How Safe is the SAFE Network

#1

I have a problem getting my head around the SAFE Network, and I am have a particular problem about how things are actually controlled.

Step by Step the road to Fleming 2

describes how membership of the SAFE Network will be controled, and suggests the following:

  1. Don’t blindly add all new vaults
  2. Balanced relocation
  3. Node ageing

My confusion arises from the SAFE Network FAQ that is recommended for beginners

What is an autonomous network

This states that an

Autonomous Network is one which has no human gatekeepers. Anyone is able to join and -crucially - no one can be prevented from taking part. … it also constantly reassigns to different groups in order to provide total security and privacy at all times.

The two statements taken together imply that the intention is to have:

  • An automatic (non-human) decision whether to allow access to the SAFE Network.

  • An automatic (non-human) decision to create balanced relocation.

  • An automatic (non-human) decision to take node ageing into account.

My problem is getting my head around whether any of these aims are actually achievable in a real world setting.

For example, they imply setting up a system that has no human control whatsoever.

That seems fine in theory, but in practice is horrendously difficult to do without errors. However much you tweak the system in its beta phase, once you release the production phase, by definition you then lose control. The Network has to be 100% right first time. Not 99%, but 100%!.

If it is not 100% right first time, which I believe is impossible, the SAFE Network will need some form of adjustment in due course. I understand that most adjustments will be done automatically via an algorithm, but unless that algorithm can 100% predict all future events, there will still need to be human manual adjustments made at some time in the future.

The problem I can’t get my head around is that it seems extremely unlikely that the SAFE Netwok will never need human adjustment over time, but if there is a means of adjustment there will also be a means of hacking the system.

6 Likes
#2

Hey, welcome to the forum. The idea is indeed to let SAFE be SAFE without some people controlling a group of servers. Think of it like BitTorrent but without the trackers. So some file was uploaded to a website, the website (and tracker) got down, but using DHT still thousands of people can download the file. SAFE does that in a more advanced manner, using different algo’s and no centralized tracker in the first place. But still, as it uses hashes to check for data-integrity, every file is right to the last 0 or 1.
A file on SAFE gets chunked in to 1 mb. pieces. And each piece is stored on at least 8 Vaults in the network. And if 1 or more vaults go down, the network will ‘heal’ this error by looking for different vaults to join the group. That way each chunk of data is always stored on 8 systems. And if you request that file, it comes your way. Correct to the last bit.

5 Likes
#3

Must be my age! :grinning: (mid 70’s) but there was quite a lot in your answer that I had difficulty following.

I do understand how BitTorent works, and use a Bit Torrent Client, but these don’t work without being periodically updated and changed. BitTorrent Clients have changed regularly since the first Client was installed in 2001 and all those changes have required human input.

Using BitTorent costs me nothing, and a failure of BitTorent would not cost me anything. Failure of the Safe Network may prove very costly if I trust my ‘history’ to it the way that people currently trust Facebook with their ‘history’.

My bemusement is that, unless I’ve missed something, there seems to be no physical human way of changing the Safe Network algorithm.

#4

I think you’re going one level too meta on this one.

Us humans are designing the SAFE Network. We are designing rules for these points. For instance, we are picking the acceptable size of network sections, how nodes move around in the network, how data is managed etc. There are many decisions taken here and we are trying to be as transparent as can be on the motivations for each decision. Roughly, we try to think very hard of what can go wrong with certain ranges for each setting and exclude settings that we can already see won’t work.

The point is: while the network is running, no human will be sitting at a server farm and adjusting settings to decide how to route messages, who to accept in the network or any such thing.

Now, there is the question of network updates which is quite crucial. If updates were simply pushed by Maidsafe and trusted, an adversary could attack Maidsafe to attempt to push a malicious update that takes over the network. The idea long term is to have some kind of automatic vetting of updates + consensus between humans (don’t have to all be members of Maidsafe), maybe with multisignature schemes or such. In the early days of the network, it is likely that we will need to trust Maidsafe as a source of authority for the first few upgrades until we develop such a mechanism.

So upgrades are the sticky part for “non-human decisions”; but hopefully this clarifies what we mean by “an autonomous network”.

if there is a means of adjustment there will also be a means of hacking the system .

