diafygi

101 ms·

1. 751.▲
   No more zero days(reddit.com)

   1 points by diafygi 12y ago|0 comments
2. 752.▲
   by diafygi 12y ago

   I feel like these type of PKI proposals don't really address the various aspects of user adoption. How do you convince a user to use something like this? Most users have no concept of keys, much less private and public keys. So how do
3. 753.▲
   by diafygi 12y ago

   > Wagstaffe says it's illegal to impersonate a police officer, but not to impersonate a TSA agent. Well that seems like a loophole that's begging to be exploited.
4. 754.▲
   No Charges to Be Filed Against Fake TSA Agent at SFO(abcnews.go.com)

   1 points by diafygi 12y ago|2 comments
5. 755.▲
   by diafygi 12y ago

   So we should just give up then?
6. 756.▲
   by diafygi 12y ago

   I suppose. Things like Stuxnet require government-scale resources, though, so I'm not sure you have to worry about that kind of attack as much for V2V standards.
7. 757.▲
   by diafygi 12y ago

   Hmm, I guess I'm remembering it wrong (I thought they were controlling stuff in a van or something). Luckily, the scenario would still be impossible since every gauge/pump/etc. has a hardcoded interlock that shuts it down if
8. 758.▲
   by diafygi 12y ago

   Back when I used to work at a chemical plant, we had two networks: one for regular corporate/internet access, and one for plant control. The later was physically isolated from the former, which is why scenarios like Die Hard 4 are so h
9. 759.▲
   by diafygi 12y ago

   How can they recover emails if they were encrypted client-side?
10. 760.▲
    by diafygi 12y ago

    I suppose it is part of a journalist's job to vet leakers.
11. 761.▲
    by diafygi 12y ago

    At the end of this road, I foresee a full IDE baked into Firefox. I can't wait. It would so great if you could just open the App Manager, click "Create New App", check the boxes of the libraries you want to include by default
12. 762.▲
    by diafygi 12y ago

    After encrypting, the text area shows the encrypted message ("This message is encrypted..."). So you can always manually copy that and paste it into your own mail client :)
13. 763.▲
    by diafygi 12y ago

    I don't really expect these projects to get used widely. They serve more as inspiration to show that client-side encryption doesn't have to be cumbersome for the casual user. It would be great if webapp developers started baking c
14. 764.▲
    by diafygi 12y ago

    Good suggestion! Want to do a pull request?
15. 765.▲
    by diafygi 12y ago

    Thanks! Pre-filling the form is a good suggestion. Want to do a pull request? Also, I try keep the encrypted payload size minimized, but yes, URL limits can be a problem (as well as line breaks that email clients sometimes insert). You can
16. 766.▲
    by diafygi 12y ago

    Do they have a public compose endpoint? I'd love to add an option for them.
17. 767.▲
    by diafygi 12y ago

    Indeed. Unfortunately, that's fundamentally the way public-key crypto works. If you do try to send a message to an email with no public key, it will prompt you to send an invite instead.
18. 768.▲
    by diafygi 12y ago

    Heh, that's kind of the point for this project: making email encryption easy for lay-users.
19. 769.▲
    by diafygi 12y ago

    Please do! The code is meant to be audited, so please file any bug reports. Also, I do indeed know my username's meaning. Isn't it closer to "slips through the cracks"?
20. 770.▲
    by diafygi 12y ago

    For throwaway/anonymous encryption, check out my other project: https://github.com/diafygi/myLock
21. 771.▲
    by diafygi 12y ago

    Gmail[1], Outlook[2], and Yahoo[3] supposedly support aliases, and everyone who uses Google Apps for their email also support aliases. I've only verified with my Gmail, so can anyone else confirm Outlook and Yahoo? [1] - https:/&
22. 772.▲
    by diafygi 12y ago

    It sort-of does work with people's existing email (since the public key is just added as an email alias). If you didn't have the public key in the email, you'd have to have central repo for public keys, which is what this tec
23. 773.▲
    by diafygi 12y ago

    Thanks! So far it's just me, so maybe you could open an issue requesting others to test with their addresses?
24. 774.▲
    by diafygi 12y ago

    Yes. This encrypts the message before opening the gmail compose window, so all gmail sees is the encrypted message.
25. 775.▲
    by diafygi 12y ago

    Feedback welcome. My email is: diafygi+3AT5MGn7bCpHsE6T8vDDfd5oAqaRVxV6pmnFg8gSbUAV@gmail.com
26. 776.▲
    Show HN: EmailPK – Instant encrypted email(diafygi.github.io)

    53 points by diafygi 12y ago|37 comments
27. 777.▲
    So castings made of (kinetic) sandturn out pretty well, actually(hackaday.com)

    1 points by diafygi 12y ago|0 comments
28. 778.▲
    by diafygi 12y ago

    I'm guessing that since it's java, you can run guacd on either windows or linux.
29. 779.▲
    by diafygi 12y ago

    From the talk: > If you technology people can either build a working website that actually serves the needs for a billion dollars, or build one that doesn't work and totally fails for merely 100 million or 200 million or so. If you
30. 780.▲
    by diafygi 12y ago

    > For clients to be able to use an API from inside web browsers, the API must enable CORS. Great! That means you can build little static apps on github.io that use the APIs. Also, would love it if this gave guidance on what style and for