Ethereum Foundation DevCon 6 - ZKPs: Privacy, Identity, Infrastructure & More Track, 15 Nov 2022

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: heyanon.xyz

Description

Visit the https://archive.devcon.org/ to gain access to the entire library of Devcon talks with the ease of filtering, playlists, personalized suggestions, decentralized access on IPFS and more.
https://archive.devcon.org/archive/watch/6/heyanonxyz/index

Demoing heyanon, an open-source app allowing you to anonymously tweet as a verified member of on and off-chain groups. We’ll talk about how you can submit your own groups, our work on improving the ECDSA group experience, and our many ideas for extensions!

Speaker(s): Vivek Bhupatiraju
Skill level: Beginner
Track: ZKPs: Privacy, Identity, Infrastructure, & More
Keywords: zk

Follow us: https://twitter.com/efdevcon, https://twitter.com/ethereum
Learn more about devcon: https://www.devcon.org/
Learn more about ethereum: https://ethereum.org/

Devcon is the Ethereum conference for developers, researchers, thinkers, and makers.
Devcon 6 was held in Bogotá, Colombia on Oct 11 - 14, 2022.
Devcon is organized and presented by the Ethereum Foundation, with the support of our sponsors. To find out more, please visit https://ethereum.foundation/

A

A

I'm Vivek I go by Viv Boop on, like Social Media stuff I'm here presenting Persona on behalf of our hand on behalf of persona in Xerox Park, uh before I. Go into what hand on actually is I want to talk about a little motivation. So currently online We have basically two ways of presenting ourselves. You can use your entire real-life identity. Like me, I'm Vivek, I'm from Boston I, grew up.

A

There I work at your ex park now, and you know this includes also like your social graph, your hometown, like all the random tweets, you said, and then the other basic option is to be fully pseudonymous.

A

It's an account, that's unlinked from everything else, and if you bring in a reputation from your real life identity into your pseudonymous account it can it, it can be really easy to sort of dox you and so what hand on is, is attempting to be an open source app to allow users to attach a subset of their identity and reputation to speech online. So they can choose selectively what they actually want to kind of attach with everything they say.

A

It uses zero knowledge produce to prove membership in both off-chain and on-chain groups, without revealing your exact identity. uh Right now we have deployed for ecdsa groups, which just includes like various groups on ethereum, like nft owners or get coin donors as well. Some semaphore groups, um including like the task group from PSC, and we also had a group at SBC, also using some before um for all these apps, like the proof, is completely generated, client-side it's stored on ipps, ipfs and then anywhere where this like message is posted.

A

We also attach like um dislike proof and also like a little panel to like verify the proof as well.

A

How do you use it so here at Devcon, um as the PSC folks mentioned, like you, can just go to the Tas booth and pick up a little card and if you navigate to The Hang On section on the experience, Pages you'll be able to post a tweet to this Devcon in on feed.

A

Continue to use this account, you still have access to it and you can still reply as an attendee of Defcon uh to other people's tweets or to just say whatever you want and we're going to add, more sort of General ethereum groups that more people can post to very soon. In addition, we recently shipped a version of an admin panel where people can suggest their own groups.

A

This can be stuff, that's actually like you know, nft owners or like some sort of like new, actually existing thing, or you can even just make a group with your friends and just post on behalf of like your little friend group. If you want uh there's a V1 at this link and we're gonna sort of like clean it up and then add it to the hand-on website very soon.

A

Another sort of goal of hang on is that just overall, like zika terminology is super technical and, in my opinion, very boring. Every developer in ZK will tell you that what they're doing just like feels magical like it doesn't make sense that you can get verifiability succinctness and privacy all in one tool, but it all sort of just works and I think using terms like proving verifying zero knowledge like all this stuff sort of like magical.

A

This is to like an end user and I think like to really convince people how big of a paradigm shift we're making from like. You know, centralized servers owning all of your data to you, owning all of your data and then proving stuff about that. We're going to need some like new vocabulary, new product, new branding work so heavily inspired by conversations with Justin who's. Actually, here we've attempted to use magical terminology for all parts of the ZK stack, so instead of a symbol for identity, this is your wand.

