News for hackers. Stuff that matters.
Re:Confess your love with zero-knowledge by Tomte on Friday June 03, 2022 @11:57AM (#31610094)
This is some strange notion of zero-knowledge.

If Bob publishes his link, and I want to know who his crush is, I can simply try all our classmates' names and quickly find out that it's Alice.

Those games only make at least a bit of sense when everybody enters their crush and only when matching both get notified.

Also brute-forceable, but at least it's quadratic (if you suspect nothing about crushes, which is unrealistic in itself).

Re:Confess your love with zero-knowledge by tgv on Friday June 03, 2022 @01:18PM (#31611087)
If it tells you how many letters are right, and how many are in the right place, it could become Datle.
Re:Confess your love with zero-knowledge by andrewstuart2 on Friday June 03, 2022 @01:46PM (#31611461)
Challenge: build something worthy of being called 204Date (2048 clone).
Re:Confess your love with zero-knowledge by jandrese on Friday June 03, 2022 @02:31PM (#31611984)
Smashing together people to win at dating? Isn't that just Tinder?
Re:Confess your love with zero-knowledge by CameronNemo on Friday June 03, 2022 @02:45PM (#31612129)
Tinder goes in two directions. This would go in 4 directions. Swipe up to send them to your friends, down to your enemies, left to the void, right to you.
Re:Confess your love with zero-knowledge by dane-pgp on Friday June 03, 2022 @07:33PM (#31615131)
You start with 2048 single people, and have to act as matchmaker to pair them off into married couples who each produce at least one child. A generation later, you take the 1024 first-borns of each couple and have to pair them off too, into 512 new pairings.

Repeat that long process until there is just one couple left, whose first-born you then propose to. Having lived long and healthily enough to complete this game, you must have some very desirable genes and/or wealth, and you'll be good friends with basically all this person's ancestors, so there's a strong chance they'll say yes, despite the age difference.

Re:Confess your love with zero-knowledge by bonzini on Friday June 03, 2022 @03:24PM (#31612550)
Match fruits until you get a date?
Re:Confess your love with zero-knowledge by dylan604 on Friday June 03, 2022 @04:48PM (#31613421)
Careful, FruitNinjaDating could get interesting if not messy
Re:Confess your love with zero-knowledge by giantrobot on Friday June 03, 2022 @01:49PM (#31611512)
SHA256 doesn't work like that. Even single bit differences between inputs should result in very different outputs.
Re:Confess your love with zero-knowledge by forty on Friday June 03, 2022 @02:34PM (#31612027)
Re:Confess your love with zero-knowledge by drdaeman on Friday June 03, 2022 @01:57PM (#31611610)
It doesn't. But there are so-called locality sensitive hashes.

https://www.pinecone.io/learn/locality-sensitive-hashing/

Re:Confess your love with zero-knowledge by giantrobot on Friday June 03, 2022 @03:49PM (#31612825)
Sure, such hashes exist. SHA256 is not one of them.
Re:Confess your love with zero-knowledge by DrewADesign on Friday June 03, 2022 @04:05PM (#31612986)
* Flirdle
Re:Confess your love with zero-knowledge by mikebenfield on Friday June 03, 2022 @02:55PM (#31612239)
> Those games only make at least a bit of sense when everybody enters their crush and only when matching both get notified.

Even then, among heterosexuals they will suffer from the same problem as basically every software platform for romance among straight people: the massive asymmetry in interest between men and women. Men would copy and paste virtually every woman they know into the system as a "crush," so they can find which if any of their female acquaintances might be interested, and then they would decide who to pursue.

Re:Confess your love with zero-knowledge by pessimizer on Friday June 03, 2022 @03:51PM (#31612843)
> Men would copy and paste virtually every woman they know into the system as a "crush," so they can find which if any of their female acquaintances might be interested, and then they would decide who to pursue.

Smart men would, who know their place in the world. Any of them are good enough for you, really. Take the one that you like the most out of the ones who like you. Is this a problem? If it weren't asymmetric, it would be hopeless. Instead, most men get the choice between one or more interested women, and most women get a response from one or more of the men they were interested in.

It's better if one side isn't as picky as the other. The other options are that only a couple of people match up at all, or everyone getting a response from everyone i.e. no signal at all.

edit: I mean, isn't that Bumble?

Re:Confess your love with zero-knowledge by mikebenfield on Friday June 03, 2022 @04:19PM (#31613144)
I don't follow this, either logically or in practice.

Granted I've never dated as a gay man or as a lesbian, but from what I've observed it seems to me a much smoother and more mutual process than straight dating. I've even heard from bi men about how much easier and less stressful it is to date men than women. AFAICT when both parties are on a level playing field, and there's not a massive asymmetry in power, interest, and investment, there's a lot less grief overall.

> edit: I mean, isn't that Bumble?

Bumble is a valiant attempt to fix this issue but it seems to mostly be a failure. An average man may occasionally get a message (which will usually just say "hi"), but the asymmetry in interest is still there, and it's still mostly men's responsibility to do the real initiating.

Re:Confess your love with zero-knowledge by spekcular on Friday June 03, 2022 @01:23PM (#31611149)
Indeed, a similar "secure" crush confession on an MIT facebook group was exploited in this way, by brute forcing every name in the student directory.
Re:Confess your love with zero-knowledge by LeifCarrotson on Friday June 03, 2022 @01:27PM (#31611199)
You'd want to use asymmetric public key cryptography so that Bob could hash his message with Alice's public key, and it could only be decrypted with Alice's private key.
Re:Confess your love with zero-knowledge by gizmo686 on Friday June 03, 2022 @03:09PM (#31612395)
That still lets Alice find out.

