News for hackers. Stuff that matters.

A comment on The "email is authentication" pattern. Parent comment

Re:The "email is authentication" pattern by simonw on Saturday September 07, 2024 @08:26PM (#41477343)
Some day someone is going to produce a fantastic heist movie about breaking this kind of scheme - five different characters, each of which need to be scammed in different ways to obtain their piece of a shared secret.

Sadly it's quite possible this will be a dramatized version of a real-world event. We've already seen quite a few messed up crimes to steal keys to steal crypto. Secret sharing just means you need to kidnap a few extra people.

[ Parent | on HN ]
Re:The "email is authentication" pattern by kfrzcode on Saturday September 07, 2024 @10:37PM (#41477818)
But in fact, in order to kidnap these people you'd also need to know these people, and know they are assigned to be part of the derec network. With DeRec all the helpers don't need to know about each other at all. And you may not know how many helpers a given helper has behind them. It's actually much much more difficult to do the heist-and-interrogate-with-a-pipe-wrench approach if you don't know who to beat up, nor how many of them need to authenticate.

Edit: OT but while I have a glimpse of your attention, kudos in order!! I love datasette and basically everything you write is highly useful to me!

[ Parent | on HN ]