2 ms·
I don't know what else you've read, but in the context of OP in particular it's not clear to me what seems dismissive about the "security" arguments.
by akkartik 2y ago
I don't know what else you've read, but in the context of OP in particular it's not clear to me what seems dismissive about the "security" arguments.
- andrewflnr 2y agoIt's stronger in the initial coverage, I believe by the guy who discovered the story and the immediate commentary on Mastodon. The Verge is a more professional outfit so they're more subtle about it, but it's still there in phrases like "That could make it trivial for an attacker" (emphasis mine) and "There are clearly some obvious holes". Tone is hard to prove, so I'm probably not going to try any harder than that.
- akkartik 2y agoI can totally believe random microblogging takes are stupid, but that doesn't seem worth arguing about. Microblogging is just capturing initial reactions. > "That could make it trivial for an attacker" (emphasis mine) It _is_ trivial, right? The attack _is_ trivial. It's the solution that isn't. OP isn't claiming that. Seems reasonable to me. I went back and reread https://doublepulsar.com/recall-stealing-everything-youve-ever-typed-or-viewed-on-your-own-windows-pc-is-now-possible-da3e12e9465e https://doublepulsar.com/recall-stealing-everything-youve-ev... which is the first link in OP. Again, it doesn't have much to say about encryption at all except to point out that hey, the protections Microsoft is claiming are underwhelming. Without those protections the cost/benefit balance is way out of whack.