News for hackers. Stuff that matters.
Re:Security Through Transparency by eridius on Thursday January 12, 2017 @02:36PM (#13385357)
> The relationship between online personas and public keys should be automatically verifiable and publicly auditable.

This description sure sounds like exactly what https://keybase.io provides.

Re:Security Through Transparency by skmexyz on Thursday January 12, 2017 @07:35PM (#13387488)
I just got an invite to Keybase. Is there a reason why

1. it's invite based?

2. it supports very few external services that you can verify (I can't figure out a way to verify LinkedIn or Gitlab for instance) ?

Re:Security Through Transparency by eridius on Thursday January 12, 2017 @08:10PM (#13387643)
I don't really have a good answer for you. Invite-based services are a good way to scale out without getting a huge spike all at once (even Gmail was introduced using invites), but I don't know how long Keybase intends to stick with the invite model or when they'll expand it.

As for services, each service that's supported presumably needs custom code, and also needs to have a publicly-auditable way to post a proof that cannot be done by anyone other than the owner of the account (e.g. for Twitter you need to actually tweet something, for GitHub you need to post a gist, etc). I don't have a LinkedIn account or use GitLab so I don't know if those services have an effective way to handle such a proof.

For reference, here's a ticket asking for LinkedIn support - https://github.com/keybase/keybase-issues/issues/1115. Here's one for GitLab - https://github.com/keybase/keybase-issues/issues/1242 - which documents some barriers there (such as no API to get GitLab snippets).

Re:Security Through Transparency by lettergram on Thursday January 12, 2017 @07:31PM (#13387456)
Can't upvote this enough!

I even wrote a prototype chrome extension for a few friends and myself: http://lettergram.github.io/AnyCrypt/

I love the idea of keybase, I just wish it was used by more people.

Re:Security Through Transparency by wanda on Thursday January 12, 2017 @09:29PM (#13387959)
Off-topic: I have 10 Keybase invites — does anybody want or need one?
Re:Security Through Transparency by saycheese on Thursday January 12, 2017 @09:51PM (#13388036)
Unless I'm missing something, an invite is not need to use Keybase.
Re:Security Through Transparency by beardog on Thursday January 12, 2017 @10:29PM (#13388193)
Yes it is to skip the long line, although there are semi-secret invite codes that can be used infinitely.
Re:Security Through Transparency by soggypenny on Friday January 13, 2017 @02:45AM (#13389134)
Sure! Email in profile.
Re:Security Through Transparency by jeff_marshall on Friday January 13, 2017 @12:08AM (#13388541)
Yes, please.

My email is in my profile.

Re:Security Through Transparency by davidhperry on Friday January 13, 2017 @12:37AM (#13388673)
I'd like one :)