Europeans' health data sold to US firm run by ex-Israeli spies

Re:Europeans' health data sold to US firm run by ex-Israeli ... by tucnak on Sunday December 14, 2025 @10:00AM (#46263501)

> there is never any security since the code in the browser can simply be swapped with compromised code that diverts the plaintext somewhere.

This is not the case in the land of DICE-like key derivation; see TKey protocol for example. You can download and run an actual rv32 program on actual FPGA over WebUSB without having to worry about its provenance. If the program is modified, firmware will derive a completely different key.

[ Parent | on HN ]

Re:Europeans' health data sold to US firm run by ex-Israeli ... by pareidolia on Sunday December 14, 2025 @10:06AM (#46263542)

Zivver is a web application. The javascript that comes with the webpage can change at any time for any reason, as Zivver sees fit.

[ Parent | on HN ]

Re:Europeans' health data sold to US firm run by ex-Israeli ... by tucnak on Sunday December 14, 2025 @01:10PM (#46265281)

I'm simply pointing out that web standards allow for secure end-to-end communication, and more, in fact they happen to allow arbitrary cryptographic constructions—as long as the program itself never changes.

[ Parent | on HN ]

Re:Europeans' health data sold to US firm run by ex-Israeli ... by pareidolia on Sunday December 14, 2025 @02:33PM (#46266012)

But this requires special hardware right?

[ Parent | on HN ]

Re:Europeans' health data sold to US firm run by ex-Israeli ... by tucnak on Sunday December 14, 2025 @03:50PM (#46266758)

Not necessarily. You can run TKey in qemu :-) etc. The hardware aspect is what makes it easy to use, with WebUSB and all. The derivation algorithm is key. And it takes program binary as parameter to Blake2 hash function.

[ Parent | on HN ]