This project demonstrates how Autonomi Network’s powerful CLI functionality can be wrapped in a user-friendly GUI. Autonomi Network is building “an Internet controlled by no-one, owned by us all” - secure, encrypted, and autonomous infrastructure for the next web.
Project Goals
Aligned with Autonomi Network’s vision:
Support the creation of a decentralized internet infrastructure
Enable users to participate in the quantum-secure, private network
Make network operations accessible to non-technical users
Help utilize the untapped storage capacity of everyday devices
Facilitate the growth of a truly decentralized web
Features
Register Operations
Create and manage human-readable names on the network
Associate names with values
View all registered names
Secure operations with signing keys
Key Management
Generate quantum-secure signing keys
Option to overwrite existing keys
Automatic key detection and management
Vault Operations
Create and manage network vaults
Participate in the decentralized storage network
Configure vault settings (delay, local mode)
Monitor vault status and health
Contribute to the network’s storage capacity (currently at 61.94 PiB)
I’m not a python expert and haven’t looked through the code.
Are the red flags just due to unstructured code or something more sinister?
I suspect we will have lots more wee projects that folks are trying to get feedback on. Maybe they should be run in VM/sandbox/container to start with? That should limit impact of any rogue code.
Edit: To add, we don’t want to be hostile and put folks off either, ofc.
I’d be a bit suspicious because it seems to have come out of nowhere.
It’s not much of a red flag, but as the code is from an unknown / untrusted source, I’d definitely be happier trying it once some knowledgeable people have checked the code for anything dodgy.
I am not negative and if it’s real then well done to that person. The GitHub is an org, but not public org, so we cannot see who did it. Quick scan from me shows nothing obvious, but it seems to all have appeared 2 weeks ago with some stuff also about radios and a wee bit of anti Russian sentiment. It could be folk looking to be anonymous and find ways to share sensitive data or similar. It’s hard to tell, so definitely caution required here IMO.
Again if it’s legit, then amazing, but this is another area we need to consider, how do we as a community bootstrap and verify apps or help folk build trust and so on. Not a simple task
Government hacker groups think months or YEARS down the line.
This code could be perfectly clean right now, with the plans to slowly put small “mistakes” or lines of code in. Maybe only for a few weeks to try to get their foothold in someone’s network (Autonomi devs).
Absolutely - I’m aware of Chrisfostertv’s involvement over the years, but I think he was just sharing this after seeing it on Discord rather than being involved in the development. Could be wrong.
Actually so could I – too busy arguing/discussing/debating with you rather than getting on with the real work of looking at this harder
When I see a username like “NAFOradio” then we ALL have every right to be extremely suspicious. The losers in this current existential conflict will try anything to subvert progress.
Remember it was wankers like “NAFOradio” and their fellow-travellers who last week lobbed a suicide drone at the Cherobyl containment dome, massacred civiliansin Bucha and Kursk and continue to do so every day in Belgorod and stupidest of all, tried to take out a pumping station that is/was 50% owned by a US corporation.
But thats MY prejudices, please ignore/apply your own.
Whatever, take all the politics out of it ( they started it with an aggressive username) and we should still be wary of such a body of code coming out of nowhere.
I was wrong - @chrisfostertv was only reporting this and AFACS did not author any of it. Well spotted @chrisfostertv
Yea, what I said pretty much goes for any software anywhere.
I’m looking for a years old article reporting on some government doing exactly what I’m warning about.
In the end though there are only so many people that can read programming, and FAR FEWER that can understand hidden malicious code. So we have to trust someone somewhere. For now here, the vast majority of us here have implicit trust of the Autonomi team. Of coarse their code should still be reviewed periodically by professional 3rd parties, to try to find mistakes that could be dangerous.
There is a new user in Autonomi Network discord making comments with the name NAFOradio now. Their discord account was started Feb 12, 2025. Same person then?
Dunno, I suspect it could be part of a team moved over here now their USAID money has dried up.
Let’s just say they will be watched closely for any hint of fomenting dissent and trying to lead us down blind alleys.
We already have one new user who seems keen on causing bother while outwardly appearing “helpful”.