deadmaildrop
Re:Lavabit code open sourced
on Tuesday May 03, 2016 @12:47AM (#11617978)
Thanks for calling me a liar. I see the quality of people on this thread has suddenly dropped. So, stick with respectful discourse or keep it to yourself. You are clearly not in the industry, just another useless troll.
Re:Lavabit code open sourced
on Sunday May 01, 2016 @10:34PM (#11608905)
I've seen them. Just recently I had a short burst of collisions. It happens. Don't underestimate the resolve of someone who wants to grind an axe.
Re:Lavabit code open sourced
on Sunday May 01, 2016 @08:51PM (#11608592)
Fun. Don't believe that an open source version of Magma makes it more secure. It just means this version you see is one that looks like the one used on a server. What is actually on the server may not be the version you see in a public repository. Thanks for sharing Magma!
Re:Lavabit code open sourced
on Sunday May 01, 2016 @08:50PM (#11608590)
Don't fall into a trap with trusting PGP. The advent of high speed factoring from quantum computers (U. Toronto) means government agencies can get your key within a tractable time complexity. One algorithm is not enough to make you secure. The system of crypto algorithms with key management is the only system you should trust.
Re:Lavabit code open sourced
on Sunday May 01, 2016 @08:38PM (#11608558)
Or you just inject your own payload and pad the payload until it has a hash collision with the original. At 128M hashes per second you can probably find a payload that works within a day. Since the hashes are published, usually, you know your target so it's just a matter of time.
Re:Lavabit code open sourced
on Sunday May 01, 2016 @08:36PM (#11608550)
No. Jurisdication is irrelevant. The transmission has to pass through local jurisdiction servers and wire and thus falls prey to those laws. Hosting in Aruba for your US customers does not provide any veil of safety from prosecution.