News for hackers. Stuff that matters.
Re:‘Anonymous’ Chat App Hijacks Contact Data by saurik on Thursday August 31, 2017 @10:48AM (#15140667)
FWIW, it isn't just not meaningfully privacy-preserving: it offers essentially no privacy preservation at all. There are 10 billion possible US phone numbers, and we know from Bitcoin that you can search that space in something like ten seconds on a typical PC. You also only have to do this once to construct a lookup table that would only take a terabyte to store and index, and then you could offer anyone instantaneous reverse lookup from truncated hash to phone number. It is essentially meaningless "privacy theater".
Re:‘Anonymous’ Chat App Hijacks Contact Data by colejohnson66 on Thursday August 31, 2017 @11:19PM (#15145861)
You wouldn’t even need a terabyte if you didn’t mind comparing against every hash to find the right one. 16 bytes/number at 10 billion numbers is only 160 billion bytes (160 GB). Store the hashes one after another in a flat binary file, then `i` in `file[16*i]` is your number.

If you included the 10 byte phone number, that only adds 100 GB. Then just store each entry as a 26 byte hash/number struct sorted by hash.

Re:‘Anonymous’ Chat App Hijacks Contact Data by StavrosK on Thursday August 31, 2017 @11:44AM (#15141089)
Alright, here's my truncated, hashed phone number, in E.164 format and SHA1: 4bbd8

What's the full number?