News for hackers. Stuff that matters.

A comment on How Turtl has no idea when you're sharing copyrighted stuff. Parent comment

Re:How Turtl has no idea when you're sharing copyrighted stuff by umanwizard on Sunday March 30, 2014 @09:46PM (#7499012)
How will they know the hash coming back from the client hasn't been manipulated?
[ Parent | on HN ]
Re:How Turtl has no idea when you're sharing copyrighted stuff by typicalbender on Monday March 31, 2014 @12:11AM (#7499576)
The request can be signed and then checked for authentication on the back end. Using public key encryption it would be sent safely to the server and checked for authenticity.
[ Parent | on HN ]
Re:How Turtl has no idea when you're sharing copyrighted stuff by icebraining on Monday March 31, 2014 @04:17AM (#7500287)
Signed by whom? The app running on the client's machine? One should know better than to trust that.
[ Parent | on HN ]
Re:How Turtl has no idea when you're sharing copyrighted stuff by lmm on Monday March 31, 2014 @05:48AM (#7500510)
Could they use a homomorphic encryption scheme where it's still possible to verify a hash without getting access to the encrypted data?
[ Parent | on HN ]