Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Confess your love with zero-knowledge

zkcrush.xyz

Post reply on HN
Print view View original

181–190 of 205 posts

Re: Confess your love with zero-knowledge

#181

Post by MaxLeiter »

arcastroe wrote: post #178
MaxLeiter wrote: post #174

Earlier quoted context omitted.

My favorite analogy is someone has a Wheres Waldo photo. They can prove to you they know where Waldo is by getting a piece of paper (the size of the photo) with a cut out around Waldo. When they hold it up and show you Waldo through the cutout you have zero knowledge about his location.

If the mask paper is the same size as the waldo photo, one can trivially tell where waldo is by just looking at the location of the cutout I think for this to work, the piece of paper with the cutout must be much larger than the full waldo photo. The actual cutout would always be in the center of this mask paper. Then the waldo photo can be moved around behind this mask.

Good catch

Re: Confess your love with zero-knowledge

#182

Post by SirZimzim »

drog wrote: post #167

This protocol has some downsides - if you share the link with large adversarial group (e.g. your school) they can brute force your crush name and it’s basically no different then embarrassingly shouting out your crush name in public and it has problems with canonical names. Instead we can alter it and fix this problems: Bob will find out his crush’s public key, encrypt "you are my crush" message to it and post it wit…

This guarantees the crush will never see their message.

Re: Confess your love with zero-knowledge

#183

Post by scubbo »

drog wrote: post #167

This protocol has some downsides - if you share the link with large adversarial group (e.g. your school) they can brute force your crush name and it’s basically no different then embarrassingly shouting out your crush name in public and it has problems with canonical names. Instead we can alter it and fix this problems: Bob will find out his crush’s public key, encrypt "you are my crush" message to it and post it wit…

> blockchain can be good shelling point

I can absolutely guarantee that the school generation would not naturally gravitate to the blockchain as a source for social interaction, since it's not (yet) running social media. I'm assuming TikTok (if it's common to post your own videos and not just consume?) or Snapchat (or whatever came next, that's probably old enough to be uncool by now I guess?)

EDIT: I just saw the suggestion that school administrators be identity providers for a crush-admission website. OK, now I'm _sure_ this must be satire. Well played.

Re: Confess your love with zero-knowledge

#184

Post by Godel_unicode »

drog wrote: post #167

This protocol has some downsides - if you share the link with large adversarial group (e.g. your school) they can brute force your crush name and it’s basically no different then embarrassingly shouting out your crush name in public and it has problems with canonical names. Instead we can alter it and fix this problems: Bob will find out his crush’s public key, encrypt "you are my crush" message to it and post it wit…

And then someone will guess that the school administrators password is “StudentsSucks2022” and steal all the private keys they left in their documents folder.

Re: Confess your love with zero-knowledge

#185

Post by Godel_unicode »

jesprenj wrote: post #141
can16358p wrote: post #74

Love these kind of ideas. Reminded me of once I was trying to allow access to a file with a password. It wasn't any super-secret file or anything, just a CV of a friend hosted on a static file server and she wanted it to "protect" it with a simple password (just didn't want it to be directly available to anyone viewing the homepage. No mission-critical secret of any kind otherwise). Having no real/strict security req…

What attacks?

Among other things, it’s almost certainly the case that the web server isn’t implementing a constant-time string comparison for the URL, which enables you to brute-force the value one character at a time.

Re: Confess your love with zero-knowledge

#186

Post by dougk16 »

Nice, quick implementation. It's cool that it's all client side. People have pointed out the weaknesses as far as non-crushes brute forcing the answer but still this is interesting. I'll have to digest the implications more. I created https://aytwit.com/thoughter which takes the basic idea here to a much more involved extreme. It got some good traction on hackers news a few years ago and I've improved it a lot since then. I still want to make some improvements as far as moving more of the cryptography client-side so people don't have to trust my server as much, yet not ALL client side like this for more convenience and privacy.

Thanks for the submission!

Re: Confess your love with zero-knowledge

#188

Post by Thorrez »

hinkley wrote: post #145
Liron wrote: post #86

Last year my wife and I suspected we might have gotten each other the same Christmas gift, but didn’t want to spoil the surprise in case we didn’t. So we compared SHA256 hashes... and sure enough they both came out cb17007d (theragun)

There are a couple of science and science fiction authors that started posting hashes or signatures for their predictions for the future, and then post it after events played out. I think the idea is that unlike pundits predicting the future, you don't want your particularly clever friend speculating out loud ten minutes into the suspense movie what they think is going on because they either guess the ending, or thei…

>unlike pundits predicting the future

Isn't your example pundits predicting the future? So why are hashes useful to those pundits in your example?

Re: Confess your love with zero-knowledge

#190

Post by makach »

exikyut wrote: post #142
makach wrote: post #140

Yeaaahh, but no. It doesn’t need to be mutual. Guess can be correct but the reveal will probably just out you and cause problems. For confessing your love do it openly, they are no short cuts.

* Hires team of synchronized skywriters to draw SHA-256 hash above crush's location *

you are the chosen one.
Post reply on HN