pablochacon

joined 8 months ago
[–] pablochacon@lemmy.ml 1 points 1 day ago

I recently added a cwtch-sidecar implementation template in the substrate repo. Hope it's interesting.

[–] pablochacon@lemmy.ml 2 points 1 month ago

Well since this isn't a application I would say there's some work you need to do first. A good place to start is in this documentation: https://github.com/pablo-chacon/camo/blob/main/docs/mobile_onion_routing_spec.md

For something more "out of the box", I'm working on something but it's a different layer... And I have a few quirks to work out first.

 

I made a discovery while digging into GSM signaling architecture. When you forward a call cross-carrier, each carrier in the chain only sees adjacent hops. That's just how GSM works. But that means cross-carrier forwarding behaves like a proxy chain. This is a fundamental property of the protocol, not something engineered on top of it. That realization is what CAMO is built on. If cross-carrier forwarding produces partial visibility at each node by default, you can compose that property deliberately. Add M2M private APNs for jurisdictional breaks, rotating eSIM pools so no stable SIM identity persists, WireGuard tunnels between nodes, a signed gossip protocol for node discovery and what you get is onion routing at the cellular radio layer. No single node sees both origin and destination. Chains rotate every 10 minutes. eSIM pools rotate on independent non-synchronized timers. Anyone can run a node. No registration, no fee, no central authority.

The components are all decades-old standards: GSM forwarding, GTP-U, private APNs, GSMA SGP.02, WireGuard. CAMO is the recognition that they compose into something that didn't formally exist before. The enforcement-resistance is structural, not designed. Disabling CAMO requires disabling private APNs and eSIM provisioning which collapses enterprise IoT globally. Tor protects the IP layer. CAMO protects the radio layer. They're complementary.

Spec, threat model, reference deployment: https://github.com/pablo-chacon/camo

CC BY 4.0.

[–] pablochacon@lemmy.ml 2 points 2 months ago* (last edited 2 months ago)

Technically: yes. The ERC primitive can act as a verification key. All identity data stays off-chain at the platform layer. The protocol anchors the proof, not the data. That said it's possible if done with discipline and no PII on-chain. Similar like in the CUT protocol, the token isn't access to the files, it's authorization to access the decryption key of the files. 👍

[–] pablochacon@lemmy.ml 1 points 2 months ago* (last edited 2 months ago)

As your joke about github vs privacy, I fully agree. But I did this a certain way of several reasons, all design choices has a explanation if you read the docs. And one is the transparency, it's like 3 clicks then you could verify. It wasn't about my privacy in relation to the code, it's privacy regarding real world/"titts-for-tatts"/seller-buyer transactions. But in general my imposter syndrome doesn't like to much discussions in forums. So I'm pretty good at "post&run" to quietly watch on a distance like a creep. And that's pretty much what you could expect from me.

[–] pablochacon@lemmy.ml 2 points 2 months ago* (last edited 2 months ago)

Before dismiss anything based on assumptions it is actually possible to verify that this isn't a AI account. Knowing is better then assuming. 😉 In opposite to a "AI-account" I'm not good at human interaction. Always same result: they're looking at me, nod their head like they understand. But I see in their eyes they don't. I just hope that others understand what I'm trying to communicate. But on the other hand the "good catch" is very AI-suspicious. How can I know you're not 2 AI-accounts that want this dismissed?

[–] pablochacon@lemmy.ml 2 points 3 months ago

Thanks for the link fix, and the appreciation.

[–] pablochacon@lemmy.ml 1 points 3 months ago

Existing platforms settle real-world transactions too, but the rails they run on are owned and operated by someone. That operator can raise fees, gate access, extract data, be acquired, be regulated into compliance, or be pressured by any sufficiently motivated actor. The settlement behavior is only as neutral as the operator chooses to be. These protocols have no operator. The fee is immutable at the protocol layer. The contracts are deployed with renounced ownership. There is no entity that can modify the behavior, no platform that can be captured, and no intermediary between the user and the settlement rail.

