News for hackers. Stuff that matters.
Re:Technical feasibility of decrypting https by replacing th... by pbsd on Sunday July 14, 2013 @01:16PM (#6041412)
One would think that burden of evidence would be on the side of the accusers of backdooring. So far all I have seen is inaccurate speculation.
Re:Technical feasibility of decrypting https by replacing th... by lostnet on Sunday July 14, 2013 @02:13PM (#6041605)
That is how the legal system works, so do you seriously plan to arrest the NSA?

But the topic here is about maintaining a secure system. You must prove beyond a reasonable doubt that every element is either secure or allowed to be owned by your antagonist. Technically no one should have ever trusted something that can not be observed (and it sounds like the people responsible didn't.)

If you chose to trust intel for no good reason, then you must now untrust them given that there is a reason. As a company they would be idiots to introduce such a thing. But if every US company can clearly be threatened with even worse outcomes into going against its own market interests then such an argument does not apply.

As a side note, I do think there was already plenty of evidence that the US was actively forcing companies to do the NSA's bidding. The encryption export laws were largely designed to keep everyone who makes encryption products perpetually afraid of losing all their right to export anything mostly by "governmental discretion" on handling the companies inevitable 'incidents' of support talking to the wrong person about how RSA worked.

Re:Technical feasibility of decrypting https by replacing th... by willurd on Sunday July 14, 2013 @01:19PM (#6041421)
It is. That doesn't mean we have to marginalize people who have theories, even if they don't have any evidence to back them up. My approach is to entertain all possibilities until they are proven to me to be false. In that way I attempt to avoid tunnel vision.
Re:Technical feasibility of decrypting https by replacing th... by cmccabe on Monday July 15, 2013 @05:11AM (#6044456)
Care to buy some of my tiger repellent? It's been 100% effective so far!
Re:Technical feasibility of decrypting https by replacing th... by willurd on Monday July 15, 2013 @10:59AM (#6045959)
How many tigers have you repelled? Which species? I'm particularly worried about bengal tigers in my apartment complex. Can it handle those?
Re:Technical feasibility of decrypting https by replacing th... by cmccabe on Monday July 15, 2013 @07:47PM (#6049245)
I don't have "any evidence to back it up" but it "has not proven to be false." So because you're "avoiding tunnel vision" you should purchase some. Luckily, I'm willing to let it go for $999 a can.

Don't marginalize me, bro.

Re:Technical feasibility of decrypting https by replacing th... by willurd on Tuesday July 16, 2013 @12:01AM (#6049951)
I was actually going to suggest $1099. Can I pay that instead?