Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

FOKS: Federated Open Key Service

foks.pub

Post reply on HN
Print view View original

21–30 of 82 posts

Re: FOKS: Federated Open Key Service

#22

Post by brookst »

hofrogs wrote: post #18
kstrauser wrote: post #16

Earlier quoted context omitted.

And in reality, someone making a personal project used a tool at their disposal to add pretty pictures to their website, said website not being a part of the project in any way. If they vibe coded the app, sure, be skeptical. But there's no indication they did, just that they wanted images for their website, and they're a software engineer and not a graphics designer. I put about as much weight in the origin of those…

Not having any pictures at all is better than having AI pictures, in my opinion

Perhaps it’s a filter to intentionally scope audience.

Re: FOKS: Federated Open Key Service

#24

Post by lijok »

hofrogs wrote: post #18
kstrauser wrote: post #16

Earlier quoted context omitted.

And in reality, someone making a personal project used a tool at their disposal to add pretty pictures to their website, said website not being a part of the project in any way. If they vibe coded the app, sure, be skeptical. But there's no indication they did, just that they wanted images for their website, and they're a software engineer and not a graphics designer. I put about as much weight in the origin of those…

Not having any pictures at all is better than having AI pictures, in my opinion

And you’re not just having a kneejerk reaction?

Re: FOKS: Federated Open Key Service

#25

Post by kstrauser »

hofrogs wrote: post #18
kstrauser wrote: post #16

Earlier quoted context omitted.

And in reality, someone making a personal project used a tool at their disposal to add pretty pictures to their website, said website not being a part of the project in any way. If they vibe coded the app, sure, be skeptical. But there's no indication they did, just that they wanted images for their website, and they're a software engineer and not a graphics designer. I put about as much weight in the origin of those…

Not having any pictures at all is better than having AI pictures, in my opinion

Why is that different from disliking their font preference? It's an aesthetic choice, made by someone who's not advertising their web design expertise, that's purely subjective.

If this site were their product, maybe that'd matter. But why does that matter in this context?

Re: FOKS: Federated Open Key Service

#28

Post by chowells »

kstrauser wrote: post #25
hofrogs wrote: post #18

Earlier quoted context omitted.

Not having any pictures at all is better than having AI pictures, in my opinion

Why is that different from disliking their font preference? It's an aesthetic choice, made by someone who's not advertising their web design expertise, that's purely subjective. If this site were their product, maybe that'd matter. But why does that matter in this context?

Because it shows a lack of respect for and understanding of the work graphic artists actually do. Now if that's your brand, great. You are communicating it effectively. If it's not your brand, it's probably worth considering the subtext in your presentation.

Re: FOKS: Federated Open Key Service

#29

Post by maxtaco »

pmw wrote: post #19

To better wrap my head around how FOKS facilitates team collaboration, I'd like to see two comparisons: 1) compare to a team-shared Linux machine with SSH daemon. Each team member has a user account, and they can manage their SSH authorized keys, including keys stored on Yubikey. The team can share files and git repositories on the Linux machine's own storage. Some differences I see with this approach are the federat…

I'm not familiar with Radicle, but I'll check it out. For (1), consider the case of that server being hosted on AWS. Even though only members are authorized to SSH into it, the plaintext is still known to the cloud hardware, and can be exfiltrated that way. In FOKS, the server sees encrypted data only, so that attack is greatly mitigated. I would say that if the SSH server was hosted on one of the workstations of one of the team members, then the security advantages of FOKS would be much less.

The KV-Store and Git server are implemented as "applications" on top of the FOKS infrastructure, so they aren't coupled. They see a sequence of Per-Team-Keys (PTKs); they use the older ones for decryption and the newest for encryption. I'd really love to see all sorts of other applications built on top of FOKS but we might need to do some work as to nailing the right plugin architecture.

Post reply on HN