You keep poo-pooing internet commentators that are trying to identify and mitigate the threat posed by the NSA - you did it in this thread, and you did it in another HN thread [1], the article where some kid wants to generate private keys in a secure way.
But what you're not doing is giving your own alternative analysis. What is the threat posed by the NSA and what are the attacks that we should think seriously about, and what are the threats we can safely ignore? What can we do about the former?
Kleptography is pretty well defined in the first sentence of its section: Kleptography is persuading the party to be intercepted to use a form of cryptography that the attacker knows they can break. So yes, in some instances it's encouraging the cracked RSA standard, and in others, it means encouraging "weak ECC curves".
You're a highly-regarded member of this site and a very vocal security expert, yet lately you've started dodging security questions you used to freely answer, and you post odd comments that tend to derail security threads. At one time, you regularly had the top comment with a highly insightful technical explanation of how a security concept works. What happened?
That's not happening either. Are you alarmed by how easily you can be manipulated into sniping at people? Have you ever once on this site been sniped at by me? Are you comfortable with the kind of comment you just wrote? Are conversations like these why you read HN?
Comments
I'm not sure what this has to do with my comment.
You keep poo-pooing internet commentators that are trying to identify and mitigate the threat posed by the NSA - you did it in this thread, and you did it in another HN thread [1], the article where some kid wants to generate private keys in a secure way.
But what you're not doing is giving your own alternative analysis. What is the threat posed by the NSA and what are the attacks that we should think seriously about, and what are the threats we can safely ignore? What can we do about the former?
[1] https://news.ycombinator.com/item?id=6385866
That's not what I'm doing here at all.
That's the effect are having!
Kleptography is pretty well defined in the first sentence of its section: Kleptography is persuading the party to be intercepted to use a form of cryptography that the attacker knows they can break. So yes, in some instances it's encouraging the cracked RSA standard, and in others, it means encouraging "weak ECC curves".
You're a highly-regarded member of this site and a very vocal security expert, yet lately you've started dodging security questions you used to freely answer, and you post odd comments that tend to derail security threads. At one time, you regularly had the top comment with a highly insightful technical explanation of how a security concept works. What happened?
That's not happening either. Are you alarmed by how easily you can be manipulated into sniping at people? Have you ever once on this site been sniped at by me? Are you comfortable with the kind of comment you just wrote? Are conversations like these why you read HN?
Way to avoid the question!