News for hackers. Stuff that matters.
Re:Lavabit gets new crypto key, gives users 72 hours to reco... by im3w1l on Tuesday October 15, 2013 @07:14PM (#6556985)
Hypothesis 1: He wants to give low profile users, the kind that use it for mundane things (because why not use cryptography?) the chance to recover their mail at the cost of a privacy leak. In his hurry he forgot the minor detail of PFS. Fetching their email now is not for the paranoid anyway. The alphabets have root. Hypothesis 2: The alphabets set it up as a trap and simply forgot to turn on PFS like before.

Interestingly, in both scenarios the activity will be very logged and the alphabets will get all your data, but absence of PFS is unrelated to this.

There are no comments on this comment yet.