4 ms·
Call it knee-jerk but I personally dislike systems that refer to themselves as hacker proof. I can't help but feel that the people who make that claim misunders
by roganartu 12y ago
Call it knee-jerk but I personally dislike systems that refer to themselves as hacker proof. I can't help but feel that the people who make that claim misunderstand the fundamentals of information security.
You only have to look at password handling procedures to see recent examples of things once thought hacker-proof that are no longer. MD5 used to be widely used for hashing passwords but it is now considered cryptographically weak and there are many more examples like it throughout the industry. Most (all?) of these hacker-proof like things tend to be based on computational infeasibility or perfect implementation of certain features. In this case, the protocol seems to rely heavily on two things:
- self-destructing database records - Self destructing data is a hard problem that is more likely to be solved using a time-based destruction rather than a read-based destruction (how can you ensure with 100% atomicity that the data will be 100% deleted when it is read?). A good example of a time-based self-destruction is Vanish [1].
- dynamic procedure that is not accessible from memory - The CPU cannot communicate directly with anything but memory/internal caches [2] so the only way I can think that you'd solve this is by having a custom piece of hardware that does all the computation internally and only returns the result. This is also not an easy problem as it introduces hardware level complexities.
I understand that the author may have just been trying to make it sound more interesting but there are better words that don't leave such a bad taste in the readers mouth ("Secure" is a very commonly used one for example). This is especially important when trying to be taken seriously by the security community who are the most likely to take an irrational dislike to something claiming to be hacker-proof.
[1] http://vanish.cs.washington.edu/pubs/usenixsec09-geambasu.pdf http://vanish.cs.washington.edu/pubs/usenixsec09-geambasu.pd...
[2] http://wpcontent.answcdn.com/wikipedia/commons/thumb/b/bd/Motherboard_diagram.svg/600px-Motherboard_diagram.svg.png http://wpcontent.answcdn.com/wikipedia/commons/thumb/b/bd/Mo...
- eximius 12y agotime based leads to logistical problems. 'Oops, we deleted your money! Sorry!'
- roganartu 12y agoI didn't mean to imply that time-based was a better solution here, simply that there exists a functional proof of it. I haven't seen a working read-based self-destruction proof (if someone knows of one I'd love to see it). That being said, I like the idea in general I'm just skeptical of protocols/ideas that rely on things that don't yet exist (unless they go into detail on how they plan to implement them of course).
- jnbiche 12y agoI agree. When I see "hacker proof", I usually assume it's a corporation that's paid some mid-rate contractor to create a system that's "hacker proof" per their specification (which probably uses those exact words). I've not seen many serious projects use this term. This may well be an exception -- it's possible that the authors are not native-English speakers and fail to appreciate the term's nuances. All in all, it looks like a very interesting project, but I'd urge the author to use more different terminology to describe their system.