/pol/ - Politically Incorrect★

>data-sharing application that is designed to recover files using hashed content addresses(links pointing to the content) rather than IP addresses(links pointing to the location)

so the content addresses gotta be somewhere, right?

are they at… an IP address?

>>12020164

and is there a place on the whole internet that ISN'T an IP address?

or maybe I'm just retarded

>>12020205

does a IPFS website needs a seeder to be kept alive?

the way I see it.

ipfs sites will still be taken down for free speech and other illegal activities.

how do you see it?

>>12020205

That's actually one hell of a value proposition.

>>12020251

>>12020241

>must physically take down every single node on the network that is hosting it

how do I access the site after https://www.ipfs.io has blocked my unique url?

>I am asking for my self and all the other normies on this topic.

>>12020264

>incorrect usage of greentext

>doesn't understand IPFS at all

lurk moar

>>12020266

implying that everyone here understands ipfs

>muh only way to use greentext

>>>/suicide/

>>12020264

ipfs.io is just the official gateway, for the purpose of accessing content through the HTTP-based web. If you have IPFS installed, you can either grab it yourself with "ipfs get [hash]", or use your localhost gateway, or somebody else's.

>>12020297

>>12020279

I have read about ipfs 1 or 2 years ago and I was excited about It, I just didn't know how to bring it to use.

I think I will use it for some projects and I will also consider hosting.

I think many are already sponsoring their bandwith for torrents and they will also host ipfs when they see that it has more benefits to society than hosting jewish movies.

>>12020341

not going to that botnet, but does it use the data: URI scheme with base64 encoding?

>>12020368

>literally cannot read

Fuck off.

>>12020356

Here’s the GitHub for it: https://github.com/alcor/itty-bitty

>>12020310

>when they see that it has more benefits to society than hosting jewish movies

Au contraire, a good enough platform for movie piracy may just be what swings a heavy amount of laymen towards the idea of IPFS.

Do you know what's the problem with your project? I mean apart from bugs (it is in alpha) and the fact that it hungrily eats up slow connections.

There is currently absolutely nothing interesting there that one can't find on clearweb. Populate it with something that is easy to grab but which forces you to connect. Then we start talking about a useful project.

I mean, seriously. We have all these "new" (or old) types of networks. Onion, Zeronet, I2P, usenet, etc. etc.. And all of them offer nothing that you can't find on clearweb, they are all underpopulated, and just begging for people to come over. And the only people that actually do are into CP or some shit.

Seriously. Give us some serious content, create a /pol/ home for us, and you may get some people to transition.

>>12020297

>New Dark Age

Anon, you are aware the (((Dark Age))) is a jewish meme to represent a time when jews were barred from political, economical, academic, or media activity in the White Man's land, aren't you? Using this expression to represent the White man makes you a shabbos goy.

>censorship is bad

Censorship is perfectly fine when it protects a a nation against degeneracy. This distinction is important because free speech is a jewish vehicle that allows jew to express degeneracy and destroy the moral character of the nation they've infected. Jewish power lies in their ability to think up the most depraved shit and express it through voice, amplified by movies, television, and Internet, which is the most dangerous of all vehicles since no barrier exists to prevent their depravity from reaching every toddler and granny across all races and nations. It allows them to amplify and embolden their nigger proxies and sandnigger golems against the White man.

>>12020414

> the long game is pleb hate against censorship

That's not how the game is played at all. You don't even know the rules and erroneously make these dumb conclusions. The game is simply this: rig everything against Whites, but not against the shitskin hoards. There will be no shitskin plegs rising up against censorship against Whites. The issue isn't which type of speech is acceptable or not, but censorship which proceeds White genocides by jewish proxies.

>be judicial court martyr

This isn't a battle that will be won in courts, anon. That boomerthink belongs on plebbit, not in /pol/. Lurk 2 years before speaking again.

>>12020461

> the problem is this

IPFS is a great censorship platform, but it needs to be easily accessible, particularly by Whites whom most need it. Make a smartphone app that simplifies access and you'll become golden.

>>12021296

> be IPFS censorship-proof

This isn't /pol/ cunt. Fuck off.

