ianmiers

7 ms·

1.
by ianmiers 1y ago
This is inaccurate and in a hilarious way. Treasury is not coming after Bitcoin. There's an update in an ongoing rulemaking process that got reported here[0] as banning mixing and privacy tools. It may have been blown out of proportion
2.
by ianmiers 1y ago
This is by no means a comprehensive analysis. This analysis misses the most major limitation with Monero's decoy based approach to transaction obfuscation: Eve-Alice-Eve attacks (also known as ABA attacks). It also misses an analysis o
3.
by ianmiers 4y ago
if you just sent Mick down the left path and he came out the right, then a video would conclusively show he knew the password. And this is why "How to explain zero-knowledge protocols to your children" is probably the worst way
4.
by ianmiers 4y ago
Paying in cash, in addition to being a minor inconvenience that non-the-less outweighs most people's desire for privacy, does not work in online payments. It also doesn't work in businesses that get robbed. The better question is
5.
by ianmiers 4y ago
Fun fact, AMMs were considered well before cryptocurrency. " The most popular automated market maker used in Internet prediction markets is Hanson’s logarithmic market scoring rule (LMSR), an automated market maker with particularly de
6.
by ianmiers 5y ago
Yeah, those papers are very dense. You might want try reading zerocoin[0] first, it was the starting point of all the zero-knowledge proofs for private payments on a blockchain. Then another academic paper, Pinocchio coin, had a proposal fo
7.
by ianmiers 5y ago
This is pretty cool. But you might want to update the credit for the zksnark +merkle tree + nullifier idea. It's from an academic paper, Zerocash in 2014. The approach is used in Zcash and then in Tornado.cash Though Tornado.cash is ac
8.
by ianmiers 5y ago
I don't think tagging people as ex 8200 is very helpful. Israel has mandatory military service and at this point if you have aptitude or are in a high school computer club in Tel Aviv or a few other places, you probably end up in 8200
9.
by ianmiers 5y ago
This has already happened. A catholic newspaper bought commercial location and app data and used it to out a gay priest who was forced to resign. They broke the joke "privacy protections" by knowing his home, office, and a confere
10.
by ianmiers 5y ago
It's an important distinction. The fact that huge numbers of people rotate through the hacking side of 8200 (like the NSA, vast majority of 8200 members don't work on that) is what drives the supply. Intelligence services typical
11.
by ianmiers 5y ago
NSO group is ex unit 8200, which is military signals intelligence. So in American terms, it's the NSA not the CIA. The distinction is important in a country with mandatory military service. You get a large number of people who go thro
12.
by ianmiers 5y ago
Because Bitcoin is twitter for your bank account. It exposes everything you do to anyone who can download the blockchain. You can argue that some gov/regulator should have access, though good luck finding one country everyone trusts. M
13.
by ianmiers 5y ago
There are some Zcash forks with iffy dev support and no market traction. The problem is the kind of cryptography you need to do something like Zcash is very very very hard to get right. Zcash actually got the tech right and handled the iss
14.
by ianmiers 5y ago
I think the reddit user someone else linked to pretty clearly explained the Monero side. Zcash has a bad reputation with darknet markets and the like that use Monero. Some of it deserved. ( I say this as someone who wrote original Zerocash
15.
We’re the Only Plane in the Sky (Air force One on 9/11)(politico.com)
30 points by ianmiers 5y ago|2 comments
16.
by ianmiers 5y ago
Partially, but it's also: you will pay for a phone number, you won't pay for icloud, etc. So, as a result a phone number is costs something like 10 cents for an attacker.
17.
by ianmiers 5y ago
What happens if someone tries to coerce Apple into writing backdoor code? Engineers at Apple could resist, resign, slow roll the design and engineering process. They could leak it and it would get killed. Things would have to get very very
18.
by ianmiers 5y ago
> Our system involves both an on-device component where the voucher is created, but nothing is learned, and a server-side component, which is where that voucher is sent along with data coming to Apple service and processed across the acc
19.
by ianmiers 5y ago
yes, you can turn AV into the same thing. But no one has been advocating for that or passing laws that would make AV both mandatory and have to report you to the police. This has been going on for CSAM scanning for a while now. The latest v
20.
by ianmiers 5y ago
>The only thing stopping your phone from keylogging your password to a server in the NSA somewhere if it recognizes a specific trigger pattern is Apple's willingness and ability to resist pressure from the US, etc. Think of what wou
21.
by ianmiers 5y ago
Yes, and even more ironically, thats precisely the problem. Because it makes mass sweeping of client side content viable --- both technically and morally--- in a way never possible before. The only thing stoping scanning of the entire phone
22.
by ianmiers 5y ago
Factually, not yet. That will change and I will explain how in a moment. But first there's a major difference between doing it on device vs in the cloud. It changes how we think about privacy and builds a capability to scan phones (no
23.
by ianmiers 5y ago
This is a harmful distraction from the massive issues with Apple's proposal. If you wanted to frame someone for possession of CSAM, similar stunts can be pulled with Google, Facebook, Instagram, and Microsoft today. Yes, the scope here
24.
by ianmiers 5y ago
Read the article and discussion here https://news.ycombinator.com/item?id=28118350 . It makes the point pretty well. >That, of course, is the rub: Apple controls the algorithm, both in terms of what it looks for, what bu
25.
by ianmiers 5y ago
>Is there some evidence you have of this plan? Sounds like this is just a fear you have. The EARN IT act. It may not be Apple's plan, Apple's plan, as you suggest, might only be for doing scanning on encrypted iCloud and excl
26.
by ianmiers 5y ago
Yep. That certainly is the next step. And then, once you are scanning encrypted data, iMessage is next whether you want it or not.
27.
by ianmiers 5y ago
Apple's banned image reporting wont stay iCloud only.iMessage is next. Maybe all data on your phone. 1) phone scanning is overkill for pics already on their servers. You don't build this and take the PR flack for something you can
28.
by ianmiers 5y ago
Its a nuanced conversation, but there two fundamental points that Apple totally missed.: 1) Don't build a system for reporting what images people make, store, or send privately. That is just begging for someone to force you to abuse it
29.
by ianmiers 5y ago
From what I've seen in residential Tokyo, houses are usually one offs built when the owner buys the land. And look, at least superficially, to be similar construction methods to American construction rather than European: i.e. wood fra
30.
by ianmiers 5y ago
Sure. Starting from the academic beginning and then going to commercial usage: Zerocash[0], a paper from 2014 (I'm an author on it), proposes using zksnarks to get a public ledger + privacy with no centralized parties. Instead of ident

More ›