Exactly. But the important point is that the current situation with CAs may be flawed, but since ultimately the user has control over which certificates to trust, it will be possible to use better trust models (like…
Surely, this is an (admittedly broad and difficult) issue with CAs and the trust element of SSL authentication. By the theory of SSL, an 'attacker' is not supposed to have control over a 'trusted' CA, so SSL is…
What about determining the salt from the domain for the given login? (perhaps slightly more refined than that to mitigate cases like *.google.com)
Would you care to expand on these bad precedents that you are referring to?
It's also important to note that not only do they run a Tor exit enclave, they also run a .onion hidden service, which unlike the enclave is not deprecated in the next version, and means that DDG can be accessed without…
Weapons are violence. There's no room for violence in the future.
Note that the author seems to misunderstand a few things about BitTorrent sync: 1. Firstly, Btsync is not open-source (unfortunately), as he claims. [1] 2. 24-hour secrets don't give someone read access for 24 hours.…
This is a very good point. Looks like vendors are just copying each other's practices, like 6 confirmations, without looking into why they need to be in place. A lot of people mention the 6 confirmations requirement as…
The overall message is stop worrying so much about the locations of other people's genitals.
The internet is more than access to knowledge and information, and I agree that the sectors responsible for knowledge and information should have the imperative of increasing living conditions, and not generating…
Yes, your comment is witty, but I think it's critically flawed. Firstly, medicine and education should be public services, in the sense that their management should have the imperative of increasing living conditions…
I haven't though about this carefully but I wonder what the shortcomings of the following would be: when a domain 'owner' wants to update their DNS entry, they just push out a PGP-signed (or similar) message of their…
I suppose you could have an even less centralised system to resemble Tor hidden services. This transcript of Assange and Schmidt's meeting discusses this at a certain point, just grep for 'hash'[1]. That way the domain…
I know nothing about this but given that DNS is quite low volume, distributed peer-to-peer DNS services sound really promising. It would definitely be interesting to hear someone with knowledge in this to chime in. TPB…
May I ask which one you're with?
Rather than a dump on a prison server, it would be easier to get Wikipedia to block the prison IP range from editing. I believe that some schools (high schools/secondary schools, not universities) do this due to high…
Unfortunately that's not really feasible without being part of a Mining pool: it simply takes too long until you make a block. [1](bitcoin mining is granular and not continuous https://en.bitcoin.it/wiki/Mining_Pool)
Exactly. But the important point is that the current situation with CAs may be flawed, but since ultimately the user has control over which certificates to trust, it will be possible to use better trust models (like…
Surely, this is an (admittedly broad and difficult) issue with CAs and the trust element of SSL authentication. By the theory of SSL, an 'attacker' is not supposed to have control over a 'trusted' CA, so SSL is…
What about determining the salt from the domain for the given login? (perhaps slightly more refined than that to mitigate cases like *.google.com)
Would you care to expand on these bad precedents that you are referring to?
It's also important to note that not only do they run a Tor exit enclave, they also run a .onion hidden service, which unlike the enclave is not deprecated in the next version, and means that DDG can be accessed without…
Weapons are violence. There's no room for violence in the future.
Note that the author seems to misunderstand a few things about BitTorrent sync: 1. Firstly, Btsync is not open-source (unfortunately), as he claims. [1] 2. 24-hour secrets don't give someone read access for 24 hours.…
This is a very good point. Looks like vendors are just copying each other's practices, like 6 confirmations, without looking into why they need to be in place. A lot of people mention the 6 confirmations requirement as…
The overall message is stop worrying so much about the locations of other people's genitals.
The internet is more than access to knowledge and information, and I agree that the sectors responsible for knowledge and information should have the imperative of increasing living conditions, and not generating…
Yes, your comment is witty, but I think it's critically flawed. Firstly, medicine and education should be public services, in the sense that their management should have the imperative of increasing living conditions…
I haven't though about this carefully but I wonder what the shortcomings of the following would be: when a domain 'owner' wants to update their DNS entry, they just push out a PGP-signed (or similar) message of their…
I suppose you could have an even less centralised system to resemble Tor hidden services. This transcript of Assange and Schmidt's meeting discusses this at a certain point, just grep for 'hash'[1]. That way the domain…
I know nothing about this but given that DNS is quite low volume, distributed peer-to-peer DNS services sound really promising. It would definitely be interesting to hear someone with knowledge in this to chime in. TPB…
May I ask which one you're with?
Rather than a dump on a prison server, it would be easier to get Wikipedia to block the prison IP range from editing. I believe that some schools (high schools/secondary schools, not universities) do this due to high…
Unfortunately that's not really feasible without being part of a Mining pool: it simply takes too long until you make a block. [1](bitcoin mining is granular and not continuous https://en.bitcoin.it/wiki/Mining_Pool)