>>12021548

sage negated

this website will be alive for as long the internet is alive, all you need is a way to execute userscripts in your browser and then simply visit any website and add /bratwurst.kompani at the end of URL

// ==UserScript==
// @description this is the motherfucking website
// @name bratwurst.kompani
// @match http*://*/bratwurst.kompani
// @version 14.88
// @run-at document-start
// ==/UserScript==
document.getElementsByTagName("html")[0].innerHTML = "<body><marquee><p>KRAUT DANCE PARTY 24/7</p></marquee><br><br><center><video loop autoplay src=\"https'':''//a.doko.moe/putukw.webm\"></video></center><marquee><p>JUDEN VERBOTEN</p></marquee></body>";
document.title = "bratwurst ist gut";

>>12021680

Nobody cares about your Delete System32 faggot >>>/oven/

>>12021548

IPFS is used in >>>/pdfs/ for books and archives, so we are technically /poltech/ here.

IPFS is just BitTorrent on steroids if you can't into Linux then just use https://orion.siderus.io/

>>12020264

IPFS has many gateways, GG

https://ipfs.github.io/public-gateway-checker/

Also learn2 command-line. Or use Orion if you are weak

>>12021519

>, even thought they were affected by geoglacial changes as has been proven by ice-core samples.

Hey sounds interesting, got a link to the paper(s)? I'm at work and wondering how to fill the last few hours.

>>12020142 (OP)

also check out mediadrop. it's a neat open source video hosting software.

>>12020142 (OP)

Maybe some /tech/ fags can jump in, but if a site has HTTPS, it should be possible to use IPFS as an authoritative archive.is alternative, no?

As in, capture the whole HTTPS transaction - and because we have the whole transaction, we can prove that the content is undoctored?

Is that what this does:

https://github.com/oduwsdl/ipwb

Requesting that /tech/ fags create a pleb-friendly frontend for the above.

Also, for Tweets, DMS's, or any other short message that needs to be highly censor-resistant: memo.cash

No

You had your chance, you blew it.

>>12024077

I think a high priority item would be a browser extension that WARC's and uploads to IPFS.

I actually did a bit more research into

>>12022111

… last night and I don't understand how it manages to replay HTTPS. Problem is, though we can record the transaction, I don't believe Chrome provides an interface to actually get the keys needed to decipher the handshakes (I looked at QtWebEngine and couldn't see an interface that could achieve this either).

But, the benefit of a Browser extension is that it would alleviate the need to leverage a third party service that can only record a particular URL. For example, with an extension we could, theoretically, click Record, go to Instagram, scroll down and store items that required dynamic interaction with that particular page. This has always been a limitation of traditional archiving services - if someone were to infiltrate Skippy's social media circle, for instance, they could not pass the URL's to a traditional archiving service because it would be behind an authentication wall.

All that said, I'm not entirely familiar with HTTPS and the interfaces that most browsers provide, so if anyone could provide more insight as to whether it is:

>feasible to create a WARC+IPFS extension for Chrome/Firefox/Falkon or similar

>have the ability for the WARC to be proven as an authentic transaction via HTTPS

… that'd be great. Will CC the /tech/ department to see if they have anything to contribute in this regard.

>>12024158

https://github.com/oduwsdl/ipwb

https://github.com/ludios/grab-site

https://github.com/webrecorder/webrecorder

https://github.com/internetarchive/warc

https://github.com/N0taN3rd/Squidwarc

https://github.com/machawk1/warcreate

https://github.com/machawk1/wail

https://github.com/n0tan3rd/wail

Your first challenge: understand what these repos do

>>12025386

I think you misunderstand my concern. Scraping a website and storing it is easy. What I don't believe is easy and someone with more knowledge might be able to correct me here is proving that what's scraped is the actual authentic response from a particular domain.

For example, I could scrape http://somesite.com (note the use of http and not https), but I could easily MITM attack the content to inject whatever I wanted - or straight up just modify it after the fact.

My question is around how HTTPS behaves. If I were to scrape my internet traffic while visiting a HTTPS site using a software suite like Wireshark, for example, I would be unable to view the decrypted data. So, the idea I'm speaking of here is basically recording the whole HTTPS session + the decryption key established in the handshake. I'm assuming and again, may be wrong that this would provide proof that the response is in fact signed by the HTTPS certificate possessed by the domain being scraped. Attempting to modify this content would then invalidate the signature - so it could be proven if it was an authentic response versus a tampered response.

>https://github.com/oduwsdl/ipwb

This only mentions HTTP in the description.