Correct. That’s why we will need to design a governance model to minimize that risk. No system will be 100% foolproof on this front. We’ll just try our best to create the best feasible system, with the help of the entire open-source community.

7 Likes
#5

Thanks for your answers @polpolrene and @pierrechevalier83

It’s a lot clearer now. Think I’ve got the gist of it.

The SAFE Network will run day to day without any human input, and you are still working on exactly how this will be best accomplished.

When the SAFE Network needs to be adjusted / updated, this will be done by humans (presumably by someone at MaidSafe) and you are currently also working on the process that these updates will be undertaken.

Thanks for clarifying things.

5 Likes
#6

That’s rather difficult to do at present, so I hope that when the project moves from Alpha, through Beta to production, there will be rather more information about Maidsafe.

I trust the World Wide Web Foundation in their stated goal to ‘advance the open web as a public good and basic right’ because of the quality of the 30 or so team led by Sir Tim Berners-Lee. On the WWWF website **I can see the qualifications, and experience of the WWWF team** by clicking on their images and viewing their full profile.

I would also be happy to trust the aims of David Irvine and his team at Maidsafe but I have a difficulty because (unlike the team of the World Wide Web Foundation) I don’t know anything about them. The Maidsafe page lists only the first names of the Maidsafe team, with no ability to click on an image to find additional information.

I do realize that Safe offers anonymity, but trusting in anonymous people is a potential problem that can presumably be easily overcome if the membership of Maidsafe were willing to give details of their experience and qualifications.

I realize this is probably a contentious issue and may draw many angry comments about confidentiality and freedom, but my own experience leads me to believe many of those who shout loudest about wanting ‘all’ knowledge to be freely available to everyone (including personal information about everyone else) are often the same people who want to keep their own activities completely private.

I would be happy to trust the Maidsafe team, but I can’t do that if I don’t know who they are.

2 Likes
#7

Try linked in.

You will quickly know more about them than they do about you.

Should give you enough confidence in the team to join a meetup.

1 Like
#8

Linkedin makes it difficult to find someone without a full name and location, but only first names and image are given on the Maidsafe site.

To search for only a first name, and then try to find the correct image from the thousands of images available would be extremely difficult.

#9

You can search for people on Linkedin by the company they work at. I just did it and found almost all the people that work for them.

EDIT:A lot of them that is.

3 Likes
#10

More pictures.

https://maidsafe.net/about_us

Vast majority of maidsafe users on this forum list their full name.

https://safenetforum.org/g/maidsafe_team

At random…for example…

Screenshot_20190328-194106~2
Screenshot_20190328-194106~2.png1432×906 201 KB

The maidsafe team are one of the most open about who they are and their identities in the crypto space.

4 Likes
#11

Great and speedy feedback. Thanks for all the information. Very reasuring. Fantastic.

3 Likes
#12

I absolutely don’t find it strange that you would be reticent to trust Maidsafe when using the SAFE Network. The need for trust would only be temporary until we design a way for that trust to be unnecessary. Even if you trusted us 100%, we could still get hacked by a malicious actor with enough resources who would then be able to impersonate us. The entire point of a trustless network is that no trust at all should be needed. My advice to you would be: don’t upload anything you really want to keep private until the Network is at a stage where no trust is required.

To answer the question: “is the Maidsafe team trustworthy?”, I would use our track record as a measuring device: look at the very many public statements we’ve made in this forum, look at our code and judge for yourself if we deserve some of your trust.

My opinion is “yes”, but then again, I’m biased :wink:

15 Likes
#13

That’s my intro story - there are others on Medium too.

14 Likes
#14

Welcome to the team @Karamu.

Thats an amazing place in your photo. Was there last year.

1 Like
#15

Yeah, Hiroshima is probably my favourite place in Japan - it’s actually my father in law’s hometown!

3 Likes
#16

I didn’t get enough time there, I want to go back sometime and spend more time in a number of places in Japan.

1 Like
#17

Good point :slight_smile:

Here is my intro:

And here are a few more of them:

6 Likes
#18

But I do now. Thanks for all the feedback. There are several useful links here for anyone wanting to know about the faces behind Maidsafe.

6 Likes
#19

See, all you had to do was ask! :wink:

1 Like
#20

Would be worth having some short bios on the site IMO as I bet @richardu is not alone in using that as a proxy for trustworthiness.

2 Likes