News for hackers. Stuff that matters.

kbns

While I understand the challenges with SMTP-based email, dismissing privacy concerns as ignorance is unhelpful. It's not at all a technical difficulty—Modern threats demand updated solutions, and opportunistic-TLS isn't enough. Financial incentives and data monetization do play a role in the reluctance of major providers. If new protocols can secure chat apps, similar efforts should be made for email.

Users deserve better privacy protections despite historical constraints.

Ask HN: Why Are We Ignoring the Urgent Need for End-to-End Encrypted Emails?

We're all obsessed with making sure our chat apps like WhatsApp and Signal have end-to-end encryption (E2E), but we completely ignore emails. Emails can reveal a person's entire life story, far more than any chat app ever could.Right now, if you want your emails to be E2E encrypted, you have to jump through hoops with third-party tools. It's clear that email giants like Google, Microsoft, and...

( Read More... | 18 comments | 6 points | on HN )

Ask HN: Am I being too paranoid?

Since most companies are being unreasonable, I'm paranoid because monitor manufacturers might have backdoors to record screens and store the data in their memory, or transmit it to the company in the case of smart monitors.

( Read More... | 11 comments | 12 points | on HN )
Re:The Laptop That Won't Die? on Tuesday November 14, 2023 @09:28AM (#38263672)
including quora.

Tell HN: Consider waiting before upgrading to macOS Sonoma

I upgraded to it yesterday and noticed several bugs, two of which are quite annoying: 1. The Touch ID feature is not functioning perfectly. It fails to detect fingerprints after only two unsuccessful attempts, whereas it used to allow around 5 fingerprint retries before requesting a password. 2. Today, when I locked my computer and tried to log in to my main account, it displayed the...

( Read More... | 13 comments | 5 points | on HN )
Re:YouTube CEO Susan Wojcicki is stepping down on Thursday February 16, 2023 @02:30PM (#34824442)
use 'before:$year' ( eg. "funny clips before:2018" ) is our current saviour.
Thank you. i will learn more about it.
Thank you. Since i'm using this to encrypt backups, speed is not a problem.
> multiple symmetric ciphers in sequence is still a permutation.

No its not. The data feeding to the next algorithm is an already encrypted data from the previous algorithm. Theres 0 connection b/w them.

For example . step 1 . encrypt message (M) with key (K1) using AES to produce cipher text (C1) step 2 . encrypt message C1 with key K2 using TripleDES to produce C2. step n . and so on using all algorithms with different Keys.

I don't see any connections b/w them. 0 entropy. Please correct me if i'm wrong.

"roll your own crypto" means writing a new encryption scheme. But here i'm just using multiple schemes without connection to one another by using different encryption keys.

What if AES-256 gets compromised?

Basically i'm storing my encrypted data online. Anyone can see it but only i can decrypt it.

Any disadvantages of using multiple encryption algorithms on same data?

My aim is to encrypt data using multiple encryption algorithms using different encryption keys in a layered fashion for future proof.I'll use 1. AES-256-CBC 2. RSA with > 8192 key 3. Triple DES 4 Blowfish 5. Twofish 6. CHACHA20I'm still not sure in which order to use them but please list disadvantages of using this method except size of cypher text.

( Read More... | 12 comments | 4 points | on HN )
Re:Why ChatGPT won’t replace search engines any time soon on Sunday January 08, 2023 @01:48AM (#34296727)
Bing is going to do the same.
sad to see people are genuinely thrilled to gift it to their loved ones.
will check. congratulations.
cool. e2e encryption would be great..

Older »