 

I have deployed a collection of independent smart contract protocols on Ethereum mainnet. Each one is finished infrastructure. No governance, no upgrade path, no owner. Ownership is renounced on all contracts. The contracts are deployed and the keys are gone.

This post is for the privacy angle. The full technical documentation is in the repo linked at the bottom.


Minimal data, by architecture

No protocol stores personally identifiable information. On-chain data is limited to cryptographic commitments, timestamps, addresses, and amounts. All sensitive data stays off-chain with the parties involved.

This is GDPR compliant by architecture, not by policy. There is no personal data to protect because the system is not designed to collect it. The deployer controls their own data. The user controls their own disclosure.


No operator, no capture

The contracts are deployed with renounced ownership. There is no entity that can be subpoenaed, pressured, or acquired. The privacy is structural, it holds regardless of what any individual, platform, or authority wants.

Most privacy tools rely on the trustworthiness of an operator. These protocols have no operator to make promises and no operator to break them.


Currency agnostic

Every protocol settles on Ethereum mainnet. What currency a user pays in is a platform decision. A platform can accept XMR, BTC, ETH, fiat, or any combination and convert to ETH at the platform layer before interacting with the protocol.

Combined with the atomic, hop-by-hop settlement structure, this means the payment trail fragments naturally across chains without any privacy feature being explicitly designed in. It is a structural consequence of currency agnosticism and independent atomic settlements.


Human rights and legal grounding

The right to private correspondence is not a crypto argument. It is a human rights argument.

Universal Declaration of Human Rights, Article 12 covers it. ECHR Article 8 covers it. GDPR covers it. A parcel dispatched between two parties with no central record of who sent what to whom is functionally identical to a sealed letter. The legal and moral precedent for protecting that is centuries old.

These protocols are built in that direction. Anyone arguing against this privacy model is arguing against the existing human rights framework.


Documentation, protocol repositories, template repositories, and orchestration examples:

https://github.com/pablo-chacon/the-substrate

[–] pablochacon@lemmy.ml 1 points 8 months ago

Thanks I'll check it out. 😀

[–] pablochacon@lemmy.ml 1 points 8 months ago (2 children)

I understand the skepticism and it's justified, NFTs have gotten a bad rep. =) Personally, I never speculated on NFTs. It’s never been my thing. But the tech itself? Solid. It’s just been misused.

Just because a technology gets applied poorly doesn’t make it inherently bad. This is why I think they're perfect for this use case:

An NFT is just a digital record of ownership for something non-fungible (i.e., unique and indivisible). Unlike fungible tokens like ETH or BTC (which you can split or mix), an NFT always refers to one unique thing.

In the case of DeDe, the NFT represents a parcel, not a jpg, not art. The NFT holds metadata like:

Parcel ID

Lifecycle state (e.g. Created, PickedUp, Delivered)

Reference to encrypted pickup/dropoff info

It’s not trying to “put the package on-chain,” just anchor its identity and state in a verifiable, tamper-proof way. If someone tries to fake a parcel NFT, the metadata won’t match, you’ll instantly detect it as invalid. This is way harder to spoof than a PDF shipping label or a database entry.

Same tech could be used for:

Title deeds

Car ownership

Event tickets

Access credentials

So yeah, NFT hype was a mess, but the primitive itself is useful when applied to real-world logistics, ownership, and transfer.

[–] pablochacon@lemmy.ml 1 points 8 months ago

Thanks for the thoughtful critique. Some clarification to help:

DeDe isn’t trying to replace FedEx/UPS/USPS.

DeDe is not a platform or an app. It’s a protocol, closer to TCP/IP than Uber.

It handles one function only:

escrow -> pickup -> dropoff -> finalize

Everything else (matching, identity, trust, messaging, routing) is off-chain, by design. That separation is what preserves privacy and prevents metadata leakage.

What problem DeDe actually solves

Not postal logistics, those require fleets, warehouses, and fixed infrastructure.

