News for hackers. Stuff that matters.

A comment on On the 10th anniversary of the Snowden revelations. Parent comment

Re:On the 10th anniversary of the Snowden revelations by INTPenis on Wednesday September 06, 2023 @03:35AM (#37402293)
I think the simplest explanation is that people have it good enough to not rock the boat, and those among the literally unwashed, and untreated, masses who don't have bread and circuses would quickly be shutdown if they tried to move on any part of the government.

Seems to me this state of surveillance has just been accepted as a norm. People in the business have taken precautions like using more encryption and auditable open source, while the people outside the tech business just shrug their shoulders and shake their fists at dirty politicians.

[ Parent | on HN ]
Re:On the 10th anniversary of the Snowden revelations by willis936 on Wednesday September 06, 2023 @05:49AM (#37403082)
>People in the business have taken precautions like using more encryption

Do you mean for their own small scale activities?

The only ECDH curves possible to use on the big tech internet were given by the head of the NSA with no explanation and are manipulatable.

[ Parent | on HN ]
Re:On the 10th anniversary of the Snowden revelations by denton-scratch on Wednesday September 06, 2023 @06:46AM (#37403393)
ED25519 is not a NIST curve.
[ Parent | on HN ]
Re:On the 10th anniversary of the Snowden revelations by willis936 on Wednesday September 06, 2023 @07:05AM (#37403491)
And Ed25519 is not supported by major CAs.
[ Parent | on HN ]
Re:On the 10th anniversary of the Snowden revelations by denton-scratch on Wednesday September 06, 2023 @09:03AM (#37404515)
Oh, major CAs. GP spoke of Ed25519 not being useable on "the big tech internet", but didn't mention certificates or certificate authorities.
[ Parent | on HN ]
Re:On the 10th anniversary of the Snowden revelations by throw0101c on Wednesday September 06, 2023 @09:46AM (#37405071)
> And Ed25519 is not supported by major CAs.

Perhaps because until February 2023 (when FIPS 186-5 was published) it wasn't approved for US government use:

* https://en.wikipedia.org/wiki/EdDSA#Standardization_and_impl...

So there would have been complications for a sizeable base of potential customers (US, contractors, allies).

[ Parent | on HN ]
Re:On the 10th anniversary of the Snowden revelations by INTPenis on Wednesday September 06, 2023 @10:53AM (#37406062)
I meant in many ways, not just encryption. Just didn't feel like elaborating.

For example my $dayjob does government contracts (in europe) and we're noticing a lot more agencies request on-prem, within borders, service hosting.

[ Parent | on HN ]