HNHacker News
TopNewBestAskShowJobs

mstef

399 karma · joined November 22, 2008

submissionscomments
mstef··on PGP needs to be retired in honor
check out opmsg how it achieves compatibility with gnupg and imagine a tool that actually looks like gpg but figures out which crypto backend to call.
mstef··on PGP needs to be retired in honor
signal the app exists and is much more used than already than pgp ever was. it's a different story that i don't recommend it myself, only the protocol.
mstef··on PGP needs to be retired in honor
the listed examples all exist. signal is already more widely used than pgp ever was in the last 25 years.
mstef··on PGP needs to be retired in honor
opmsg does masquerade as gnupg on the cli, if you take this further you could create a gnupg chameleon which detects what keys are available or what the input is based on auxillary info and then invoke the appropriate tool (which might be gnupg, or something else).

on a different note: gnupg is not widely used, signal is.

mstef··on Sophos – Forward Secure Searchable Encryption
strange, my mistake i guess. sorry for the noise
mstef··on Sophos – Forward Secure Searchable Encryption
deleted, mistake
mstef··on Pretty Curved Privacy
not the curve25519 based ones, the symmetric salsa based ones should be.
mstef··on Pretty Curved Privacy
the problem with "transparent to the end user" is a variation of Geers Law: "Any security technology whose effectiveness can't be empirically determined is indistinguishable from blind luck."

if you do not control your keys, then someone else does.

mstef··on Pretty Curved Privacy
the problem is not that "pgp doesn't use 25519" the problem is the openpgp format as per rfc4880 and the whole thing being from the naive nineties, not suited for advanced adversaries we have since then.
mstef··on Pretty Curved Privacy
i also gave a talk on pbp: https://www.youtube.com/watch?v=Kl_gLMef1mI
mstef··on Pretty Curved Privacy
also there will be soon (in 1-2 months) a hardware token available based on this. look for project: PITCHFORK
mstef··on Pretty Curved Privacy
back in the days i consulted with tom on pcp a bit. Why, because i took it a bit further with: https://github.com/stef/pbp - there's even an axolotl implementation available - but not integrated yet: https://github.com/stef/saxolotl
mstef··on PrivacySco.re
nice! this could also rate the hosts regarding their tracking/adserving history perhaps.
mstef··on Utterson: a user friendly back end web interface for Jekyll
utterson is in fact an established 7 year old static blog engine: https://github.com/stef/utterson/

for avoiding confusion please change your projects name. thx,s

mstef··on [dead]
a privacy respecting and much more polished search engine you might like is searx: https://github.com/asciimoo/searx
mstef··on Parltrack and ACTA
Thank you guys, your support is very much appreciated! I think there might be some karma limit on this site that prohibits you from voting on stories.
mstef··on Poll: What's your favorite static site generator?
i use utterson: http://www.ctrlc.hu/~stef/blog/posts/utterson_v1.0.html
mstef··on Jekyll, the blog engine of kings
it bugged me, so i removed the zsh dependency. thanks for the feedback. ;)
mstef··on Jekyll, the blog engine of kings
unfortunately currently yes, but it is high on my list to reduce this to ksh only. but anyway everyone should have ksh for scripting and zsh for interactive shelling if you ask me. ;)
mstef··on Jekyll, the blog engine of kings
you might also try out utterson, a unix based variant (make, zsh, ksh, awk, m4, etc): http://github.com/stef/utterson
mstef··on Poll: What do you think of OpenID?
actually it is possible already to set up certificates and use them for authentication, in firefox you can check this under preferences/advanced/encryption
mstef··on Ask HN: How should business guys go about finding great hackers for a startup?
start earning their respect, become one of them.
← PreviousPage 3 of 3