"Control your data, control your destiny."
Peergos
is building the next web - **the private web, where end users are in control. ** your private online space -
Peergos
motto
"Control your data, control your destiny."
is building the next web - **the private web, where end users are in control. ** your private online space -
Peergos
motto
⛨cryptpad.link: https://cryptpad.fr/pad/#/2/pad/edit/8Zo3pQO0gLi+dyvIlJTS8lnZ/
Peergos is building the next web. by creating a - cryptographically secured, - un-enclosable, - unstoppable, - distributed - emergent, - web scale, - people-cantered - self-contained,
yet - open as in Open source and Open Build) and - extensible infrastructure for autonomous digital Indy Web Spaces*.
These spaces can be replicated on all yOur devices, weaving a network of Trust, that is People-centric as opposed to being provider centric.
The network effect benefits the participants who are their own(ed) providers.
Peergos allows individuals and communities to control their destiny by being able to control their own(ed) Data.
Even more importantly, Peergos provides the secure, private infrastructure that allows participants to own the very means of computations , apps and affordances, they rely on: themselves.
These apps are "Open Constructs".
They are not only Open Source , modifiable right within Peergos, but created in a form that makes their - reuse, - repurpose - refactor - extend - exapt - adapt a simple task. Easy to emulate, compelling to do. Affordances that are Tinkereable, home brew, designed to be shared and co-evolved. Not just Open source But Open Capabilities.
People are able to - personalise, - customise, - extend<br /> them to satisfy their own particular needs, improve them to improve their ability to improve their own work(flow) in a way that is ease to share with others, while maintaining control and ownership of their contributions, while inviting others to reuse, repurpose and compose them into their own workflows, ones that they themselves need, or indeed create new ones for themselves and others
All in the long tail of the Peergos Net as Open Software Constructs built from trust for trust.
Peergos provides yOu with yOur owned, autonomous, stronghold in the war that is waging at increasing intensity over the means of computations.
Peergos gives you the benefits of "packaged software" - permanent - private - ownership but doing so over the internet with full provenance and recapitulable history (not just sneaker net) scaling - reach and - speed of spread - for scaling impact.
just as people working with Nostr envisaged the same.
Peergos let's you create and control your owned (pseudo) identity. Self Sovereign Identity NOT required to be tied to real identity!
If Self sovereign Identity is linked to state issued identity, that is simply not self-sovereign!
Give 1 the ability to share privately information and weave yOur 1's own networks of Trust.
You do not go to places where apps you would like to use are served from, but all apps come to yOur spaces dedicated to names pursuances and emergent communities of practices, to work on yOur owned information.
Need only to log in once to authenticate yourselves to your owned account, on any of your devices ever having to log in an app ever again!.
🔑📜 🧵
autoscales to demand
nice
Block Access Control
"Control your data, control your destiny."
motto for peergos
Features » Custom Apps » Mailbox
Mailbox
self: https://hyp.is/LFjWYipTEfC78udRQo9Vug/book.peergos.org/architecture/pki.html?search=user%20name
Mutable pointers » Mutable
to
create a new user folder
MailBox
Writing subspaces
writing subscpaces
a user wide "mirror" BAT
BAT Block Access Control
Independent of the central SSL CA trust architecture, and the domain name system Self hostable
self_hostable
30 search results for 'user name':
search - user+name
cryptree node (encrypted metadata) of the first chunk, which is located at the given champ key (32 random bytes).
champ key
native folder sync
amazing
Corenode
corenode
The public keys and usernames are stored in a global append only data structure, with names taken on a first come first served basis. This needs consensus to ensure uniqueness of usernames. This is also where the ipfs node id of the server(s) responsible for synchronising the user's writes is stored.
peergos
Each signed update is actually a pair of hashes (previous, current) and a monotonically increasing sequence number. This means the server can reject invalid updates, and that the updates form a total order.
updates form a total order
self: https://book.peergos.org/architecture/mutable.html?highlight=user%20name
from: https://hypothes.is/a/yswj9CpSEfCYh4ehXOzAJA
writing subspaces
from: https://hypothes.is/a/g2Y__ipSEfC5QRfkFVTziw
maintaining the autoscaling properties in a privacy-preserving way
auto-scaling privacy preserving
Block Access Token or BAT
gloss - Block Access Token
BAT
tickets included the buyer's name on the ticket (they were non-transferable)
non-transferable buyer's name
replay attack
copy ticket
any node that has the content can serve it up, which means that it autoscales to demand.
autoscale on deman
The public keys and usernames are stored in a global append only data structure
first come first served
corenode interface
get updateChain
getUserName by - PublicKeyHash - prefix
creating an account on your device
own account with limited storage
secret link mechanism
share files with people who do not have Peergos accounts
identity in Peergos is not tied to any particular serve
no need to move server with loss of network and even data
a clear case of a "better spot"
the dual of a sweat spot
one that is clearly bellow the threshold of what is required
Access can be revoked at any time
Access can be revoked at any time whilst maintaining access to anyone else the item is shared with. This is all achieved cryptographically with capabilities and lazy re-encryption.
secret link mechanism
secret link mechanism
If you migrate to another server, your links come with you and all pre-existing secret links will continue to work.
Worth pointing out that when you move a folder to a new location the originally created links remain valid
and because of content addressing no files need moving or no duplicates are created
Need to confirm this
Secret links
superpower
File Sync
Gamre Changer
Kudos Peergos
fir
typo
divine certainty
c
pursuit of truth
philosophy is going meta in our human pursuit to understand and to be understood. Truth is tricky tricky,
Mind is driven to expand and revels in the adjacent impossible and harnesses ti render adjacent possibles, realities Which is a more accessible form of love, responsibility to dream, aiming to maximizing one's engagement in labour of love and maximising the time that one can devote to that
We shall self-legislate.
self-legislate
Christian claim that history has a direction
history has a direction
Marxism is a materialist version of Gnosticism
material version of Gnosticism
Claiming that everything is wholly determined by laws of physics is self-refuting.
phyicsself refuting
you shall know them by their fruits
rules
nothing more than will to power
power
What role did worship of science play in the destruction of European civilization
x
commitment to truth
commitment
State tell researchers what conclusions they should reach, this undermines the practice of science.
undermines science
for it to be science there has to be a pursuit of truth
science pursuit of truth
higher level properties are not reducible to those properties
x
infinite regress in our attempt to define the meaning of a word
no infinte regress it will always be loops and networks
transcends what we want to be the cas
transcends what we ant it to be the case?
argue for transcendence via emergence
The pursuit of justice is a process of continual inquiry.
lost the quote
freedom of inquiry is justified
freedom of inquiry
What about other goals than liberty
beyond liberty
a veritable suspension of logic
yep
we bring new realities into existence. Polanyi recognises that doing mathematics is a less personal process than writing a novel, but he claims that even mathematics has a discovery process which cannot be reduced to rules. Creativity is a process of emergence. But that does not imply that we can create anything we want. Existence operates within constraints.
cretvity emergence
not anything we want
the role which the unspecified plays in knowing
unspecified
We always know more than is captured by our descriptions.
c
But this implies that our choice of axioms is arbitrary
it does not axioms by their statement are limited to a specific domain
like geometry
conservative exwnsion or alterative conceptualizations
experience goes beyond what language can describe
language can be used to describe
use my favourite turn of phrase
it is not a compromise it is a bloody surrender
awareness of something we may get to name
leaps of understanding
just a hunch a feeling out to it
abductive reasoning
anticipiation as Bacon calls it
I call it Out-tution
Description
not using the word articulation is not right
we can only know that which we can describe.
x
Except maybe for abstract objects in formal systems
why abstract just object where it is the complete description or process for their creation has to be complete for it to be available
computers can be seen as descriptions embodied made ideas brought to life ascending to embodied physicallity
invention of the alphabet.
other civilizations invented alphabet sanskrit?
background awareness,
subsidiary>
This is the first ever created HyperWiki/Nized Book https://peergos.net/secret/z59vuwzfFDorrRTiasuWPoJP6QmenGbG1qqA9h8vKR3sb4TgaXVhMbT/4161461392#oeiaklMFoUAR?open=true
This contains the entire text shared in the commons but what is most interesting is the conversations around it that are only available for individuals who are themselves simply by engaging with it become participant readers on the IndyWeb where their engagement is shared and verifiably recorded mutually by the author of the Book and the reader
This emergent mutual web of symmathetic conversations is what provides a real augmented value to the shared text
It is annotated and innotated by creator of the IndyWeb with the signiture gl
this is an instance first demonstration of work in progress as of January 20025
indy HyperBook
using seed level affordances of the IndyWeb as an - named - personal first - autonomous - permanent - evergreen - inter - personal - planetery - connected - playing of trust networked niveral hyper document networks
hyper wiki like organizeed (wikinized) book
where the book itself is made available on the web freely but is also amenable to be engaged with and host conversations with the readers who form an interest based emergent community and are able to comment, initiate and engage in threaded conversations and interconnect their engagements to their very own presence and work made available through trusted interpersonal connections with others
Workflows in developemnt
we want to self host our git repos in Peergos itself.
self host own git repos
no ned to trust the server
once you have obtained a trustworthy copy of a Peergos client you do not need to trust a server to interact with it.
what does that entail
Trust free levels
no need to trut the server
trust but verify
a user wants to mirror all their data on another instance, or migrate to another instance.
capability to mirror all their data locally on another instance or migrate to another instance
Home server CAN see
space
number of secret links expiry and limites
Once they have obtained or built a copy they trust, then they need trust only the integrity of TweetNacl cryptography (or our post-quantum upgrade) and the Tor architecture.
need to trust the encryption and the Tor architecture
Book# compare Pergos Book
Permissions
needed for hyperpost CK post editor
STORE_APP_DATA,EDIT_CHOSEN_FILE,READ_CHOSEN_FOLDER
folderAction - Indicates App acts on folders
folder actions
what?
fileExtensions - Array of target file extensions e.g. ["jpg","png","gif"]
make one up for hyperpost hp
search-peergos.org; - api put
Drive - The following HTTP actions are supported:
drive HTTP actions
PUT - create a new user folder. API Call launches dialog
email folder
You can run peergos from your own home or server
to obtain as much storage and bandwidth as you need, whilst still transparently interacting with anyone using any other server
Drive - The following HTTP actions are supported:
Mailbox: (see email folder in example-apps):
search: peergos api put
from: https://hyp.is/gfVfioX_Ee-Lkdvkh5Zctg/book.peergos.org/features/apps.html?search=api%20put
The wire protocol is standard libp2p. This is specified here.
peergos book says so
/peergos-api/v0/profile/
peergos rest apiprofile
6 search results for 'api':
peergos rest api
https://hypothes.is/users/gyuri?q=peergos
you could start out by creating an account on your device which gives you limited storage and uptime, then effortlessly migrate to a paid server, or to your own server, when you realise how awesome Peergos is.
own server
Your identity in Peergos is not tied to any particular server.
identity is bot tied to any particular server
use the http p2p proxy exposed locally on the ipfs gateway. It means we can send any request to http://localhost:8080/p2p/$target_node_id/http/$path
the human readable path in the Peergos global filesystem
browser fingerprinting is irrelevant for such websites because no information can be exfiltrated!
private websites
Developing a Peergos App
Select the peergos-app.json file and choose ‘Run App’
Peergos REST API
api
Peergos Apps are a way to extend the Peergos platform to add custom functionality
it cannot make any external requests which could be used to exfilrate data [0].
exfiltrate data
with webrt
to
- "WebRTC can be used for exfiltr…"
(github.com)
Peergos is building the next web - the private web, where end users are in control.
your private online space
privacy is a fundamental human right
privacy right
Imagine never having to log in to an app ever again.
Never having to log into an app ever!
All you need is your username and your password
Can do away with that too
It is not tied to any other data like your phone number or email address.
.for - No Account
lazy re-encryption.
.to.do-search - lazy enciption
secret link mechanism for sharing files with people who do not have peergos accounts.
.for - Indy.Web.Mesh.Net/Hub/One/Dialog/Linminal
sharing files with people who do not have peergos account!
Following can be revoked
following allows sharing between peers
Following is a one-way mechanism
following one way
The web interface can be accessed from a public server over https or from your machine if you run Peergos locally.
same for the IndyWeb
location independence!
You even load it directly from ipfs and log in!
Entirely client side load it from IPFS and log in!
aim to be as convenient to use as existing centralised services,
as convenient and usable as centralised services
Hashes and signatures are all verified client side
client side verification
Because the server only ever sees encrypted data you can also tell it to directly store your data in a standard cloud storage provider like Backblaze or Amazon
.query - or IPFS?
Peergos is fully self hostable
.to.do : must try it out for self osting
no central surveillance point that an attacker could monitor all file transfers
no central suveilance point
Migration Your identity in Peergos is not tied to any particular server. Compared to other federated social networks where moving server typically involves losing your social network and meta-data, if not data too, Peergos allows you to transparently migrate between servers and storage providers without any action required from your friends and without any data loss. This means, for example, you could start out by creating an account on our demo server which gives you a small amount of storage, then effortlessly migrate to a paid server, or to your own server when you realise how awesome Peergos is.
Secret links A secret link can be generated to point to any file or folder. Anyone with a (Javascript enabled) web browser can view such a link. This is a capability based link which includes the necessary key in the hash fragment of the url. A secret link doesn't expose the file to the network, or indeed to anyone who doesn't have the link itself because the key material isn't sent to the server.
reproducible builds (we don't use npm or browserify etc.)
reproducible builds
Peergos is fully open-source
open source
Multi-device login
There is also no central dns name or TLS certificate authority that could be used to attack the network.
Self hosting