Live data from Hacker News

Show HN: Rumuki, a prenup for sex tapes

rumuki.com

71–80 of 207 posts

Re: Show HN: Rumuki, a prenup for sex tapes

#71
post #63

This is a cool idea. I expressed an upfront concern about reverse engineering in another comment directly to the OP (no DRM is foolproof, etc). After skimming through the whitepaper I'd like ask you a few implementation questions about the feasibility of client trust: • Can you tell me how the device token/keys are stored locally and accessed by the application? I understand the crypto itself (e.g. libsodium), but I'…

Hey no problem:

1. Uses Realm for storage, encrypted with their encryption api using a random key generated on first boot stored in iOS keychain.

2 & 3. It has some rudimentary jailbreak detection but obfuscation is still in the pipeline.

(Getting late here in Tokyo so may be until tomorrow before I answer follow up questions)

Re: Show HN: Rumuki, a prenup for sex tapes

#72
post #48

i just read the page again and realize this is for a single view and a maximum of 7 days for sex tapes recorded while both partners are present. in my opinion this is one way to do it but prevents me from having a kind of "library" with videos to share with my partner. how about a shared library that is watchable until access is revoked by one party? there's also the question about sharing videos with a person that's…

Unless I'm reading wrong, the videos aren't gone after 7 days; the key grant is valid for 7 days before it expires (or if it is revoked). Deleting the key, or deleting the video, seem to be the permanent actions that removes the videos; otherwise they are available indefinitely. I'm sure @nathankot can clarify here.

Re: Show HN: Rumuki, a prenup for sex tapes

#73
post #48

i just read the page again and realize this is for a single view and a maximum of 7 days for sex tapes recorded while both partners are present. in my opinion this is one way to do it but prevents me from having a kind of "library" with videos to share with my partner. how about a shared library that is watchable until access is revoked by one party? there's also the question about sharing videos with a person that's…

Unless I'm reading wrong, the videos aren't gone after 7 days; the key grant is valid for 7 days before it expires (or if it is revoked). Deleting the key, or deleting the video, seem to be the permanent actions that removes the videos; otherwise they are available indefinitely. I'm sure @nathankot can clarify here.

You are correct!

Re: Show HN: Rumuki, a prenup for sex tapes

#74
post #64

Earlier quoted context omitted.

I think you're being sarcastic, but I just can't tell. I'd guess 99% of people doing this have just as much fun without filming.

I don't get the point of sextapes. I have excellent recall, so why do I need a video record?

Very few people have excellent recall. Possibly nobody does about something so non-binary as an extended sexual encounter. Memory is a story we tell ourselves about the past.

However, I bet you do remember it better than it was. So keep your memories. They're much better for this than a video record.

Re: Show HN: Rumuki, a prenup for sex tapes

#75

Earlier quoted context omitted.

Unless I'm reading wrong, the videos aren't gone after 7 days; the key grant is valid for 7 days before it expires (or if it is revoked). Deleting the key, or deleting the video, seem to be the permanent actions that removes the videos; otherwise they are available indefinitely. I'm sure @nathankot can clarify here.

You are correct!

Thanks! The question about long distance sharing is a tricky one, since data on the leaky internets etc. I suppose you could do something via a hop through Dropbox (or equiv) since the actual content is already encrypted. That assumes the encryption never gets broken, but when quantum computers take over the world, a naughty video is probably going to be the last of our problems :).

Re: Show HN: Rumuki, a prenup for sex tapes

#76
It's a neat project. Others have fleshed out most details. It could even get uptake if spread on social media. Let me focus instead on the more devious possibilities.

"They are encrypted and saved on your devices. Recordings are never sent across the internet and never touch our servers. "

" it is impossible for third party attackers to gain access to your videos without local access to the network your devices are on (that includes us!)"

This claim is made by every developer of security/privacy apps when content stays on the device. It's actually false. They could embed a backdoor in the current or a future release that shares the files. Already requires networking permission when managing videos. Actually, a service like this getting extremely popular could lead to one of the largest leaks of nude pics in history. One person hacking the box containing the source/credentials, getting on the development team, or being the original author w/ trolling intent could subvert it into a giant store of pics/video. Get it to send the data back when on WiFi to avoid high, data bills. Thumbnails of videos sent first to filter out uninteresting parties.

I'm not accusing the author of this at all. I'm just assessing security risk from side I'm good at: subversion. The subversion risk here is spectacularly above average as a network effects developing around this app lead to many eggs in one basket that's probably easy to grab. Or was until the author read my comment and beefed up security in a panic. ;)

Re: Show HN: Rumuki, a prenup for sex tapes

#77

This app would have saved my career a couple years ago. Now, when I visit the old office to say hi to my ex-colleagues, I still can't get past the nickname they gave me because of what happened.

I believe environments auto-eject those people who do not belong there anyway, the reason does not matter.

Re: Show HN: Rumuki, a prenup for sex tapes

#79
I find it odd how people are hating on the idea here, while this could obviously be a lot better than the alternative... you know unencrypted video files that someone can access whenever they want.

The concerns I'd have with this myself would be that I'd have to trust the website. As it is I trust my spouse a lot more than some cloud service and I don't expect that to change.

Post reply on HN