<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Reimagining file distribution: universal downloads</title>
	<atom:link href="http://www.istartedsomething.com/20090710/reimagining-file-distribution-universal-downloads/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.istartedsomething.com/20090710/reimagining-file-distribution-universal-downloads/</link>
	<description>All the stuff about Microsoft and technology you haven&#039;t read anywhere else.</description>
	<lastBuildDate>Sat, 21 Nov 2009 10:19:13 +1100</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Jack</title>
		<link>http://www.istartedsomething.com/20090710/reimagining-file-distribution-universal-downloads/comment-page-2/#comment-95104</link>
		<dc:creator>Jack</dc:creator>
		<pubDate>Tue, 15 Sep 2009 13:58:28 +0000</pubDate>
		<guid isPermaLink="false">http://www.istartedsomething.com/?p=3744#comment-95104</guid>
		<description>Just came across this.. might be similar to your idea...
http://www.metalinker.org/</description>
		<content:encoded><![CDATA[<p>Just came across this.. might be similar to your idea&#8230;<br />
<a href="http://www.metalinker.org/" rel="nofollow">http://www.metalinker.org/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: "R"</title>
		<link>http://www.istartedsomething.com/20090710/reimagining-file-distribution-universal-downloads/comment-page-2/#comment-77258</link>
		<dc:creator>"R"</dc:creator>
		<pubDate>Fri, 17 Jul 2009 05:46:04 +0000</pubDate>
		<guid isPermaLink="false">http://www.istartedsomething.com/?p=3744#comment-77258</guid>
		<description>Why on earth would I want to report where I obtained some illegal mp3/movie? So my sources can be easily traced and cut off sooner??

And if it&#039;s legal content we&#039;re talking about, why on earth would a sane capitalistic company (forget Open Source for now) that pays beaucoup $$ for http web serving would be interested in you grabbing their content without first going through their heavily-commercialized website? So you can download the wrong file or call them up later complaining that your PC crashed when you downloaded and installed a sheitty old version of the file? Had you visited their website first, you&#039;d have known that a new stable release was just made 2 weeks ago... But no, you grabbed the wrong file cuz it came to you through &quot;other channels&quot;, say, some guy gave you a hash (to the then-current-release) in email 3 weeks ago... Not to mentioned they just lost sales because you didn&#039;t get the &quot;in your face&quot; ad for their newest game/biz-app/subscription-service/whatever. All companies that have websites WANT YOU TO BE ON THEIR WEBSITE. In other words, they&#039;ll do everything they can (long term) so you cannot bypass their control. You won&#039;t be able to hash their http content simply because it&#039;ll become dynamic URLs (as many companies already do)...

In other words, I see very little practical use for the concept of global hashes. I see much more use for hashing files on all decentralized (or quasi-decentralized) networks (bittorrent, emule, etc) a la Bitzi that was mentioned, for the purpose of finding clean (commented) illegal content easily.

Bitzi is a more powerful and practical idea than global hashing. If taken seriously, then you will know problems/tips about what you are downloading right as you are downloading it (if web servers start giving hashes out before full download), or just after you finished downloading (if you have to do the hashing yourself). In my example above, just after you finished downloading the file, you&#039;ll get a message from the devs telling you &quot;file you just downloaded (who knows from where) is an old vers with known bugs. Trust this msg, it is digitally signed by us, the makers of the original file you&#039;ve downloaded&quot;.

