Re:Keybase is not softer than TOFU
by upofadown on Wednesday March 27, 2019 @01:41PM
(#19503569)
>Similarly, yesterday's system that takes an attacker 3 days to MITM your machine, will take 3 hours, and then will be somebody's python script that installs and aggregates millions of exploits.
The big cost of a MITM attack is getting in the middle. The cost of doing the actual attack is minimal.
Re:Keybase is not softer than TOFU
by miopa on Wednesday March 27, 2019 @02:46PM
(#19504489)
By not knowing which peers have verified numbers, the risk of getting caught that you're in the middle is very high, so that big cost for getting there will be for nothing (and actually get way more costly because you alerted the subjects).
The big cost of a MITM attack is getting in the middle. The cost of doing the actual attack is minimal.