# P2P Peer-to-peer (P2P) is a computing architecture in which system elements share resources and both provide and request services. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Peer Pressure: Inside the Sality Botnet Disruption Operation DevFeed: [Peer Pressure: Inside the Sality Botnet Disruption Operation]() Original publisher: [Read original article]() Author: CrowdStrike Counter Adversary Operations Published: 2026-09-12T11:17:51.295154Z Content type: article Language: en Sources: [Blog]() Topics: [P2P](), [Cybercrime]() Tags: [2026](), [collaboration](), [department-of-justice](), [industry](), [operations](), [partnership](), [support](), [threat-hunting-intel]() ### AI overview CrowdStrike describes a coordinated operation that disrupted the Sality peer-to-peer botnet, which had distributed malicious payloads to more than 33,000 infected machines worldwide. The operation used peer-to-peer sinkholing to isolate infected machines and disable the criminal command channel, with support from international law enforcement and industry partners. ### Source excerpt CrowdStrike collaborated with international law enforcement and industry partners to execute a coordinated disruption of the Sality peer-to-peer botnet. ## IPFS is moving beyond the sponsored gateways DevFeed: [IPFS is moving beyond the sponsored gateways]() Original publisher: [Read original article]() Published: 2026-08-25T00:00:00Z Content type: release Language: en Sources: [IPFS]() Topics: [IPFS](), [gateway](), [P2P](), [browser]() Tags: [distributed](), [gateway](), [ipfs](), [object-object](), [open-web](), [self-hosted](), [time]() ### AI overview IPFS is changing how the ipfs.io and dweb.link gateways operate, shifting content retrieval from centralized servers toward service workers that connect directly to peers and verify content in the browser. The article also describes self-hosted gateways, browser-based IPFS nodes, and paid pinning and retrieval providers as alternatives. ### Source excerpt How IPFS is shifting from centralized public gateways to distributed infrastructure and client-side retrieval. ## Connect an ESP device and iPhone directly using Wi-Fi Aware DevFeed: [Connect an ESP device and iPhone directly using Wi-Fi Aware]() Original publisher: [Read original article]() Author: John Lee Published: 2026-08-25T00:00:00Z Content type: tutorial Language: en Sources: [Blog on Developer Portal]() Topics: [Wi-Fi](), [iOS](), [iphone](), [cross-platform](), [P2P](), [Internet of things](), [networking]() Tags: [android](), [app](), [blog](), [cross-platform](), [esp-idf](), [esp-idf-component](), [how-to](), [ios](), [iot](), [iphone](), [ipv6](), [p2p](), [pairing](), [practitioner](), [security](), [wi-fi](), [wi-fi-aware]() ### AI overview This tutorial explains how to connect an ESP device directly to an iPhone using Wi-Fi Aware. It describes service discovery, mandatory six-digit PIN pairing, and an encrypted IPv6 data link without an access point, DHCP server, or internet connection. On supported devices running iOS 26 or iPadOS 26, the connection can operate concurrently with normal Wi-Fi connectivity. ### Source excerpt iOS 26 brings Wi-Fi Aware™ support on iPhone 12 and later, enabling compatible devices to securely discover, pair, and communicate directly. This requires no Access Point and does not affect iPhone's network connectivity over Wi-Fi. This article walks through the steps to set up an ESP device and an iPhone so they can pair and connect using Wi-Fi Aware. ## The Dodo Digest: Don't Make Customers Learn How to Pay DevFeed: [The Dodo Digest: Don't Make Customers Learn How to Pay]() Original publisher: [Read original article]() Author: Rishabh Goel Published: 2026-08-24T00:00:00Z Content type: article Language: en Sources: [Dodo Payments Blog]() Topics: [P2P](), [App]() Tags: [analytics](), [billing](), [checkout](), [newsletter](), [payments](), [tiktok](), [updates](), [v1](), [whatsapp]() ### AI overview TikTok is exploring peer-to-peer payments in direct messages, while Venmo is expanding into tuition payments. The article argues that products should support payment methods customers already trust to reduce checkout friction and payment-related drop-off. It also highlights Dodo Payments v1.112.0 updates to discount codes, payments, billing, webhooks, and analytics. ### Source excerpt TikTok explores payments in DMs and Venmo moves into tuition. Why founders should offer the payment methods customers already trust, plus v1.112.0 updates. ## I Rebuilt a Minimal BitTorrent Client in Go to Understand Peer-to-Peer Choking Algorithms DevFeed: [I Rebuilt a Minimal BitTorrent Client in Go to Understand Peer-to-Peer Choking Algorithms]() Original publisher: [Read original article]() Author: hello@ankit-rana.com Published: 2026-08-02T00:00:00Z Content type: tutorial Language: en Sources: [Ankit Rana | Mechanical Sympathy]() Topics: [Algorithms](), [P2P](), [Go Language](), [Programming](), [Network]() Tags: [algorithms](), [bittorrent](), [distributed-systems](), [go](), [golang](), [network](), [networking](), [p2p](), [peer-to-peer](), [protocol](), [system-design]() ### AI overview A hands-on explanation of BitTorrent choking algorithms through rebuilding a minimal client in Go. The article describes choking as a decentralized bandwidth-allocation mechanism, explains the choked and interested states, and shows how upload capacity affects peer prioritization. ### Source excerpt The BitTorrent spec explains choking in two paragraphs; implementing it in Go and watching every peer choke you within 60 seconds is what makes it stick. Choking is a bandwidth allocator running independently on every node, not a courtesy flag. Upload is the scarce resource on an asymmetric link, and each connection carries just two booleans, choked and interested, whose four combinations drive the entire fairness policy of the swarm. ## ModelExpress: Distributing Model Artifacts at the Speed of Light DevFeed: [ModelExpress: Distributing Model Artifacts at the Speed of Light]() Original publisher: [Read original article]() Author: Elizabeth Goodman Published: 2026-07-24T16:45:00Z Content type: article Language: en Sources: [NVIDIA Developer](), [NVIDIA Technical Blog]() Topics: [model-deployment](), [GPU](), [P2P](), [Amazon S3](), [autoscaling](), [Caching](), [cloud-infrastructure]() Tags: [agentic-ai-generative-ai](), [ai-foundation-models](), [ai-inference](), [autoscaling](), [data-center-cloud](), [developer-tools-techniques](), [dynamo-triton](), [featured](), [gpu](), [inference](), [inference-performance](), [jit](), [llms](), [local](), [model](), [s3](), [scale](), [speed](), [streaming]() ### AI overview NVIDIA ModelExpress (MX) reduces model-serving startup time by locating compatible model weights at the fastest available source. It prioritizes direct GPU-to-GPU transfer over P2P RDMA from an existing serving replica, while using object or local storage for initial bootstrapping and fallback. The article also describes reusing JIT kernel caches and distributing reinforcement-learning weight updates. ### Source excerpt Every byte moved has a cost. As model checkpoints grow to hundreds of gigabytes or even a terabyte, that cost adds up quickly. To make things even worse, moving... ## Compromised AsyncAPI npm packages: inside a CI supply-chain attack DevFeed: [Compromised AsyncAPI npm packages: inside a CI supply-chain attack]() Original publisher: [Read original article]() Author: Christophe Tafani-Dereeper, Sebastian Obregoso, Eslam Salem Published: 2026-07-14T00:00:00Z Content type: article Language: en Sources: [Datadog Security Labs]() Topics: [npm](), [Malware](), [ci](), [GitHub](), [C2](), [JavaScript](), [Cryptography](), [IPFS](), [P2P](), [cloud-infrastructure](), [Nostr]() Tags: [c2](), [ci](), [cryptography](), [github](), [go](), [infrastructure](), [javascript](), [malware](), [network](), [npm-packages](), [supply-chain]() ### AI overview This security article examines a CI supply-chain attack in which four compromised @asyncapi npm packages distributed credential-stealing malware. It traces the injected GitHub code, its IPFS-hosted second stage, encrypted configuration, credential harvesting, persistence mechanisms, and resilient command-and-control channels. ### Source excerpt On July 14, 2026, four npm packages in the @asyncapi namespace, totaling over 3 million weekly downloads, were compromised to deliver credential-stealing malware. We investigate how the attack unfolded and how to know if you're affected. ## exploits.club Weekly(ish) Newsletter 94 - P20 VMWare Bugs, ExpDev With LLMs, Pixel 0-Click Bugs, and More DevFeed: [exploits.club Weekly(ish) Newsletter 94 - P20 VMWare Bugs, ExpDev With LLMs, Pixel 0-Click Bugs, and More]() Original publisher: [Read original article]() Author: exploits.club Published: 2026-01-30T16:00:22Z Content type: article Language: en Sources: [exploits.club]() Topics: [Security](), [Exploit](), [Large Language Model](), [Artificial Intelligence](), [Code](), [Claude](), [ChatGPT](), [Network architectures](), [P2P](), [Open Source](), [Linux]() Tags: [ai](), [chatgpt](), [code](), [exploit](), [linux](), [llms](), [network](), [open-source](), [peer](), [poc](), [rce](), [remote-code-execution](), [security]() ### AI overview This newsletter surveys recent security research, including experiments using Claude and ChatGPT to generate proofs of concept for QuickJS vulnerabilities, a wormable remote code execution chain in Command & Conquer, a MediaTek bootloader exploit, and VMware workstation research. ### Source excerpt Good morning friends....been a minute. But we are SO back. Annnnnyways 👇 In Case You Missed It... RE//verse Tickets Still On Sale - If you were just at DistrictCon, escape the snow-pocalypse to Florida next month OffensiveCon CFP - 30 days to get-em submitted! Resources And Write-Ups ## Backdoors in VStarcam cameras DevFeed: [Backdoors in VStarcam cameras]() Original publisher: [Read original article]() Author: Wladimir Palant Published: 2026-01-07T13:01:48Z Content type: article Language: en Sources: [Almost Secure]() Topics: [Security](), [backdoor](), [passwords](), [P2P](), [Protocol (disambiguation)]() Tags: [backdoor](), [cameras](), [p2p](), [passwords](), [protocol](), [security]() ### AI overview An investigation of VStarcam cameras finds that firmware mechanisms systematically undermine administrator-password protection by leaking passwords and exposing cameras through internet-connected P2P functionality. The article also examines insecure firmware updates delivered over plain HTTP and recommends restricting internet access with a network firewall or using custom firmware. ### Source excerpt VStarcam is an important brand of cameras based on the PPPP protocol. Unlike the LookCam cameras I looked into earlier, these are often being positioned as security cameras. And they in fact do a few things better like... well, like having a mostly working authentication mechanism. In order to access the camera one has to know its administrator password. So much for the theory. When I looked into the firmware of the cameras I discovered a surprising development: over the past years this protection has been systematically undermined. Various mechanisms have been added that leak the access password, and in several cases these cannot be explained as accidents. The overall tendency is clear: for some reason VStarcam really wants to have access to their customer's passwords. A reminder: "P2P" functionality based on the PPPP protocol means that these cameras will always communicate with and be accessible from the internet, even when located on a home network behind NAT. Short of installing a custom firmware this can only addressed by configuring the network firewall to deny internet access. Contents How to recognize affected cameras Downloading the firmware Caveats of this survey VStarcam's authentication approach Endpoint protection Unauthenticated log access Explicit password leaking via logs Log uploading Password-leaking backdoor Establishing a timeline The impact Coordinated disclosure attempt Recommendations How to recognize affected cameras Not every VStarcam camera has "VStarcam" printed on the side. I have seen reports of VStarcam cameras being sold under the brand names Besder, MVPower, AOMG, OUSKI, and there are probably more. Most cameras should be recognizable by the app used to manage them. Any camera managed by one of these apps should be a VStarcam camera: Eye4, EyeCloud, FEC Smart Home, HOTKam, O-KAM Pro, PnPCam, VeePai, VeeRecon, Veesky, VKAM, VsCam, VStarcam Ultra. Downloading the firmware VStarcam cameras have a mechanism to deliver firmware updates (Loo ## Shipping an L1 zkEVM #2: The Security Foundations DevFeed: [Shipping an L1 zkEVM #2: The Security Foundations]() Original publisher: [Read original article]() Author: George Kadianakis Published: 2025-12-18T00:00:00Z Content type: article Language: en Sources: [Ethereum Foundation Blog]() Topics: [Security](), [Cryptography](), [Provable security](), [Ethereum](), [P2P](), [Tool]() Tags: [cryptography](), [ethereum](), [p2p](), [provable-security](), [research](), [research-development](), [security](), [tool]() ### AI overview The Ethereum Foundation outlines security foundations for building a mainnet-grade L1 zkEVM after major improvements in real-time proving. It argues for provable security at a 128-bit target, describes the tension between security and proof size, and introduces soundcalc for consistent zkVM security assessments. ### Source excerpt Thanks to Arantxa Zapico, Benedikt Wagner, and Dmitry Khovratovich from the EF cryptography team for their contributions, and to Ladislaus, Kev, Alex, and Marius for the careful review and feedback. The zkEVM ecosystem has been sprinting for a year. And it worked! We crossed the finish line for real-time... ## An overview of the PPPP protocol for IoT cameras DevFeed: [An overview of the PPPP protocol for IoT cameras]() Original publisher: [Read original article]() Author: Wladimir Palant Published: 2025-11-05T15:11:36Z Content type: article Language: en Sources: [Almost Secure]() Topics: [Internet of things](), [Protocol (disambiguation)](), [P2P](), [Reverse Engineering](), [Security]() Tags: [cameras](), [firmware](), [iot](), [network](), [p2p](), [protocol](), [reverse-engineering](), [security-research](), [servers](), [tcp]() ### AI overview An overview of the PPPP protocol used primarily by network-connected IoT cameras. The article explains that PPPP relies on central servers while allowing bulk data transfer through direct client-to-device connections, and describes device identifiers, connection establishment, fallback mechanisms, redundant servers, and related protocol research. ### Source excerpt My previous article on IoT "P2P" cameras couldn't go into much detail on the PPPP protocol. However, there is already lots of security research on and around that protocol, and I have a feeling that there is way more to come. There are pieces of information on the protocol scattered throughout the web, yet every one approaching from a very specific narrow angle. This is my attempt at creating an overview so that other people don't need to start from scratch. While the protocol can in principle be used by any kind of device, it is mostly being used for network-connected cameras. It isn't really peer-to-peer as advertised but rather relies on central servers, yet the protocol allows to transfer the bulk of data via a direct connection between the client and the device. It's hard to tell how many users there are but there are lots of apps, I'm sure that I haven't found all of them. There are other protocols with similar approaches being used for the same goal. One is used by ThroughTek's Kalay Platform which has the interesting string "Charlie is the designer of P2P!!" in its codebase (32 bytes long, seems to be used as "encryption" key for some non-critical functionality). I recognize both the name and the "handwriting," it looks like PPPP protocol designer found a new home here. Yet PPPP seems to be still more popular than the competition, thanks to it being the protocol of choice for cheap low-end cameras. Disclaimer: Most of the information below has been acquired by analyzing public information as well as reverse engineering applications and firmware, not by observing live systems. Consequently, there can be misinterpretations. Contents The general design The network ports The device IDs The protocol variants CS2 Network Yi Technology iLnk HLP2P "Encryption" "Secret" messages Applications Changelog The general design The protocol's goal is to serve as a drop-in replacement for TCP. Rather than establish a connection to a known IP address (or a name to be resolved ## A look at a P2P camera (LookCam app) DevFeed: [A look at a P2P camera (LookCam app)]() Original publisher: [Read original article]() Author: Wladimir Palant Published: 2025-09-08T13:00:50Z Content type: article Language: en Sources: [Almost Secure]() Topics: [Security](), [Vulnerabilities](), [webcam](), [Encryption](), [P2P](), [Cloud]() Tags: [camera](), [cloud](), [encryption](), [internet](), [p2p](), [security]() ### AI overview A security analysis of internet-connected cameras managed through the LookCam app reports weak access controls, largely unencrypted PPPP communication, exposed cloud uploads, firmware security flaws, and no firmware update mechanism. The findings are presented as applying to LookCam-managed cameras and several related apps, but not LookCamPro devices. ### Source excerpt I've got my hands on an internet-connected camera and decided to take a closer look, having already read about security issues with similar cameras. What I found far exceeded my expectations: fake access controls, bogus protocol encryption, completely unprotected cloud uploads and firmware riddled with security flaws. One could even say that these cameras are Murphy's Law turned solid: everything that could be done wrong has been done wrong here. While there is considerable prior research on these and similar cameras that outlines some of the flaws, I felt that the combination of severe flaws is reason enough to publish an article of my own. My findings should apply to any camera that can be managed via the LookCam app. This includes cameras meant to be used with less popular apps of the same developer: tcam, CloudWayCam, VDP, AIBoxcam, IP System. Note that the LookCamPro app, while visually very similar, is technically quite different. It also uses the PPPP protocol for low-level communication but otherwise doesn't seem to be related, and the corresponding devices are unlikely to suffer from the same flaws. There seems to be little chance that things will improve with these cameras. I have no way of contacting either the hardware vendors or the developers behind the LookCam app. In fact, it looks like masking their identity was done on purpose here. But even if I could contact them, the cameras lack an update mechanism for their firmware. So fixing the devices already sold is impossible. I have no way of knowing how many of these cameras exist. The LookCam app is currently listed with almost 1.5 million downloads on Google Play however. An iPhone and a Windows version of the app are also available but no public statistics exist here. Contents The highlights The hardware The LookCam app The PPPP protocol The basics The "encryption" The threat model The firmware The cloud How safe are device IDs? Recommendations Further reading The highlights The camera cannot be eas ## Lightweight MQTT Broker for ESP32: Mosquitto ported to ESP-IDF DevFeed: [Lightweight MQTT Broker for ESP32: Mosquitto ported to ESP-IDF]() Original publisher: [Read original article]() Author: John Lee Published: 2025-05-28T00:00:00Z Content type: article Language: en Sources: [Blog on Developer Portal]() Topics: [ESP32](), [MQTT](), [ESP-IDF](), [Internet of things](), [Testing](), [Home Assistant](), [P2P](), [TLS (Transport Layer Security)]() Tags: [blog](), [broker](), [edge-computing](), [esp](), [esp-idf](), [esp32](), [home-assistant](), [iot](), [mqtt](), [p2p](), [security](), [testing](), [tls]() ### AI overview This article introduces a lightweight port of the Eclipse Mosquitto MQTT broker to ESP-IDF for ESP32 devices. It describes support for TLS and TCP transports and outlines uses including private local IoT networks, on-device MQTT testing, and bridged brokers over peer-to-peer connections. ### Source excerpt Mosquitto - the industry-standard MQTT broker - has been ported to ESP-IDF. Its lightweight version retains Mosquitto's core functionality and security features to run on resource-constrained IoT devices. This MQTT broker is ideal for edge computing, testing, and standalone IoT deployments. In this article, we will do an overview and show you how to get started. ## 🌳 IPFS Newsletter 205: HTTP, P2P in browsers, Kubo speedup & more DevFeed: [🌳 IPFS Newsletter 205: HTTP, P2P in browsers, Kubo speedup & more]() Original publisher: [Read original article]() Published: 2025-05-23T00:00:00Z Content type: news Language: en Sources: [IPFS]() Topics: [IPFS](), [HTTP](), [P2P](), [browsers]() Tags: [browsers](), [http](), [ipfs](), [newsletter](), [object-object](), [p2p](), [updates]() ### AI overview The IPFS Newsletter returns with updates on HTTP support across the IPFS stack, peer-to-peer retrieval in browsers, Kubo, the Service Worker Gateway, and IPNI service improvements. ### Source excerpt The IPFS Newsletter is back, with many exciting updates to share: HTTP support across the IPFS stack, P2P in browsers, Kubo speedup, and more. ## Response: Peer-to-Peer Communication in IPv6 World DevFeed: [Response: Peer-to-Peer Communication in IPv6 World]() Original publisher: [Read original article]() Published: 2025-04-15T05:23:00Z Content type: opinion Language: en Sources: [ipSpace.net blog]() Topics: [P2P](), [Networks](), [Firewall](), [WebRTC]() Tags: [firewall](), [firewalls](), [ipv6](), [nat](), [p2p](), [webrtc]() ### AI overview This article presents Daryll Swer's response about peer-to-peer communication over IPv6. It argues that native IPv6 avoids shared-address NAT and related port-exhaustion issues, while stateful firewalls can still affect connectivity. The response reports successful STUN-based IPv6 peer connections in tested applications but notes that many CGNAT deployments remain problematic. ### Source excerpt Daryll Swer posted a very informative response to my NAT Traversal Mess blog post, focusing on: Punching holes through that firewall is equivalent to establishing NAT translations. It would be a shame to let that response wither as small print at the bottom of a blog post; here it is: Read more ... ## The Static Website Manifesto DevFeed: [The Static Website Manifesto]() Original publisher: [Read original article]() Author: Justin Hunter Published: 2025-03-06T00:00:00Z Content type: opinion Language: en Sources: [IPFS]() Topics: [IPFS](), [Website](), [P2P](), [Web Development](), [web-standards]() Tags: [css](), [html](), [ipfs](), [javascript](), [modern-web-development](), [object-object](), [open-web](), [peer-to-peer](), [website]() ### AI overview The article presents a manifesto for making website publishing simpler and more enjoyable. It argues that IPFS is a natural fit for open websites because content addressing can provide peer-to-peer access, availability