results in the same hash as other data, i.e. not just a theoretical collision, is much harder
<lgierth>
sha256 hasn't been been meaningfully weakened so far to my knowledge, and once it does get weakened, we'll simply migrate to another hash algorithm, thanks to multihash: https://github.com/multiformats/multihash
rickygee has quit [Quit: im not really sleeping everyone!]
<AphelionZ>
thanks lgierth
<mildred>
cehteh: I'm not from OpenOffice.org if that what you asked
<cehteh>
mildred: ah ok, not the mildred i know :)