prophesi

61 ms·

871.
by prophesi 7y ago
I think it's safe to assume that the majority of users are good actors. With that in mind, the two main attacks that these sorts of crowdsourcing apps need to figure counterattacks for are: 1. Minimizing the damage an individual can do
872.
by prophesi 7y ago
> just run-of-mill Silicon Valley electrical engineers, they have been mortgage-free for a long time, and they live right next to 1 Infinite Loop Is this sarcasm, or do you genuinely not see how exceptional that is?
873.
by prophesi 7y ago
And this "significant chunk" of the population assuredly would not include one's Armenian relative who immigrated to America. As stated in the article, most Armenians are likely home-owners due to the collapse of the USSR, so
874.
by prophesi 7y ago
It's an absurd nitpick and still upholds the article's original point that you need to learn about one's living situation before making comparisons due to America's decentralized governance.
875.
by prophesi 7y ago
Regardless, 40% of mortgage-free home-owners are not a majority. The actual majority of Americans _are_ paying a mortgage or rent. The author should replace "almost everyone" with "mostly everyone." That said, the stats
876.
by prophesi 7y ago
Hopefully passwords are implemented in a way to slow down brute-forcing. I guarantee the majority of them will be a simple word or number sequence.
877.
by prophesi 7y ago
I'm personally more upset that they're advertising 256bit AES yet using 128bit AES. Sure, 128bit is still fine to use today, but it's still false advertising. They're already falsely claiming end-to-end encryption. It do
878.
by prophesi 7y ago
> Is ECB any worse than any other deterministic encryption? Yes, it's objectively worse than literally any other AES mode. You wouldn't need to depend on compression to protect your data.
879.
by prophesi 7y ago
The exact same explanation + visual are already in The Intercept's article (and CitizenLab's). The rest of it is flaunting Crypteron's searchable encryption.
880.
by prophesi 7y ago
It wouldn't be controversial if they explicitly stated that, and took "End-to-end encryption for all meetings" off of their features page.
881.
by prophesi 7y ago
"Zoom has always strived to use encryption to protect content in as many scenarios as possible, and in that spirit, we used the term end-to-end encryption. While we never intended to deceive any of our customers, we recognize that ther
882.
by prophesi 7y ago
Yes, I was trying to explain PKI and signing in as simple of terms as I could.
883.
by prophesi 7y ago
Wire is open source. It'd be a pain to self-host, but it's doable. And at the very least, you can verify that your client is indeed using E2E encryption and therefore trusting the server isn't necessary. https://gi
884.
by prophesi 7y ago
Yeah, that'd be pretty tricky. End-to-end encryption is really easy to implement if you're sending data to only one user. It gets really hard and really slow once you start adding more users. A simple way would be to encrypt your
885.
by prophesi 7y ago
HTTPS is point-to-point encryption. It's good for client <-> server communication. If you need to send data to another client through the server, then HTTPS won't suffice. The server decrypts the data and then sends it to th
886.
by prophesi 7y ago
Tor is an absolute pain to use if you visit any sites using Cloudflare, which is quite a lot of them.
887.
by prophesi 7y ago
I haven't tried it myself, but I saw https://wire.com/ linked as an open-source E2E-encrypted alternative during a few of the Zoom articles that have been posted these past few days. I'd love to see if anyone here
888.
by prophesi 7y ago
I'm just saying, in the age of globalization, it makes sense to push out your April Fools' joke once it hits April 1st somewhere.
889.
by prophesi 7y ago
It was April 1st in several countries by the time of that commit.
890.
by prophesi 7y ago
I've used it across three different mobile phones and countless desktop devices over the years without any issues. Did you accidentally set the messages to expire after a short time? Are you using more than one mobile phone? I also rec
891.
by prophesi 7y ago
Erm, how does it make less sense? Codium is literally more vscode than VS Code itself. So if you're on VS Code, just use Codium.
892.
by prophesi 7y ago
Maybe it's because I use Qwant, but my search results for HIPAA end to end encryption gave articles about actual E2E encryption for emails (since they typically pass through a third-party email server). So I'm starting to think th
893.
by prophesi 7y ago
From the actual HIPAA regulations, one must "Implement technical security measures to guard against unauthorized access to electronic protected health information that is being transmitted over an electronic communications network.&quo
894.
by prophesi 7y ago
Yeah, without a single citation supporting the existence of this imaginary "older definition" of E2E encryption.
895.
by prophesi 7y ago
I think no news is good news in this case. And a positive for Wire is that since it's all open source, you can go right to their github and see how active their development is. It would be nice if The Intercept and other journalists wo
896.
by prophesi 7y ago
I'm afraid of other services catching on to this "semantic loophole". Would changing the terminology to perhaps client-to-client encryption solve this?
897.
by prophesi 7y ago
Yelp isn't clearly in the wrong when you live in a society where you need to depend more on corporations than the government. Platforms like GoFundMe play a critical role in providing coverage for people who would otherwise would be le
898.
by prophesi 7y ago
That's a cool exaggerated example, but it's common knowledge that restaurants everywhere are currently struggling. The ID request is the only part I'd personally be outraged by.
899.
by prophesi 7y ago
I do wish the article touched on what the owners' actual complaints are. The only two that come to mind is: 1) Owners who aren't active on Yelp may never notice this feature, and so the money is never claimed. 2) Yelp may be takin
900.
by prophesi 7y ago
Yeah, I think the title should be changed. It's very misleading. The VPN industry is all about manufacturing rumors about your opponents.

More ›