Live data from Hacker News

Why I Wrote PGP (1999)

philzimmermann.com

141–150 of 194 posts

Re: Why I Wrote PGP (1999)

#141

Earlier quoted context omitted.

> It was indeed peace, we almost had it, world peace - feeling utopian and all loving in the 90s. Think you might need to qualify that. The mid-90s saw the Bosnian and Rwandan genocides.

It won’t be the first time in history, Americans and with them the “western” world turned a blind eye to who’s backs their hedonistic party was carried over. If you look at what was life like. What people cared about. What songs sang about. What households looked like. War was as far a concept from the average American. Sure we had the gulf war early 90s. We had Bosnia during Clinton years. But most Americans were mo…

> We had Bosnia during Clinton years.

Oppose them or support them, it was literally American bombing campaigns that stopped the Bosnian genocide and the ethnic cleansing of Kosovo.

Re: Why I Wrote PGP (1999)

#142
post #114

Earlier quoted context omitted.

>Then came 9/11 The rising pessimism and negativity since 2008/09 is a global phenomenon. I think it's wrong and very US-centric to attribute that to 9/11. The 2008 financial crisis and the rise of social media has probably more to do with the rise of millennial pessimism and negativity.

We had worse crises before that didn’t change societies so deeply. With 9/11 we started renouncing to the concept of freedom that we gained with illuminism and the French revolution. Then we started putting “safety” before everything else.

We had worse crises before that didn’t change societies so deeply

During the Red Scare, loyalty review boards were instituted and civil servants insufficiently 'American' were sacked in the thousands.

Re: Why I Wrote PGP (1999)

#143

There’s something… different about how people (techie people are most of my sample) would write before the 00’s. I’m not sure if it has to do with the medium, or the constraints of the time, but reading it always fills me with something I can best describe as peace/nostalgia. The belief that technology honestly can change the world for the better and that the most influential people driving it have good motives inste…

I think much of it has to do with that they were originally written for books, magazines with thorough editorial practices and a reputation to preserve.

'Richard Feynman and The Connection Machine'[1] another HN favorite comes to my mind. It was originally written for Physics Today magazine.

I don't think it's limited to only long form content, Even today printed news papers which have been in existence for >=~100 years does have better quality of writing than online content(even from the same news media) due to some resemblance of their editorial practices.

But all those printed newspapers are on the verge of bankruptcy or already dead. Their online counterpart is now only concerned with how many articles can be published/hour, There's not even proof reading because of this as they have to please Google, Facebook, Apple for those screen time.

I've noticed when I give interviews to online news the writer often has to work with their web-admin to fix errors in my statements after publishing(when it's different from what I actually said)and often it takes several hours if it even happens. Where as in printed news papers had the habit of error correction in the next issue.

[1] https://longnow.org/essays/richard-feynman-connection-machin...

Re: Why I Wrote PGP (1999)

#144

There’s something… different about how people (techie people are most of my sample) would write before the 00’s. I’m not sure if it has to do with the medium, or the constraints of the time, but reading it always fills me with something I can best describe as peace/nostalgia. The belief that technology honestly can change the world for the better and that the most influential people driving it have good motives inste…

The utopianists saw what they had wrought, and did not like it.

Re: Why I Wrote PGP (1999)

#145
post #9
post #3

PGP felt so subversive back in the day. Key signing parties[1] and porting the "international" version[2] to run on the Amiga. And the very real threat that the Clipper Chip[3] would lead to the outlawing of all other encryption methods. [1] https://en.wikipedia.org/wiki/Key_signing_party [2] https://www.unix-ag.uni-kl.de/~conrad/krypto/pgp263.features... [3] https://en.wikipedia.org/wiki/Clipper_chip

The sad thing is if the clipper chip was ubiquitous today that could have killed the ability for spammers to spoof numbers. Some days I can get a dozen robo calls, each with a different spoofed number. People that want non-backdoored crypto could still do so. I'm still blown away at how hard it is to get people to use any encryption, even people who work in infosec/etc. If nothing else, 2020 was a great year for the…

The US government intentionally made it inconvenient and infeasible to include encryption at a key time in technological development, and I think it had lasting consequences.

Yes, if the internet community had acceded to their demands to use the clipper chip, that would have been one route to them lowering the barriers they had put in place to encryption. They also could have just recognized that widespread encryption was in the national interest without the clipper chip, instead of deciding it was opposed to it.

