upofadown
Joined 13 years ago
Karma
7,001
Submissions
3,029
Member since
Dec 17
Recent submissions
Comment · 7 days ago
Comment · 15 days ago
One big usability issue these days is that PGP identities come in the form of a file. Lots of people don't have the concept of that anymore.
Dunno that things have gotten much better over the years. End to end encryption is still fairly unusable to most. I think that rather than spending so much time on the cryptography we should instead work on a E2EE usability standard. Having everyone doing their own thing with respect to usability is not working out.
Comment · 15 days ago
Obligatory response to "The PGP Problem":
* https://articles.59.ca/doku.php?id=pgpfan:tpp
By what I saw, there wasn't really anything anyone would care about in https://gpg.fail/ . The GnuPG problem actually declined to respond to some of them.
Comment · 16 days ago
... and don't take the vendor's word for it. I got burned on a GL-SFT1200 that way. It runs their version of OpenWRT. You can't install generic OpenWRT.
Comment · 1 month ago
From the article:
>Still, some real-world systems continue to use blind-signature, also known as textbook, RSA.
I think those are two different things.
Comment · 1 month ago
Once you are in the Waymo, why bother getting out just to get on a bus?
In New York, increases in the use of ride services like Uber mostly came from bus and subway riders[1]. If we are being charitable to Google, we might assume that this initiative is intended to reduce the same sort of trend. If we are not being charitable, we might assume that this initiative is intended to encourage current bus riders to expose themselves to the product.
[1] https://www.6sqft.com/mta-says-uber-use-is-the-cause-of-nyc-...
Comment · 1 month ago
Hard to judge. The bottleneck is the phase of the algorithm where a really big linear system needs to be solved. That takes a lot of communication between nodes. The breakthrough in using GPUs is that there is good communication between nodes[1]. At the scale of 1024 bit RSA the communication might become a bottleneck again.
Comment · 1 month ago
Is someone providing prize money again? RSA ended the contest in 2007.
Comment · 1 month ago
Well most people don't verify identity with some sort of physical key. So it doesn't work as an analogy in the first place for signatures...
Comment · 1 month ago
Allegedly, Signalgate was caused by Apple helpfully mapping the wrong number to a name. Then Signal mapped that number to the wrong cryptographic identity.
A Third Party Breached The Intercept’s Signal Tip Line and Has Been Soliciting Whistleblowers https://www.dropsitenews.com/p/intercept-signal-tip-line-bre...
Twilio Incident: What Signal Users Need to Know https://support.signal.org/hc/en-us/articles/4850133017242-T...
Russian State-Backed Hackers Intensify Attacks on Signal Messenger Accounts https://thecyberexpress.com/signal-attacks-russian-fackers-t...
Comment · 1 month ago
Unfortunately, in an end to end encrypted messaging system, an identity is denoted by some sort of long number. That is an inescapable fact. Trusting a third party to correctly map, say, a phone number to a cryptographic identity number eventually results in the sort of attacks we have been seeing with phone oriented encrypted messengers recently like WhatsApp and Signal. The PGP people were doing the right thing when they were doing education in the form of key signing parties. That is something the user needs to know.
Anonymous messengers have no real choice and have to use some sort of number for identity. See Briar, Session or Tox for examples.
My comments on Signalgate 1.0:
Every time you add something you lose something...