3 ms·

I fail to see how plug is anti-PRISM. All your devices need to install plugs software, at which point you provide a login and a password, and bam, you now have

I fail to see how plug is anti-PRISM. All your devices need to install plugs software, at which point you provide a login and a password, and bam, you now have full access to your files connected to your plug... what? So we go out and contact plugs central server, provide a username and password, and now we have remote access to all our files. ALL of them. Plug syncs everything. PRISM, the program that secretly told internet service companies to provide access and tell no one. and plug, the device that makes every single file you have visible on a network connection that they hold the keys to. Plug is going to have to go a long way to convince me that they can't be compelled to release my credentials to a government authority, even if they said they never would and they really really meant it, that still means they have complete and total access to my life. Anti-PRISM here isn't meaningless, it's outright wrong. Your product is only anti-PRISM if your product assumes the author can't be trusted in addition to not trusting the lines the data is sent on (At least they did that).

coopdog 13y ago
From the security FAQ: "Plug uses asymmetric cryptography. When Plug is installed, the application generates a RSA-2048 pair of keys, identifiable by the user's email, and with a private key protected by the user password. This private key, which is what authenticates a user in the Plug system, is stored in your Plug and your devices. We don't know this key because we don't have your password, so we cannot - us or anyone else - steal your identity." So it really does seem to be zero knowledge, and therefore could be the magic UI that finally makes proper asymmetric encryption tolerable to the general public. The NSA could still steal the key off of any of the devices, but it would be hard to do that systematically on a global scale. The closed source nature of this software probably still makes it a no-go though, they can just coerce them to patch it ala skype. I wonder how this would fair against TSA also. If your entire home server looks like a folder, and they can copy that folder at the border, they now get every file you care about rather than just the ones on any one device.

coopdog 13y ago

From the security FAQ: "Plug uses asymmetric cryptography. When Plug is installed, the application generates a RSA-2048 pair of keys, identifiable by the user's email, and with a private key protected by the user password. This private key, which is what authenticates a user in the Plug system, is stored in your Plug and your devices. We don't know this key because we don't have your password, so we cannot - us or anyone else - steal your identity." So it really does seem to be zero knowledge, and therefore could be the magic UI that finally makes proper asymmetric encryption tolerable to the general public. The NSA could still steal the key off of any of the devices, but it would be hard to do that systematically on a global scale. The closed source nature of this software probably still makes it a no-go though, they can just coerce them to patch it ala skype. I wonder how this would fair against TSA also. If your entire home server looks like a folder, and they can copy that folder at the border, they now get every file you care about rather than just the ones on any one device.