News for hackers. Stuff that matters.

A comment on Linux workstation security checklist. Parent comment

Re:Linux workstation security checklist by wtbob on Friday August 28, 2015 @09:44AM (#10135332)
And, last I checked, SpiderOak's protocol actually has a flaw: they could potentially store a copy of one's initial key. I emailed them about this, but not response.

Cyphertite was really interesting, but it sounds like they're going out of business.

[ Parent | on HN ]
Re:Linux workstation security checklist by splme on Monday August 31, 2015 @09:19AM (#10146647)
That's why SpiderOak moved from browser-based signup to in-app signup, to eliminate this possibility. (The switch was made in April 2015.)

discaimer: I work for SpiderOak, but the response is my own.

[ Parent | on HN ]
Re:Linux workstation security checklist by wtbob on Monday August 31, 2015 @09:36PM (#10150216)
That's really good to know! I'll have to check it out again—other than that one flaw, it looked like a really smart set-up.
[ Parent | on HN ]