Monero for DDoS protection
Monero for DDoS protection
Trocador used to be a pleasure to use. No Javascript, it worked over tor, and it had an onion service. Then they got DDoSed. Turns out this is what causes the enshittification of the internet, that sites without javascript are trivial to DDoS. Now, the statement about no JS is gone, the onion service is gone, and if you try to connect over tor, if you can connect at all, you get DDoS Guard demanding you enable javascript so it can try to fingerprint your browser and force you to perform captchas. What if there was a better way?
You use a proof-of-work cryptocurrency that is not only microtransaction capable, but also "micro-mineable", i.e. the difficulty is low enough that you can solo mine multiple blocks per day even on modest hardware. For proof of concept you could use stagenet monero, but in the long term you would use a dedicated fourth Monero blockchain where transactions older than a certain age are pruned, because the idea is that PoWnet coins are something you mine and use rather than using them as a long-term store of value.
You go to website.app/NoBS/, and the site communicates in headers the current cost in PoW tokens of an access token good for X minutes of access and an appropriate amount of server resources for a non-bot user during that time. You have a web browser plugin that reads it, and if you've whitelisted the combination of site + cost it can autopay from a PoWnet wallet so you just go straight through.
No more javascript or reliance on third parties that might be compromised.
To keep people from rolling forward their PoWnet balance forever by making a transaction just before the outputs expire, PoWnet ouputs could have a telomere which is reduced by one every time they're transacted, so they also expire after a set number of sends. It would be a small value, not more than 5 at start, and merging outputs would use the least of the input t-values.
Or you could just pay for website access in minute amounts of mainnet Monero. But I expect people don't want to pay in real money, and I want there to be a way for people who don't have any mainnet Monero to still use the system.
You're viewing a single thread.
I never understood why monero hard forked to using a hashing algorithm that was intentionally difficult to implement in WASM.
Like, we could be implementing anti-DDOS fronts as an alternative to CloudFlare that use PoW to mine monero and also raise funds for the site at the same time.
News sites could use this as an alternative to an authwall ffs (just wait 10 seconds before you read the article).
Its one of my least favorite things about Monero, and something more people should be talking about
Having most people's first and only exposure to your ecosystem be malware level browser miners that really diminish their browsing experience is really really bad pr.
Its not malware. Its a great alternative to ads and authwalls.
Even Steve Gibson was super behind replacing ads with miners. Ads are cancer. Imagine all if that going away.
If people are aware they're running a miner to support the site that's great.
Most web miners are clandestine, and not observable, so most people's interaction with them is a slow computer, or a virus alert, or even crashing the browser. Do I guess the most common one is hey my laptop battery only lasted 20% of its usual length I was just watching movies on this website....
Fundamentally, a miner to pay for access, is the same as getting a micro payment to view. I realize getting micro payments to work has been in long-standing problem.
What I'm saying is implementing it in the front, so instead of spending 2 minutes solving captchas, you spend 10 seconds solving a PoW, then load the site without any background mining.
We shouldn't ban knifes just because some people use them to stab people.
WASM is the millennials getting their turn to learn that "those who do not learn from history are doomed to repeat it".
Letting the bloated web offload more of its bloat to clients will simply result in an even worse web obesity crisis than already exists. The computational burden needs to stay with the side (the content producer) that has the ability to reduce the level of bloat. Anything else is a broken incentive structure.
What I'm saying is implementing it in the front, so instead of spending 2 minutes solving captchas, you spend 10 seconds solving a PoW, then load the site without any background mining.
We shouldn't ban knifes just because some people use them to stab people.