Live data from Hacker News

Introducing the Keybase filesystem

keybase.io

321–330 of 501 posts

Re: Introducing the Keybase filesystem

#321

This is really cool, but I'm not clear on how to actually install it. Or is it only available to a limited set of users? I see there's a "keybase fuse" command that might be related, but there's no docs for how to use it.

You have to join, since they're still in alpha they let you wait - I just signed up and I'm user "#19177 in the alpha queue"

Some of us had keybase.io accounts for a while now ;). I think we have to wait until the client packages are updated with kbfs support.

Re: Introducing the Keybase filesystem

#322
post #231

Earlier quoted context omitted.

prod·uct ˈprädəkt noun 1. an article or substance that is manufactured or refined for sale .

prod·uct \ˈprä-(ˌ)dəkt\ 2.a.1 Something produced ; 2.b Something resulting from or necessarily following from a set of conditions. This book is the product of many years of hard work. ( http://www.merriam-webster.com/dictionary/product ) There's another sense (not listed) in which "product" specifically refers to prohibited drugs. I know, and you should know, that quadrangle wasn't using that sense. As regards the po…

If the word "product" is used in the context of "Business Model" (as in right under the "Business Model" subtitle), then it is fair to assume the definition of Business product https://en.wikipedia.org/wiki/Product_(business) and not the by-product of a process or anything drug related.

Re: Introducing the Keybase filesystem

#323
post #108

> Your app will encrypt just for you and then awake and rekey in the background when that Twitter user joins and announces a key. Isn't this the weak link in the chain? If you can convince the client that you're the person the data was encrypted for, it will re-encrypt it with a new key and send it to you, thus making the encryption useless. What's the protection against this, other than "don't worry, we won't introd…

I'm not sure about that either. The weakest link seems to be a national security letter to Keybase where they distribute a backdoored version of the FS driver to Alice, and adds the key of Eve to all messages also encrypted to Bob. However, Keybase can't just broadcast "Eve on twitter is Bob!" - the client gets that announcement and links you to the tweet that claims it, where you audit the twitter handle, key finger…

This is why the CJEU doesn't view the USA as a safe habour anymore.

US laws have broken the internet.

Re: Introducing the Keybase filesystem

#324

Why is centralized crypto with a freemium biz model so welcomed? Remember Snowden? Remember parse?

Wasn't keybase started due to a problem snowden had? He couldn't easily verify the GPG key of a journalist? They even resorted to tweeting the public key fingerprint to verify: https://twitter.com/micahflee/status/296119710485979136

Re: Introducing the Keybase filesystem

#325

Earlier quoted context omitted.

They are the trusted source for my public key.

Are you talking about the announced file storage service here? Or about the "drudru claims to be foobar on Twitter" service? The former should be good - that sounds like a smart client in front of a dumb server. The latter is a different problem and as far as I'm aware the service is merely aggregating proves - and can link to those. Verify them?

The client verifies the proofs!

Re: Introducing the Keybase filesystem

#326
post #82

About 4 years ago I was involved with a commercial software project attempting to do exactly this. What we built worked but it wasn't positioned in a way that interested our target audience (Enterprise customers). First, bravo for making it happen in a way that is getting people excited. Second, I sincerely wish you the best luck in getting people to pay for it in a way that is sustainable for a business. We built a…

I think they know what they're doing. The article seems pretty thorough and they're open to feedback. It looks like they've thought of most things but are still able to keep it usable, engaging and at times even humorous (https://keybase.pub/chris/lemon_party.jpg). These are things often missing from security products.

P.S. If anyone wants an invite then details are in my profile.

Re: Introducing the Keybase filesystem

#329
post #98

On the page it says it is "open source Go". Does that mean that, at least theoretically, I (or another independent provider) could build this and run my own personal keybase server? If so, that would really excite me. The one thing that really keeps me away from most cloud storage and sync services is lockin. I just am not willing to be come super dependent on a service that is building their business around propriet…

I'd say the client is open source https://github.com/keybase/client
Post reply on HN