A

With your wand, you cast spells, and instead of proving, like downloading a proven key, you use magical equipment to make all this work, and so we'll get to see this in action. So um hopefully the internet doesn't ruin this, but I will demo.

A

You good um demo tasks or demo the task group from my phone, so this is a tabs website. If you navigate down to here to Hannah, you can just click on this and it'll. Take you to the page, I've preloaded it because I don't want to wait for the internet and so there's a few options. So, first off you can view the feed you can post or you can apply I'll just go through each of them oops.

A

um Well, now, uh okay, so here's the feed! This is the. This is the feed of all the different posts that people have made, not a lot of like interesting stuff, just random people saying random stuff. But if you join, you can add some spice to the feed and then, if we go back to the main app we can now post anything. We want so I'm going to say.

A

B

A

Presenting next posting this, no one can verify this so I'm just going to say it um and then you know it'll generate the proof. This is all with semaphore, which is all fast enough that it can be around your phone.

C

D

A

Here, if you actually want you can look at the Olympic curve points that make up your proof for most people. That doesn't mean anything so we can submit and then boom there. It is uh here it is so here's the here's, the sort of like uh tweet itself and then, if you click on this link, it'll take you to a page where you can.

A

Let's see if this is going to work nice or you can verify this proof in browser I'm, just using like the semaphore V key okay. So let's go back so vitalik. He posted this funny little funny little little tweet about um Bogota and so I'm gonna reply to it as this as a spot. Actually, so, if we go back to this.

A

um I can just paste in the Tweet link that I want to reply to.

A

Funny pun, Mr, ethereum, Man.

A

B

A

And then again, it'll do its little thing.

A

A

What's going on.

A

Let's try that again, um it might just be some internet thing or like.

A

Nice um cool submit it and then.

A

C

A

Now replied to vitalik as an anonymous devkin, attendee, so yeah, that's sort of how this works.

A

E

I just want to go through like a lot of our.

A

Sort of future directions with this right now everything is very Twitter based, but, as I said in the introduction like this is really just a mechanism to attach reputation to your speech online, and so we want to basically have like um first off like a lot more different groups, not just ethereum, and some four groups. uh Zk email, which is going to be presented next by ayushu is not here, uh is gonna, give us access to a lot of interesting groups.

A

One thing is just like organizations like you can verify that, like this person owns like a twitter.com email or like a facebook.com email, you can prove you're a top fan of an artist by looking at some Spotify wrapped emails. You can prove that you own some amount of stocks with a Robin, Hood email, so email really opens the gates up to like a bunch of really interesting Twitter groups.

A

In addition, like GitHub users like if you go to your like username and then type dot, Keys it'll store all your public like RSA, keys or EDSA keys that you use to do SSH and so from there. We can make GitHub groups and then sort of as Jason was getting to I, don't know if he's here. uh We can also have groups that are like gated with ML models, so we can do some sort of like primitive, like kyc or like face ID. You can even imagine like some sort of thing where it's like.

A

If there's some treasure hunt of some item and like you find the item, you can take a picture of it and then you can post it. Some Twitter feed, basically or kind of get a get a zkp of that.

A

uh In addition, like we're working on just in general, like improving the ecdsa proving process like right now, it still takes like five minutes and can only be done on a computer, but we have a lot of exciting work. That's making that better! uh There's one repo like under the Persona Labs GitHub that is working on basically doing a lot of the signature, verification outside of the snark in a way that doesn't actually remove privacy in any way.

A

um In addition, we're trying to move from circum to Halo 2, we're in the process of taking the Halo 2 ECC circuits from Axiom and getting them to work in browser, and also we're interested in potentially trying to get some collaborative ZK stocks working, which is where, like end different, provers work together to produce a proof over like some shared like or secret, shared witness, and if one of those end users is actually the like.

