 Yeah, if you plan to live in the middle, please leave now to let people have the full talk. Hello? It is on? Yes. No, it's muted. No, it's not. But it doesn't. Haha. Wait. Hello? Can you speak up? Hello? Hello? Yes. Hello, hello? The microphone doesn't like me. Are you comfortable with the mic? Uh, yes. Oh, we can hear you. Okay, okay, great. You're ready? Okay, so now we're going to have our next speakers. So, this is Paula de la Rose. She's talking about the new internet. And IPFS. So, hello. Thanks to be here. Very excited to be here and to present this topic. I really like. I'm also turning 33 years old today. So, happy birthday to me. So, she already told a security analyst in my daily life. They're back in Madrid. But that's not my only job, because I also try to investigate about internet censorship, privacy, and digital rights. In fact, we have association there in Spain with more than 700 members called interferencias, like phones. It's all about creating events, speeches, and all of that about these topics. So, if you have questions about this association, or you are interested in creating a version outside Spain, just tell me, please. We are very glad to have new members. This is our RAD logo. So, yes. So, now, we are going to speak mostly in this speech about IPFS, which is interplanetary file system, which is created by protocol labs. I want to explain our context, our digital context, and why we need to start thinking about a new internet, a new way of thinking the internet. Also, I would like to tell you some challenge about security, because in the end, that's my main job. Some conclusions. I would love to hear your questions or suggestions, ideas around these topics. So, what is IPFS? IPFS is a distributed peer-to-peer hypermedia protocol. As I said, it's developed by protocol labs. And it's thought to be permanent, a resilience, and a way of storing information on the internet without losing efficiency on its way. So, basically, how does it work? So, have you guys heard about Fahrenheit 451? Maybe? It's an amazing book. It's a science fiction story written by Ray Bradbury. So, I really don't want to spoil you guys, because it's actually one of my favorite books. But I think that it goes in handy to understand what IPFS wants to achieve. So, in the book, pictures of society in which books are being burned down by firefighters, and sometimes almost alongside their own owners. So, society is controlled through media. So, in the book, there's a group of rebels that tries to read and learn by hair some books in order not to lose that culture heritage. So, if I haven't mistaken, I think this is what IPFS is trying to do. They are trying to save some data which is going to be lost on the internet if we keep using our classic methods and protocols on the internet. So, it works with nodes, which conforms an horizontal network. When the file is uploaded to the network, it is divided into blocks, which have metadata with information which is used to join again all the parts, all the blocks again, so you can hit the fail. It uses Hasan's encryption in SHA-1 and other encryption methods. You can see the docs. Users are also able to upload blocks atomically, so you don't need to divide them. Pin data, see information of a file, blocks using common line. Apart from common line, there's a local interface using a web interface and an easy to launch node widget for Firefox. So, now I'd like to explore our context. So, we are in the information age. Actually, internet for me, right? Did you know, guys, that actually the first message on the internet was sent was low, almost like LO, almost 50 years ago. It was supposed to be low gain, but the connection broke. So, yeah. So, when hours later, the message was sent right. So, now there are hundreds of millions of internet users, not only reading but creating content in form of text, pictures, videos, code. So, nowadays, we trust in text. We trust in smartphones, devices, computers for almost everything, like from our health to our education or our jobs. So, since the internet started, through so many content, we have lost on the sea of the information. So, for that reason, for example, it says the Internet Archive, but it's known that our way of thinking communication is, you know, it's all about velocity. We want our message on our content to be fast on the internet, and this has a lot of advantages because we can't talk to our families or friends even we are so far away. But it also changed the way we think, and this could be, you know, dangerous. It's compromising from the point of view of security because maybe if you are communicating fast, you don't have enough time to think if this data or this information you are sharing on the internet is actually safe to be shared. I know that you guys are interested in this because you are in the Privacy Red Dev Room, so you are probably very interested in how information is privacy on the internet. But if you are like me, you probably have encountered a lot of people that say, hey, but what do I care about this? Because, you know, I'm not doing anything wrong. I've heard that sentence a lot. I'm not like doing anything wrong, dreaming else, do you? So I don't care if my information is out there. So I think this has a lot to do with velocity on the communications. So, okay. This led us to censorship. The saying that we don't care sometimes about massive civilians or that kind of problems are actually pretty huge and common on our current internet situation. Censorship is also a huge problem right now in so many, many countries. Most of the censorship techniques include, like, blacklisting or dyneas blocking, that kind of stuff. But so even though there are so many countries that are suffering these kind of problems, on the same time, most of us don't really care. I know that most of us, like, right here, right now, do care, but when I say yes, I mean, like, community and users, you know, so the internet, because internet and open source, it's all about empathy. So when we think about ourselves, we are thinking about ourselves in general. That's why I'm in security and probably that's why many of you are here because we really want to share stuff in the community. So we really want to take care of the privacy of the ones who really are not caring about it right now because probably they don't know the situation. So one of the things that I like the most about IBFIAs going back to the main point is that they are aiming to have user-friendly stuff so they can offer this kind of service for efficiently saving data on the internet for all the users. So now we have explored our current context. I really want to aim to what, all about this new internet. Let's explore the possibilities of distributed internet and how it can change our daily life. So I'll just wait a moment. So talking about the IBFIAs, what IBFIAs can offer to solve these kind of problems. So IBFIAs is distributed, which is already good because we saw this horizontal, it's an horizontal network. So if we don't have a centralized system, it's easier to be secure because if one node or two nodes are compromised, it doesn't mean that the rest of us are. It's resilient. So in case of internet censorship problems or in a developing country problems, the internet probably breaks. That doesn't matter because data could be saved anyway and distributed between other nodes. So it's open. We are in infos them, so it doesn't... I don't need to explain why that's good. But it's not all about good stuff because, well, the system