Live data from Hacker News

Vuvuzela – Private messaging system that hides metadata

github.com

31–32 of 32 posts

Re: Vuvuzela – Private messaging system that hides metadata

#31

Earlier quoted context omitted.

seems inherent - servers operate in rounds and each round carries legit traffic plus enough noise to allow traffic metadata to drown in nothingness and forward it to a whole server chain to avoid an adversary to control all the servers, so as you scale servers need more time to forward and mixin traffic

Could someone much smarter than me do some napkin math and figure out roughly what kind of tradeoff in security you make by limiting the noise? 20-40 seconds is fine if you are releasing NSA secret files and want the chance of metadata discovery to be But it's too much to use as a regular form of conversation between average parties who just want to set a precedent that all conversations by default should be un-monit…

The slides toward the end of my talk [1] try to give some intuition for Vuvuzela's security in terms of "jury certainty".

[1] https://davidlazar.org/slides/vuvuzela-sosp2015.pdf

Re: Vuvuzela – Private messaging system that hides metadata

#32
post #3

you win just for the project name.

Interestingly, I have a private repo on Github that does something eerily similar. It's been stale for a couple of years, but I had to go check that repo and verify it was private. Same name, nearly identical purpose. It made me think.
Post reply on HN