News for hackers. Stuff that matters.

A comment on Web-based cryptography is always snake oil. Parent comment

Re:Web-based cryptography is always snake oil by goodpoint on Sunday June 25, 2023 @05:13AM (#36466286)
> Unless you can validate the worthiness and authenticity of an update

That's the job of traditional Linux distros.

> or sandbox it sufficiently

That does nothing when it comes to E2EE.

[ Parent | on HN ]
Re:Web-based cryptography is always snake oil by chromakode on Sunday June 25, 2023 @05:21AM (#36466327)
> That's the job of traditional Linux distros.

I share this view, but I also think it's very difficult to verify such validation is happening. I don't think most end users would want a distro stable enough to meet a high review bar.

> That does nothing when it comes to E2EE

Not all components need access to the keys or user data. Reducing attack surface reduces the amount that needs to be validated.

[ Parent | on HN ]