3 ms·

If someone wanted to trick HN users into trusting a phoney key, one way to do that would be to post the phoney fingerprint on HN claiming it to be the real one.

• iso1631 4y ago
  And within a few seconds someone will have called this out in a reply
  • macintux 4y ago
    Assuming the person doesn’t have some back door access to HN as well.
    • detrites 4y ago
      Or they don't simply wait a while and edit it when it's not under high scrutiny.
      • iso1631 4y ago
        You can only edit for a certain amount of time
• pferde 4y ago
  And if someone would actually fall for this, they deserve to be fired, and/or never allowed anywhere near anything related to computer security. :)
• misnome 4y ago
  I mean, yes, but you'd also have to have a way to actually MITM the person you are targeting via HN comment, before anyone pointed out it was wrong. It'd be much easier to just use the MITM you already have and not raise the suspicion of posting in a comment.
  • nicky0 4y ago
    Don't overthink this.