►
From YouTube: Rotki: Why it’s Open Source and Local-First and Why Should You Care? by Konstantinos Paparas
Description
Visit the https://archive.devcon.org/ to gain access to the entire library of Devcon talks with the ease of filtering, playlists, personalized suggestions, decentralized access on Swarm, IPFS and more.
https://archive.devcon.org/archive/watch/6/rotki-why-its-open-source-and-local-first-and-why-should-you-care/
This will be a talk on the why we need opensource, local-first privacy preserving tools in this field.
Reiterate the benefits of opensource and the cypherphunk ethos that built the crypto field. Ponder why so many people still develop closed source centralized tools and explain why this is contrary to the core ethos of the field.
Then by using rotki as a main example show how things can and should be done differently. The opensource, local-first way.
Explore both benefits and drawbacks
Speaker(s): Konstantinos Paparas
Skill level: Intermediate
Track: Opportunity & Global Impact
Keywords: opensource,privacy,local-first-software,data-ownership
Follow us: https://twitter.com/efdevcon, https://twitter.com/ethereum
Learn more about devcon: https://www.devcon.org/
Learn more about ethereum: https://ethereum.org/
Devcon is the Ethereum conference for developers, researchers, thinkers, and makers.
Devcon 6 was held in Bogotá, Colombia on Oct 11 - 14, 2022.
Devcon is organized and presented by the Ethereum Foundation, with the support of our sponsors. To find out more, please visit https://ethereum.foundation/
A
A
Driving
principles
behind
development
Road
key,
so,
let's
start
so,
who
am
I
I,
have
been
doing
application,
development,
local
mobile
and
web
since
2010,
most
of
the
time
of
the
most.
The
time
of
this
was
doing
open
source
and
have
I
have
been
the
erotic
contributor
since
2018
handling
parts
of
the
front-end
infrastructure
packaging.
So
what
you
do
in
startup,
pretty
much
touching
all
over
the
code
base.
A
A
They
can
use
it
to
train
muscle,
learning
algorithms
use
it
for
whatever
reason
there
is
no
transparency
and
you
have
to
trust
that
they
use
it
as
they
claim
they
might
claim
that
they
have
encryption,
but
you
don't
have
any
way
to
verify
that
there
is
no
master
key
and
there
is
no
way
to
be
sure
that
all
the
claims
are
true.
Then
your
data
can
leak.
This
can
happen
with
different
ways
like,
for
example,
accidents
and,
in
turn,
go
to
much.
A
Success,
didn't
know
what
they
were
doing
and
all
your
private
information
is
public
or
hacks,
or
some
companies
just
outright
sell
data.
There
was
a
nice
John
Oliver
episode
about
data
Brokers.
That
was
really
scary
on
how
much
information
they
could
get
about
people
even
sensitive
information
like
healthcare
and
the
exact
point
where
people
were
living
then
other
problems
are
that
companies
can
go
out
of
business
and
then
basically,
you
lose
access
to
all
your
data.
Another
problem
can
be
that
they
come
to
platform.
You
something
happens.
A
A
Then
we
had
the
case
of
snapshot
where
employees
were
abusing
data
access
to
justify
on
users
and,
as
we
saw
like
uber,
was
hacked
recently
by
a
teenager.
So
it's
easy
to
you
know.
If
your
public
information
goes
out,
then
there
is
no
way
back.
Then
we
had
the
leather
hack,
like
people
were
receiving
mail
at
their
homes,
which
can
be
really
scary
because
their
public
addresses
their
private
addresses.
The
home
addresses
were
outside
in
public.
A
A
Everyone
can
use
a
software.
We
also
have
cases
of
software
that
has
public
available
code,
but
it
is
endometristers.
Some
examples
include
you
know.
The
delayed
open
source
lines
license
that
a
uniswap
another
have,
and
maybe
mongodb
server-side
public
license
and
in
a
lot
of
cases,
I
can
understand
the
reason
behind
that,
because
it's
really
hard
for
open
source
projects
to
fight
against
big
companies.
A
So
why
open
source?
There
are
some
strong
benefits:
Building
open
source.
You
can
have
a
strong
Community
involvement,
you
can
have
transparency,
reliability,
security
and
it
also
makes
it
attracting
Talent
easier
and
it
avoids
also
a
vendor
login.
