[DyslexicAtheist]

Streembit[0] is missing in the discussion. It's not a new company and just a FOSS project. I believe it has same if not better potential than Ethereum[1] but without the risks associated with Ethereum or Bitcoin (e.g. Sybil attacks, blockchain block size debate, time it takes for proof of work, fully decentralized* etc). Plus it is up and running and can be tested by anyone who wants to give it for a spin[2]. Compared to Ethereum it has optional blockchain hooks, but uses a Kademlia[3] DHT. One can inject scripts that achieve more complex tasks (Smart-Contracts, Code to use the blockchain instead, centralization[4] logic, etc) on top of the Streembit network by injecting the Javascript into the DOM.

Streembit is currently the only such project actively participating to W3 Web of Things standardization group and already incorporates all currently evolving standards put forward by the W3 Web of Things (WoT). We're working on a proposal to standardize "IoT over P2P" that we can put forward to IETF.

[0] https://streembit.github.io

[2] http://blog.valbonne-consulting.com/2016/06/09/streembit-hel...

[3] https://en.wikipedia.org/wiki/Kademlia

[4] despite popular believe P2P networks suffer from centralization issues in P2P bootstrapping. Also Ethereum is not truly decentralized as the DAO attack shows

Disclaimer: I do not financially benefit from evangelising Streembit though I'm a voluntary contributor to the project so my position is certainly one that I would want to see them succeeed.

[the8472]

> despite popular believe P2P networks suffer from centralization issues in P2P bootstrapping.

That's a fairly modest problem. You need a bunch of nodes with above-average capacity to handle the bootstrap traffic and a way to occasionally update lists of such nodes. But a bunch of 10$ per quarter virtual boxes at a hoster of your choice and a bunch of domains with DNS SRV records can do that job.

In the absence of any/multicast-for-everyone someone will have to pay a little money or (ab)use a handful of non-decentralized services for the bootstrapping but that's more of a philosophical problem than a practical one.

There certainly is no single point of failure, you can have plenty of redundancy in the bootstrap process.

[tzpardi]

The number of existing bootstrapping nodes do not solve the fundamental problem of current centralized bootstrapping. Not even if a virtual box costs $1 instead of $10. The issue is how a connecting node knows about other nodes in the network, and the current propagation of this information i.e. the DNS or IP of the seed nodes introduces centralization.

The closest and best solution for this problem was the early days idea of Bitcoin to use IRC to publish the listening seed information, but IRC still not decentralized, so IMHO decentralized bootstrapping is a real problem which we need to solve.

I kicked out a discussion for this at https://groups.google.com/forum/#!topic/streembit-dev/Xl2DpG...

[the8472]

It is decentralized in the sense that it is not centralized, i.e. there is no central entity in control managing entry into the network.

The key point is that any node in a p2p network can be used to join the network, so any number of independent entities can publish lists of ways to join the network.

Certainly, i would also love some multicast/anycast support on the IP level, but we don't have that, so making sure that you have many independent entry points into the network is the next best thing.

Maybe you're thinking distributed, not decentralized? https://i.imgur.com/YsiiKeq.png

[zzzcpan]

I don't think bootstrapping per se is a problem. You only have to do it on first install and this allows for a simple solution to distribute bootstrapping in time, i.e. changing hardcoded bootstrapping data every N minutes, so new users could bootstrap from different nodes, than the users before them and so on.

A bigger problem is how software is developed. The development itself is centralized, but even worse, traditional software development approaches cannot predict all future problems, but rely on fixing them to keep the software working, which means it must be delivered to users in a centralized way too.

[tzpardi]

I am sorry, but centralized network bootstrapping is a very well known issue and unsolved problem of decentralized networks.

http://ryandoyle.net/assets/papers/Distributed_Bootstrapping...

http://grothoff.org/christian/dasp2p.pdf

http://www.net.in.tum.de/fileadmin/TUM/NET/NET-2014-08-1/NET...

You say: "i.e. changing hardcoded bootstrapping data every N minutes, so new users could bootstrap from different nodes"

The fundamental issue is, changing the data where? The node who wants to connect to the peer network, obviously cannot obtain the information from the peer network itself (as node is not connected), so obtain the information from where? Currently, all decentralized applications, including my system Streembit use the techniques of obtaining the information from a centralized source - which is the oxymoron of decentralization. If a web services or other centralized applications provide the new node with the list of existing listening/connected nodes then the solution is surely not decentralized. Government agencies or cyber-criminals only need to attack the hard coded, listening seed nodes and then the network is done and never can be back again until a new list of hardcoded seed nodes is published via the application source code or via other channels.

As I said above, Satoshi's original idea to obtain the seed info from IRC was the closest to decentralization, but since IRC is centralized itself I am sure you can see how far that is from the a decentralized bootstrapping.

We have the solutions on local decentralized networks such as mDNS and UDP multicasting which uses protocol level solutions, and we are investigating to solve the problem at Streembit with IPv6 anycasting.

<<< A bigger problem is how software is developed. The development itself is centralized, but even worse >>>

I disagree. Open source software can be forked and then you can adopt as much democratic development methods and governance as you want.

[zzzcpan]

> The fundamental issue is, changing the data where? The node who wants to connect to the peer network, obviously cannot obtain the information from the peer network itself (as node is not connected), so obtain the information from where?

Ok, you are assuming that the node already has the binary somehow. But that's not the case. In the real world we have to ship binaries to users. And this is where you can put your different bootstrapping data for different users.

You can go a lot farther: let users generate a binary distribution of the software to share with each other and hardcode bootstrapping data there obtained from a running network by that user.

> Open source software can be forked

The majority of users are not going to do that, they just don't have the skills. At best there will be a few popular distributions of the same "decentralized" software, with majority of installations controlled by a few entities. At worst - just one centralized entity that controls every installation.

[tzpardi]

<<< Ok, you are assuming that the node already has the binary somehow. >>>

Well, I am not assuming anything. I am talking about a fundamental problem of decentralized networks: the current bootstrapping of networks is centralized. Please refer to the quoted papers and there are many other research papers as well which describe this existing problem.

<<< But that's not the case. In the real world we have to ship binaries to users. And this is where you can put your different bootstrapping data for different users. >>>

You are misunderstanding the problem. The point is

a) we should never ever hard code the seed information into the application and consequently ship it with the binary. If we do rely on the current approach then you always connect to the seeds of ETH foundation, Bitcoin foundation and to my company's seeds in the case of Streembit which is the oxymoron of decentralization.

b) we should have a protocol level solution for entity discovery instead of application level solution such embedding the seed info in the source and then compile it into the app. When I say protocol level solution I refer to mDNS and UDP multicasting which works on local networks just fine and I am proposing IPv6 anycast for entity discovery on global networks.

The simple truth is that Bitcoin, Ethereum and all cryptocurrencies conveniently ignore this issue. The companies, lead developers, foundations or whoever run the show maintain the seed nodes, but such solution is surely not a decentralized solution.

[weq]

Is a fallback to IP scanning a valid option to centralised bootstrapping? Lets say you have connected to 20peers during a session, u could use that list as a start for your scanning activities, because if there is one IP, there might be possibly more Ips close by that also provide the service?

[tzpardi]

What you suggest with regards to the 20 previous IP is called seed caching, and yes, that is what many, probably most P2P network do. While it works most of the time on large networks, but it is obviously not the solution, because it cannot be guaranteed that any of the previously active 20,50, 100 nodes is still listening in a later time. Also, such caching and scanning does not solve the fundamental problem of knowing the seed IPs at the very first connection, prior when you populated the cache the first time. The question is, how we solve this problem without having a hard coded list of IPs that usually P2P software ship in the source code.

Other techniques and several research papers suggest that scanning of a wide range of IP by guessing what could be a connected node is an option as well. In theory it certainly works, if you scan the whole internet then soon or later you will find a connected node and in theory it does solves the problem of centralized bootstrapping, but all these papers also agree that such scanning could be terribly inefficient.

What I mentioned, mDNS and UDP multicasting work fine on local networks, and we are experimenting with IPv6 anycast on global network to solve this problem.