News for hackers. Stuff that matters.

A comment on Ask HN: Any startups working to capitalize on the coming privacy boom?. Parent comment

Re:Ask HN: Any startups working to capitalize on the coming ... by conformal on Wednesday July 17, 2013 @03:21AM (#6056533)
i like the effort guys, but secure web apps is a tall order. the attack surface of a web app is huge and the web was just not built for client-side crypto. the dependency list for most web browsers is gigantic and attacks against even one of the deps could lead to your crypto being blown.

keep in mind that cryptocat had been audited at least once and they totally missed the completely-busted prng. i am betting you guys will do a better job than nadim et al :)

[ Parent | on HN ]
Re:Ask HN: Any startups working to capitalize on the coming ... by ecto on Wednesday July 17, 2013 @10:02AM (#6057684)
Totally agree. The idea is to provide a centralized place for the crypto work to happen, which while perhaps quixotic is arguably better than 100 developers creating potentially broken cryptosystems independently. We've stayed abreast on the cryptocat issue - we're using SJCL which uses a derivative of the Fortuna PRNG http://bitwiseshiftleft.github.io/sjcl/doc/symbols/sjcl.rand...
[ Parent | on HN ]