livnev

5 ms·

1.
by livnev 13y ago
Exactly. But the important point is that the current situation with CAs may be flawed, but since ultimately the user has control over which certificates to trust, it will be possible to use better trust models (like convergence.io) to elimi
2.
by livnev 13y ago
Surely, this is an (admittedly broad and difficult) issue with CAs and the trust element of SSL authentication. By the theory of SSL, an 'attacker' is not supposed to have control over a 'trusted' CA, so SSL is 'sup
3.
by livnev 13y ago
What about determining the salt from the domain for the given login? (perhaps slightly more refined than that to mitigate cases like *.google.com)
4.
by livnev 13y ago
Would you care to expand on these bad precedents that you are referring to?
5.
by livnev 13y ago
It's also important to note that not only do they run a Tor exit enclave, they also run a .onion hidden service, which unlike the enclave is not deprecated in the next version, and means that DDG can be accessed without leaving the Tor
6.
by livnev 13y ago
Weapons are violence. There's no room for violence in the future.
7.
by livnev 13y ago
Note that the author seems to misunderstand a few things about BitTorrent sync: 1. Firstly, Btsync is not open-source (unfortunately), as he claims. [1] 2. 24-hour secrets don't give someone read access for 24 hours. They must be redeemed w
8.
by livnev 13y ago
This is a very good point. Looks like vendors are just copying each other's practices, like 6 confirmations, without looking into why they need to be in place. A lot of people mention the 6 confirmations requirement as a serious inconvenien
9.
by livnev 13y ago
The overall message is stop worrying so much about the locations of other people's genitals.
10.
by livnev 13y ago
The internet is more than access to knowledge and information, and I agree that the sectors responsible for knowledge and information should have the imperative of increasing living conditions, and not generating capital. This is why Wikipe
11.
by livnev 13y ago
Yes, your comment is witty, but I think it's critically flawed. Firstly, medicine and education should be public services, in the sense that their management should have the imperative of increasing living conditions for the populace rather
12.
by livnev 13y ago
I haven't though about this carefully but I wonder what the shortcomings of the following would be: when a domain 'owner' wants to update their DNS entry, they just push out a PGP-signed (or similar) message of their new IP onto a P2P swarm
13.
by livnev 13y ago
I suppose you could have an even less centralised system to resemble Tor hidden services. This transcript of Assange and Schmidt's meeting discusses this at a certain point, just grep for 'hash'[1]. That way the domain name itself is proof
14.
by livnev 13y ago
I know nothing about this but given that DNS is quite low volume, distributed peer-to-peer DNS services sound really promising. It would definitely be interesting to hear someone with knowledge in this to chime in. TPB could (inadvertently)
15.
by livnev 13y ago
May I ask which one you're with?
16.
by livnev 13y ago
Rather than a dump on a prison server, it would be easier to get Wikipedia to block the prison IP range from editing. I believe that some schools (high schools/secondary schools, not universities) do this due to high rates of vandalism.
17.
by livnev 13y ago
Unfortunately that's not really feasible without being part of a Mining pool: it simply takes too long until you make a block. [1](bitcoin mining is granular and not continuous https://en.bitcoin.it/wiki/Mining_Pool )