of IBFIAs that I will technically describe more later have difficult names because their identifications are created with hashes. So it's very difficult to remember. That's not pretty good for normal users or even us. Maybe we should try to note down the links and that doesn't work very good. So also, as the content created named different hashes for different files, when you change a file or a watch page that you already created and your users know, the name also change. There's a couple of solutions given by the official page for this, but they are not pretty good yet, so that's probably changing the address of an already known service. Also, in general, distributed sipsons are not a very intuitive idea for normal users. So when we are trying to reach the current users to use a new internet, we have to first teach them about decentralized system and decentralized philosophy because if not, probably they are going to mess up. I know that because when I'm working in security, there's a lot of clients that got stuck in services that were so old and they haven't learned the new techniques and many, many of the vulnerabilities are because of that. So it could be a big problem in the future if we don't try to educate right in distributed systems. So how this technically works, IPFS. Actually set up on the computers is very easy because you only have to download and feed and start. I'm speaking about Linux here. This is how the files work. As I said before, we have a file. It works with different blocks. Each block has metadata and we can also upload blocks instead of files. So this is an example of uploading a file. In this case, a ducky. So we upload it and pin it and then we can hit it back with the name of the hash created out of the file. There are some applications already created with this technology. For example, Killcore, which is a Deadman's Pedal online and Brick, which is similar to Git but using decentralized systems. So we are facing basically, as we said, two main problems here, like security challenge, socials and technical. Social, because we should really have to stop normalizing censorship. We really have to teach and educate about learning decentralized systems. We really have to understand security and technology is not magic. And technical, because already, right now, for example, IPFS is not very good for storing secrets or passwords or something like that. But we can help it using GPG. We can infect the network, like using files which are corrupt or compromising nodes if these servers or the containers for the nodes are not secure. So, for example, encrypting and sending, this will be a kind of... for solving the problem of secrets. But you are storing permanently something encrypt on the network. You can infect the network. This is less likely to happen because it requires some social engineering. Well, it's so good that you could build some IPFS nodes on servers or containers. But servers or containers, as you probably already know, could be compromised. So if the nodes are compromised, if the servers and containers are compromised, the network is. So there are many attacks, but vulnerabilities that can be done on containers or servers. If the network is horizontal, that's the problem. So does this mean we should give up on this? Absolutely not. Because this means there's an exciting path to explore right now in front of us. It could be difficult from the point of view social and technologically. But as an open source developer, analyst, this is our responsibility to face these new responsibilities and to help users who use and understand these technologies even more. Thank you. Any questions? How do big corporations see the idea of the decentralized internet knowing that they basically own the internet as we know it today? They own the servers, they own the DNS server, they own everything. Can I hear you Google, please? Like, higher? Okay, so how do big corporations see the idea of the decentralized internet? I really can't hear what he's saying. Corporations? Corporations? Oh, how do corporations see this? Okay, so I really don't know. I hope they are pissed up because... I'm sorry. If there are some, I just don't like this. But probably they will adjust if these distribute systems really is a thing in the future because that's what they do in the end, always. But I don't know. I don't know. Can you go a few slides back? Because you showed an example of usage of IPFS. I think it was Killcourt and another one. Can you go back to that slide? Because I was wondering, it was quite fast. Yes. So what does this break? Oh, break is kind of like Git. Okay. But using the distribute system. Also Killcourt could be used with Ethereum. So, yes. Okay, thanks. So does it also take into account... Does it provide an option to make annotations for text if you want to annotate text? And like, does it... Is there a way to... Right now you get outdated links on the Internet if a server goes down. Does it take into account that a link will always keep on working? So if I understood... So the first question was if you... Oh, can you annotate text? Yes. Okay, so you can keep updated using something called Dynies link which is explained in the official documentation. So it's like... So the hash change, the hash of the main file change or the web page change, but you can kind of use a previous tag on the link. So when you visit the previous tag, you can keep updated with the rest of the hash. I don't know if I'm explaining right here because the documentation explains with all the examples, but there is a way of keeping updated, but it's not perfect right now. All right, thank you. Hi Paola, thank you for introducing IPFS to us. What would be the thing, the one thing that you would like to see on IPFS that is not there today? Well, as already mentioned, I think... Well, you said about IPFS, right? Yeah, IPFS, like what would be the feature or example or application that you would like to see built with that technology that doesn't exist today? I think I would love to have a really stable social network with IPFS because, you know, we have MasterDom and such in exchange of Twitter and stuff, but like having this philosophy of not losing data, we will need us to change our way we think about social networks because we will be more careful about what we post on the internet. So I would love to see that. Awesome, thank you. Yeah, two things. I asked myself what happens if the last peer goes down where's my files? Maybe you could just quickly mention the pinning and the pinning services because that might be useful. And another thing about MasterDom which is based on ActivityPub, my personal opinion is I did a demo last week on Indie Web Week, ActivityPub plus IPFS. I think that plays really well together and IPFS could just become an alternate storage system for ActivityPub. What I missed was the pinning, you know, pinning and pinning services. Oh, so... Did you got it? Yes, but they are telling me that I'm sub, so if you guys are ready, so if you have a question, please ask me right now because they are telling me to, like, stop right now. Sorry. Thank you for attending and don't forget to leave constructive feedback on the website for each speaker you see in FastDom. Thanks. Yeah, yeah, yeah. I'm always an intro. That's great. You can go. Sorry, one of my favorite hours, I think of all my best. Yeah. We need a speaker. Ha ha ha! Do you know the 40th edition? Yes, I do. The 40th edition? Yes, I do. Wow! It was a great inspiration for me. Thank you! Thank you very much!