Re: Why I Wrote PGP (1999)

#146

There’s something… different about how people (techie people are most of my sample) would write before the 00’s. I’m not sure if it has to do with the medium, or the constraints of the time, but reading it always fills me with something I can best describe as peace/nostalgia. The belief that technology honestly can change the world for the better and that the most influential people driving it have good motives inste…

Ever watched old commercials? It feels like they were less "in your face", not constantly jumping up and down for your attention. Calmly spoken and more likely to actually say something about the product. That shift is another indicator of the shift of things getting dumbed down in a way.

Re: Why I Wrote PGP (1999)

#147
post #70

According to the legend, they weren't allowed to publish PGP on the internet because US laws forbade exporting of cryptographic tools, so they made a book with the entire source code and shipped that overseas.

It's not a legend, it's easy enough to confirm.

https://philzimmermann.com/EN/essays/BookPreface.html

Re: Why I Wrote PGP (1999)

#148
post #38

Earlier quoted context omitted.

Cryptographic constructions.

Can you recommend a text about this? As a layperson, I'm still having trouble understanding what you mean by that.

Here's a quick overview: We have what we call primitives that achieve a certain goal. For example AES on its own does a pretty good job of being a block cipher. However it doesn't fulfil all our expectations for actual secure communication alone and for this we need to use it as part of a slightly larger scheme.

These are the constructions tptacek refers to. How we put together the bits we have in a way that meets our expectations, which we refer to as semantic security. This doesn't just apply to AES but also to public key crypto as well. This might seem quite abstract, so let me put it this way: AES alone doesn't know if the ciphertext you feed it has been modified by an attacker. It will simply process that data with a given key. The decrypting software might notice and report an error (the message will look garbled), and there are circimstances where this can actually be exploited to reveal information. This is not what we expected to happen.

We've learned a lot about this since the early 90s. Many modern primitives actually come with all the parts we would call a construction built in, to avoid potential misuse (although these schemes are for the most part academic right now). Almost all modern systems combine primitives like AES in such a way as to meet our expectations. Except perhaps Telegram but nobody knows what they're smoking.

If you want an actual textbook, Introduction to Modern Cryptography by Katz and Lindell, or Cryptography Made Simple by Nigel Smart will cover this in plenty of detail, and are also good all round introductions to most areas of cryptography by leading experts. I learn towards the book by Smart, but either will be perfectly fine.

Re: Why I Wrote PGP (1999)

#149
post #142
post #114

Earlier quoted context omitted.

We had worse crises before that didn’t change societies so deeply. With 9/11 we started renouncing to the concept of freedom that we gained with illuminism and the French revolution. Then we started putting “safety” before everything else.

We had worse crises before that didn’t change societies so deeply During the Red Scare, loyalty review boards were instituted and civil servants insufficiently 'American' were sacked in the thousands.

But there isn't a singular date to associate with the Red Scare... that's more a nebulous period of time. It was also a gradual process. The West was already preparing for the oncoming cold-war with the USSR before the end of WW2.

The loyalty boards and Hollywood blacklisting were definitely a change is society, but it was so slow moving that I wouldn't compare it to a shift like 9/11.

The world wasn't really different before and after something like the hearings of the House Un-American Activities Committee, even though that is what would be a likely event you'd associate with the Red Scare.

When I think of 20th century cultural events that had an shift in society, I think more of the Cuban missile crisis, the Challenger disaster, the fall of the Berlin wall, etc... shorter events (not necessarily instantaneous, but well defined times) where you could define shifts in culture to before/after.

Re: Why I Wrote PGP (1999)

#150
post #99

Earlier quoted context omitted.

To me, there was something to say vs people posting shit just to meet a quota. There seems to be much less thought/research/editing of content now. It wasn't so gamefied before HTML2.0 and social.

Not convinced HTML2 'gamified' anything. "HTML 1" wasn't really a standard anyway and I don't remember what html2 actually brought - I remember not every browser in the mid 90s did tables, client side image maps etc but they were later additions to html2. Javascript (which came in with html 3.2) was far more of a step change than html2

HTML5 brings incredible things to the table however with its taints of corporate presence and those who hold a dictation in direction. This is not "free".

HTML doesn't have to be the only web transport. Build your browser and make your own protocol. IPFS is doing just fine.

HTML4 was the last true free-release from any corporate grab. And it has everything youll ever need. However it just sits there forgotten taken by the glory of HTML5.

Post reply on HN