magikarp

6 ms·

1.
Going Beyond PGP(blog.peerio.com)
2 points by magikarp 12y ago|0 comments
2.
by magikarp 12y ago
> There's no real controversy or drama here. There's just one guy who is very vocal. Isn't that how tech-centered controversies work? Especially in cryptography.
3.
by magikarp 12y ago
Fantastic work, Chris! It's really great to see that ChatSecure has such an ambitious roadmap.
4.
by magikarp 12y ago
Well, it is a client-side encryption app. If the encryption, public key authentication, etc. is being done well on the client, then the server's only purpose should be routing garbled ciphertext between users and managing things like
5.
by magikarp 12y ago
The majority of Telegram's source code seems to be released as free software: https://telegram.org/apps (scroll down)
6.
by magikarp 12y ago
What about the Surface Pro 3?
7.
by magikarp 13y ago
Fingerprints are for verifying your own identity in the group chat context. They confirm your own identity to others. It's hard for new users to understand this — the blog post mentions that Cryptocat is trying to make cryptographic au
8.
by magikarp 13y ago
> (HN is a YC marketing arm, he runs the website and can do whatever he wants, etc, etc). HN is much more than a marketing arm — it's one of the most central forums for programmer discussions today. And this makes it YC's respo
9.
by magikarp 13y ago
What PG is saying is that HN can be used to criticize anyone except companies backed by YC. That's unacceptable.
10.
by magikarp 13y ago
Everything you've said in your comment is good advice. Once the paper I've mentioned is ready, we will have this kind of implementation.
11.
by magikarp 13y ago
A Chinese spy manages to steal the last 50MB of the Lisp program governing U.S. missile launches. Fortunately, it was all closing parentheses.
12.
by magikarp 13y ago
It's true that we don't have a research paper per se for the multiparty protocol, but we do have a specification document [1] as well as implementations in Objective-C, Java and JavaScript. The specification, as well as the implem
13.
by magikarp 13y ago
nadim@crypto.cat
14.
by magikarp 13y ago
I'd gladly accept your help with improving our Catalan translations! :-)
15.
by magikarp 13y ago
Yup! I'm leaving for D.C. tomorrow and will be at that hackathon. Please come and help!
16.
by magikarp 13y ago
Thank you very much for that comment. I believe that we've been truly open source, transparent and accountable for our code since day one. There are other projects who are currently similarly open and transparent (I respect TextSecure
17.
by magikarp 13y ago
> How do you manage to afford to finance the audits and bug bounties? Public donations from our website and funding from public institutions and NGOs. Currently, our audits are funded by the Open Technology Fund: https://www.o
18.
by magikarp 13y ago
Derp. Fixed. Thanks!
19.
by magikarp 13y ago
Cryptocat's website and the Cryptocat app itself are both fully translated into Catalan, and we maintain a very communicative and open relationship with PuntCAT.
20.
by magikarp 13y ago
I like to think that the Cryptocat team and myself have matured beyond the point where we consider security disclosures to be punishment, but rather something to be expected when handling a project that wields experimental technology. We&#x
21.
by magikarp 13y ago
There are currently three Cryptocat clients: * Cryptocat: The original client. It's a signed browser extension that you download and install in your browser. It offers OTR implemented in JavaScript in a friendly chat interface. We take
22.
by magikarp 13y ago
Cryptocat for Android is particularly unfinished so far. I would be surprised if you don't find bugs inside. Cryptocat for iPhone is currently a lot more mature, but similarly still needs peer review. We have a commissioned audit for
23.
by magikarp 13y ago
From my perspective, we've been taking security seriously a year+. Our first commissioned audit was in November 2012, and we've had a bug bounty since then as well: https://crypto.cat/bughunt/ This isn't
24.
by magikarp 13y ago
Cryptocat's private chat uses OTR. Our group chat function uses an open and studied multiparty protocol. Generally, our security bugs have been implementation errors much more than protocol design errors. Surely, the best we can do as
25.
Cryptocat for iPhone and Android – Call for Review(blog.crypto.cat)
150 points by magikarp 13y ago|81 comments
26.
by magikarp 13y ago
Well, everything is automatically encrypted, you can make (encrypted) backups, and you can also save your (encrypted) data to Dropbox. These provide some redundancy for your password db. The aim is simply to have your notes at hand, and the
27.
Show HN: A note, task, and password organizer app for Mac(bluenote.io)
13 points by magikarp 13y ago|10 comments
28.
by magikarp 13y ago
Why hasn't anyone considered that David Miranda's detention could have been orchestrated in order to radicalize Glenn Greenwald, to bring him to "full froth", so to speak? Make him angry, make it personal by abusing his
29.
by magikarp 13y ago
Everything about this story, right down to the questions, agents involved, luggage inspections and the man's apartment being broken into and searched, fits very well with my own experiences in 2012 with entering the United States. I&#x
30.
by magikarp 13y ago
This project really needs at least one shred of documentation.

More ›