6 ms·

What about Vuvuzela? Haven't thoroughly examined it, but it focuses on metadata-privary and -relative- scalability. web: https://vuvuzela.io/ https://vuvuzela.

What about Vuvuzela? Haven't thoroughly examined it, but it focuses on metadata-privary and -relative- scalability. web: https://vuvuzela.io/ https://vuvuzela.io/ repo: https://github.com/davidlazar/vuvuzela https://github.com/davidlazar/vuvuzela paper: https://davidlazar.org/papers/vuvuzela.pdf https://davidlazar.org/papers/vuvuzela.pdf slides: https://davidlazar.org/slides/vuvuzela-sosp2015.pdf https://davidlazar.org/slides/vuvuzela-sosp2015.pdf

Ar-Curunir 10y ago
There's also an updated, more distributed and thus (maybe) more scalable project by some of the same authors: https://eprint.iacr.org/2016/943 https://eprint.iacr.org/2016/943
feklar 10y ago
Paper conclusion says the cost of running Vuvuzela is pretty high per month, so you would need a benevolent millionaire to make it happen. As for signal what every prosecutor wants is metadata to show the court that user A was in communication with user B. The actual contents of the messages aren't important especially in a conspiracy case and user B is an informant, their word against yours plus metadata showing you communicating is good enough. Besides forcing Signal to keep this metadata in the future, I wonder if they can just obtain it themselves by watching all traffic on their federated servers and timing it to discover communication networks.
- nnn 10y ago
  The cost of running Vuvuzela is dominated by bandwidth, and the paper used AWS prices to estimate the cost; purchasing IP transit directly would lead to about an order of magnitude reduction in costs (still non-trivial, of course).
  - ryanlol 10y ago
    Order of magnitude? 1Gbit on amazon costs 22k/month. Even an order of magnitude cheaper sounds pretty damn expensive, two orders of magnitude still isn't "cheap". It's really easy to underestimate how big of a ripoff EC2 bandwidth pricing is.
    - eatbitseveryday 10y ago
      > 1Gbit on amazon costs 22k/month Is this 1 gigabit of accumulated traffic, or sustained bandwidth guaranteed for an entire month? 1 TiB of accumulated bandwidth at DigitalOcean costs me $5/month. I am unaware of what sustained rates are given that tier of pricing, however.
      - ryanlol 10y ago
        1Gbit/s for a month, 328.5 terabytes. On the expensive end you'd be looking at around $600 for such at $NOT_AMAZON, and on the cheap end you'd get it for "free" because a plenty of hosts have excess bandwidth. DO doesn't separately charge for BW or enforce any limitations AFAIK.
    - gnopgnip 10y ago
      A 10gbit unmetered server can be leased for under $3k a month. 1Gbit can be under $300 a month depending on the hardware.
    - nickpsecurity 10y ago
      1Gbit in Chattanooga, TN cost $350 a month. You gotta buy some servers and maybe a colocation fee. Way less than $22,000 a month. Actually, while I was looking that up, a recent press release says they're deploying 10Gbit to homes for $299 a month. Things may have improved on business side, too. :)
    - deleted 10y ago
      [deleted]
AndrewKemendo 10y ago
Obfuscation is one approach, but it typically gets cracked pretty quickly or gets bogged down in trying to improve SNR.

Ar-Curunir 10y ago

There's also an updated, more distributed and thus (maybe) more scalable project by some of the same authors: https://eprint.iacr.org/2016/943 https://eprint.iacr.org/2016/943

feklar 10y ago

Paper conclusion says the cost of running Vuvuzela is pretty high per month, so you would need a benevolent millionaire to make it happen. As for signal what every prosecutor wants is metadata to show the court that user A was in communication with user B. The actual contents of the messages aren't important especially in a conspiracy case and user B is an informant, their word against yours plus metadata showing you communicating is good enough. Besides forcing Signal to keep this metadata in the future, I wonder if they can just obtain it themselves by watching all traffic on their federated servers and timing it to discover communication networks.

nnn 10y ago
The cost of running Vuvuzela is dominated by bandwidth, and the paper used AWS prices to estimate the cost; purchasing IP transit directly would lead to about an order of magnitude reduction in costs (still non-trivial, of course).
- ryanlol 10y ago
  Order of magnitude? 1Gbit on amazon costs 22k/month. Even an order of magnitude cheaper sounds pretty damn expensive, two orders of magnitude still isn't "cheap". It's really easy to underestimate how big of a ripoff EC2 bandwidth pricing is.
  - eatbitseveryday 10y ago
    > 1Gbit on amazon costs 22k/month Is this 1 gigabit of accumulated traffic, or sustained bandwidth guaranteed for an entire month? 1 TiB of accumulated bandwidth at DigitalOcean costs me $5/month. I am unaware of what sustained rates are given that tier of pricing, however.
    - ryanlol 10y ago
      1Gbit/s for a month, 328.5 terabytes. On the expensive end you'd be looking at around $600 for such at $NOT_AMAZON, and on the cheap end you'd get it for "free" because a plenty of hosts have excess bandwidth. DO doesn't separately charge for BW or enforce any limitations AFAIK.
  - gnopgnip 10y ago
    A 10gbit unmetered server can be leased for under $3k a month. 1Gbit can be under $300 a month depending on the hardware.
  - nickpsecurity 10y ago
    1Gbit in Chattanooga, TN cost $350 a month. You gotta buy some servers and maybe a colocation fee. Way less than $22,000 a month. Actually, while I was looking that up, a recent press release says they're deploying 10Gbit to homes for $299 a month. Things may have improved on business side, too. :)
  - deleted 10y ago
    [deleted]

AndrewKemendo 10y ago

Obfuscation is one approach, but it typically gets cracked pretty quickly or gets bogged down in trying to improve SNR.