La #Cina è (sempre più) vicina.
Uncategorized
1
Posts
1
Posters
0
Views
-
La #Cina è (sempre più) vicina. Il "progetto Manhattan" di Pechino | Il Foglio https://www.ilfoglio.it/tecnologia/2025/12/19/news/il-progetto-manhattan-cinese-8453648/
-
undefined mariosiniscalchi@mastodon.uno shared this topic
undefined diggita@mastodon.social shared this topic
Feed RSS
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@soatok @benpate @bonfire yeah. The fact that the verification UIs are often closed source clients published by the same corporation that makes the server software makes them kind of security theater. The software maker could just hide the secret server keys from the verification UI. I think it's a more robust protection in a multiplayer ecosystem, where clients and servers are written and operated by different entities.
-
The next IT Notes blog post is ready, and there's a "bonus track". It'll be published on Monday.
Stay Tuned!
-
I Can Believe It's Not Butter, But Choose Not To
-
If you need to ask a question on the FreeBSD-questions mailing list then
https://www.FreeBSD.org/doc/en_US.ISO8859-1/articles/\
freebsd-questions/index.htmlcontains lots of useful advice to help you get the best results.
-
@evan @benpate @bonfire Such attacks are rare to begin with, so I don't know how well their behavior maps to game theory, but if I were prone to gamble, I would bet on "they found an easier attack" sooner than "the possibility that someone might compare fingerprints is enough to dissuade the tactic". Social engineering is unreasonably effective on most people.
-
No Hack & Craft today! @mlemweb and I are on the road! Cya next time!
-
@soatok @benpate @bonfire Soatok's work provides another mechanism. It is an out-of-band server that e2ee clients submit their keys to. Actor B's client can compare the keys that it gets from Actor A's server with the keys it gets from the Key Transparency server to make sure they are all listed. If it finds keys that aren't listed, it can warn the user, or just drop the key.
-
@soatok @benpate @bonfire one way to mitigate this kind of attack is key verification. This is simply having Actor A and Actor B set up communications out of band, like on a phone call, and list out the key packages they see for each other. It's crude, and nobody ever wants to do it, but theoretically the possibility that this could happen keeps attackers from using this technique.