I think commenting on URLs and unique files (hashes) is the most powerful concept yet fully realized, and not the directory of where to obtain those unique files from...</description>
		<content:encoded><![CDATA[<p>Why on earth would I want to report where I obtained some illegal mp3/movie? So my sources can be easily traced and cut off sooner??</p>
<p>And if it&#8217;s legal content we&#8217;re talking about, why on earth would a sane capitalistic company (forget Open Source for now) that pays beaucoup $$ for http web serving would be interested in you grabbing their content without first going through their heavily-commercialized website? So you can download the wrong file or call them up later complaining that your PC crashed when you downloaded and installed a sheitty old version of the file? Had you visited their website first, you&#8217;d have known that a new stable release was just made 2 weeks ago&#8230; But no, you grabbed the wrong file cuz it came to you through &#8220;other channels&#8221;, say, some guy gave you a hash (to the then-current-release) in email 3 weeks ago&#8230; Not to mentioned they just lost sales because you didn&#8217;t get the &#8220;in your face&#8221; ad for their newest game/biz-app/subscription-service/whatever. All companies that have websites WANT YOU TO BE ON THEIR WEBSITE. In other words, they&#8217;ll do everything they can (long term) so you cannot bypass their control. You won&#8217;t be able to hash their http content simply because it&#8217;ll become dynamic URLs (as many companies already do)&#8230;</p>
<p>In other words, I see very little practical use for the concept of global hashes. I see much more use for hashing files on all decentralized (or quasi-decentralized) networks (bittorrent, emule, etc) a la Bitzi that was mentioned, for the purpose of finding clean (commented) illegal content easily.</p>
<p>Bitzi is a more powerful and practical idea than global hashing. If taken seriously, then you will know problems/tips about what you are downloading right as you are downloading it (if web servers start giving hashes out before full download), or just after you finished downloading (if you have to do the hashing yourself). In my example above, just after you finished downloading the file, you&#8217;ll get a message from the devs telling you &#8220;file you just downloaded (who knows from where) is an old vers with known bugs. Trust this msg, it is digitally signed by us, the makers of the original file you&#8217;ve downloaded&#8221;.</p>
<p>I think commenting on URLs and unique files (hashes) is the most powerful concept yet fully realized, and not the directory of where to obtain those unique files from&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Alec Perkins</title>
		<link>http://www.istartedsomething.com/20090710/reimagining-file-distribution-universal-downloads/comment-page-2/#comment-77125</link>
		<dc:creator>Alec Perkins</dc:creator>
		<pubDate>Tue, 14 Jul 2009 14:36:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.istartedsomething.com/?p=3744#comment-77125</guid>
		<description>This is a really interesting idea. While it&#039;s not good to just create new protocols and such haphazardly, I think this is fundamentally different and useful enough to be worth pursuing. Are you familiar with the Git version management system? It uses the SHA hashes as the identifier for each revision. Instead of an arbitrary identifier (or filename in your case), the identifier is effectively intrinsic in the content. If someone wants to pull a specific revision, they just type enough of the identifier to make it unique within the given project. I think it&#039;d be a good idea to look into how Git handles things.</description>
		<content:encoded><![CDATA[<p>This is a really interesting idea. While it&#8217;s not good to just create new protocols and such haphazardly, I think this is fundamentally different and useful enough to be worth pursuing. Are you familiar with the Git version management system? It uses the SHA hashes as the identifier for each revision. Instead of an arbitrary identifier (or filename in your case), the identifier is effectively intrinsic in the content. If someone wants to pull a specific revision, they just type enough of the identifier to make it unique within the given project. I think it&#8217;d be a good idea to look into how Git handles things.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Xepol</title>
		<link>http://www.istartedsomething.com/20090710/reimagining-file-distribution-universal-downloads/comment-page-2/#comment-77096</link>
		<dc:creator>Xepol</dc:creator>
		<pubDate>Tue, 14 Jul 2009 06:28:26 +0000</pubDate>
		<guid isPermaLink="false">http://www.istartedsomething.com/?p=3744#comment-77096</guid>
		<description>@Long Zheng - Actually, I have used a number of RSS readers and feeds.  I find the experience to be ugly on all levels from the RSS feed all the way to the readers.  The only good user experience I have run across is DelphiFeeds, and many would argue that it is frequently awash with off topic posts.

I suspect that part of the reason it is such an mess starts all the way from the bottom - the RSS feed standard - the design reflects its way all the way up the chain.

Torrents do a great job of avoiding the end UI issues, but it would be the exception not the rule and there are a fair share of bad torrent UIs from the early days - in fact, the only thing that really saved it was how easy it was for third parties to enter the market and improve on it.

