News for hackers. Stuff that matters.
Re:Europeans' health data sold to US firm run by ex-Israeli ... by unyttigfjelltol on Sunday December 14, 2025 @07:41AM (#46262624)
TL;DR: An EU health data firm run by ex-military cryptographers offers a web portal for encrypting documents, which inherently exposes unencrypted documents to the company and US national security laws. The media outlet incidentally also doubts the trustworthiness of military veterans from Israel.

Even following the "if there's smoke there's fire" model, unclear there's a strong scent of "smoke" here. One could write a similar guilt-by-historical-association article concerning anyone, in the same position, really. Obviously if you're uploading a file to a 3d party website, the vendor has some technical access, this should be warned.

Re:Europeans' health data sold to US firm run by ex-Israeli ... by pareidolia on Sunday December 14, 2025 @07:50AM (#46262660)
The bigger problem is that this model is inherently flawed. Even if end-to-end encryption with browser crypto were implemented, there is never any security since the code in the browser can simply be swapped with compromised code that diverts the plaintext somewhere.

I've been forced to use this service, by way of healthcare professionals just disclosing correspondence to this service without asking for my consent.

Smeerlappen.

Re:Europeans' health data sold to US firm run by ex-Israeli ... by _el1s7 on Sunday December 14, 2025 @08:59AM (#46263007)
Security is an illusion.
Re:Europeans' health data sold to US firm run by ex-Israeli ... by pareidolia on Sunday December 14, 2025 @09:38AM (#46263322)
Then reply with your passwords.
Re:Europeans' health data sold to US firm run by ex-Israeli ... by sallveburrpi on Sunday December 14, 2025 @09:43AM (#46263363)
******

Luckily HN automatically detects when you post your password and obfuscates it with * - try it out yourself!

Re:Europeans' health data sold to US firm run by ex-Israeli ... by pareidolia on Sunday December 14, 2025 @09:58AM (#46263489)
You think I was born yesterday :P
Re:Europeans' health data sold to US firm run by ex-Israeli ... by Mordisquitos on Sunday December 14, 2025 @10:07AM (#46263548)
hunter2
Re:Europeans' health data sold to US firm run by ex-Israeli ... by Mordisquitos on Sunday December 14, 2025 @10:10AM (#46263575)
Doesn't look obfuscated to me.
Re:Europeans' health data sold to US firm run by ex-Israeli ... by throw310822 on Sunday December 14, 2025 @10:38AM (#46263801)
It only obfuscates it for others :)
Re:Europeans' health data sold to US firm run by ex-Israeli ... by KaiserPro on Sunday December 14, 2025 @01:04PM (#46265222)
Thats the genius of it, to us it looks like **** but you see hunter2. Its an automatic replace.
Re:Europeans' health data sold to US firm run by ex-Israeli ... by balex on Monday December 15, 2025 @12:22AM (#46270754)
Oh whew, I thought he was using hunter2 as his password too.
Re:Europeans' health data sold to US firm run by ex-Israeli ... by tucnak on Sunday December 14, 2025 @10:00AM (#46263501)
> there is never any security since the code in the browser can simply be swapped with compromised code that diverts the plaintext somewhere.

This is not the case in the land of DICE-like key derivation; see TKey protocol for example. You can download and run an actual rv32 program on actual FPGA over WebUSB without having to worry about its provenance. If the program is modified, firmware will derive a completely different key.

Re:Europeans' health data sold to US firm run by ex-Israeli ... by pareidolia on Sunday December 14, 2025 @10:06AM (#46263542)
Zivver is a web application. The javascript that comes with the webpage can change at any time for any reason, as Zivver sees fit.
Re:Europeans' health data sold to US firm run by ex-Israeli ... by tucnak on Sunday December 14, 2025 @01:10PM (#46265281)
I'm simply pointing out that web standards allow for secure end-to-end communication, and more, in fact they happen to allow arbitrary cryptographic constructions—as long as the program itself never changes.
Re:Europeans' health data sold to US firm run by ex-Israeli ... by pareidolia on Sunday December 14, 2025 @02:33PM (#46266012)
But this requires special hardware right?
Re:Europeans' health data sold to US firm run by ex-Israeli ... by tucnak on Sunday December 14, 2025 @03:50PM (#46266758)
Not necessarily. You can run TKey in qemu :-) etc. The hardware aspect is what makes it easy to use, with WebUSB and all. The derivation algorithm is key. And it takes program binary as parameter to Blake2 hash function.
Re:Europeans' health data sold to US firm run by ex-Israeli ... by Fnoord on Sunday December 14, 2025 @08:15AM (#46262787)
[delayed]
Re:Europeans' health data sold to US firm run by ex-Israeli ... by techsystems on Sunday December 14, 2025 @09:55AM (#46263461)
I used this in NL with the government. What can I do?
Re:Europeans' health data sold to US firm run by ex-Israeli ... by nunobrito on Sunday December 14, 2025 @10:18AM (#46263635)
Not much, your data is already outside the EU being archived and processed by other countries.
Re:Europeans' health data sold to US firm run by ex-Israeli ... by SilverElfin on Sunday December 14, 2025 @11:56AM (#46264506)
It looks to me like the article is using “Israel” in its title for inflammatory discrimination. The person who submitted it probably knew full well what they were doing.
Re:Europeans' health data sold to US firm run by ex-Israeli ... by yonixw on Sunday December 14, 2025 @12:39PM (#46264962)
LOL

Next one: Cloudflare has an edge in Israel. And has workers who were in Unit8200 before 1991 (per linkedin) and ISRALIES. Who uses Cloudflare? MANY MEDICAL ORGS. Also, Cloudflare is just like MITM (CDN SSL termination). So does ISRAEL SPIES read all your MEDICAL data?

> "To think otherwise is completely naïve" (real qoute from the article btw = no proof)

What a sham article. Trump's TruthSocial level. But hey, most upvoted today (440+ points). And no point on reporting to mods also, I just get copy paste reply.