• Whirling_Cloudburst@lemmy.world
    link
    fedilink
    English
    arrow-up
    32
    arrow-down
    2
    ·
    edit-2
    4 days ago

    There needs to be a widespread p2p solution for opensource projects before its too late. I have lost count of all the amazing stuff that has been gravity bombed from orbit.

    There also needs to be a way for authors to submit things anonymously too and maybe sign their things with cryptographic keys to ID it. How many times has a company had a court order someone to cease and desist or simply acquire somebody’s work?

    • solrize@lemmy.world
      link
      fedilink
      English
      arrow-up
      38
      arrow-down
      3
      ·
      4 days ago

      p2p solution for opensource projects

      That’s called Git and it’s been around longer than GitHub. There is also Usenet which by now is mostly dead. People fell for centralized alternatives. Oops :)

      • Womble@lemmy.world
        link
        fedilink
        English
        arrow-up
        12
        ·
        4 days ago

        Git is, but it has no process of discovery or hosting by itself. Those are needed to efficiently share open source software to large numbers of people.

      • OsrsNeedsF2P@lemmy.ml
        link
        fedilink
        English
        arrow-up
        13
        arrow-down
        2
        ·
        edit-2
        4 days ago

        Right? Git is literally decentralized. If you choose to use GitHub as a centralized Git service, that’s on you.

        (I will caveat this by saying we moved 2009scape off GitHub and the number of new contributors probably got cut in half. Mainstream services have a lot more eyes)

        • Appoxo@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          4 days ago

          How come Git is decentralized?
          Doesnt it need a central component so I can pull your changes?

          Edit: Thanks to all that explained it to me :)

    • rottingleaf@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      4 days ago

      All you need for this is a global overlay network and a global DNS untied from physical infrastructure. Cryptographic identities (hash of pubkey will do) instead of IP addresses (because NATs are PITA and too many people use mobile devices behind big bad NATs), and finding (in something like Kademlia) records signed by authority you yourself chose to trust instead of asking DNS.

      Then come encryption and dynamic routing and synchronization of published states.

      One can have some kind of Kademlia for discovery of projects too, but on the next level.

      I2P comes close, but it’s more focused on anonymity.

      OK, I’m not sure what I wrote makes sense. These things are easy to grasp somehow, but hard to understand well.

    • doodledup@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      18
      ·
      4 days ago

      Open-source projects are quiet safe on Github. Maybe don’t push illegal code? Seems pretty obvious to me.