Live data from Hacker News

As Feds Demand the Keys, Preparing for the Death of Public-Key Encryption

lauren.vortex.com

241–250 of 295 posts

Re: As Feds Demand the Keys, Preparing for the Death of Public-Key Encryption

#241
post #153
post #122

This article seems to be mostly FUD. Per-session, ephemeral SSL keys are available and are used by at least Google [1], CloudFlare[2], and others. No keys are stored, no keys can be given to the NSA. 1 - https://www.imperialviolet.org/2011/11/22/forwardsecret.html 2 - http://blog.cloudflare.com/cloudflare-prism-secure-ciphers

That's only true in a pure eavesdropping scenario. The keys would still allow MITM attacks.

Except for cert pinning. I think moxie is working on a general form of that right now.

Re: As Feds Demand the Keys, Preparing for the Death of Public-Key Encryption

#242

Earlier quoted context omitted.

There is something to be desired about an attitude that conflates people having different values and priorities with their being "idiots."

Sorry, I miscommunicated. I was saying that the person you responded to was being an idiot by calling the general public drunken fools (true or not) and that it's a bad thing to lower to that level of discourse by retaliating in such a content-free manner because you won't change anybody's mind that way. I.e. your position is good, but it's only through expressing ourselves well that we can have an influence on other…

Just so you both know, from the outside, you both appear to be on the same page on the decorum issues here.

Re: As Feds Demand the Keys, Preparing for the Death of Public-Key Encryption

#243

Earlier quoted context omitted.

With all the outcoming gov scandals, with government forcing you to vaccine your kids... All other points aside for a moment: the government should force each and every parent to vaccinate their children. Herd immunity is a key factor in protecting most of the population from many awful diseases, and herd immunity is only effective if the vast majority are vaccinated. There's no credible evidence that vaccination cau…

Yes vaccination is NOT a billion dollar business, vaccines do not kill people, and its perfectly logic you need to get shots against other peoples diseases BUT at the same time those who don't become a danger to you, yes. http://money.cnn.com/magazines/moneymag/moneymag_archive/199... http://articles.mercola.com/sites/articles/archive/2008/03/1... http://vaccinedangers.com/ http://www.mercola.com/article/vaccines/neu…

1st off, the last link you have there is a brilliant example of a failure to use Bayesian reasoning.

> its perfectly logic you need to get shots against other peoples diseases BUT at the same time those who don't become a danger to you

You don't understand herd immunity. It amplifies a weak individual immune boost (say, a 40% effictive vaccine) into a dramatic effect on the actual number of people who get sick.

Here's how it works: consider the average number of new people an infected person will infect (call this number k). If k>1 (1.01 even), the disease very likely explodes across the face of the earth and turns into an epidemic or pandemic. If ka lot about making kVaccines are hard to make and not very effective in the sense that there is only maybe a 40% chance they will stop you from getting sick if others around you are sick. But that 40% success rate dramatically effects k so long as everyone gets vaccinated: if kIf you're one of the assholes who spoil the whole thing by not getting vaccinated, your peers have every right to get angry with you. I wish you could be collectively sued for your effect on an outbreak, but I'll settle for a bit of government incentive.

> vaccines do not kill people

The FDA and EMA are dramatically overcautious when it comes to this kind of thing (they minimize the number of lives lost to drugs and vaccines even at the expense of not minimizing total lives lost). If you think otherwise, safety and efficacy studies are public. Start with primary sources, avoid hokey nonsense like what you posted. The FDA site is a mess but google can usually find specific studies with filetype:pdf.

> the vaccines business is create problem & offer solution

Pretty sure it's evolution (of bacteria and viruses) creating the problem, not drug companies. Or do you not believe in evolution either?

Re: As Feds Demand the Keys, Preparing for the Death of Public-Key Encryption

#244
post #118

This kind of thing makes me think the Snowden disclosures actually emboldened the NSA in some ways. Their nightmare scenario occurred, and nothing happened. Nobody even got fired or "resigned". The public's tepid reaction has brought our nightmare scenario to life - we taught secretive government agencies that they can now do anything they want without fear of public backlash. These kinds of requests can now dramatic…

What you say is true, but misses an important consideration: yesterday, only tinfoil hats believed they couldn't trust third-party companies with their privacy. Today, everyone knows that the only way to have privacy is to handle it personally, from their local computer. The whole PRISM scheme worked because people supposed the government respected their privacy. Now that it's been proven false, I expect people to us…

> Today, everyone knows that the only way to have privacy is to handle it personally, from their local computer.

My completely anecdotal experience is that when people want privacy, they're starting to avoid all manner of electronic communication.

Re: As Feds Demand the Keys, Preparing for the Death of Public-Key Encryption

#245

Earlier quoted context omitted.

Yes vaccination is NOT a billion dollar business, vaccines do not kill people, and its perfectly logic you need to get shots against other peoples diseases BUT at the same time those who don't become a danger to you, yes. http://money.cnn.com/magazines/moneymag/moneymag_archive/199... http://articles.mercola.com/sites/articles/archive/2008/03/1... http://vaccinedangers.com/ http://www.mercola.com/article/vaccines/neu…

1st off, the last link you have there is a brilliant example of a failure to use Bayesian reasoning. > its perfectly logic you need to get shots against other peoples diseases BUT at the same time those who don't become a danger to you You don't understand herd immunity. It amplifies a weak individual immune boost (say, a 40% effictive vaccine) into a dramatic effect on the actual number of people who get sick. Here'…

Thanks for response, I upvoted you.