when a node serves the data, and built-in versioning for site content. It also criticizes the complexity of modern web development and advocates the continued usefulness of HTML, CSS, and JavaScript. ### Source excerpt Building websites used to be fun. Let's bring back the joy of putting your work online by using open protocols like IPFS. ## Introducing the 2025 Academic Grants Round DevFeed: [Introducing the 2025 Academic Grants Round]() Original publisher: [Read original article]() Author: Shyam Sridhar Published: 2025-01-21T00:00:00Z Content type: release Language: en Sources: [Ethereum Foundation Blog]() Topics: [Ethereum](), [Algorithms](), [Cryptography](), [Formal verification](), [networking](), [P2P](), [Security]() Tags: [2025](), [academic-research](), [algorithms](), [announce](), [cryptography](), [ethereum](), [formal-verification](), [funding](), [funding-coordination](), [networking](), [p2p](), [pdf](), [security]() ### AI overview The Ethereum Foundation's Ecosystem Funding Initiative has opened its 2025 Academic Grants Round, offering $2 million for open-access academic research related to Ethereum. Proposals are due by March 16, 2025. ### Source excerpt The EF's Ecosystem Funding Initiative team is proud to announce the launch of the 2025 Academic Grants Round, a pioneering initiative aimed at empowering and expanding the frontiers of Ethereum-related academic research. With a dedicated fund of $2 million, we are eager to build upon the success of the previous... ## Using ESP-NOW in Arduino DevFeed: [Using ESP-NOW in Arduino]() Original publisher: [Read original article]() Author: John Lee Published: 2024-08-06T00:00:00Z Content type: tutorial Language: en Sources: [Blog on Developer Portal]() Topics: [Arduino](), [ESP32](), [Library](), [P2P](), [Protocol (disambiguation)](), [Low Latency](), [Programming](), [Encryption](), [Internet of things]() Tags: [arduino](), [arduino-ide](), [article](), [automation](), [battery](), [blog](), [c-plus-plus](), [communication](), [encryption](), [esp-now](), [esp32](), [esp32-c3](), [esp32-c6](), [esp32-s2](), [esp32-s3](), [examples](), [getting-started](), [how-to](), [iot](), [latency](), [low-power](), [microcontrollers](), [networks](), [scalability](), [sensor](), [wi-fi](), [wireless]() ### AI overview This tutorial explains how to use the ESP-NOW library included in Arduino 3.0.0 with supported ESP32 boards. It covers the protocol's connectionless peer-to-peer communication, low-latency and low-power characteristics, security features, prerequisites, and basic setup using Arduino and C++. ### Source excerpt This article presents information on how to use ESP-NOW with the Arduino core for Espressif devices. ## Gossip Protocol Explained DevFeed: [Gossip Protocol Explained]() Original publisher: [Read original article]() Author: NK Published: 2023-07-16T16:38:02Z Content type: article Language: en Sources: [High Scalability](), [High Scalability]() Topics: [Protocol (disambiguation)](), [distributed-systems](), [P2P](), [Availability](), [consistency](), [Scalability](), [Resilience](), [Network]() Tags: [availability](), [consistency](), [distributed](), [distributed-algorithm](), [distributed-system](), [distributed-systems](), [high-scalability](), [messages](), [network](), [protocol](), [resilience]() ### AI overview This article explains the gossip protocol as a peer-to-peer approach for managing state and communicating between nodes in distributed systems. It describes its relationship to high availability, eventual consistency, scalability, and resilience, and compares it with centralized state management, point-to-point broadcast, and eager reliable broadcast. ### Source excerpt You can subscribe to the system design newsletter to excel in system design interviews and software architecture. The original article was published on systemdesign.one website. What Is Gossip Protocol? The typical problems in a distributed system are the following [1], [11]: maintaining the system state (liveness of nodes) communication between nodes The potential solutions to these problems are as follows [1]: centralized state management service peer-to-peer state management service ## Grantee Roundup - Q1 2023 DevFeed: [Grantee Roundup - Q1 2023]() Original publisher: [Read original article]() Author: Ethereum Foundation Ecosystem Support Program Published: 2023-02-03T00:00:00Z Content type: article Language: en Sources: [Ethereum Foundation Blog]() Topics: [P2P](), [Ethereum](), [Encryption](), [Messaging](), [Protocol (disambiguation)](), [data](), [Algorithms, Complexity]() Tags: [announcement](), [ecosystem-support-program](), [encryption](), [ethereum](), [gitlab](), [messaging](), [offline](), [projects](), [protocol](), [release](), [report](), [research]() ### AI overview A quarterly roundup of Ethereum Foundation grantee progress, focusing on Dark Crystal's Ethereum dapp. The project uses peer-based secret sharing to distribute backups, with recovery requiring a threshold of shards. Its alpha dapp was published on Goerli, and the team is developing Waku v2 messaging, multi-wallet support, and an offline-first client. ### Source excerpt It's always fun to hear about new grants as they're awarded, but what happens after the announcement? In this series, we check in on projects that are well underway or already at the finish line. You may have noticed something different--instead of monthly posts, we'll be highlighting grantees who... ## Blockchain Concepts Explained Through Go Modules and Software Build Problems DevFeed: [Blockchain Concepts Explained Through Go Modules and Software Build Problems]() Original publisher: [Read original article]() Published: 2022-12-12T00:00:00Z Content type: tutorial Language: en Sources: [William Kennedy]() Topics: [Blockchain](), [P2P](), [Database](), [Go Language]() Tags: [blockchain](), [build-blockchain-from-scratch](), [cryptographically-auditable](), [database](), [digital-wallet](), [ecdsa](), [engineering](), [ethereum](), [genesis-file](), [go](), [go-blockchain](), [golang-blockchain](), [p2p]() ### AI overview This video introduces blockchain concepts, including its append-only and transparent database model, cryptographic auditability, and peer-to-peer network structure without a central authority. It explains these ideas through reproducible, durable, and secure software builds and the Go module system. ### Source excerpt Introduction In this video, Bill will introduce the concepts of what a blockchain is, the benefits of a blockchain, and the network environment it operates in. Bill describes a blockchain as a single, append-only, transparent, publicly available and cryptographically auditable database. Blockchains operate using a peer to peer (p2p) network with no single node designated as the central authority. To better understand what all that means, Bill begins to work through a familiar problem of creating reproducible, durable, and secure builds that software teams face. It's a real problem the Go team eventually solved with the new module system. As Bill uncovers different problems that present themselves, he introduces different blockchain concepts that can help provide a solution. ## Testing libraries for the Decentralized Web DevFeed: [Testing libraries for the Decentralized Web]() Original publisher: [Read original article]() Author: HTTP Toolkit; Tim Perry Published: 2022-10-24T17:00:00Z Content type: tutorial Language: en Sources: [HTTP Toolkit]() Topics: [Testing](), [IPFS](), [Ethereum](), [Integration testing](), [ci](), [WebRTC](), [JavaScript](), [P2P](), [web applications]() Tags: [ci](), [data](), [database](), [decentralized-web](), [ethereum](), [hosting](), [integration-testing](), [javascript](), [testing](), [web-applications](), [webrtc]() ### AI overview This article introduces MockIPFS and Mockthereum, network interception libraries for IPFS and Ethereum. It explains how they support automated integration testing and CI workflows while also serving as foundations for network proxy tools for decentralized web applications. ### Source excerpt The world of decentralized web applications is an exciting place that has exploded in recent years, with technologies such as IPFS and Ethereum opening up possibilities for a peer-to-peer web - creating applications that live outside the traditional client/server model, where users to interact and control their own data directly. At the same time, it's still immature, and for software developers it lacks a lot of the affordances & ecosystem of the traditional HTTP-based web app world. There's far fewer tools and libraries for developers working in this space. I've been working on improving this over the last year (as one part of a project funded by EU Horizon's Next Generation Internet initiative), by building network interception libraries for both IPFS & Ethereum: MockIPFS & Mockthereum. These each act as both an immediately useful automated testing library, to support modern integration testing & CI workflows, and a base for building more general network proxy tools for web applications using either (or both) technologies. If that sounds cool and you just want to jump straight in and try these for yourself, you can get started at github.com/httptoolkit/mockipfs/ and github.com/httptoolkit/mockthereum/. On the other hand, if you want to hear what this can