Being privacy-aware in 2016

Re:Being privacy-aware in 2016 by watersb on Monday June 06, 2016 @05:04PM (#11850360)

Thanks. I must think more about this.

I can understand that TOTP cannot be used for encryption.

But the app is asking for authentication. Zero-knowledge proof game might apply. Of course the local app must have the decrypted key in memory.

I wish we could defend against the Evil Maid...

[ Parent | on HN ]

Re:Being privacy-aware in 2016 by superuser2 on Monday June 06, 2016 @05:12PM (#11850433)

One defends against the Evil Maid with physical security techniques. And by doing your own cleaning :).

The app is not asking for authentication, it's asking for encryption. Else an attacker could bypass the app's logic and read its data directly.

[ Parent | on HN ]