Hyperjournal - A tamper-proof publishing system

on YouTube ↗34m

" summary

Claims a tamper‑proof publishing system that doesn’t exist yet but outlines a clear design: content signed with public‑key signatures and PKI‑based authentication, served as static, content‑addressed files (git‑style hashes / blake2 or SHA‑256) and distributed over p2p, BLE, LAN to survive DNS poisoning and network cutoffs. Implementation notes name Node/OpenSSL and libsodium, warn about key bootstrapping, DoS, fake SSL certificates and the unsolved problem of verifiable reader apps for offline audiences.

AI-written summary · about

" chapters (21)

1. 0:00Intro
2. 0:43HyperJournal A tamper-proof publishing system
3. 1:03HyperJournal How to build a tamper-proof publishing system
4. 1:38Doctors have the hippocratic oath
5. 2:02Software developers have "Don't roll your own crypto"
6. 3:21Just another hermite from the internet
7. 3:45Motivation Working with Syrian journalists in exile
8. 7:51Connectivity gives new hope to freedom of speech. Adversaries can no longer stop the flow of information.
9. 9:14Journalists and editors communicate via their anonymous handles and might never meet (except once).
10. 9:26Tamper-proof publishing (over insecure channels)
11. 10:56Requires the computational power of a determined 4th grader to break
12. 11:11Adequate for sending notes in class
13. 17:29Essentially security by obscurity
14. 19:07Keys are problematic because sharing them requires a secure channel
15. 19:37The problem is bootstrapping trust
16. 19:59Don't trust people on the internet
17. 25:49Side-note: Use a proper password hash function (Argon2, scrypt, pbkdf2)
18. 29:55How does a signature work?
19. 30:51Delivering content to readers, securely
20. 31:29Secure communication (actual encryption, onion routing?)
21. 31:41DDoS Fake SSL Certs DNS Poisoning

" related talks

• 34mPermanent webappsJames Halliday · Full Stack Fest 2015
• 18mSecure Software Distribution in an Adversarial WorldDiogo Mónica · dotSecurity 2016
• 20mThe disintermediated webJames Halliday · NodeConf London 2016
• 01h 04mKeynote: Towards a more effective, decentralized webHolger Krekel · EuroPython 2015
• 40m Authentication is Broken. Can We Try Fix It?Kgothatso Ngako · BSides Cape Town 2019
• 21mGhostor: Toward a Secure Data Sharing System from Decentralized TrustRaluca Ada Popa, Sam Kumar, Yuncong Hu · NSDI 2020
• 37mUpgrading the Web (Keynote)Douglas Crockford · You Gotta Love Frontend 2015
• 19mTrust, Tampering, and Transparency: What History Can Teach Us About Open Source...Lisa Tagliaferri · Open Source SecurityCon Europe 2026