commented on Talnicrom
: @Edantes: As @Method-X said, in order to compromise you, the site you visit needs to be running a malicious script. How do you know that a site you want to visit is not running a malicious script? I think I remember @nofish hinting that in a future version of ZeroNet, you will be able to download a site and take a look at the code before running it. Still, how do you know that a site owner won't update the code to add something malicious? One solution to this is to extend ZeroNet to ask for confirmation before updating certain files. Take ZeroMe for example. This feature might ignore all updates to user content, but if one of the core site files like all.js changes, it would notify you of the new SHA512 of the file and ask if you want to update. You could then ask around to see if the update is legit and confirm the hash before updating.
Concerning implementation, a ZeroTalk clone could certainly take off if there is enough demand. However, there are certain things like payments, feedback, organizing listings, etc. that one wants to optimize in a marketplace. So I think it is a good idea to hold off and try to build a new app.
The DIY swapmeet structure is what I have in mind. I envision large hubs with many users. Hub owners could set rules for which stores may operate on their hub. For example, if I ran a hub I would forbid my stores from selling anything connected to violence like assassinations, child porn and sex slavery, etc. (One property of this system would be that since I could not see what my users were buying, it would not be possible to filter them.) Reputable hubs could even charge a small fee to stores for a certificate from the hub.
There are economic ways to deal with scamming. Any ZeroNet marketplace would have to have a reputation system. There is a lot of academic research on the best ways to set up such a system. I am thinking about whether it is workable to have sellers offer buyers a rebate if they leave feedback. Anyway, a seller with no reputation or with a bad reputation would probably offer goods at a lower price to offset the risk. Then as their reputation improved they could begin to charge a premium for their brand.
> bitcoin multisig is a hassle for most people