Viewing profile — NTroy

I believe the math you outline above refers to this step, located on page 7 of the Technical Summary: > Next, the client creates a cryptographic safety voucher that has the followi…

It is my understanding that the vouchers are only encrypted with a key derived from the NeuralHash of the photo. Therefore an attacker would only need to find a matching NeuralHash…

If Apple is to keep their word about guaranteeing the privacy of non-CSAM photos (which this whole discussion is about them not doing a very good job of), then they would only be a…

Yes, this ^^^^^^ > The proposed attack on Apple's protocol doesn't work. With all due respect, I think you may have misunderstood the proposed attack @jonathanmayer, as what @jobig…

> For CSAM matches, the cryptographic header in the voucher combines with the server-side blinding secret (that was used to blind the known CSAM database at setup time) to successf…

The question doesn't presume that, as the the secret for blinding the CSAM database would only be helpful if a third party were also looking to see which accounts contained CSAM. I…

Sure! - Both - Both - Yes. I wish that weren't the case, but considering that I can't find a single provider so far who respects end user privacy, I would expect for one who does s…

Yeah, that's what I currently do. However as traffic grows in both volume and origin, and can be hard (and expensive) to keep up. That's why a privacy-respecting provider who alrea…

That's a good point. It wouldn't be the first time that providers (most notably VPN providers) have lied about their logging policies with devastating consequences for the end user…

Yeah, currently I run my own DNS server. However, as traffic grows and so does your customer base and server locations, it would be nice to use a dedicated DNS provider, as they'll…

A pricing scheme that isn't too far off of what you'd find from most other managed DNS providers. Obviously I wouldn't mind paying more for the "privacy" aspect, as long as the pri…

I've spent a long time attempting to find any managed DNS/DNS hosting providers that also guarantee privacy. Does anyone on here know of any DNS hosting provider that can meet the …

https://GitHub.com/P5vc

Their code: https://GitHub.com/P5vc

You are absolutely right. I work in the field of information security, where this seemingly backwards approach of thinking can quickly crumble optimistic projects! If you're not im…

Recovered for/from what? I've had my account disabled in the past (I created it while I was underage, with an adult representing me. Once they changed their terms to no longer allo…

Yes, I completely agree with you! I think being able to read through the actual code of the software you use, in order to fully understand it, what it does, and how it works is a p…

As of late, I've found my self in the middle of quite a few debates on open source network/system security. Specifically, I've had to defend a number of projects who only use open …

Fetch Apply (https://github.com/P5vc/FetchApply) is a new system configuration and management tool, that follows the same principles as aviary.sh. Fetch Apply, however, has much be…

You're absolutely right! But hey, I appreciate that at least they cite their sources!

I'm not sure exactly what you mean. If you're looking for a production example, then here's one: Priveasy.org is an open source group that uses P5.vc (the shorter domain's letters …