Explain a bit about the payment issue you forsee. I am self funding this and have the means to privately fund it for years to come without needing external income. Outside of that, BTC can be used for lightweight payment processor bypass, but it shouldn't be necessary anyway.
The real issue, like you mentioned, is the bandwidth/colo issue. Let me assure you, that I did not go and rent some colo space online and pop a desktop on a shelf on it's side. I have enterprise hardware buried away somewhere, and while you have shown how fragile the charade can be, I'm confident that with a combination of tunnels, I can truely hide the hardware by the time it becomes necessary.
Outside of that, I hope to be able to build a community that is strong enough to move past the concept of needing a centralized website if all else fails. I'm prepared to move off-internet if need be.
It's not necessarily an issue with your system. You seem to be more about articles and forum posts.
I've been toying with how to build an open source, decentralized replacement for social media and publishing platforms like YouTube, Patreon, etc.
The problem with crypto is normies are never going to deal with wallet keys and exchanges, especially with the way the SEC is trying to make sure they get their slice, and don't get me started on Libra.
From the little bit of the research I've done, to even build our own payment processor (not even the engineering side, I'd build it piece by piece if I had to) we'd need an undersigning bank.
Back to your project, if you would like me to run an a full audit (instead of the ten minutes I played around) and help you fix it, let me know. I've hardened WordPress blogs before, especially if you haven't moved to BitMitigate yet.
If you want to know the truth, I just don't believe that "Social Media" can be saved long-term.
Using reddit as an example, a new user can fire up their own completely hidden subreddit, invite a bunch of users to it, and start serving up CP, all before anyone can notice it's even happening. These types of services are just prone to festering, plain and simple. Forums and traditional websites are WYSIWYG, no easy way to hide that CP (I specifically use lossy compression of all images after upload to try and stamp out data hidden in image files). I am certainly open to more discussion though. (Come register and lets chat?)
As for the PP side, you would need to stand up your own bank to truely do what you want, which isn't actually hard to do, I know a few folks in the biz and it's honestly just a capitol issue. You'll need around $15mm to start, but after that you just rent a FISERV box and your off to the races. Sadly, this isn't something that is easy enough to fix for me to focus on at the moment.
Send me a PM with your thoughts on an audit. I have very functional knowledge of pen testing concepts, but don't have the knowledge to execute in a meaningful way.
What about starting a credit union? These are technically banks no? They issue their own bank cards, can do loans, borrow overnight money from the fed, have their own swift routing number etc.
If small immigrant communities less than 100k population, can open their ethnically themed credit union, why can't the pedes do the same?
He's got a bit of a point, though. They don't need to take your server down if they can pressure your ISP - or your ISP's ISP - to pull the plug, or if they can close down however it's funded.
I've banned access to xmlrpc.php from the outside altogether. Can you verify?
You don't have to be a dick to make me hear you.
Verified.
Sorry, I see talk about this kind of thing all the time, but it's usually just smoke blown.
I'm more interested in figuring out how to properly address the payment issue, but if you want any engineering help, hit me up.
Explain a bit about the payment issue you forsee. I am self funding this and have the means to privately fund it for years to come without needing external income. Outside of that, BTC can be used for lightweight payment processor bypass, but it shouldn't be necessary anyway.
The real issue, like you mentioned, is the bandwidth/colo issue. Let me assure you, that I did not go and rent some colo space online and pop a desktop on a shelf on it's side. I have enterprise hardware buried away somewhere, and while you have shown how fragile the charade can be, I'm confident that with a combination of tunnels, I can truely hide the hardware by the time it becomes necessary.
Outside of that, I hope to be able to build a community that is strong enough to move past the concept of needing a centralized website if all else fails. I'm prepared to move off-internet if need be.
It's not necessarily an issue with your system. You seem to be more about articles and forum posts.
I've been toying with how to build an open source, decentralized replacement for social media and publishing platforms like YouTube, Patreon, etc.
The problem with crypto is normies are never going to deal with wallet keys and exchanges, especially with the way the SEC is trying to make sure they get their slice, and don't get me started on Libra.
From the little bit of the research I've done, to even build our own payment processor (not even the engineering side, I'd build it piece by piece if I had to) we'd need an undersigning bank.
Back to your project, if you would like me to run an a full audit (instead of the ten minutes I played around) and help you fix it, let me know. I've hardened WordPress blogs before, especially if you haven't moved to BitMitigate yet.
If you want to know the truth, I just don't believe that "Social Media" can be saved long-term.
Using reddit as an example, a new user can fire up their own completely hidden subreddit, invite a bunch of users to it, and start serving up CP, all before anyone can notice it's even happening. These types of services are just prone to festering, plain and simple. Forums and traditional websites are WYSIWYG, no easy way to hide that CP (I specifically use lossy compression of all images after upload to try and stamp out data hidden in image files). I am certainly open to more discussion though. (Come register and lets chat?)
As for the PP side, you would need to stand up your own bank to truely do what you want, which isn't actually hard to do, I know a few folks in the biz and it's honestly just a capitol issue. You'll need around $15mm to start, but after that you just rent a FISERV box and your off to the races. Sadly, this isn't something that is easy enough to fix for me to focus on at the moment.
Send me a PM with your thoughts on an audit. I have very functional knowledge of pen testing concepts, but don't have the knowledge to execute in a meaningful way.
Thanks for all the words.
What about starting a credit union? These are technically banks no? They issue their own bank cards, can do loans, borrow overnight money from the fed, have their own swift routing number etc.
If small immigrant communities less than 100k population, can open their ethnically themed credit union, why can't the pedes do the same?
He's got a bit of a point, though. They don't need to take your server down if they can pressure your ISP - or your ISP's ISP - to pull the plug, or if they can close down however it's funded.
Check my replies above and feel free to add your take.