I don't see a clear way of mapping the concept of a zero knowledge proof to the crush problem.

But the best I can come up with is:

1) No one learns that Alice (claims to) have a crush on Bob

2) Unless Bob also claims to have a crush on Alice, in which case.

3) Only Bob learns that Alice has a crush on him.

4) If Bob learns that Alice has a crush on him, Alice learns that Bob has a crush on her.

5) All the above guarantees are symmetric if you swap Bob and Alice.

Re:Confess your love with zero-knowledge by geysersam on Friday June 03, 2022 @04:20PM (#31613150)
Seems to me such a system must make it expensive to claim to have a crush on someone. Otherwise Bob can just claim to have a crush on everyone and will find out who crushes on him.
Re:Confess your love with zero-knowledge by superjan on Friday June 03, 2022 @02:38PM (#31612056)
For heaven’s sake just call her!
Re:Confess your love with zero-knowledge by vintermann on Friday June 03, 2022 @04:14PM (#31613098)
That lets Bob confess semi-deniably to Alice (if Alice is willing to share her private key, she can still show Bob's confession to Carroll and prove that it's authentic). But it still doesn't do any matching; Alice will know about Bob's feelings whether she returns then or not.
Re:Confess your love with zero-knowledge by tawktiem on Friday June 03, 2022 @03:01PM (#31612316)
Yup, everyone publishes their public keys. No one’s private keys gets published (fake crush created).

I’m not sure if zero-knowledge proofs exist for love outside of action - repeated acts of commitment over time (to reduces the confidence that someone doesn’t love you).

Re:Confess your love with zero-knowledge by momojo on Friday June 03, 2022 @01:37PM (#31611334)
This could be a fun way to teach a class about the vulnerabilities around hashing. Strong hash != strong protection.

Maybe the second half of the class could be about designing a more secure system. Or use this dilemma to explain public-private key encryption.

Re:Confess your love with zero-knowledge by praptak on Friday June 03, 2022 @12:58PM (#31610830)
Yeah, it is like hashing a phone number to protect its owner's identity. With a small domain known by the attacker hashing isn't really one-directional.
Re:Confess your love with zero-knowledge by random314 on Friday June 03, 2022 @01:04PM (#31610911)
Or just tell your crush, without sharing URLs with everyone
Re:Confess your love with zero-knowledge by staticassertion on Friday June 03, 2022 @01:05PM (#31610923)
Easy as an adult. But as a kid I feel like we jumped through soooo many hoops to de-risk telling someone we had a crush on them.

I remember those reallllly early games like MASH or even early "compatibility" apps. Very coy.

Re:Confess your love with zero-knowledge by the_af on Friday June 03, 2022 @01:08PM (#31610966)
Yes, I can see how -- as a kid -- sharing an URL of your hashed crush with the world is not going to be awkward at all.
Re:Confess your love with zero-knowledge by soco on Friday June 03, 2022 @01:43PM (#31611422)
Putting links in your tiktok/whatever profile doesn't seem like very unusual nowadays...
Re:Confess your love with zero-knowledge by staticassertion on Friday June 03, 2022 @02:42PM (#31612097)
Awkward is the name of the game.
Re:Confess your love with zero-knowledge by vintermann on Friday June 03, 2022 @04:23PM (#31613185)
There's nothing wrong with only wanting to reveal a crush if it's somewhat returned. If it isn't, you're just putting them in an uncomfortable position for no good reason.
Re:Confess your love with zero-knowledge by random314 on Saturday June 11, 2022 @02:01PM (#31706570)
And this hash url absolutely doesn't solve this problem
Re:Confess your love with zero-knowledge by imagin8or on Saturday June 04, 2022 @02:47AM (#31617701)
I feel like this could be a good implementation.

"Find out if your crush fancies you, just choose them from your contacts:"

...

"Message 'hey there, I like you' sent"

Re:Confess your love with zero-knowledge by lvass on Friday June 03, 2022 @01:01PM (#31610866)
Or even easier, use a SHA-256 reversing service that has all names.
Re:Confess your love with zero-knowledge by a-dub on Friday June 03, 2022 @04:09PM (#31613038)
that's because it's not zero knowledge, it's password hashing.

a zero knowledge proof would do something like prove a valid attestation of love, but reveal nothing about who (other than maybe membership in some large enough set).

Re:Confess your love with zero-knowledge by PaulDavisThe1st on Friday June 03, 2022 @07:22PM (#31615035)
Bob's crush, though, works at the ice cream store on the corner.
Re:Confess your love with zero-knowledge by hinkley on Friday June 03, 2022 @03:12PM (#31612431)
And when everyone is an actual adult, not a manchild or other people without a fully formed prefrontal cortex and thus prone to making ugly, life-changing decisions - for themselves and others - on a dime.

That's most of the demographic for this product. The number of over-25 people, not in a committed relationship, who still haven't figured out how to ask people out, is pretty small.

Re:Confess your love with zero-knowledge by joebob42 on Friday June 03, 2022 @08:01PM (#31615371)
I dunno. I'm reasonably well adjusted and apparently even decently attractive, and I still have a super hard time with the whole asking people out thing. I've been lucky enough to have people ask me out but otherwise I'm not sure I'd have had much luck dating at all.

This tool doesn't do what I'd want, but a tool that did would be kinda neat :)