ianmiers

14 ms·

91.
by ianmiers 10y ago
Oh right, it was either you or your advisor who told me the IP address story.
92.
by ianmiers 10y ago
In fact, there's a long history of people trying to publish anonymized IP logs in ways that preserve the IP address structure (i.e. anonymized ip's from the same subnet end up in the same anonymous subnet). It turns out that leaki
93.
by ianmiers 10y ago
Impressive work. Especially for producing an implementation. But be very very careful about ever using it ( and really any cryptography that does more than standard encryption/ signing) in practice without understanding the security it
94.
by ianmiers 10y ago
Yes, I meant perfect anonymity. If we consider imperfect anonymity, we need to consider more than the size of the anonymity set, we need to consider how likely it is a given coin in the anonymity set is the actual one we are hiding. This i
95.
by ianmiers 10y ago
An indefinitely growing list of spent transactions is the least of Monero's scaling issues. Monero doesn't scale to large anonymity sets. Monero uses CryptNote's ring signature approach, which scales linearly with the number
96.
by ianmiers 11y ago
Linux RNGs: where refusing to XOR in additional hardware randomness into the output stream is not just a defensible opinion, but the dominant one.
97.
by ianmiers 11y ago
To add, Telegram's crypto is completely and totally off the walls crazy in terms of design. Add to that the fact that there are cryptographic breaks (though not we can read your ciphertext breaks), and you should be careful. iMessage
98.
by ianmiers 11y ago
So I think CONAME solves 90% of this. It's set up in such a way that third party verifiers only have to check that the update counter for each key is monotonic. Users can check just that, for the current epoch, the write counter is cor
99.
by ianmiers 11y ago
WhatsApp allows you to verify keys. Apple doesn't. This makes a pretty big difference. Also, iMessage's crypto protocol is cryptographically broken. It's been patched together in ways that prevent the obvious attack, but don
100.
by ianmiers 11y ago
Is there any documentation on the old custom protocol?
101.
by ianmiers 11y ago
I'm hoping they deploy some from of key transparency. E.g. CONIKS or CONAME, the version Yahoo and Google are working on for e2e that already has a productionish grade sever and client[0]. Either that or give the community a practi
102.
Attack of the Week: Apple iMessage(blog.cryptographyengineering.com)
149 points by ianmiers 11y ago|39 comments
103.
by ianmiers 11y ago
Hi (not one of the authors on this, but one of the Zerocash/ZCash authors and a co-worker of Sean's) This isn't the case with SNARKs, they are zero-knowledge no matter what. For a generic zero-knowledge proof, what you point
104.
by ianmiers 11y ago
Zerocash offers far stronger and more complete privacy than anything I'm aware of. Reusing an old comment about Cryptonote (which is what monero uses IIRC). Similar analysis applies to Dash, which I believe uses some (no doubt "im
105.
by ianmiers 11y ago
Laptop being stolen: Certainly for normal users, yes. Don't let that happen. But you can protect yourself by moving funds to new addresses and deleting the old address keys. Poor man's forward secrecy. Since no one will probably
106.
by ianmiers 11y ago
Hi, I'm Ian, one of the scientists behind ZCash, Zerocash, and Zerocoin. -laptop being stolen: An attacker will get how much money you have, and if you have kept around the private keys for all your addresses, when and how much you we
107.
by ianmiers 11y ago
Hi, I'm one of the ZCash scientists: Section 8.1 in the full paper describes how to get anonymity that survives quantum computers. ( http://zerocash-project.org/media/pdf/zerocash-extended-2014... ). The zero-k
108.
by ianmiers 11y ago
What are the substantial barriers to deploying something like CONIKS? It doesn't seem to help the multi-device problem, but in general it does seem useful.
109.
by ianmiers 11y ago
All anonymity is not created equal: you're better off if we can only figure out that one out of 6 billion people bought a Nickelback album, then if we know it was either you or one guy in Tristan da Cunha. The size of you're anon