• 0 Posts
  • 37 Comments
Joined 1 year ago
cake
Cake day: February 16th, 2024

help-circle












  • I’ve heard from multiple independent 3 letter agency associates (past and present) that hackers often often get frustrated and quit US Gov work due to the strict “rules of engagement”, that limit offensive operations to critical US infrastructure and government systems.

    Often times they know that adversaries are going to attack well in advance and even send advance notice (or retroactive notice) to important targets in some cases. But their operations are, according to them, limited to non-disruptive (though impressive, thorough, and highly specialized) information gathering.

    No guarantees that all hands of the government are playing by the same rules, but at least those people’s story was pretty consistent.




  • kata1yst@sh.itjust.works
    cake
    tolinuxmemes@lemmy.worldWhat if...
    link
    fedilink
    arrow-up
    38
    ·
    edit-2
    3 months ago

    No idea how I’m supposed to take this ranty blog needlessly interspersed with furry cartoons seriously. But it’s basically just restating (poorly) all the same criticisms and alternatives written about here: https://www.latacora.com/blog/2019/07/16/the-pgp-problem/

    The ‘real’ criticisms of PGP are that it’s old, it’s clunky, and it doesn’t support forward secrecy by design. None of that is invalid, but I think the importance of those points depends on the use case and user.

    The alternatives given are myriad and complexity and clunkiness are interspersed between dozens of solutions instead of well understood and documented in one tool.

    That isn’t a superior approach. I’m not arguing that PGP is perfect, but it’s absolutely asinine to suggest (like this blog and others suggest) that the solution is to use dozens of other solutions with their own problems and with less auditing.

    If we’re going to replace PGP, we need to do it properly in a centralized library/toolchain. Breaking up the solution and spreading it around just magnifies the problems.