A

You yourself, then sort of privacy is preserved by like the one of n um NPC assumptions and for the product yeah as I was mentioning like uh this isn't supposed to just be Twitter. um We want to put this everywhere, so this is just going to take like just like writing a bunch of different like like just just posting mechanisms, and then one thing I'm really excited about is like for for Reddit, for example, and also this this.

A

This works for, like just like Discord and like telegram event is like you can really tune specific, like groups to like specific, like subreddits or like specific, like group, chats or channels, and so it'll, basically just like allow for sort of more fine-grained, interesting groups, whereas on Twitter, it's sort of like this massive public feed and like you, you know, if you have too many groups of people, it can get a bit overwhelming and then sort of asukino was getting at, like moderation is really important for all this stuff.

A

uh Every every sort of good use case of of you know being able to talk pseudonymously like, for example, if you're in an oppressive regime, and you want to speak up against your government, but not sort of you know have like get attacked like you can use something like this to say what you want, but at the same time like uh let's say, you're, a very powerful person and and you're in like sort of an anonymous group with other powerful people.

A

You can just use this to say really really shitty things without any sort of um like sort of uh like negative feedback. Coming back to you, because you know you're protected by this Veil anonymity, so it's gonna be really important that uh there's some sort of moderation built in I think the the most like sort of standard way to do. This is just like.

A

Within your group, you either have some admins that approve all your posts, similar to like a Facebook group or even potentially, just like um any any three people in the group need to approve some posts before it's posted publicly for other people, um yeah help us out. We uh we have so many projects and stuff to do.

A

We really want to release all this stuff is just as open source, because we think that users should be able to like store their own parts of their identity without also you know, Builders should be able to build on top of all this stuff and um there's also a lot of really cool ways to put this on the real world like uh chance from PSC. Had this really cool idea of basically like arming uh people are trying to unionize against.

A

Like a you know, some some big corporation, like Amazon, uh basically handing out little semaphore keys to different people so that they could post to a Twitter feed as a verified sort of Amazon employee, but sort of not you know, face any consequences for for saying what they want to say.

A

Yeah. Thank you! That's all, and this is a link to our repo, it's kind of messy, because it's just been me hacking, but uh we're gonna clean it up soon and uh we want to onboard more people. So thank you.

E

I think our second mic died, but we have a few minutes. Are there any questions.

E

I'll, just I'll just run it back and forth. If I figure, that's better uh wait, you haven't asked one. Yet you should have time.

C

Can we do some kind of voting in the semo4 group to make sure that we can add more people, for example, if, like 10 out of 10, will vote for create another? Like proof.

C

Yes, can we do voting inside that protocol because you can also like do voting outside the protocol, but then what's the purpose of using the protocol.

A

um We don't have that built out, but yeah that could be added um I, don't see, no reason why I can't cool.

C

E

um We had one over here.

D

So if somebody posts something that causes that Twitter account to get banned, uh is it possible to like make a new group without knowing who they are, but that they're not in it.

A

um It depends I think so. If you have nullifiers for every single address, um then I think you can basically ban like the sort of like like bad nullifier from like the second group. um The point you're making, though about Twitter Banning groups, is very accurate, like Twitter Cadets at any point shut down this entire operation. So that is part of the reason why building on these centralized platforms is, is tough and why building stuff like zkitter is so important for the for this sort of stuff.

E

Any other questions now I have two microphones. If that's useful for anyone. um Okay, oh one more.

B

Pass it down, have you uh considered tying this into LinkedIn, because I think that's an environment where people really have to uphold like their professional identity right and not able to like share information that they actually would like to share with their colleagues or people in their Community? Glassdoor is a good example, but you cannot really verify if people work at some place like in the setting like that.

A

Wait what was your question?

A

Oh yeah, yeah for sure I think um once we have like ZK emails, sort of working um it'll be really easy to sort of bootstrap these groups of like, for example, like employees of a company um Gloucester and blind, like works pretty well for this stuff, but um again like you're, trusting, laughter and blind to not reveal this information, I think there's some like lawsuit in New Zealand or something where, like last year, I got sued to like release some of their information.

A

So you know this stuff does break down at some level, but um yeah we could. We could just have a more sort of secure version of that for sure.