This technology would have to be, at its heart, baked in just a few select pieces of software where most of the variation comes not from competition but rather different platforms.  That means we are likely to see poor UI design from the masters:  Microsoft, Firefox and my personal favorite for worst UI experiences if you aren&#039;t a Unix Savant - Google/Chrome.  (A notable mention goes out to Apple for making their Windows browser an alien experience to every single target user by writing copious volumns of code to make it look and act just like the mac OS)</description>
		<content:encoded><![CDATA[<p>@Long Zheng &#8211; Actually, I have used a number of RSS readers and feeds.  I find the experience to be ugly on all levels from the RSS feed all the way to the readers.  The only good user experience I have run across is DelphiFeeds, and many would argue that it is frequently awash with off topic posts.</p>
<p>I suspect that part of the reason it is such an mess starts all the way from the bottom &#8211; the RSS feed standard &#8211; the design reflects its way all the way up the chain.</p>
<p>Torrents do a great job of avoiding the end UI issues, but it would be the exception not the rule and there are a fair share of bad torrent UIs from the early days &#8211; in fact, the only thing that really saved it was how easy it was for third parties to enter the market and improve on it.</p>
<p>This technology would have to be, at its heart, baked in just a few select pieces of software where most of the variation comes not from competition but rather different platforms.  That means we are likely to see poor UI design from the masters:  Microsoft, Firefox and my personal favorite for worst UI experiences if you aren&#8217;t a Unix Savant &#8211; Google/Chrome.  (A notable mention goes out to Apple for making their Windows browser an alien experience to every single target user by writing copious volumns of code to make it look and act just like the mac OS)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Judah Himango</title>
		<link>http://www.istartedsomething.com/20090710/reimagining-file-distribution-universal-downloads/comment-page-2/#comment-77062</link>
		<dc:creator>Judah Himango</dc:creator>
		<pubDate>Mon, 13 Jul 2009 18:15:54 +0000</pubDate>
		<guid isPermaLink="false">http://www.istartedsomething.com/?p=3744#comment-77062</guid>
		<description>Hey Long,

I think this is a really cool idea. I&#039;m a C# dev (mostly desktop app stuff) with several years of experience, email me if you need any help developing it.

-Judah</description>
		<content:encoded><![CDATA[<p>Hey Long,</p>
<p>I think this is a really cool idea. I&#8217;m a C# dev (mostly desktop app stuff) with several years of experience, email me if you need any help developing it.</p>
<p>-Judah</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: alirobe</title>
		<link>http://www.istartedsomething.com/20090710/reimagining-file-distribution-universal-downloads/comment-page-2/#comment-76960</link>
		<dc:creator>alirobe</dc:creator>
		<pubDate>Sun, 12 Jul 2009 07:30:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.istartedsomething.com/?p=3744#comment-76960</guid>
		<description>@long - Gotcha. I guess this is what happens when you read technical proposals at 3 AM! Especially after seeing hashDB.

The concept strikes me as the insertion of another point of failure for reasons of rather pointless pedantry - but I&#039;m not a mass content provider, so perhaps I&#039;m not someone who&#039;d see the benefits from this.</description>
		<content:encoded><![CDATA[<p>@long &#8211; Gotcha. I guess this is what happens when you read technical proposals at 3 AM! Especially after seeing hashDB.</p>
<p>The concept strikes me as the insertion of another point of failure for reasons of rather pointless pedantry &#8211; but I&#8217;m not a mass content provider, so perhaps I&#8217;m not someone who&#8217;d see the benefits from this.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Long Zheng</title>
		<link>http://www.istartedsomething.com/20090710/reimagining-file-distribution-universal-downloads/comment-page-2/#comment-76959</link>
		<dc:creator>Long Zheng</dc:creator>
		<pubDate>Sun, 12 Jul 2009 06:01:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.istartedsomething.com/?p=3744#comment-76959</guid>
		<description>@alirobe: I&#039;m sorry you&#039;ve come to that conclusion, but none of this is about file certification or file signing. Nothing in this system checks the contents of a file. Its purpose is to make distribution more flexible.

