This type of punishment is actually pretty terrible for all parties.
I could easily see a different, harsher, but more fair punishment...
1. All assets are sold off to pay victims
2. Prison for a few years. 5?
3. can only work jobs where nobody reports to them (no management, C levels, etc). Also cannot make companies.
4. Cannot own more than 2 properties, one of which is his place of residence.
5. Cannot rent out any property.
6. 25% of what he makes goes into restitution for the rest of his life.
7. Investments into any wealth instrument is to be confiscated, with exception to a 401k.
Basically, this person cannot be trusted with making money other than by working for someone else. This still allows him to make a life, but severely limits the similar path he used to defraud people.
Sending this guy to prison for 25 years is a waste for everyone involved.
And as someone who pirates, I highly discourage pirating proprietary programs that save your data in their locked-in formats.
Your data is more important than to be locked into a data-roach-motel. The companies know this, and count on piracy. From there, the pirate user has MB's of content locked into something they cant convert out of. And then, it's pretty easy to force a sale, or worse yet, a rental.
Right now, on the http(s) web, when you request a file, the provenance of that file is linked to the domain name and the HTTPS traffic.
On IPFS, the provenance of a file is its content hash, not some server you downloaded it from.
On IPFS, if I join in on hosting and sharing a hash of a file, I could be a malware spewer, but that doesn't change the hash.
Where this conflicts with copyright is, say you are on a IPFS enabled Movie server from CBS. By definition, only they are approved to transmit their files. But IPFS uses Git and BitTorrent to swarm download content. And default copyright, that's a civil tort matter.
The original idea for IPFS was that for the local network, that it did support BitTorrent like operations from browser cache. So if something went viral, it was 1 download from the internet connection, and then on-lical-network the rest of the way.
That feature was disabled EARLY on because it strictly violates copyright.
It's also why your computer published all the network interfaces to the dHT, so that you could find local nodes. But they didn't remove that; they only removed the dynamic sharing part.
I think there are settings to turn that back on, but I'm not 100% sure.
Performance: ugh yes. The GO implementation is a CPU and RAM hog. Basically, you cannot run it on a cheap vps, where you could easily run apache or nginx.
There's also significant bandwidth costs from a distributed hash table. That's a design implementation that really can't be avoided as the nature of dHT's. Running this on phones will blow through your monthly quota pretty quickly just on announce traffic.
I'm not well versed in GO, so I can't! However there's a LOT of customizations and settings you can turn off/on. For example, you can create a private IPFS network of just your machines. Or you can create piracy networks of friends. That sort of thing.
Just my complaints about the defaults are what I would classify as unsafe.
As for running through Tor or I2p, well yeah. I worked with another user who ended up figuring out a way to do it through Tor that only shared an internal 192.168.0.0/24 address. Basically they firewalled all internet comms other than Tor and forced through it. Also had to do MAC randomization because IPFS also shares that.
The IPFS folks initially said they were going to first-class Tor support. But when it got hard, they backed out. My guess was that would have turned IPFS into the biggest unstoppable piracy net. And Benet and gang were busy with filecoin. Tor doesn't make money, and has the smell of unsavoriness.
My recommendation is to get 2 machines, and bring them both up with a trivial 'hello.txt' file and prove all the details you can about the other. I don't think the protocol changed much... But I could be wrong.
I left using it because of massive resource usage, high network bandwidth, and user-hostile hosting environment due to insecure and everything-shared environment.
The counterexample is that some of us (including myself) are digital archivists.
I think it's worse in institutionally 'forgetting' via censorship, than to having that media.
I also think it would be improper to sell that content, as it'd be profiting on racism and sexism.
To the point, this set of files also included Fantasia, Songs of the South, WWII propaganda by Disney and Looney Tunes, and more.
Just because parts of history are horrific, does not mean we should self-censor and remove the uncomfortable parts from our collective memories. Frankly, these videos belong in a museum, or archive.org .
I was there doing early testing, way prior to the filecoin offering.
The justification for a computer key (which is a base56 sha) was to make every machine a unique node on the network. Note that IPFS also purports to be a multi-network system that can be on top of ip4/6/tor/etc, so they wanted a backwards compat ID.
Now if my computer asks the dHT for hash X, I get a response back from all the computers with that hash. And it's similar to BitTorrent in that fashion. And the content hash is like Git.
There's also IPNS, which makes a connection from DNS to IPFS. You need unique machine identifiers for this.
With the sharing of every network interface, prior to 0.3 the idea was that ALL content loaded with IPFS could be shared. And 'nearness' ala STP could be used to provide local data to local machines. However, due to garbage copyright law, was not turned on by default.
The root problem is that basic security was never considered, as in the 'bad things someone can do with these identifiers'. Ideas like "one person loads a viral video and every device on the local network gets it from them" are amazing ideas, but preclude the bad side like 'who to DoS and doxx' and all these bad side of internet issues.
It sucks, cause I really think IPFS should have absolutely taken off. I could see this as solar system worthy networking for satellite to satellite. But there's inherent problems that I think would be better in the crucible of the IETF and not a commercial entity.
If you do use IPFS, then be aware that it has loads of traps you wouldn't expect.
1. A unique computer key identity is created on startup.
2. It announces every network adapter you have to the dHT, including localhost, docker virtual network adapters, everything.
3. If someone is sharing a specific hash content, you can query the network for their machine key and all their network interfaces, and everything else they're sharing.
4. I have early IRC communications that the ipfs.io gateway also quietly watches for 'bad hashes' and reports them to authorities. This was initially the decision they made to hunt down child porn predators, but this can be easily pivoted to copyright violators.
5. I also caught early on (in the 0.34 version) that google was already crawling computers, and all their shared hashes'. I had a few files I created that were very unique, and a curious search showed them to me, along with my machine's key.
For completely legal bulk data, IPFS is a terrific solution. But for anything that is illegal or might be illegal in the future, well, I have to question that usage for those aforementioned reasons.
I would kindly recommend looking into Jellyfin. It's a FLOSS equivalent of Plex. (And unlike Plex, isn't closed source nagware on 'premium features')
But the rest I agree with.
And to your point, I just found a trove of rare 'banned' cartoons. Naturally, they're banned primarily for depictions of Japanese (WWII), and of black people in various degrading roles.
I do not take enjoyment in watching them. However, due to censorship, these could be lost. And that would be a bigger loss compared to their inherent lack of compassion.
I could easily see a different, harsher, but more fair punishment...
1. All assets are sold off to pay victims
2. Prison for a few years. 5?
3. can only work jobs where nobody reports to them (no management, C levels, etc). Also cannot make companies.
4. Cannot own more than 2 properties, one of which is his place of residence.
5. Cannot rent out any property.
6. 25% of what he makes goes into restitution for the rest of his life.
7. Investments into any wealth instrument is to be confiscated, with exception to a 401k.
Basically, this person cannot be trusted with making money other than by working for someone else. This still allows him to make a life, but severely limits the similar path he used to defraud people.
Sending this guy to prison for 25 years is a waste for everyone involved.