3 ms·
Anyone can create any signed document with any contents. What they cannot do is forge your signature. This is how asymmetric crypto works.
by nailer 4y ago
Anyone can create any signed document with any contents.
What they cannot do is forge your signature.
This is how asymmetric crypto works.
- i_love_cookies 4y ago[dead]
- Gigachad 4y agoThe thing is though, no one cares about digital signatures. Tech bros can't even be bothered checking signatures for ISOs they are about to deploy to production. You think normies are going to check the NFT metadata, track down the original sale, find the artists public key and validate its legit so they can think "Oh no this NFT is a clone, I will now revoke my enjoyment of this picture"
- DANmode 4y agoPedantic correction: no one is aware of digital signatures. The people who are sometimes do not even fully understand them or the value.
- Gigachad 4y agoThe people aware of them also don't care. If I see a NFT profile picture on twitter, I can't imagine why I would bother to validate the authenticity.
- DANmode 4y agoWhat if the NFT you saw wasn't a monkey jpeg, but a display of a token that represented equity ownership in a company you hated?, loved?
- nailer 4y agoMost of our interaction with digital signatures is indeed transparent. You are viewing a website right now with a certificate stating this is news.ycombinator.com signed by someone in your OS trust store. I can just make a certificate saying a different website is news.ycombinator.com. What I can’t do (hopefully) is get it signed. You will have a very different UX when I do this. Even though I can easily make an unsigned document, the digital signature in the certificate still has value, just like the NFT.
- Gigachad 4y agoYou can’t automate checking NFT certificates because they are all “real” and valid NFTs. The fact that the one you have wasn’t signed by the person who created the picture isn’t something cryptographically or even technically possible.
- nailer 4y agoYes you can can. If someone says they have a Beeple, and signed by someone other than Beeple, they don't have a Beeple. Same way as if I receive a 'real and valid' message claiming to be you, but not signed by you, I can't say it was you that sent me the message.
- xsmasher 4y agoI don't know why you're downvoted. I worked for a company that made NFT character skins for their games; of course when the game checked your wallet for game skins, it only looked for NFTs that were signed by the game company. As you said, impossible to clone or forge. Of course anyone could (and did) clone the ARTWORK associated with the NFT and create fake/pirate NFTs; but they had no in-game value. That's still a problem for players who might get duped by the fakes though. In the end, though, using the blockchain didn't enable any functionality for the users that couldn't have been accomplished using a plain database of ownership. In theory the blockchain would grant some permanence to the asset, but once the game company shut down the market value of the asset cratered anyway.
- Gigachad 4y agoNo one is talking about this because it doesn't matter. If there is a centrally trusted and approve key, then blockchains and NFTs add nothing. When there is no centrally trusted key, then clones are trivial. NFTs are simply crypto scammers trying to find a problem to their solution they have.
- nailer 4y agoThere are many non centralised cryptosystems including PGP and Signal. It’s potty hard to convince someone you own a fake beeple. On the internet there’s token gating, in person it’s going to look weird when you pull out Apple/Google photos instead of a wallet app.