I wasn't clear in my first post. I am not against major vaccines, the problem is that today by age 8 you have many more shoot than those you had only 20 years ago. I fail to believe life on Earth change soo much that we all need so many more shots to survive.

Like with any other business, pharma sees opportunity to oversell and creates tons of unnecessarily shots that your local CSV loves to advertise. I also personally know an example of an older man who got a shot and 2 weeks later got sick exactly on something he was getting shot against. It doesnt make sense.

Re: As Feds Demand the Keys, Preparing for the Death of Public-Key Encryption

#246

Earlier quoted context omitted.

Like with everything else than maybe virus outbreak, most changes takes time to affect entire community, economy or a country. Rome wasn't built in a day, so the Rome Empire didn't collapse in a day neither. Take me as an example. I am 8 years in US, married to US citizen. Green Card holder now and couple years ago our plan was for me to become a US Citizen and us to raise our kids on US soil. Not anymore. With all t…

With all the outcoming gov scandals, with government forcing you to vaccine your kids... All other points aside for a moment: the government should force each and every parent to vaccinate their children. Herd immunity is a key factor in protecting most of the population from many awful diseases, and herd immunity is only effective if the vast majority are vaccinated. There's no credible evidence that vaccination cau…

Even if we are 100% clear that there is no evidence that vaccination causes any malady, government mandates requiring that the government chooses what things should be injected into every single citizen crosses a very important line of freedom of action for me. Just like the argument that you may not agree with someone but will defend their rights to say it. I may not agree with an anti-vaccination person but I would defend to the end every persons right to liberty (that is choice) in regards to government mandates as to invasive procedures, pills, or injections. We have to think of the future implications of precedents like that.

Re: As Feds Demand the Keys, Preparing for the Death of Public-Key Encryption

#247
post #129

> Public-key cryptography as we know it today may be rapidly approaching the end of its useful lifespan. No evidence in the article substantiates this bold statement. - "pressuring major Internet firms to provide their "master" SSL keys for government surveillance purposes": this demonstrates a weakness of centralized public-key infrastructures, it does not follow that public-key cryptography is doomed. (See: web of…

I mean, what's to stop people forming their own signing authorities and distributing the public keys via a trusted method as we do anyway?

Re: As Feds Demand the Keys, Preparing for the Death of Public-Key Encryption

#248

Earlier quoted context omitted.

1st off, the last link you have there is a brilliant example of a failure to use Bayesian reasoning. > its perfectly logic you need to get shots against other peoples diseases BUT at the same time those who don't become a danger to you You don't understand herd immunity. It amplifies a weak individual immune boost (say, a 40% effictive vaccine) into a dramatic effect on the actual number of people who get sick. Here'…

Thanks for response, I upvoted you. I wasn't clear in my first post. I am not against major vaccines, the problem is that today by age 8 you have many more shoot than those you had only 20 years ago. I fail to believe life on Earth change soo much that we all need so many more shots to survive. Like with any other business, pharma sees opportunity to oversell and creates tons of unnecessarily shots that your local CS…

I'm not a doctor, but having had small kids in the US and in New Zealand I noticed a marked difference in the number of jabs that are recommended. I don't know the reasons for this but the idea that it may be correlated with a larger impact of business incentives in insurance-company US versus single payer NZ doesn't seem wildly implausible to me.

Re: As Feds Demand the Keys, Preparing for the Death of Public-Key Encryption

#249
post #229
post #129

> Public-key cryptography as we know it today may be rapidly approaching the end of its useful lifespan. No evidence in the article substantiates this bold statement. - "pressuring major Internet firms to provide their "master" SSL keys for government surveillance purposes": this demonstrates a weakness of centralized public-key infrastructures, it does not follow that public-key cryptography is doomed. (See: web of…

All forms of public key encryption require proof that Alice or Bob are who they say they are or you can setup a man in the middle attack. Without a public key athority to Safely provide the correct public key your stuck with manual key exchanges which can work, but does not scale. If the government has the public key authority's private key they can spoof them and setup man in the middle attacks easily.

Web of trust. So say I meet someone visiting from the US that I trust, he gets my public key and signs it, and vice versa, then I can guarantee to people who have my pubkey that the one I'm sending them is his one.

Re: As Feds Demand the Keys, Preparing for the Death of Public-Key Encryption

#250
post #129

> Public-key cryptography as we know it today may be rapidly approaching the end of its useful lifespan. No evidence in the article substantiates this bold statement. - "pressuring major Internet firms to provide their "master" SSL keys for government surveillance purposes": this demonstrates a weakness of centralized public-key infrastructures, it does not follow that public-key cryptography is doomed. (See: web of…

I mean, what's to stop people forming their own signing authorities and distributing the public keys via a trusted method as we do anyway?

The fact that neither you nor I have heard of the projects already doing this.
Post reply on HN