So,
like
Community
involvement,
there
are
people
around
like
someone
needs
a
feature
we
might
be
overwhelmed
and
someone
with
technical
Technologies
can
come
and
contribute
to
the
code
base
and
not
their
future
that
they
want
to
use.
So
other
people
can
also
use
it.
A
The
non-technical
people
can
contribute
with
translations,
making
the
app
available
to
bigger
amount
of
people
or
documentation
or
just
open
issues.
The
code
is
really
transparent,
like
you,
don't
have
to
trust
what
the
developer
claims
that
the
software
does.
You
can
easily
read
the
code
or
other
people
can
read
the
code
and
verify
that
these
claims
are
actually
true
and
open
source
software
tends
to
be
more
reliable
and
secure.
It's
pretty
viewed,
so
anyone
can
read
the
code
and
it's
easier
to
spot
flaws
earlier
run
closed
Source.
A
We
have
like
a
software,
we
always
use
that
is
really
robust.
Like
example,
for
example,
Firefox
the
Linux
kernel,
ethereum,
clients
and
Unix,
and
this
is
highly
Reliable
Software
we
use
everywhere
and
it's
all
open
source,
then
open
source
can
make
attracting
Talent
really
easy,
because
it's
always
easier
to
hire.
Someone
that
you
have
previously
worked
with.
You
had
the
good
interaction
and
then
maybe
you
also
text
your
code
and
you
can
see
in
an
easier
way
that
someone
is
a
good
fit
for
your
culture,
which
is
not
always
the
case.
A
When
doing
some
small
interviews-
and
you
know
like
giving
some
kind
of
task
and
then,
like
I,
said
you
can
avoid
ventral
login,
you
always
have
access
to
the
source
code.
You
always
have
access
to
the
application.
You
can
check
the
data,
you
can
access
the
data,
so
in
case
you
want
to
move
and
migrate
from
the
platform.
It
becomes
really
easy
because
you
can
access
everything,
so
the
biggest
problem
with
open
source
is
funding
because
it's
hard
to
want
to
monetize
the
openness
of
software.
A
We
had
like
some
major
incidents.
For
example,
there
was
the
look
for
j-hack
or
the
opening
system
had
bleed,
and
we.
What
we
found
out
out
of
this
is
that
you
had
a
couple
of
overwhelmed
software
developers,
maintaining
infrastructure,
critical
software
and
everyone
using
it,
but
they
were
always
underfunded.
No
one
was
paying
for
that
and
these
led
to
huge
security
problems,
so
there
are
different
ways
to
fund,
but
it's
always
difficult.
For
example,
you
can
accept
donations,
you
can
have
as
we
do
in
Rocky.
A
We
can
get
grants
for
Integrations
with
other
protocols.
Git
concurrence
is
something
that
help
us
a
lot
to
build
the
software
and
then
we
have
premium
subscriptions,
but
this
doesn't
really
work
because
it's
hard
to
monetize
retail-
and
you
know,
as
a
nice
small
software,
it's
hard
for
us
to
actually
have
the
amount
of
people
that
we
would
need
to
have
a
sustainable
source
of
income.
A
A
So
by
network
is
optional.
We
don't
mean
that
you
don't
have
access
to
the
network
like
you
can
use
your
Wi-Fi.
You
can
use
your
local
network
to
access
to
access.
Blockchain
data,
maybe
get
some
your
trades
from
centralized
exchanges.
What
this
means
is
that
all
the
processing
of
this
data
happens
locally
on
your
machine
data
is
not
pushed
to
a
remote
server.
It's
not
pushed
to
a
remote
API.
Everything
happens
transparently
on
your
machine,
so
your
local
data
is
primary.
A
The
primary
source
of
data
is
Google
Drive
any
copies,
if
you
have
are
usually
some
kind
of
cars,
some
secondary
copy,
and
while
it's
unlikely
in
the
the
case
of
Google
Drive,
if
your
cloud
provider
goes
out
of
business,
then
you
might
lose
everything
then,
because
everything
is
stored
locally
on
your
machine,
it's
more
secure
and
it's
harder
to
leak
than
if
you
had
everything
on
a
data
center,
because
you
are
the
owner,
you
control
the
machine
and
you
can
actually
better
protect
them.
