4 ms·
> Security researchers are limited in the tools/methods they can use. We have to work with what we've got at our disposal. Which is exactly why "trust us, we'r
by vertex-four 6y ago
> Security researchers are limited in the tools/methods they can use. We have to work with what we've got at our disposal.
Which is exactly why "trust us, we're not going to do anything with these keys" is a ridiculous state of affairs and shouldn't be tolerated. We can't show that they're actually doing what they say, and it'll be years after they implement mass surveillance on the behest of law enforcement before someone leaks something.
- dijksterhuis 6y agoPerfect security doesn't exist. If humans are involved at any point, it's not perfectly secure. The One time pad is a great testament to that. Should we work towards an ideal? Sure. Should we stress out that things aren't perfect? Probably not. It's an iteresting technical idea though. Would be interesting to see if any existing systems have a "canary" element to them.
- vertex-four 6y agoThere's a very simple solution to "the provider cannot prove that it will not misuse its access to the stream" - it's to use e2e encryption.