Kitmee: My Big Project

By Daniel Miessler on July 19th, 2007: Tagged as Hacking | Identity | Programming | RSS | Semantic | Semantic Web | XML
  • http://13warrior.blogspot.com/ Sharad

    Hi, I would like to contribute in the development effort but I am new to RoR.

  • http://13warrior.blogspot.com Sharad

    Hi, I would like to contribute in the development effort but I am new to RoR.

  • http://blog.gotbrain.de/ georgeblunt

    Sounds like an interesting idea. I am a little concerned about privacy though. The idea of a central server hosting all the sensitive data of all users using this system is questionable, considering the open approach. I can’t think of a decentralized solution right away but i would be interested what you have to say about this. Just think about the value of the database if this thing works. Names, adresses and interests. I really think, a central server hosting all those info could be quite a concern. I gonna keep a look at the development, because i think, it’s a pretty interesting project. I also would be able to contribute a client, because i am a java developer (especially eclipse rcp). Keep me updated. ^^

  • http://blog.gotbrain.de georgeblunt

    Sounds like an interesting idea. I am a little concerned about privacy though. The idea of a central server hosting all the sensitive data of all users using this system is questionable, considering the open approach. I can’t think of a decentralized solution right away but i would be interested what you have to say about this. Just think about the value of the database if this thing works. Names, adresses and interests. I really think, a central server hosting all those info could be quite a concern. I gonna keep a look at the development, because i think, it’s a pretty interesting project. I also would be able to contribute a client, because i am a java developer (especially eclipse rcp). Keep me updated. ^^

  • http://www.makeshiftmind.com/ ncloud

    Instead of having a central repository of information, what if it worked like a P2P (torrent) application? Your information resides on your PC, and is always “uploading” to those who want it. For security, you could implement public/private keys — your friends send you their public keys and that’s how they are authenticated. The server that hosts the tracker could also be responsible for authentication. That way if someone requests your information, your bandwidth doesn’t get touched unless the server hosting the tracker allows the other client to connect.

  • http://www.makeshiftmind.com ncloud

    Instead of having a central repository of information, what if it worked like a P2P (torrent) application? Your information resides on your PC, and is always “uploading” to those who want it. For security, you could implement public/private keys — your friends send you their public keys and that’s how they are authenticated. The server that hosts the tracker could also be responsible for authentication. That way if someone requests your information, your bandwidth doesn’t get touched unless the server hosting the tracker allows the other client to connect.

  • http://dmiessler.com/ Daniel Miessler

    Thanks for the comments.

    The decentralized approach takes away from the openness of the system. The idea is to be able to hit this service from any system with a browser. I want to keep the entire system as simple as possible, and having to worry about a protocol for distributing and managing the content would run counter to that. But it’s definitely an attractive thought.

    I agree that privacy is an issue. The idea is to strictly control who can read your URI set based on HTTP auth, and to use SSL to encrypt the contents if desired.

  • http://dmiessler.com Daniel Miessler

    Thanks for the comments.

    The decentralized approach takes away from the openness of the system. The idea is to be able to hit this service from any system with a browser. I want to keep the entire system as simple as possible, and having to worry about a protocol for distributing and managing the content would run counter to that. But it’s definitely an attractive thought.

    I agree that privacy is an issue. The idea is to strictly control who can read your URI set based on HTTP auth, and to use SSL to encrypt the contents if desired.


Top

Popular

Information Security / Technology

Politics

Philosophy & Religion

Technology & Science

Culture & Society

Miscellaneous

Arguments

Projects

Collections

Twitter

What I'm Reading

Favorite Books and Essays

Top Blog Categories

Inputs