So,
let's
talk
about
large
game.
A
A
The
lucky
team
is
not
only
Lefteris
like,
we
know
he's
kind
of
superhumor,
but
he
cannot
do
everything
on
his
own.
Currently,
the
rocky
team
consists
of
seven
people,
six
Developers
and
one
person
handling
operations
from
the
developers
who
have
lift
teres,
which
most
of
you,
if
not
everyone,
knows
then
I'm
doing
he
does
back-end.
You
know
Business
Development.
He
does
a
lot
of
stuff,
then
I'm
doing
mostly
front-end
back-end
infrastructure.
A
Like
I
said,
then
we
have
jabir
that
handles
also
backend
lucky
is
working
with
me
on
front
end
and
his
has
been
a
really
great
help,
and
then
we
have
Isaac
and
Alexi,
which
are
our
newest
members
that
also
do
backend
and
finally,
Selena
left.
There
is
wife
that
really
helps
us
with.
You
know
the
non-technical
stuff
that
the
company
needs
and
we
are
really
glad
to
have
her.
So
we
are
building
the
road
key
across
some
like
three
basic
principles.
A
Key
is
open
source
local
first
and
it
uses
encryption
to
store
the
data.
With
this
we
can
guarantee
that
the
functionality
is
transparent.
Like
you,
don't
have
to
actually
trust
us.
You
can
verify
on
how
we
handle
your
data
and
how
the
app
works,
because
it's
a
local
lab
is
beyond
the
data.
We
don't
have
access
to
your
data.
We
don't
know
anything
about
your
data,
any
address
any
account
anything
you
put
on
rotkey
stays
locally
encrypted
in
the
database
in
your
machine.
A
A
So,
let's
talk
about
terrific
architecture,
rodkey
is
split
into
parts,
one
is
the
python
backend
and
the
other
is
the
front
end.
The
front
is
really
simple:
just
calls
the
back
end
and
it's
what
you
see
when
you
open
the
app
the
backend
does
all
the
data
processing.
It
calls
open
apis
open
nodes,
or
maybe
you
can
also
add
your
local
nodes.
So
if
you
run
in
your
own
ethereum
node
a
lot,
he
can
hit
it
and
it
will
be
immensely
faster
than
hitting
public
notes.
A
A
The
way
we
package
is
the
wa,
so
we
have
an
electron
app
that
is
available
for
Mac,
OS,
Linux
and
windows,
and
we
now
Support
also
arms,
Apple
silicon
Max,
and
then
we
have
the
Dockery
mods
where
you
can
deploy
on
a
machine.
You
control
and
you
can
access
it
via
web.
Although
you
should
be
careful
there,
because
rotkey
was
foremostly
designed
as
a
local
app.
A
So
it
would
be
better
if
you
have
a
proxy
in
the
front
for
security
reasons,
and
then
there
is
another
way
to
bar
and
rotkey.
If
you
own
the
dub
node,
there
is
a
top
note
packets
and
we
are
in
close
collaboration
with
dubnod,
which
makes
things
really
easier
and
we
want
to
improve
the
experience
there.
So,
for
example,
we
are
working
to
make
Auto
configuring
your
local
nodes
in
rodkey
automatic,
so
rodky
does
portfolio
tracking.
A
At
the
moment,
we
support
ethereum
kusama,
polka,
dot,
Avalanche
Bitcoin,
cast
and
Bitcoin,
along
with
a
number
of
centralized
extensions,
nd5
protocols
in
the
next
release.
In
this
we
are
doing
work
so
that
it
makes
it
easier
for
us
to
support
multiple
VM
chains.
So
slowly
we
will
start
adding
support
for
multiple
VM
chains,
starting
with
optimism.
A
A
In
this
example,
you
can
see
me
basically
migrating
400
side
to
die
and
then
selling
them
for
1.7
nif
on
kyber,
then
we
have
accounting
Accounting
in
red
key
is
customizable.
We
try
to
be
as
general
as
we
can
so
that
we
can
support
as
many
jurisdictions.