do in practice, and learn a little about how it works under the hood, read on: A new way to build web apps Decentralized web apps often use a mix of many different technologies, at various layers of the stack, such as: IPFS - for decentralized static content hosting & data storage Ethereum - for decentralized consistent global state, computation on that state, and financial transactions Filecoin/Storj - for paid decentralized long-term content storage WebRTC - for peer-to-peer raw data transfer, and video/audio connections Service workers - a JavaScript API allowing fully offline web apps Handshake (HNS)/Ethereum Name System (ENS) - to map domain names to web applications GunDB - a decentralized database for the ## How to intercept, observe & mock WebRTC traffic DevFeed: [How to intercept, observe & mock WebRTC traffic]() Original publisher: [Read original article]() Author: HTTP Toolkit; Tim Perry Published: 2022-10-13T10:00:00Z Content type: tutorial Language: en Sources: [HTTP Toolkit]() Topics: [WebRTC](), [Tooling](), [P2P](), [Security & Privacy]() Tags: [debugging](), [developer-tools](), [how-to](), [interception](), [javascript](), [p2p](), [security-privacy](), [webrtc]() ### AI overview This tutorial explains why WebRTC traffic is difficult to inspect and mock, covering its peer-to-peer encryption, negotiated networking, and limited debugging APIs. It introduces MockRTC and describes how controlling one peer can enable interception, observation, and transformation of WebRTC traffic. ### Source excerpt WebRTC allows two users on the web to communicate directly, sending real-time streams of video, audio & data peer-to-peer, from within a browser environment. It's exciting tech that's rapidly maturing, already forming the backbone of a huge range of video chat, screen sharing and live collaboration tools, but also as a key technology for decentralization of web apps - providing a P2P data transport layer used by everything from WebTorrent to IPFS to Yjs. Unfortunately though, it doesn't have the tooling ecosystem that developers used to networking with HTTP often expect. There's few supporting tools or libraries, inspecting raw traffic is hard or impossible, and mocking WebRTC traffic for automated testing is even harder. Even built-in low-level browser tools like chrome://webrtc-internals don't allow seeing messages sent on WebRTC data channels. It's hard to build modern secure web applications on top of protocols that you can't directly see or interact with. This doesn't just affect developers: it also seriously impacts security & privacy researchers and reverse engineers, each trying to investigate the traffic sent & received by the apps we all use. If you want to know what data a webapp you use is sending over WebRTC, right now it's very hard to find out. Intercepting WebRTC traffic to build these tools and libraries is difficult, because unlike protocols like HTTP that were designed to allow active proxying and user-configureable PKI (i.e. CA certificates) early on, WebRTC encrypts all traffic using peer-to-peer negotiated certificates for authentication without PKI, communicates in a wide variety of different negotiated ways at the network level to avoid NAT issues, and offers no convenient APIs to configure this for debugging. All of this provides some great features to the protocol as a user, but some serious challenges when building developer tools. As it turns out though, despite this, there are just enough places where we can hook into that it is possible ## Academic Grants Round grantee announcement DevFeed: [Academic Grants Round grantee announcement]() Original publisher: [Read original article]() Author: Ethereum Foundation Ecosystem Support Program Published: 2022-07-29T00:00:00Z Content type: release Language: en Sources: [Ethereum Foundation Blog]() Topics: [Ethereum](), [Cryptography](), [networking](), [P2P](), [zero-knowledge]() Tags: [announcement](), [ecosystem](), [ecosystem-support-program](), [ethereum](), [projects](), [research]() ### AI overview The Ethereum Foundation announces 39 grantees selected for its Academic Grants Round. The supported projects span seven categories, including economics, consensus, P2P networking, cryptography, and zero-knowledge proofs. The grant budget increased from $750,000 to $2 million. ### Source excerpt We are thrilled to announce the 39 grantees selected for the recent Academic Grants Round. This grants round invited researchers, think-tanks, Ph.D. students, and all those interested in advancing knowledge around the Ethereum ecosystem to submit academic proposals. Thank you to all those who submitted proposals, and congratulations to... [Next page]()