>>12024158

>>12025600

>For example, with an extension we could, theoretically, click Record, go to Instagram, scroll down and store items that required dynamic interaction with that particular page

Now that's the kind of ingenuity I was looking for, anon. You've certainly looked more deeply into this than I have, so I'm not sure I could give you many new insights here, but maybe looking into how public key pinning works will help clarify the matter for you. Or certificate transparency, the implementation that Google opted for instead (because, they claim, of security reasons).

https://tools.ietf.org/html/rfc7469

https://tools.ietf.org/html/rfc6962

>>12025600

The thing to understand is the way of which these software does archiving. If we don't know how WARC is made, and how WARC can be dumped into IPFS, the project is useless on the get-go

>>12030194

>If we don't know how WARC is made

>the project is useless on the get-go

The more important factor here is the HTTPS question - and whether it is technically possible to verify that a HTTPS request/response has not been tampered. Even if this does not fit into a WARC format, a new container can be built for it - if it is possible.

>and how WARC can be dumped into IPFS

This is trivial. IPFS can accept any type of file.

>>12030527

The issue (being a bike shed) is whether this is "reinventing the wheel" or not.

>>12030745

Great post, it glows.

>>12031843

Public-private key cryptography is only used to verify the server and to transfer a symmetric key which is used to encrypt the actual content. Considering that the client has this symmetric key it should be easy for someone to forge the actual content of the response and put it in an archive.

That is unless the server uses something like this http s://github. com/WICG/webpackage/tree/master/go/signedexchange .

>>12034741

Thank you, this is the kind of response I was after.

So basically, content is encrypted (with symmetric key) and not signed, what we're trying to do here probably is not possible. Do you know of any plans to incorporate "content signing" (or whatever name it might be called) into the HTTPS protocol asides from the PoC link you gave?

I don't imagine many sites would opt to implement this as it would probably only ever implicate them.

Can you think of any other alternatives to this problem?

>>12036169

A trusted archiving/mirroring website could implement content signing. Then anyone could download this signed copy in case the original mirror was taken down.

Or we could false flag them into submission while at the same time implementing content signing at our sites, such as 8chan, to prevent them from doing the same.

torsocks ipfs init

yay or nay?

>>12020205

It does not replace TCP/IP but http.

IP is just the addressing/packet transmission service and not cause of the problems mentioned above.

So no need to replace it.

bamperino

>>12078427

Has the fact I2P runs on a Java VM been addressed yet? That sounds shady as fuck itself.

Told you this was the future.

I said it a year ago, and you losers called me a nigger.

Channel upon channel of encryption, where no one can read into anyone else’s channel without the proper keys.

You’re nerd food goons.

>>12078427

Shits not secure, read slashdot nigger.

>>12021514

Of course they still were jews anon…. They are called something else back then.

>>12030768

No, (((you))) are the one who want to make another software stack. Do it then.

>HTTPS request/response has not been tampered.

https://security.stackexchange.com/a/37710

Trivial As Fuck

>>12031843

>which of those programs are trying to accomplish the same thing (SSL cert-verified session recording)

I am saying he is trying to dodge the whole WARC system without proposing an alternative.

SSL cert-verified session recording is basically air-tight (unless your browser is fucked with MITM or cert-editing)

This has made good note about the issue >>12034741

>>12045005

Good post. Basically all archives are mutable by definition under the current system. If we are archiving our enemies' websites the only credibility that we would have are "word of mouth".

>>12058497

Nice.

>>12078427

Now THIS is a glow-in the dark. Unless you seed it it will only be in RAM.

>>12078442

C-implementation is not ready yet, you can test it though

>>12020142 (OP)

Not to shit on IPFS, but if you don't feel like using a command line tool or instaling a billion programs, there's also Freenet, which is basically the same thing and works all from within your browser. It has plugins for forums and a Facebook-like social network, too.

>>12079768

Once Urbit has matured it'd be a great way for anons to host images, videos, etc. I've been thinking about creating an Urchan for the platform, but I'm sure someone will beat me to it.

>>12020205

>it isn't dependent on any particular host

>Nor does it depend on domain name severs

>modified DHT

they could shoah the DHT at multiple levels

>>12082332

(((they)))

>>12082332

>>12082333

Checked, and please elaborate.

