Re: [messaging] Audible public-key fingerprints

2014-08-21 Thread Mansour Moufid
On Wed, 20 Aug 2014 06:09:24 +0200 Arne Renkema-Padmos wrote: > As an alternative to audible communication you could also try > ultrasound, but I'm not sure how well that works quality wise. > Regarding end-user agency in determining when their device broadcasts > their signal: if you don't want

Re: [messaging] JackPair

2014-08-21 Thread Tony Arcieri
On Thu, Aug 21, 2014 at 2:33 PM, Tom Ritter wrote: > Yup, that's what I was talking about > Well, that's all just an additional secondary sidechannel in addition to the microphone on a Smartphone. The burner "flipphone" use case is... retro? (thumbs up I guess) Perhaps there are physical mechani

Re: [messaging] Namecoin

2014-08-21 Thread elijah
On 08/21/2014 11:37 AM, Joseph Bonneau wrote: > This may be the missed vertex of > Zooko's triangle: without centralized policing of claimed names, it may > be impossible for people to get any of the human-memorable names they > want. Or at least annoyingly expensive. This point could be more pro

Re: [messaging] JackPair

2014-08-21 Thread Michael Carbone
Tom Ritter wrote: > I would _love_ to see a > usability study of Signal, RedPhone, and this. OpenITP did an informal usability study of Ostel, CSipSimple, and Linphone at HOPE X last month: https://wiki.openitp.org/ux:results:observations:140718-hope-x-tests:writeup I'd imagine RedPhone & Signal

Re: [messaging] JackPair

2014-08-21 Thread Tom Ritter
On 21 August 2014 00:47, Tony Arcieri wrote: > On Wed, Aug 20, 2014 at 7:54 AM, Tom Ritter wrote: >> >> I have strong doubts about accelerometer-based audio pickup in >> real-world settings. > > > https://crypto.stanford.edu/gyrophone/files/gyromic.pdf Yup, that's what I was talking about. Spec

Re: [messaging] Namecoin

2014-08-21 Thread Joseph Bonneau
On Thu, Aug 21, 2014 at 9:17 AM, z...@manian.org wrote: > Several pieces of context that might be helpful to inform the discussion. > > Virtually all Blockchain 2.0 are considering some variation on the block > ordering algorithm that does not involve competitive hashing. BitShares is > an exampl

Re: [messaging] Namecoin

2014-08-21 Thread Tao Effect
Hi all! Thanks much to Trevor for doing what I was unable to do: starting and facilitating a foundation for discussion of how blockchain technology is relevant to end-to-end encrypted messaging projects. Please forgive any excess brevity on my part as I reply to Zaki and Trevor's comments (I a

Re: [messaging] Namecoin

2014-08-21 Thread z...@manian.org
Several pieces of context that might be helpful to inform the discussion. 1. The inefficiencies of the proof of work scheme for block ordering in NameCoin are unlikely to remain relevant over the medium term. Virtually all Blockchain 2.0 are considering some variation on the block ordering algorit

Re: [messaging] User key lookup and the Web PKI analogy

2014-08-21 Thread Tom Ritter
On 21 August 2014 06:51, Alaric Snell-Pym wrote: > On 19/08/14 23:18, elijah wrote: > >> I think there is certainly a place for both decentralized and >> infrastructure approaches, and if we can actually get an infrastructure >> approach that works reliably then people will start to see the usabil

Re: [messaging] User key lookup and the Web PKI analogy

2014-08-21 Thread Alaric Snell-Pym
On 19/08/14 23:18, elijah wrote: > I think there is certainly a place for both decentralized and > infrastructure approaches, and if we can actually get an infrastructure > approach that works reliably then people will start to see the usability > benefit. I think we need more infrastructure to s

Re: [messaging] Summary of discussion session at USENIX HotSec

2014-08-21 Thread Mike Hearn
> > Some ability for users to detect MITM attacks by the public key server > might be enough to discourage companies/governments from doing MITM attacks > on a large scale. > For something like WhatsApp simply notifying the user that the user has switched to another device and being forced to prov