Just publish your staff only under your domain on your personal website, like we did in the ninetees.
Sign Everything
41–50 of 90 posts
Re: Sign Everything
#42Write the essay in person, no phone allowed, then you'll see how those little cheating jerks really do.
Re: Sign Everything
#43Great example of the danger of talking about a solution before you’ve truly defined the problem. What problem is Fred trying to solve? The example he gives of writing he would sign is a blog post. The blog post is already authenticated because it’s on avc.com. Fred Wilson has the tokens, social authority etc to ensure what shows up there under his name is from him. Technically speaking, it was already signed via TLS…
The blockchain proves that the post was made when he says it was. Being on avc.com doesn't prove that; he could back-date posts.
You don’t need a blockchain, there are cryptographic timestamp services for that.
Re: Sign Everything
#44Earlier quoted context omitted.
Signing everything is not terrible advice. But here the problem Fred is trying to solve is very simple. He is an investor in mirror.xyz and needs to make his money back. This is the only reason someone interested in signing something would also ask you to go through the hassle of using a blockchain.
There is absolutely 0 need to use a blockchain to sign something :facepalm:
Sure, you don't need a blockchain to sign something, but using a blockchain means that the signature is timestamped in an incontestable way, massively replicated and made globally retrievable. It also helps mitigate the possibility that the content will be deleted or suppressed.
Re: Sign Everything
#45Earlier quoted context omitted.
Signing everything is not terrible advice. But here the problem Fred is trying to solve is very simple. He is an investor in mirror.xyz and needs to make his money back. This is the only reason someone interested in signing something would also ask you to go through the hassle of using a blockchain.
There is absolutely 0 need to use a blockchain to sign something :facepalm:
Agree - the signing part doesn't, the suggestion is to use Web3/blockchain as a method for others to verify secondarily the hash is from the author.
It used to be email was unique, and public keys shared for verification. Author is suggesting by placing the hash of the content on chain, anyone can independently verify it. I think it is novel
Re: Sign Everything
#46Great example of the danger of talking about a solution before you’ve truly defined the problem. What problem is Fred trying to solve? The example he gives of writing he would sign is a blog post. The blog post is already authenticated because it’s on avc.com. Fred Wilson has the tokens, social authority etc to ensure what shows up there under his name is from him. Technically speaking, it was already signed via TLS…
I think it's funny that if everyone signed their blog posts, ChatGPT would try to "sign" its blog posts as well, and fail.
Chat would sign it with a different public/key pair - which upon verification would not match authors public key nor hash.
Re: Sign Everything
#47>I think AI and Web3 are two sides of the same coin. As machines increasingly do the work that humans used to do, we will need tools to manage our identity and our humanity. Web3 is producing those tools and some of us are already using them to write, tweet/cast, make and collect art, and do a host of other things that machines can also do. Web3 will be the human place to do these things when machines start corruptin…
Signing everything is only meaningful if you can distribute your public key in a way trusted by those who will check your signature. And not just one time; you want to be able to rotate the key sometimes. A blockchain with a proof-of-work validation may be overkill. But some kind of Merkle tree, like that offered cy TLS certificate infrastructure, is needed anyway. If it can be trustless at a moderate expense, the be…
Look up AdES signatures and Trusted Lists, this basically exists.
Re: Sign Everything
#48I like the proposal, there will also be an intermediate time when AI WILL be able to sign content a sYOU with your own private key without the AI having access to your original private key or without you knowing it.
How? A quantum computer will crack enough existing content signed with poor / old keys that use algorithms that are not quantum safe.
Re: Sign Everything
#49>I think AI and Web3 are two sides of the same coin. As machines increasingly do the work that humans used to do, we will need tools to manage our identity and our humanity. Web3 is producing those tools and some of us are already using them to write, tweet/cast, make and collect art, and do a host of other things that machines can also do. Web3 will be the human place to do these things when machines start corruptin…
> Machines will simply start pretending to be human and sign everything themselves
The signature has to be trusted though. Just signing it with a signature that has no meaning to me doesn't change anything apart from perhaps proving it has the same origin as something else.
The key function is the humanness or repotuation/trust score of the signature. If I read something signed by my uncle with a key we recently exchanged in person, then that's a high human score. If a blogger I have read and enjoyed 100 posts from posts a 101st post then I trust the content of the 101st to have the same quality (likely because the author is human). Both my uncle and the blogger could be compromised, but it's a start.
> nothing prevents a person from taking a ChatGPT output and putting their own, human, signature on it.
That would make me lower my trust of that author. I think this is the key: the signatures don't provide much value until we have a good reputation database, perhaps systems of trust networks where my uncles' neighbor is automatically slightly more trusted because I trust my uncle. That would be a useful system.
> signing everything does not require any Web3 blockchain bullshit in order to work
Indeed.
Re: Sign Everything
#50I wonder - is there an existing script / tool that allows a user to copy a chunk of text and then automatically apply their private key to sign the text and paste it back with the signature?