3 ms·
Well, it is better to concentrate on getting users in than to solve some small quirks. Nobody is going to attack ZeroNet if it doesn't have users anyway.
by fiatjaf 10y ago
Well, it is better to concentrate on getting users in than to solve some small quirks.
Nobody is going to attack ZeroNet if it doesn't have users anyway.
- komali2 10y agoMaking front page of HN is probably enough motivation for a good portion of attackers.
- nickpsecurity 10y agoThat was OpenSSL's attitude. It resulted in harm to many more users who would've been better off with something else or with its own developers actually trying to prevent security vulnerabilities. A project advertising something to be "uncensorable" based on "crypto" or whatever should be baking security in from the start everywhere it goes. Or it's just a fraud.
- fiatjaf 10y agoYou're right.
- bdamm 10y agoYour comment is under-appreciated. This is the greatest issue facing computer security today.
- shakna 10y agoLet me quote one of the ZeroNet team members when questioned about potential hacking. > I wasn't aware of any hackers. The only problem I have since I have been running ZeroNet for a year, is the minor problem of file size mismatch, simply because not all peers in the network have the latest version of a file. At best, that's an unhelpful attitude. It leads to things like: [0] [0] https://arstechnica.com/security/2017/03/firefox-gets-complaint-for-labeling-unencrypted-login-page-insecure/ https://arstechnica.com/security/2017/03/firefox-gets-compla...
- runeks 10y agoNobody is going to use ZeroNet in the first place if it's not secure. "Users before security" makes no sense at all if the product you're selling is security.
- fiatjaf 10y agoHow do you explain that it has a lot of users, much more than your preferred secure network?