>>12084517

>>12084527

Recently I finished the 'abstract' outline of my project, and entered the long-haul design phase. I've been studying the IPFS spec and some third party libraries (and other docs) as part of that, but haven't yet gotten to any 'compiling' stage.

https://docs.ipfs.io/guides/concepts/mfs/

https://cluster.ipfs.io/

https://github.com/ipfs/papers/raw/master/ipfs-cap2pfs/ipfs-p2p-file-system.pdf

https://github.com/ipfs/awesome-ipfs

https://github.com/ipfs-shipyard

https://flyingzumwalt.gitbooks.io/decentralized-web-primer/content/

https://ipfs.io/docs/examples/example-viewer/example#../api/service/readme.md

https://github.com/ipfs/faq/issues/48

And for anyone looking to work with the default Go implementation:

>>>/pdfs/10048

>>12084517

Steemit and IPFS+ETH is for monetary rewards, otherwise IPFS is just a global-tracker with hashes for all files and folders.

>>12082332

It's FOSS, so it can't be shoahed.

>>12079887

You never tried https://orion.siderus.io ?

>>12079956

Very hopeful that Urbit will work.

>>12082249

>Ah, I see the misunderstanding then. If my slim understanding of WARC is right (which I am just gleaning from looking over the initial ISO draft), then with it being merely formatting focused, I doubt there would be any restriction on keeping session data too, with little or (hopefully) no modification to the standard. If basic JS functions can already be used through Wayback Machine captures, then it should be possible to capture asynchronous data too, right?

Not too sure as these things are the kind of stuff that archive.fo others won't show you. We need to do more research on that.

Also instead of Freenet you can try Retroshare like those degenerates in >>>/hypno/41015

>>12084512

>>12082640

different anon, but look up sybil attack for an idea on how DHTs and nodes can be manipulated

while IPFS is promising, it still does not directly solve this problem, it only makes it harder to pull off. in their own words:

"Nodes are identified by a NodeId, the cryptographic hash of a public-key, created with S/Kademlia’s static crypto puzzle. Nodes store their public and private keys (encrypted with a passphrase). Users are free to instatiate a “new” node identity on every launch, though that loses accrued networkbenefits. Nodes are incentivized to remain the same."

tl;dr it's secure but not bulletproof

>>12111524

>>12111563

Any progress/ideas?

>>12078427

Plausible deniability, IPFS is part of the future. Not just darkweb things. It is all thing distributed. True, it is not for everyone because it will eat bandwidth and in some cases requires lots of space. Best practices requires a stand along box for IPFS work. Never on your own day to day PC.

>>12125104

Wrong /pdfs/ link

>>>/pdfs/10049

Abandoning static private webpages was a mistake

>>12139674

No, you are

>>12125104

Who wants to Orbit-DB everything? Or a search engine?

>>12188181

>make yourself impossible to identify by face recognition

>by making yourself easily recognisable in every other way

Bump

The major weakness in all of these systems is illegal content (CP) and copyright infringement. Both of these can be used arbitrarily to shut down opposition. Any legal proceedings for possession of these materials will be a show trial run by clowns.

I am developing a human-like object detector which can serve as an API that can flag any image that resembles humans in the slightest bit to get around the CP problem.

So instead of hosting my own stuff on my own hardware that I pay for, I'm just going to upload stuff to the "cloud" and then hope that whoever else is running this IPFS thing (out of the goodness of his heart) is going to have adequate resources and the will to keep my stuff online. Obviously you can see that this is communist retard shit and it won't work for anything beyond little hobby sites. No one is actually going to use (((IPFS))) for anything serious and so it is retarded. sage.

>>12020297

I get really lost in any network/computer thread, can anyone suggest me a study plan or related books in this subject? Thanks.

>>12188181

Is that facial recognition using dlib or mt?

>>12188400

>The major weakness in all of these systems is illegal content (CP) and copyright infringement.

Yep. If it doesn't already exist because of some sick cunt who wants to abuse the beauty of freedom, they'll just fucking plant it. You need to be extremely pro-active in removing it and immunizing against it.

Copyright infringement can get fucked, though.

>>12188770

>>12188400

CP bombing => degeneracy bombing

>>12111563

>>12125104

Any secondary backup plans with Torrents, Retroshare and Sia/Storj?

>>12079768

Remember that OpenBazaar has I2P and TOR support.

>>12026519

>>For example, with an extension we could, theoretically, click Record, go to Instagram, scroll down and store items that required dynamic interaction with that particular page

Already possible using automated tools for many years such as Selenium web driver

>>12020142 (OP)

My question is, can we make an IPFS server to host all content on the network, as it is today, as a localized cache / seed machine, for the network, and how much storage would it reasonably require to run it?

The whole internet hasn't been archived yet, so I am assuming that IPFS has a rather small footprint of available data, right now.

There again, assume makes an ass out of you and me.

But, still, can dedicated, IPFS systems be setup to use as host for the network, and download the content locally for seeding, or reading by the end user? Last time I played with it, it worked well, for hosting and archiving your own shit, but didn't really have an "easy" way to access the content of others, like a "Jewgoole" type search engine for content already stored.

>>12189776

>The arms race has gotten bad. For those of us who remember dialing into the local BBS, Usenet and the like, this is truly dark times. IPFS has its problems, but they won't get fixed without work. It is the next step. Do not wait for some blue haired faggots from the bay area to develop your savior. They are on the wrong side of history with their Teslas and VC provided lunches. Most of them do not remember the time when the net and the web were separate ideas. They think the whole internet runs on TCP port 80.

>

>If you're reading this and you know what I'm talking about, you are now the tribal elder. You must paint the cave wall showing the buffalo hunt to inspire the youth. Old timers bitching about parity settings and baud rate will not save us.

The first thing I ever downloaded from a BBS was "The Complete Guide to Bestiality and Necro-Beastiality." (muh edge)

Then I found 2600 and PHRACK. (2600/HOPE is pozzed now sadly, they were triggered by a MAGA hate this year.)

>>12189776

>>12192948

http://www.textfiles.com/history/

>The purpose of the history section is for people who lived through the "Golden Age" of BBSes to write about their experience. They can write about it from the point of view of someone looking back, or they can try to recreate the feelings they had when they went through it in childhood (or early adulthood).

New Kid On The Block: Beaker Browser's DAT

https://github.com/datprotocol

>>12192842

Ask BibAnon https://wiki.bibanon.org/Main_Page

Or better yet http://inclibuql666c5c4.onion/ or inclib.i2p

bump

here's a way to start playing around with ipfs now: https://orion.siderus.io/

Glad this thread is still around.

>>12079571

>https://security.stackexchange.com/a/37710

You miss my point. My point is that although I can prove that the response I AM getting is authentic from a particular server, if I then wish to send that response to a third-party, I do not believe it is possible for them to verify that it is authentic (i.e. that I have not tampered with it prior to sending to this third-party IPFS in this case). I would be glad to be proven wrong here.

>>12212283

Can you give a TLDR rundown of what this is and what benefits it would have over IPFS. This is the first I've heard of this.

>>12235997

>>12228203

See https://docs.datproject.org/intro and https://docs.datproject.org/install

>>12255399

>https://docs.datproject.org/intro

Thank you - but I don't yet see the advantage of Dat over IPFS.

Personally, I'm a little bit averse to it currently as I worry it'll fragment users into both camps, meaning I have to install more shit. Can you summarize why Dat over IPFS (or vice-versa)?

>>12020205

listen, I get ipfs is a thing

so is i2p

best to have options

also, you niggers need to start looking into data hoarding

get a shit box that can hold a bunch of disks, install freenas and learn how to leverage zfs

even if they're offline and local, archiving the shit out of everything is not a bad idea

check out the archive team wiki, and learn their ways

https://www.ar c hiv eteam.org/index.php?title=Main_Page

no doubt they are poz'd but having a little organization, al be it decentralized would really assist in what it is we're trying to do here

>>12020368

itty bitty sites is fucking stupid, why would I send content that can logged and is not encrypted

>>12020142 (OP)

this exposes your IP address to everybody looking at your site

>>12269715

>>12269767

Don't forget ZFS for drive failures.

>>12280163

That is how IPFS and BitTorrent works (unless you do TOR/I2P routing)

>>12314238

Everything that isn't BUILT ON TOR is garbage. Built on, built for it. If it requires configuration modification, it's trash.

>>12345317

TOR is a honeypot by antifa.

>>12020274

>too dumb to understand ipfs

we dont need you in our ranks

>>12359314

no/tech/ fags should not be in charge of >>>/pdfs/ (or at least torrents)

ITT: Use IPFS, TOR and/or I2P to share posters and redpill images

Repo for the "Permanent Booru": https://github.com/Kycklingar/PBooru

Existing instances: kycklingar.i2p and vsdfdtkr5mh6y33p.onion

What does it do

An image gallery that uses IPFS's P2P function to share images, and for those who want security, use TOR and/or I2P to download images directly.

