4 ms·
Yeah, I was just trying to evaluate the risk that >Mega could have run this attack over long periods of time, in parallel for all its users; without anybody c
by im3w1l 4y ago
Yeah, I was just trying to evaluate the risk that
>Mega could have run this attack over long periods of time, in parallel for all its users;
without anybody catching on. In light of our discussion, I don't think it's too likely.
- tptacek 4y agoNo, I don't agree at all. There is literally new science in this paper; the idea that random "security researchers" looking at benign-looking crypto code and monitoring all the connections their clients made (a thing nobody does) would ever have caught this is not plausible.