Comment

Comment by dmunoz

The linked page is okay for general information about the conference, but really poor for finding videos you might care about. You're forced to click through every speaker to see an embedded video and description of the talk. Much better for the video is to browse the youtube playlist [0], but this loses the specific information about the talk. Bummer.

[0] https://www.youtube.com/playlist?list=PLLiioAbFTbKP9CxF9Fu4_...

Edit: Okay, so if you scroll up from where the submission links (#speakers), there is a link to watch the videos [1]. I did look at the entire page first, but missed the link because its target is a picture of a monitor.

[1] http://2013.cascadiajs.com/videos

Edit 2: So the video JS Bringing Crypto To The Masses caught my eye, and I spent the last remaining minutes of my lunch hour giving it a watch. The first 17 minutes and 45 seconds are about cryptography in general, and I won't make any judgement on this part. The last 6 minutes are left to talk about JavaScript, except not really. I admit the majority of my interest in this video was to see if the problems with doing cryptography in JavaScript were going to be responded to. The problems are not ignored, as the presenter immediately brings up the requisite matasano article [2]. Then he makes some vague claim that doesn't respond to the problems mentioned in the article. The majority of his time was spent on this:

His claim: Matasano is worried about a man in the middle attack and thinks that SSL is good enough.

His response: "I call bullshit. SSL is protection from other people on the wire. Cryptography is protection for you on the wire. Why should you trust me to store your data without reading it?"

This completely ignores the major issue of the execution environment with JavaScript cryptography. He actually does briefly mention these issues before making the point above, but offers no response. So, there is really no content in the talk about "bringing crypto to the masses." Disappointing.

[2] http://www.matasano.com/articles/javascript-cryptography/

parent dmunoz 13 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton