4 ms·

i think keybase (or something like it) is going to be huge. Instead of email, sites like reddit and HN will use PGP keys for identity instead of email. I don't

by on_ 11y ago

i think keybase (or something like it) is going to be huge. Instead of email, sites like reddit and HN will use PGP keys for identity instead of email. I don't use keybase because 1) I'm behind 12K people for their private beta 2) I know how to run gpg --gen-key

aianus 11y ago
If you'd like a invite, shoot me an email at aianus@coinbase.com and I'll send you one.
- on_ 11y ago
  Brilliant. Sent. Thanks a 10^6.
- aianus 11y ago
  All out :)
grkvlt 11y ago
> I don't use keybase because [...] I'm behind 12K people for their private beta Sadly, this is the main reason most people (including me) aren't using it. I'd love to try it out, but until I can get a log in, I'm just going to ignore it. They are throwing away a lot of good-will by making these announcements, then when users go to the site they get turned away because they aren't one of the blessed few with an invite. If I don't get access soon, I'm going to file them under 'ignore', since it seems like I've been trying to get an account for years, now ;(
- on_ 11y ago
  > this is the main reason most people (including me) aren't using it. Most people don't know what PGP/GPG is, probably know less than nothing (have misconceptions) about encryption, and don't even realize why a service like keybase.io would be helpful, much less that it exists. What I love about this community is that there are people like aianus below who have early access to stuff like this, and being part of this community will engender them to help you. I like this service because people outside of this community will get involved after they work out the kinks. People getting invites are developers and tech-centric people who likely have other keys anyway and are testdriving the software. The biggest way forward for keybase would be Facebook or Twitter allowing you to integrate your key into the service. > it seems like I've been trying to get an account for years, now ;( The keybase github account was created 2 years ago on sept 6 ;). Someone below will likely help you out if you email them. Thanks aianus. Appreciate the invite.
  - nickpsecurity 11y ago
    It's actually a bad idea and parent post is right: they need to open it up to more people even if still limited or with a warning that features might change. The reason has to do with their goal of making something usable for widespread audience. Asking what GPG-loving techies and HN readers think about usability will not tell you if your grandmaw or average employee will find it usable. I remember the studies on PGP surprised cryptographers in that what they thought was understandable (esp icons) were really confusing to end users. So, they need to go ahead and get a diverse audience to spot problems early on. For sure, they should stick to a patient audience that knows they're helping something evolve rather than using a finished product. Still need to broaden and diversify it, though. I'd start with the 10,000+ volunteers on that waiting list.
    - on_ 11y ago
      I disagree. I believe there strategy is not, > Asking what GPG-loving techies and HN readers think about usability Although, many of us do UX or appreciate and can accurately review it, they want the GPG-loving techies to evaluate their security and software. This isn't exactly a social network, you can't move fast and break stuff, and just push flaming builds and iterate. This has to launch to the public with bulletproof security. This is because in 3 years they want "Log in with Keybase.io" on every website instead of "Log in with Facebook" and they want secondary authentication for twitter and facebook to leverage their keys. So they have to convince people and those companies they have security pretty well figured out. I understand where you are coming from and I would like it if they rolled out quickly. They could maybe even do it tomorrow, I don't actually know but so far it seems to work well. However, the public isn't really clamoring for this anyway, because they don't even know what it is. I was even surprised how old keys were. You can see elon musks e@x.com key from the early 90's on the MIT keyserver and some are much older than that. Not even everone on HN has keys I bet, so the public isn't as anxious as you or I might be ;). I hope they release soon though.
      - nickpsecurity 11y ago
        "they want the GPG-loving techies to evaluate their security and software." "This has to launch to the public with bulletproof security." How is merely using Keybase.io a security evaluation? It isn't. Security evaluation is all kinds of activities with specialized skill working on source, interfaces, debuggers and so on. You do that in parallel with testing of usability, performance, reliability, and so on. So, they need the security evaluations but also need users running it through paces for other reasons. They can and should do both. "This isn't exactly a social network, you can't move fast and break stuff, and just push flaming builds and iterate." Whose asking for that? I believe I said patient, filtered user-base that are clearly told it is a work in progress given to them for evaluation. "I understand where you are coming from and I would like it if they rolled out quickly." I'm not even asking for that. I'm just saying they need to seriously increase their user-base and with more non-technical, privacy-focused users. What input they're receiving before launch needs to be as diverse and representative of what they'll receive after launch. They can still cap the user count or be selective. Closed with 10,000+ person backlog or wide open in full production is a false dilemma. Heck, maybe even a room's worth of people from each likely demographic, skill level, target platform, and so on. Will help spot many issues coming from each before production. "Not even everone on HN has keys I bet, so the public isn't as anxious as you or I might be ;)" I should be clear that I'm not factoring in the general public at all: they'll continue using Facebook Messenger, etc for private communications because it's cool, convenient, cheap, whatever. I don't waste time trying to push privacy tech, esp key management, on the public any more past improvements to infrastructure or tools they already use. Strong security/privacy is and always was a niche. However, as Keybase's vision realizes, the niche is potentially larger than techies with GPG or stuff in keyservers: people who would use it if it was simpler & less technical at interface. So, I advocate they get more of that audience into their user-base for feedback.
- nickpsecurity 11y ago
  I agree. They need more people using it to work out all the usability problems. Many different types of people. Should use a filtering strategy, though, to minimize number of people that will need lots of hand-holding. Maybe dedicate an employee, forum, etc to that. Easy to get bogged down in support before the project gets started.
- ooimo 11y ago
  Would you like me to send you an invite?
- moonka 11y ago
  I also have some invites if anyone wants some. My email is in my profile.
  - mirimir 11y ago
    Me too.
- grkvlt 11y ago
  Thanks to the kind people who sent me invites! I have accepted one (can't recall who, but thanks again) and will be playing with keybase.io over the next few days, to see how I can use it in my projects. This is definitely something I love about HN, there are almost always people willing to help out. I didn't even expect to achieve anything with my post; I was actually just complaining out loud...
- mintplant 11y ago
  I've got 9 invites. If anyone wants one, let me know.
  - StavrosK 11y ago
    8 here.
cmiles74 11y ago
I have some in invites as well, shoot me an email at cmiles74@hotmail.com.
nadaviv 11y ago
I have some invites as well. Contact me at nadav@bitrated.com if you're interested. (offer is open to everyone, not just OP)

by on_ 11y ago

aianus 11y ago

If you'd like a invite, shoot me an email at aianus@coinbase.com and I'll send you one.

on_ 11y ago
Brilliant. Sent. Thanks a 10^6.
aianus 11y ago
All out :)

grkvlt 11y ago

> I don't use keybase because [...] I'm behind 12K people for their private beta Sadly, this is the main reason most people (including me) aren't using it. I'd love to try it out, but until I can get a log in, I'm just going to ignore it. They are throwing away a lot of good-will by making these announcements, then when users go to the site they get turned away because they aren't one of the blessed few with an invite. If I don't get access soon, I'm going to file them under 'ignore', since it seems like I've been trying to get an account for years, now ;(

on_ 11y ago
> this is the main reason most people (including me) aren't using it. Most people don't know what PGP/GPG is, probably know less than nothing (have misconceptions) about encryption, and don't even realize why a service like keybase.io would be helpful, much less that it exists. What I love about this community is that there are people like aianus below who have early access to stuff like this, and being part of this community will engender them to help you. I like this service because people outside of this community will get involved after they work out the kinks. People getting invites are developers and tech-centric people who likely have other keys anyway and are testdriving the software. The biggest way forward for keybase would be Facebook or Twitter allowing you to integrate your key into the service. > it seems like I've been trying to get an account for years, now ;( The keybase github account was created 2 years ago on sept 6 ;). Someone below will likely help you out if you email them. Thanks aianus. Appreciate the invite.
- nickpsecurity 11y ago
  It's actually a bad idea and parent post is right: they need to open it up to more people even if still limited or with a warning that features might change. The reason has to do with their goal of making something usable for widespread audience. Asking what GPG-loving techies and HN readers think about usability will not tell you if your grandmaw or average employee will find it usable. I remember the studies on PGP surprised cryptographers in that what they thought was understandable (esp icons) were really confusing to end users. So, they need to go ahead and get a diverse audience to spot problems early on. For sure, they should stick to a patient audience that knows they're helping something evolve rather than using a finished product. Still need to broaden and diversify it, though. I'd start with the 10,000+ volunteers on that waiting list.
  - on_ 11y ago
    I disagree. I believe there strategy is not, > Asking what GPG-loving techies and HN readers think about usability Although, many of us do UX or appreciate and can accurately review it, they want the GPG-loving techies to evaluate their security and software. This isn't exactly a social network, you can't move fast and break stuff, and just push flaming builds and iterate. This has to launch to the public with bulletproof security. This is because in 3 years they want "Log in with Keybase.io" on every website instead of "Log in with Facebook" and they want secondary authentication for twitter and facebook to leverage their keys. So they have to convince people and those companies they have security pretty well figured out. I understand where you are coming from and I would like it if they rolled out quickly. They could maybe even do it tomorrow, I don't actually know but so far it seems to work well. However, the public isn't really clamoring for this anyway, because they don't even know what it is. I was even surprised how old keys were. You can see elon musks e@x.com key from the early 90's on the MIT keyserver and some are much older than that. Not even everone on HN has keys I bet, so the public isn't as anxious as you or I might be ;). I hope they release soon though.
    - nickpsecurity 11y ago
      "they want the GPG-loving techies to evaluate their security and software." "This has to launch to the public with bulletproof security." How is merely using Keybase.io a security evaluation? It isn't. Security evaluation is all kinds of activities with specialized skill working on source, interfaces, debuggers and so on. You do that in parallel with testing of usability, performance, reliability, and so on. So, they need the security evaluations but also need users running it through paces for other reasons. They can and should do both. "This isn't exactly a social network, you can't move fast and break stuff, and just push flaming builds and iterate." Whose asking for that? I believe I said patient, filtered user-base that are clearly told it is a work in progress given to them for evaluation. "I understand where you are coming from and I would like it if they rolled out quickly." I'm not even asking for that. I'm just saying they need to seriously increase their user-base and with more non-technical, privacy-focused users. What input they're receiving before launch needs to be as diverse and representative of what they'll receive after launch. They can still cap the user count or be selective. Closed with 10,000+ person backlog or wide open in full production is a false dilemma. Heck, maybe even a room's worth of people from each likely demographic, skill level, target platform, and so on. Will help spot many issues coming from each before production. "Not even everone on HN has keys I bet, so the public isn't as anxious as you or I might be ;)" I should be clear that I'm not factoring in the general public at all: they'll continue using Facebook Messenger, etc for private communications because it's cool, convenient, cheap, whatever. I don't waste time trying to push privacy tech, esp key management, on the public any more past improvements to infrastructure or tools they already use. Strong security/privacy is and always was a niche. However, as Keybase's vision realizes, the niche is potentially larger than techies with GPG or stuff in keyservers: people who would use it if it was simpler & less technical at interface. So, I advocate they get more of that audience into their user-base for feedback.
nickpsecurity 11y ago
I agree. They need more people using it to work out all the usability problems. Many different types of people. Should use a filtering strategy, though, to minimize number of people that will need lots of hand-holding. Maybe dedicate an employee, forum, etc to that. Easy to get bogged down in support before the project gets started.
ooimo 11y ago
Would you like me to send you an invite?
moonka 11y ago
I also have some invites if anyone wants some. My email is in my profile.
- mirimir 11y ago
  Me too.
grkvlt 11y ago
Thanks to the kind people who sent me invites! I have accepted one (can't recall who, but thanks again) and will be playing with keybase.io over the next few days, to see how I can use it in my projects. This is definitely something I love about HN, there are almost always people willing to help out. I didn't even expect to achieve anything with my post; I was actually just complaining out loud...
mintplant 11y ago
I've got 9 invites. If anyone wants one, let me know.
- StavrosK 11y ago
  8 here.

cmiles74 11y ago

I have some in invites as well, shoot me an email at cmiles74@hotmail.com.

nadaviv 11y ago

I have some invites as well. Contact me at nadav@bitrated.com if you're interested. (offer is open to everyone, not just OP)