3 ms·
Security on Hacker News is good enough. But, it would be kind of nice to have salted hashes and an absurdly expensive hashing algorithm. We are meant to be hack
by falsestprophet 17y ago
Security on Hacker News is good enough. But, it would be kind of nice to have salted hashes and an absurdly expensive hashing algorithm. We are meant to be hackers after all.
A standard, or even a rationally conservative, approach seems more fit for Innocuous News.
- TheAmazingIdiot 17y agoOh come on now. We're hackers. That means some SHA1 with a little bit of salt does nothing for "Real Security". "Real Security" would require personal acquaintance with an operator or someone they have trusted. To go down that trust chain, they would sign your GPG key. After that, posting by signing would be only done. And as per due course, you would be expected to have a HN_only GPG key for 'security reasons'. But security for securitys sake is just wasting resources when it's just a news site, unless you're a crypto-fiend.
- eru 17y agoI'd prefer Off-The-Record encryption over GPG. I want plausible deniability.