News for hackers. Stuff that matters.

A comment on Introducing Mozilla Firefox Accounts. Parent comment

Re:Introducing Mozilla Firefox Accounts by kijin on Saturday February 08, 2014 @07:15AM (#7201002)
Click on "same browser-based encryption". It's a link to an earlier blog post where they explain the encryption methods used in Firefox Sync. It mentions end-to-end encryption, too.
[ Parent | on HN ]
Re:Introducing Mozilla Firefox Accounts by tobehonest on Saturday February 08, 2014 @07:24AM (#7201012)
As Mozilla is a US-based organization, is anyone afraid of the NSA/USG commandeering Mozilla to setup pen-register/password-interception a la Lavabit?

Only a couple of months ago comments like mine would have been passed off as tin-foil conspiracy. Now, I think everyone's sense of normal is now tightly wrapped in tin-foil, encased in lead.

[ Parent | on HN ]
Re:Introducing Mozilla Firefox Accounts by riquito on Saturday February 08, 2014 @09:05AM (#7201200)
Opposite to Lavabit, Mozilla can't decrypt your data, so I can't see this happening, unless they change the open source client code without anyone noticing.
[ Parent | on HN ]
Re:Introducing Mozilla Firefox Accounts by rhelmer on Saturday February 08, 2014 @02:51PM (#7202342)
The "change the open source client code without anyone noticing" attack vector is important too: https://brendaneich.com/2014/01/trust-but-verify/
[ Parent | on HN ]