The functions you&#039;re referring to wraps around content, and ultimately modifies the file. What I&#039;m proposing does not change files at all. In fact every file on the internet today can be utilised.</description>
		<content:encoded><![CDATA[<p>@alirobe: I&#8217;m sorry you&#8217;ve come to that conclusion, but none of this is about file certification or file signing. Nothing in this system checks the contents of a file. Its purpose is to make distribution more flexible.</p>
<p>The functions you&#8217;re referring to wraps around content, and ultimately modifies the file. What I&#8217;m proposing does not change files at all. In fact every file on the internet today can be utilised.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: alirobe</title>
		<link>http://www.istartedsomething.com/20090710/reimagining-file-distribution-universal-downloads/comment-page-2/#comment-76956</link>
		<dc:creator>alirobe</dc:creator>
		<pubDate>Sun, 12 Jul 2009 03:47:49 +0000</pubDate>
		<guid isPermaLink="false">http://www.istartedsomething.com/?p=3744#comment-76956</guid>
		<description>I didn&#039;t stop reading, I&#039;m really at a loss as to what else this could achieve that couldn&#039;t be achieved better with some sort of file certification scheme. OSes already have code-signing built in for applications, so extending that functionality to file transfers would probably just require a little thought and standardization (e.g. for things like block level hashes).  With integrated file-signing, file naming wouldn&#039;t be an issue, the service would be more reliable/open because of decentralization, it would be more secure because it relies on private/public key infrastructure, and you&#039;d be providing authentication as well as file integrity.

Here&#039;s one example of a free signed file container that could be made a standard: http://www.pkware.com/software-data-security/windows-file-encryption</description>
		<content:encoded><![CDATA[<p>I didn&#8217;t stop reading, I&#8217;m really at a loss as to what else this could achieve that couldn&#8217;t be achieved better with some sort of file certification scheme. OSes already have code-signing built in for applications, so extending that functionality to file transfers would probably just require a little thought and standardization (e.g. for things like block level hashes).  With integrated file-signing, file naming wouldn&#8217;t be an issue, the service would be more reliable/open because of decentralization, it would be more secure because it relies on private/public key infrastructure, and you&#8217;d be providing authentication as well as file integrity.</p>
<p>Here&#8217;s one example of a free signed file container that could be made a standard: <a href="http://www.pkware.com/software-data-security/windows-file-encryption" rel="nofollow">http://www.pkware.com/software-data-security/windows-file-encryption</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Long Zheng</title>
		<link>http://www.istartedsomething.com/20090710/reimagining-file-distribution-universal-downloads/comment-page-1/#comment-76951</link>
		<dc:creator>Long Zheng</dc:creator>
		<pubDate>Sat, 11 Jul 2009 23:41:19 +0000</pubDate>
		<guid isPermaLink="false">http://www.istartedsomething.com/?p=3744#comment-76951</guid>
		<description>@alirobe: This isn&#039;t a code-signing or security idea. It would appear you stopped reading after the first couple of paragraphs when I was just discussing hashes.</description>
		<content:encoded><![CDATA[<p>@alirobe: This isn&#8217;t a code-signing or security idea. It would appear you stopped reading after the first couple of paragraphs when I was just discussing hashes.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: alirobe</title>
		<link>http://www.istartedsomething.com/20090710/reimagining-file-distribution-universal-downloads/comment-page-1/#comment-76945</link>
		<dc:creator>alirobe</dc:creator>
		<pubDate>Sat, 11 Jul 2009 17:25:55 +0000</pubDate>
		<guid isPermaLink="false">http://www.istartedsomething.com/?p=3744#comment-76945</guid>
		<description>I don&#039;t really see the point of this centralisation. In terms of releasing free software, Isn&#039;t it better just to sign the files (i.e. like commercial software)? That way the verification is not subject to man-in-the-middle attacks, there is no central point of failure, and less database maintainence/hardware is required. I can&#039;t imagine any use cases for this technology where there isn&#039;t some form of public/private key provisioning model that wouldn&#039;t do a better job.</description>
		<content:encoded><![CDATA[<p>I don&#8217;t really see the point of this centralisation. In terms of releasing free software, Isn&#8217;t it better just to sign the files (i.e. like commercial software)? That way the verification is not subject to man-in-the-middle attacks, there is no central point of failure, and less database maintainence/hardware is required. I can&#8217;t imagine any use cases for this technology where there isn&#8217;t some form of public/private key provisioning model that wouldn&#8217;t do a better job.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