DeDe addresses the centralized crowdshipping model used by Uber/Doordash/Amazon Flex:

• zero privacy • centralized control • data extraction and surveillance • wage manipulation • platform lock-in • mandatory identity • opaque matching

DeDe gives communities the same underlying mechanics of crowdshipping without a corporation in the middle collecting or exploiting sender/carrier/destination data.

No tracking, no identity, no metadata

Parcel NFTs only encode:

• parcel ID • escrow amount • lifecycle state

No names, addresses, routes, timestamps, or identities. All sensitive information stays off-chain.

DeDe doesn’t broadcast parcels, seek couriers, or coordinate delivery. It only settles funds trustlessly.

No token, no speculation

• no governance token • no staking token • no inflation • no “earn crypto for nothing” • no VC angle

Ethereum is used strictly as a neutral, permissionless escrow layer.

In short

DeDe is a tiny, open, neutral settlement rail for P2P delivery, just infrastructure communities can use or ignore as they like.

Regarding environmental footprint:

Blockchain environmental impact depends on how electricity is produced, not on the existence of computation itself. Electricity demand has been rising for decades, long before blockchains or AI, and will continue to do so.

If critical economic infrastructure depended on abundant, cheap green power, it would create a strong incentive for energy producers to scale sustainable sources faster. The largest investors in green energy today are still heavily tied to fossil fuels, so shifting economic incentives can help accelerate the transition.

[–] pablochacon@lemmy.ml 1 points 8 months ago

Actually I never thought about it. That's a good idea. Thanks. =) But all the data about the project needed is in:

  1. README.md
  2. WHITEPAPER.md
  3. DeDe-FAQ.md
 

This is DeDe (Decentralized Delivery) Protocol:

Not a token, not speculation. It’s infrastructure, deployed on Ethereum mainnet.

We’re watching the same pattern everywhere: Postal systems collapsing. Parcels lost, broken, stolen or seized. Increased surveillance, ID requirements, more decay. Less reliability, less privacy, less dignity.

The institutions that were supposed to protect our right to communication are failing, even though privacy of correspondence is guaranteed under UN Article 12 and ICCPR Article 17.

So instead of being stuck in surveillance and Inefficiency-As-A-Service, we have to build parallel systems immune to centralized control. Systems by us for us, in the spirit of the Fediverse:

community-powered

decentralized

permissionless

protocol, not platform

no corporations

no bosses

no surveillance

no extraction

DeDe (Decentralized Delivery) is not a token, not a scam, not a VC product, not a walled garden. It’s a rail, an open delivery settlement layer anyone can build on.

What it does:

Every parcel is an NFT with a lifecycle

Escrow is automatic, trustless, and transparent

Anyone can create an NFT-Parcel

Anyone can carry parcels while they’re already on the move

No fleets, no gig exploitation, no “shadow wages”

Zero extra CO₂, use the movement people already make

Protocol fee is immutable (0.5%), so nobody can rug / extract

Privacy is natively built in.

Fully MIT-licensed & open-source

It’s not a startup. It’s not a marketplace. It’s not a company.

It’s the peoples infrastructure for physical logistics.

Because if we want a free world, we can’t outsource critical communication infrastructure to decaying governments, surveillance corps, or gig economy parasites.

If you want to understand the philosophy behind it, here’s the full manifesto + artwork:

Medium: https://medium.com/@ekarlsson66/dede-the-delivery-rail-for-a-free-world-e7be944b90fc

If you want to poke around the contracts:

DeDe Protocol GitHub (MIT): https://github.com/pablo-chacon/dede-protocol

DeDe Quik-Start Templates GitHub (MIT): https://github.com/pablo-chacon/dede-templates

No pressure to “like crypto.” DeDe is just a tool. Use it, fork it, ignore it. All up to you. More decentralized civilizational fundamentals, means less dependency of collapsing control systems. We must have working alternatives when the centralized systems break down.

Against decay, we build. That’s the spirit of the fediverse. That’s the spirit of DeDe.

view more: next ›