You
can
parameterize
how
you
generate
your
p
l
report
and
then
you
can
export
the
CSV
that
you
can
pass
to
your
accountant
and
do
your
tax
record.
A
A
So
we
have
graphs
for
statistics,
although
they
are
a
bit
problematic
because
you
have
to
open
the
app
every
day
so
that
we
don't
rely
at
the
moment
on
tank
history,
because
that's
quite
hard,
although
we
want
to
do
that
in
the
future.
But
at
the
moment
we
depend
on
snapshots,
so
you
have
to
open
the
app
every
day
so
that
the
app
can
collect
this
snapshots.
A
This
is
important
like
if
you
value
your
privacy,
please
run
the
full
node
like
it's
really
important
for
us,
and
you
know
like
an
easy
way,
would
be
to
you
know:
get
your
dub
node,
have
your
full
node
like
running
GIF
or
rarely
gone
or
never
mind,
and
then
you
can
use
true
blocks
as
an
indexer,
because
I
mean
look
at
the
moment.
We
have
a
problem
because
there
is
no
easy
way
to
get
an
account
transactions.
A
We
have
to
rely
on
either
scan
and
this
can
be
problematic
from
a
privacy
perspective,
because
if
there's
the
rate
limits
you
and
you
have
to
put
an
API
key
and
if
you
put
an
API
key,
you
basically
connect
all
your
information.
Like
your
email
address,
your
IP
address
your
account
and
probably
they
they
have
a
good
privacy
policy,
but
you
have
to
trust
them
for
that
because
they
are
closer
software.
A
A
A
So
yes,
so
if
you
want
to
reach
out
that
you
can
already
talk
through
Discord
and
please
please
really
like
we
built
Rocky
for
the
community,
we
build
it
for
us
and
for
other
people,
so
it
would
be
nice
if
you
give
it
a
try
like
download
the
app
run
it
test.
It
give
us
feedback,
we
always
hear
feedback
and
the
way
we
build
the
app
is
based
on
the
user
feedback.
So
please
do
and
let
us
know,
then
you
can
follow.
The
barot
Gap
account
on
Twitter.
A
Most
of
the
time
since
left
is
tweeting
from
there
not
always
and
yeah
you
can
also
buy
a
premium
subscription.
It
is
a
bit
of
support
to
us.
Doesn't
help
sustain
the
project,
but
it
still
helps
helps
us
a
lot,
and
with
this
you
can
actually
unlock
the
full
Roti
experience,
because
the
free
free
version
has
some
limitations.
C
C
A
Exactly
exactly
so,
funding
is
really
hard.
Like
I
said,
we
currently
have
funding
through
Bitcoin
grants,
which
is
one
of
the
our
biggest
source
of
support,
and
then,
if
there
is
he's
trying
to
find
ways
so
that
we
can
get
grants
for
integrating
with
different
protocols,
so
these
I
think
are
the
our
main
ways
of
funding
and
paying
salaries.
Of
course,
you
know
it's
as
an
open
source
project.
We
do
it
out
of
fashion,
so
our
salaries
are
not
the
best
like
we
are
below
market
rate,
but
you
know
it's
something.
A
B
A
Yeah,
so
we
use
the
graph,
but
in
our
use
case
it's
not
a
perfect
fit
because
you
know
like
there
is
a
no
unified
model
of
the
subgraphs.
So
for
every
protocol
we
support,
we
have
to
add
the
new
subgraph,
and
this
actually
gives
us
a
huge
maintenance
host,
because
we
have
to
go-
and
you
know
like
Implement
on
our
site.
The
schema
handle
every
subject
in
a
different
way
and
then
like
as
soon
as
the
sub
graph
breaks.
A
We
have
to
fix
it
like
communicate
with
people
that
are
limiting
the
subgraphs
and
then
we
have
to
release
the
path.
That's
the
release
to
fix
that
for
our
users,
because
the
app
is
broken,
and
this
is
why
we're
trying
to
find
the
way
that
is
more
unified
and
more
generic
and
that
doesn't
need
the
extra
maintenance
cost,
because
you
know
like
the
way
the
ecosystem
works,
new
protocols
pop
up
and
we
have
to
support
them,
because
our
users
also
want
the
want
the
support
for
these
protocols.