Live data from Hacker News

Confess your love with zero-knowledge

zkcrush.xyz

101–110 of 205 posts

Re: Confess your love with zero-knowledge

#101
post #2

This is some strange notion of zero-knowledge. If Bob publishes his link, and I want to know who his crush is, I can simply try all our classmates' names and quickly find out that it's Alice. Those games only make at least a bit of sense when everybody enters their crush and only when matching both get notified. Also brute-forceable, but at least it's quadratic (if you suspect nothing about crushes, which is unrealis…

> Those games only make at least a bit of sense when everybody enters their crush and only when matching both get notified. Even then, among heterosexuals they will suffer from the same problem as basically every software platform for romance among straight people: the massive asymmetry in interest between men and women. Men would copy and paste virtually every woman they know into the system as a "crush," so they ca…

> Men would copy and paste virtually every woman they know into the system as a "crush," so they can find which if any of their female acquaintances might be interested, and then they would decide who to pursue.

Smart men would, who know their place in the world. Any of them are good enough for you, really. Take the one that you like the most out of the ones who like you. Is this a problem? If it weren't asymmetric, it would be hopeless. Instead, most men get the choice between one or more interested women, and most women get a response from one or more of the men they were interested in.

It's better if one side isn't as picky as the other. The other options are that only a couple of people match up at all, or everyone getting a response from everyone i.e. no signal at all.

edit: I mean, isn't that Bumble?

Re: Confess your love with zero-knowledge

#102
post #86

Last year my wife and I suspected we might have gotten each other the same Christmas gift, but didn’t want to spoil the surprise in case we didn’t. So we compared SHA256 hashes... and sure enough they both came out cb17007d (theragun)

Doesn't work, because you can reasonably brute-force possible gifts.

You can similarly brute force mutual acquaintances in TFA

Re: Confess your love with zero-knowledge

#104
post #12
post #2

This is some strange notion of zero-knowledge. If Bob publishes his link, and I want to know who his crush is, I can simply try all our classmates' names and quickly find out that it's Alice. Those games only make at least a bit of sense when everybody enters their crush and only when matching both get notified. Also brute-forceable, but at least it's quadratic (if you suspect nothing about crushes, which is unrealis…

If it tells you how many letters are right, and how many are in the right place, it could become Datle.

* Flirdle

Re: Confess your love with zero-knowledge

#105
post #86

Last year my wife and I suspected we might have gotten each other the same Christmas gift, but didn’t want to spoil the surprise in case we didn’t. So we compared SHA256 hashes... and sure enough they both came out cb17007d (theragun)

Doesn't work, because you can reasonably brute-force possible gifts.

Sure, but the example is contrived, as it serves to illustrate the point in an easily digestible (heh) way. In real world applications, both the possible messages and the possible hashes would be way too large to brute force.

Re: Confess your love with zero-knowledge

#106
post #86

Last year my wife and I suspected we might have gotten each other the same Christmas gift, but didn’t want to spoil the surprise in case we didn’t. So we compared SHA256 hashes... and sure enough they both came out cb17007d (theragun)

What did you hash? The name of the product? Or the UPC or something? I am curious.

Re: Confess your love with zero-knowledge

#107

Earlier quoted context omitted.

OP should probably trim whitespace too. I sent it to my wife and it's not a match either, because there was a trailing space left by her keyboard.

Don't forget normalizing unicode. You don't want to see Jorgé fighting with Jorgé.

It does handle emojis though! In case... Uhhh... You have emojis in you name?

Re: Confess your love with zero-knowledge

#108
post #2

This is some strange notion of zero-knowledge. If Bob publishes his link, and I want to know who his crush is, I can simply try all our classmates' names and quickly find out that it's Alice. Those games only make at least a bit of sense when everybody enters their crush and only when matching both get notified. Also brute-forceable, but at least it's quadratic (if you suspect nothing about crushes, which is unrealis…

that's because it's not zero knowledge, it's password hashing.

a zero knowledge proof would do something like prove a valid attestation of love, but reveal nothing about who (other than maybe membership in some large enough set).

Re: Confess your love with zero-knowledge

#109
post #10

I hardly see how this is related to zero-knowledge

I believe "zero knowledge" refers to the third party here. That is, you give it A => B, and it tells you if B => A was given previously, without it knowing the actual values of A or B. While you might be able to brute force the system by trying every name you know, the third party can't unless you give the third party a registry of names to try.

Related is the humorous paper "Solving the Dating Problem with the SENPAI Protocol" [1], though the solution in that paper does not rely on a third party.

[1]: http://sigtbd.csail.mit.edu/pubs/2016/paper10.pdf

Re: Confess your love with zero-knowledge

#110

To stop my friends from using this to guess who my crush is, a fun iteration could be instead of entering the person’s name, you enter the last text you sent, place you met, etc. Something only the two of you would know … and maybe even something romantic :)

Virtually guaranteeing you’d never match even if you match.
Post reply on HN