RetroShare

From Wikipedia, the free encyclopedia
Jump to navigation Jump to search
RetroShare
Retroshare-symbol.png
RetroShare 0.6 screenshot.png
Original author(s)Robert Fernie
Developer(s)
  • Cyril Soler
  • Gioacchino Mazzurco
Initial release2006; 13 years ago (2006)[1]
Stable release
0.6.5[2] / 12 February 2019; 6 months ago (2019-02-12)
Repositorygithub.com/RetroShare
Written inC++
Operating systemLinux, Windows, macOS, Android, FreeBSD, OpenBSD, NetBSD, Haiku
PlatformCross-platform
Available in38 languages[3]
List of languages
English, Arabic, Bulgarian, Catalan (Spain), Chinese (China), Chinese (Taiwan), Czech, Danish, Dutch, Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hungarian, Indonesian, Italian, Japanese, Korean, Macedonian, Malayalam, Norwegian Bokmål, Occitan, Polish, Portuguese, Portuguese (Brazil), Portuguese (Portugal), Romanian, Russian, Serbian, Slovenian, Spanish, Swedish, Turkish, Ukrainian, Vietnamese
TypeAnonymous P2P, friend-to-friend, chat, instant messaging, newsgroups, voice over IP, email client and BBS
LicenseGNU General Public License
Websiteretroshare.cc

RetroShare is a free and open-source peer-to-peer communication and file sharing app based on a friend-to-friend network built on GNU Privacy Guard (GPG). Optionally, peers may communicate certificates and IP addresses from and to their friends.[4][5]

History[edit]

There has been an unofficial build for the single-board computer Raspberry Pi, named PiShare, since 2012.[6]

The web site 'PRISM Break' has recommended RetroShare for anonymous file sharing since 2013.[7]

On November 4, 2014, RetroShare scored 6 out of 7 points on the Electronic Frontier Foundation's secure messaging scorecard. It lost a point because there has not been a recent independent code audit.[8]

In August 2015, RetroShare repository was migrated from SourceForge to GitHub. [9]

Design[edit]

RetroShare is an instant messaging and file sharing network that uses a distributed hash table for address discovery. Users can communicate indirectly through mutual friends and request direct connections[10].

Features[edit]

Authentication and connectivity[edit]

After initial installation, the user generates a pair of (GPG) cryptographic keys with RetroShare. After authentication and exchanging an asymmetric key, OpenSSL is used to establish a connection, and for end-to-end encryption. Friends of friends cannot connect by default, but they can see each other, if the users allow it. IPv6 support was merged[11] into the master branch and will be released in the next version.

File sharing[edit]

It is possible to share folders between friends. File transfer is carried on using a multi-hop swarming system (inspired by the "Turtle Hopping" feature from the Turtle F2F project, but implemented differently). In essence, data is only exchanged between friends, although it is possible that the ultimate source and destination of a given transfer are multiple friends apart. A search function performing anonymous multi-hop search is another source of finding files in the network.

Files are represented by their SHA-1 hash value, and HTTP-compliant file and links may be exported, copied, and pasted into/out of RetroShare to publish their virtual location into the RetroShare network.

Communication[edit]

The services that RetroShare offers for communication are:

  • a private chat
  • a private mailing system allow secure communication between known friends and distant friends
  • public and private multi-user chat lobbies
  • a forum system allowing both anonymous and authenticated forums which distributes posts from friends to friends
  • a channel system offers the possibility to auto-download files posted in a given channel to every subscribed peer, similar to RSS feeds
  • a posted links system, where links to important information can be shared
  • VoIP calls
  • Video calls (since version 0.6.0)
  • Tor and I2P networks support, for further anonymisation (since version 0.6.0).

User interface[edit]

The core of the RetroShare software is based on an offline library, to which two executables are plugged:

  • a command-line interface executable which offers nearly no control, but it is useful to run "headless" on a server
  • a graphical user interface written in Qt is the one most users use. In addition to functions quite common to other file sharing software, such as a search tab and visualization of transfers, RetroShare gives users the potential to manage their network by collecting optional information about neighboring friends and visualizing it as a trust matrix or as a dynamic network graph. The appearance can be changed by choosing one of several available style sheets.

Anonymity[edit]

The friend-to-friend structure of the RetroShare network makes it difficult to intrude and hardly possible to monitor from an external point of view.[citation needed] The degree of anonymity may be improved further by deactivating the DHT and IP/certificate exchange services, making the RetroShare network a real dark net.[12]

Friends of friends may not connect directly with each other; however, a user may enable the anonymous sharing of files with friends of friends. Search, access, and both upload and download of these files are made by "routing" through a series of friends. This means that communication between the source of data (the up-loader) and the destination of the data (the down-loader) is indirect through mutual friends. Although the intermediary friends cannot determine the original source or ultimate destination, they can see their very next links in the communication chain (their friends). Since the data stream is encrypted, only original source and ultimate destination are able to see what data is transferred.

Caveats[edit]

Is important to remember that while RetroShare’s encryption makes it virtually impossible for an ISP or another external observer to know what one is downloading or uploading, this limitation does not apply to members of the user's RetroShare circle of trust; adding the wrong people to it is a potential risk.[13]

In 2012, a German Court granted an injunction against a user of RetroShare for sharing copyrighted music files. RetroShare derives its security from the fact that all transfers should go through “trusted friends” whom users add. In this case, the defendant added the anti-piracy monitoring company as a friend, which allowed him to be “caught.”[14]

See also[edit]

References[edit]

  1. ^ "RetroShare aims to be a private F2F social network | SourceForge Community Blog". Sourceforge.net. 2010-05-11. Retrieved 2016-12-04.
  2. ^ Cyril (12 February 2019). "Release notes for v0.6.5".
  3. ^ "RetroShare localization". Transifex.com. Retrieved 2016-12-04.
  4. ^ "Anonymous, Decentralized and Uncensored File-Sharing is Booming". TorrentFreak. 2012-03-03. Retrieved 2016-12-04.
  5. ^ "Handbook of Peer-to-Peer Networking | Xuemin (Sherman) Shen". Springer. Retrieved 2016-12-04.
  6. ^ "PiShare download". SourceForge.net. Retrieved 2016-12-04.
  7. ^ Peng Zhong (2003-07-16). "Projects". PRISM Break. Retrieved 2016-12-04.
  8. ^ "Secure Messaging Scorecard. Which apps and tools actually keep your messages safe?". Electronic Frontier Foundation. 2014-11-04.
  9. ^ Community, RetroShare. "History - RetroShare Docs". retroshare.readthedocs.io. Retrieved 2018-01-28.
  10. ^ M, Rogers,; S, Bhatti, (2007). "How to Disappear Completely: A Survey of Private Peer-to-Peer Networks". discovery.ucl.ac.uk. Retrieved 2018-01-28.
  11. ^ "IPv6 support by G10h4ck · Pull Request #1191 · RetroShare/RetroShare". GitHub.
  12. ^ "Anonymous, Decentralized and Uncensored File-Sharing is Booming - TorrentFreak". TorrentFreak. 2012-03-03. Retrieved 2018-01-28.
  13. ^ "Increase online privacy with RetroShare". Doug Vitale Tech Blog. 2013-07-29. Retrieved 2018-01-28.
  14. ^ ""Anonymous" File-Sharing Darknet Ruled Illegal by German Court - TorrentFreak". TorrentFreak. 2012-11-23. Retrieved 2018-01-28.

External links[edit]