Hacker News new | past | comments | ask | show | jobs | submit login

Its almost as if we shouldn't centralize such communication in a single giant private corporation.



While I am 10000% onboard with decentralizing communication, I am not sure if that would help in cases like this though. Back in 2013, only a single news outlet AP's twitter was hacked and had similar consequences. Decentralizing wouldn't have helped there I think.


Signing the message would be but who uses that nonsense right


Then you need to make sure people cannot under any circumstances be sloppy with securing private keys, since once they can, some important people will, and then such things happen again, any maybe they'll have actual consequences, people die, markets collapse, economies collapse, wars break out ...

And then? Doing damage control on a fake post by the CEO of Supercorp saying they're faltering financially, or whatever, when it has that green badge of crypto-authenticity, and you've spun your marketing in such a way to tell people "if that's there, it is 100% authentic, just look for that badge" ... that would be a nightmare. It's an issue with "verified" already, but cryptography is essentially magic; many in tech believe they get the nuances but don't really, and most outside of tech don't even begin to get the nuances. Would that damage people's trust in cryptography in general? Maybe?

After all, most people don't know, understand and/or care that their Whatsapp E2E is effectively broken for police and similar actors when they enable backups, because most people care about the details of these things about as much as I care about the exact things my hairdresser does to make my hair look good, which is pretty much not at all unless they want to use a chainsaw or something. If that were to be abused in a major way, that'd probably make big headlines.

I don't think that, at this point, cryptography is even generally helpful with fundamentally social problems like these, because it tends to be incredibly hard to build a product and UX around it that works for everyone and fails in a way that is somewhat understandable and actionable – the amount of work that HTTPS has required and still requires to mostly get there has been and still is huge.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: