Zeronet: Hashes instead of site addresses on blacklists

[styromaniac]

To provide absolute legal immunity, allow blocklist admins to use checksums of site public key strings instead of unhashed public key strings, and have ZeroNet hash the public keys of seeded and clicked site's public keys to check against blocklists' hashes. This kind of thing had its day in court before and gladly the ruling wasn't against the favor of those who have hyperlinks to illegal content, but someday, somewhere, that could change, and that is reason enough to provide such a feature.

The idea is that with this option, site addresses are forward hashed so they aren't retrievable, reversible nor useful to visit offending sites any longer.

[Thunder33345]

while yes they might offer some degree of legal immunity for block list user,
but cant someone still bruteforce and create a direct links to sites that are blocked?
probably none of your concerns, as you just want added legal immunity for owners and the users

someone can easily create a rainbow hash table for all "decently" known zeronet sites if they are in favor of a more open discussion of blocklists(since zeronet is quite small by the number of addresses)

[styromaniac]

I'd think that some algorithms will be quite difficult to brute force, enough that it would be easier for them to find the sites themselves instead, at least, and yeah, added difficulty to reversing the hashes makes unnecessary attention less likely and makes users who seed a blocklist site feel more immune themselves. Right now, all I can do is disable hyperlinks, which doesn't stop the addresses from being accessible. That might not be enough. I imagine it's not always for the lack of knowledge how to admin a blocklist site that people don't create their own, as I've said on ZeroMe and ZeroTalk that I would offer assistance to teach how they work.

[Thunder33345]

i have a mixed conflicting feeling on this:
i would prefer block list to be open and everything up for scrutiny or just for sake of openness
i dont see what's bad, if it removes legal responsibility for the visitors that also host the blocklist sites that links to legally questionable content, heck they might have used blocklist just so they won't stumbled upon them by accident

[styromaniac]

Well, so far there hadn't been any reviews made public of blocklist validity as per its stated purpose, and this would be an option to prehash site addresses. Nothing will stop people from making their own blocklist that's fully transparent, and it would still be possible to validate the hashes. If for instance I put out there a whirlpool hash of ZeroNet's inventor's name and say "this is a whirpool hash of ZeroNet's inventor's name," then it can be verified the same as a site without any means of providing the source text, using research without the answer "Tamas Kocsis" provided and only the very strong clue available. Site titles are still available if prehashes are the only change, and I won't remove titles. If I do, then, as stated before in this comment, people can still create their own verifiable blocklists, prehashing site addresses or not.

Whirlpool hash of ZeroNet's inventor's name (reproduce this):

065e3019121a37cf8a3c7bc4c93b9fee1245544d01112c0a63991b9d4f4602aa1f9421416cb662ae27c833ab95abbfb1306ff8d77b2aed493ce81c090276b5de

[Thunder33345]

yep as mentioned previously

someone can easily create a rainbow hash table for all "decently" known zeronet sites

basically by crawling all existing zeronet sites and produce a hash of them to be matched latter
opposed to bruteforcing it

probably will be an non issue as anyone easily could do that and create whatever community effort to unhash if they cared enough to any extend

[styromaniac]

That would be an effort that can't be pinned upon the blocklist owner in that case, like if I say there's a sunken ship full of gold out there somewhere in one of the oceans, they will still be making an effort that is entirely their own to locate it.

[DaniellMesquita]

Isn't good to block content as blind, there could be innocent content that can be added to those lists

[styromaniac]

I explain above that verification is possible if titles are provided.

[DaniellMesquita]

Titles can be faked?

[styromaniac]

Faked titles can't be verified.

[Thunder33345]

in it's defense, yes it can be blocked but it's more of a "warning" UI rather then straight out silently blocking it like userblocks

[HelloZeroNet]

Added in Rev3734: https://github.com/HelloZeroNet/ZeroNet/commit/3923f2baf494e174ce77b6c2a0e04116635ecb7c

The hash can be calculated using address_sha256 = "0x" + hashlib.sha256(address).hexdigest()