Hacker News Reader

ekrizzleon SpiderOak Encryptr – Zero-Knowledge Password Syncing

Yes, Encryptr and Crypton (the framework and server) are both fully open, in that you can run with your own server. SpiderOak also provides a public free server. https://github.com/SpiderOak/crypton - Erin @ SpiderOak

ekrizzleon SpiderOak Encryptr – Zero-Knowledge Password Syncing

SpiderOak started using the term Zero Knowledge commercially back in 2007, in an attempt to explain the benefits of End-to-End Encryption to customers in a market where most participants were making wildly misleading claims. At the time, Mozy and Carbonite were referring to their systems as fully encrypted, even though all they did was transport encryption, or encryption of content and not filenames and folder names. These days, the term seems to make sense to at least the portion of customers who aren't crypto academics. - Erin @ SpiderOak

ekrizzleon SpiderOak Encryptr – Zero-Knowledge Password Syncing

One reason that was never merged was because it was a flawed patch to a non-problem. - Erin @ SpiderOak

ekrizzleon Responsibly Bringing a new Cryptography Product to Market

Least Authority's blog post about the audit: https://leastauthority.com/blog/least_authority_performs_sec...

ekrizzleon Responsibly Bringing a new Cryptography Product to Market

Glad to see real numbers and specifics about the audit being used in the post.