3 ms·

Show me the outcome and I'll show you the incentive. Hint: backdoors I wouldn't trust any federally approved encryption. From any country. I wouldn't trust t

by mouse_ 2y ago

Show me the outcome and I'll show you the incentive. Hint: backdoors I wouldn't trust any federally approved encryption. From any country. I wouldn't trust them, but I WOULD use them, given no other choice to reach the users I'm after. But always assume zero trust. With any computer thing, zero trust. Computer systems and those who orchestrate them are sneaky little devils.

deleted 2y ago
[deleted]
creatonez 2y ago
And even if it isn't screwed up by active malice... don't be surprised if it's screwed up by pure incompetence. South Korea's internet is still plagued by government-approved encryption standards, which, due to the deprecation of ActiveX, sometimes require installing institution-specific cryptography software to tunnel connections through a local HTTP server so it can be encrypted outside of the web browser - https://palant.info/2023/01/02/south-koreas-online-security-dead-end/ https://palant.info/2023/01/02/south-koreas-online-security-...
palata 2y ago
> I wouldn't trust them, but I WOULD use them, given no other choice to reach the users I'm after. Which is no different from trusting them. The reality is that you have to trust something at some point.
- sodality2 2y ago
  Not true, you can use something in an untrusting manner. Like assuming everything you send on the platform to be known to the government. Anyone in the USA who uses SMS should be operating like that, for example.
  - palata 2y ago
    Hmm... if you assume that your government can read your messages but still use the service, then you trust your government to not hurt you based on that. So there is trust. If, however, you don't send messages you would like to send because you don't trust the service, then it is true that you are not trusting the service, but you are not using it (for those sensitive messages) either. As soon as you actually use something that matters, you have to trust it. Sending sensitive messages over a system that you don't trust while admitting you don't trust it is... weird.
    - lazide 2y ago
      Is sending everything encrypted trusting, or not trusting, the communication channel.
      - palata 2y ago
        My point is that trust is a nuanced concept. If you think that it's worth using, then you implicitly trust it enough to use it. Saying "I don't trust it at all but I still use it" is absurd IMHO.

by mouse_ 2y ago

deleted 2y ago

[deleted]

creatonez 2y ago

And even if it isn't screwed up by active malice... don't be surprised if it's screwed up by pure incompetence. South Korea's internet is still plagued by government-approved encryption standards, which, due to the deprecation of ActiveX, sometimes require installing institution-specific cryptography software to tunnel connections through a local HTTP server so it can be encrypted outside of the web browser - https://palant.info/2023/01/02/south-koreas-online-security-dead-end/ https://palant.info/2023/01/02/south-koreas-online-security-...

palata 2y ago

> I wouldn't trust them, but I WOULD use them, given no other choice to reach the users I'm after. Which is no different from trusting them. The reality is that you have to trust something at some point.

sodality2 2y ago
Not true, you can use something in an untrusting manner. Like assuming everything you send on the platform to be known to the government. Anyone in the USA who uses SMS should be operating like that, for example.
- palata 2y ago
  Hmm... if you assume that your government can read your messages but still use the service, then you trust your government to not hurt you based on that. So there is trust. If, however, you don't send messages you would like to send because you don't trust the service, then it is true that you are not trusting the service, but you are not using it (for those sensitive messages) either. As soon as you actually use something that matters, you have to trust it. Sending sensitive messages over a system that you don't trust while admitting you don't trust it is... weird.
  - lazide 2y ago
    Is sending everything encrypted trusting, or not trusting, the communication channel.
    - palata 2y ago
      My point is that trust is a nuanced concept. If you think that it's worth using, then you implicitly trust it enough to use it. Saying "I don't trust it at all but I still use it" is absurd IMHO.