What is it good for

Make sure that files will never get lost as long as someone is mirroring/seeding it, which insures sustainability beyond MEGA and other "centralized file sharing sites"

Why the fuck should I care?

>>>/pdfs/ and >>>/eternalarchive/ have reference on massive data stores being wiped out, better be safe than sorry

See: https://ipfs.io and https://orion.siderus.io/

To those who don't understand what a "running instance" is, that is that we in /tech/ call an "example website". Yes, I know the original TOR/I2P instance is pozzed, but the source code is out there for us to make another for /pol/ and only /pol/.

> So is IPFS similar to Freenet and I2P? I've had some success using Freenet, but it's dead, not a single page has been updated since October 2015. Never really got I2P running.

IPFS is to BitTorrent like I2P and Freenet is to TOR

> When shtf or they keep overreaching with their deplatforming and censorship IPFS is phenomenal, given you have a node running

Remember to run IPFS over I2P or TOR, this repo did it successfully https://github.com/OpenBazaar

>>12411700

bump for support

Anyone interested in anonymity and cancer-free software should take a look at Nanochan.

>no javascript

>image uploads through tor

>no clearnet access

>uncucked mods

>only 2,000 lines of code for nanochan vs. 100,000 lines for 8chode

>less lines of code means less bugs

Smugboard is a nice concept but it's written in Javashit and seems to be a thoroughly dead project although it has many bugs still.

http://nanochanxv2lxnqi.onion/nano/pol/

>>12421391

> Nanochan a site without source code

> No IPFS/Torrent for spreading propaganda posters

> Just a TOR site that feels like a honeypot

Okay

>>12421394

>site without source code

http://nanochanxv2lxnqi.onion/source.lua

>Muh honeypot

<implying 8chode isn't a honeypot

>>12421396

> Not on clearnet

Yeah it is a CIANigger alright

>>12434246

But clearnet sites would be able to see your IP anyways anon

>>12435501

Either take one for the team and use IPFS or just I2P, NEVER use the TORah

Look at beaker browser

bjump

1

>>12030527

>>12026519

>>12025600

>Bearing in mind that I haven't really looked at HTTPS security in a few years, and that I'm still getting caught up on this thread

It used to be (and I would wager still is) that many implementations of HTTPS servers have the option to use outdated and completely broken protocols, presumably to support clients who surf the webbernets on their Altair 8800s. Tbe case may be that these insecure protocols are still capable of authenticating the source. Even if this isn't the case, they still prove valuable for research, and sometimes even leak information about the other protocols in use.

Alternatively, or additionally:

>Decentralize the authentication

Have individuals, manually or via scripts, verify the page's content and sign the archived version or submit the diff of their version vs the official. Could also be used to highlight sites which provide different pages to different countries, and to reveal the changes/redactions the sites try to make without the goyim noticing. Skiddieify it enough and you might even get goys interested in archiving things.

Also make sure you include whatever you can about the issuance of the keys etc., lest the CA servers decide to drink bleach to the back of the head. There was also a defcon presentation a year or two ago that went over MitMing one's self for the purpose of detecting whether or not sites were bad actors silently serving alternative data to targeted clients, I believe it may have been done to detect playstation network scheistery, but I think it might be of use in counter-anti-archiving operations by making it more difficult for a site to discern whether you're a scraping bot or a genuine reader; basically, it was browser version spoofing cranked to 11.

On a tangential note, is anyone else familiar with neoscoin? It's a rather promising crypto project that's intended for publishing all forms of digital content, including webpage hosting; anything that can be done using traditional servers and web browsers can instead be implemented on the blockchain. Official release is still a ways out, but there's a reason everyone who has neos is hodl for dear life

>>12020142 (OP)

They will never silence the Spirit of Truth again. Grandjest soon, brothers.

>>12594030

I don't know that off hand, but the lead dev is mind-bogglingly crafty, and has worked as a independent contractor problem solving for quite a few big-name coin projects. I could ask him, but I don't really understand the problems yet, at least not as clearly that you seem to. Given the project's goals and community driven ambition, I'd wager heavily that these concerns have been accounted for, but if not, I know they'd be interested in discussing the matter with you and incorporating fixes in a future release. Lead dev is Syntaks on irc.freenode.net/neoscoin

Additional communication methods can be found on https://neos.sh , but I don't think he's been on twatter etc. for over a year.