josh2600

31 ms·

301.
MobileCoin Tech Talk #1 Starting in 9 minutes(facebook.com)
5 points by josh2600 6y ago|1 comments
302.
by josh2600 7y ago
It's been two+ long years of work to get to this point. There's a lot of cool stuff in here related to SGX attestation and no_std rust tooling. If anyone has any technical questions, please do let me know.
303.
MobileCoin is now Open-Source(github.com)
11 points by josh2600 7y ago|1 comments
304.
by josh2600 7y ago
One of my favorite essays ever is on the subject of the Connection Machine and Richard Feynman: http://longnow.org/essays/richard-feynman-connection-machine...
305.
by josh2600 7y ago
How do you do key rotation?
306.
by josh2600 7y ago
Their lawyers were Skadden-Arps. They are not dumb. The ultimate outcome of this is still TBD. It's entirely possible that Telegram will settle and be able to release their coin, it's a question of how much of the money they will
307.
by josh2600 7y ago
There is always jubilee. This essay is a little bonkers but also has a kernel of wisdom in it. https://mailchi.mp/4c8646c6a609/crypto-trader-digest-1307893... I am a big fan of Arthur. He’s a little hard for people to
308.
by josh2600 7y ago
I don’t think this entire class of processor attacks have ever been seen outside of academia (yet).
309.
by josh2600 7y ago
It’s not obvious to me that credit card tokens are fungible enough (or stored in SGX). They’re also a highly insured asset with manageable counterparty risk. Edit: So yeah, I'm not sure it's worth all of the complexity of an SGX a
310.
by josh2600 7y ago
As far as I know there has never been an enclave attack found in a rootkit in the wild. This is probably because there hasn't been anything publicly obviously worth stealing in an enclave yet.
311.
by josh2600 7y ago
I don't think SGXv2 is available anywhere. Do you have a link to an SGXv2 datasheet/purchaseable chip?
312.
by josh2600 7y ago
Yes. I think if homomorphic encryption existed in a way that was super fast, we would be using that. It’s real far as far as I can tell.
313.
by josh2600 7y ago
I don’t think the enclave you’re describing exists, nor do I believe there is an enclave that is untrusted hardware. Do you have an example of such an enclave and how it would operate without a remote attention service in the model where a
314.
by josh2600 7y ago
Do you have any narrative of how to do key recovery safely without an enclave or a human in the loop? I’ve spent a lot of time thinking about this and I don’t really know how to do it without one of those two things. Edit: like I hear you s
315.
by josh2600 7y ago
You misunderstand this problem. Doing group chat where you do a massive rekeying of all participants every time someone joins doesn’t scale, but it is secure. Signal doesn’t practically support large groups like Telegram does (although tele
316.
by josh2600 7y ago
I will link to this each and every time this comes up: https://signal.org/bigbrother/eastern-virginia-grand-jury/ Signal turned over everything they had on this user (which was two time stamps: user creation and l
317.
by josh2600 7y ago
That’s because group chat in an encrypted messenger with good ux is an unsolved cryptographic research problem. Everyone else just punts on it. I get why that’s unsatisfying from the user perspective, but it’s absolutely necessary from the
318.
by josh2600 7y ago
https://la.curbed.com/2017/9/20/16340038/los-angeles-streetc... << Worth a read.
319.
by josh2600 7y ago
I am actually curious because I don't fully understand how Handshake works... I believe it allows you to setup a K of N threshold signature scheme for changing DNS, which, is kinda cool, but I don't understand if this would help B
320.
by josh2600 7y ago
A big part of why LA has so many pedestrian and bicyclist fatalities is because the mass transit system is awful and the sprawl. A ton of people in LA still just drive drunk because ridesharing and cabs are too expensive. Lots of people can
321.
by josh2600 7y ago
It was 10 years ago so I know people might not remember this, but I do and I think it’s relevant. RIM had 10 year development cycles for devices. They had blackberries designed 10 years out and had nothing on the horizon that looked like an
322.
by josh2600 7y ago
I don’t know why you’re being downvoted. Sms 2FA is not safe, full stop.
323.
by josh2600 7y ago
This is it exactly. The more specific you get on the circuit the less flexible it is and the more bandwidth you get at a specific task. The tradeoff is flexibility for application specific performance. CPUs can do hella stuff but they can’t
324.
by josh2600 7y ago
Think of it like this: CPU’s do general computing. They’re super flexible but if you have a specific workload you might be able to use a different piece of silicon to get more performance. GPU’s do more parallelized computing but they don’t
325.
by josh2600 7y ago
This is the tech that would allow the key management we described in section 3.4 of the MobileCoin whitepaper [0] to exist. [0] https://www.mobilecoin.com/whitepaper-en.pdf
326.
by josh2600 7y ago
I'm pretty sure no major service (petabyte+ scale) functions this way.
327.
by josh2600 7y ago
Yeah, this is exactly correct. Sgx is not a silver bullet, at all. It’s a part of a security story.
328.
by josh2600 7y ago
I’m pretty convinced that any community with a global broadcast layer trends towards tragedy.
329.
by josh2600 7y ago
Djb’s article linked above answers this in detail. In short, vectorized instructions don’t have to hit ram to do things like addition, but they can heat up the processor beyond its ability to cool to operating temperatures. The clock speed
330.
by josh2600 7y ago
Having seen academics fail to convert their knowledge into production grade systems time and again, I can only say that there are light years of difference between theory and practice.

More ›