Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The problem here is that the convenience is coming at the expense of proper identity management. SignalGate is a good example of the principle. Some Apple convenience feature helped the user by putting the phone number of the reporter into the addressbook under the identity of a government official. Signal then cheerfully used that incorrect phone number to add the reporter to the group chat.

That 20 year old tech is simply more secure... specifically because it is less convenient. By doing things the way they do them they can enforce access to desired levels of security by controlling physical access to the equipment. With something like Signal, that access is entirely the responsibility of the user. The user will inevitably mess that up, particularly when things get exciting. ... and Signal is not even really all that good at preventing the user from messing the identity thing up.

* https://articles.59.ca/doku.php?id=em:sg (my article)



You are right, but I'd also say that high security brings a lot of friction that slows down decision making. Irrespective of Trump and his friends (whom I dont like) as a point of principle I think world leaders have to choose between secure and slow vs fast and risk of leaks. For most purposes, fast and risk of leaks is going to be more optimal.


I hear you both. Frankly, I think we could use a little friction in communication to slow it and the resulting decisions down. I don't know about everyone else, but I don't make best decisions on the fly.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: