I was much more so when I was younger, but the older I get, the more I love to be wrong. It is always an opportunity to question my biases and learn. But introspection need not always lead to change. As long as I am willing to reflect honestly, I’m happy.

Lost Lemming?

Cbat as I qwop walk.

Does it? Seems like one of many small, old, mostly forgotten systems. Nothing against them. Cool project for fun and tinkering with another kernel, but to whom would it be promising? Or is this just some random bot account that posts random shit?

Me too, but my library must not be nearly as impressive.

Wow! I thought my NAS was loaded, but good lord. What are you storing?

It is at least positive how forthright they are about its use in their process.

A bit of a tautology.

I’m not clear where the “weapon” part comes in.

Very similar. A coworker of mine in maybe 2005 or so was a huge fan. I didn’t dislike him, but I did think his music taste sucked. So I thought Coheed and Cambria sucked. Then I saw them live several years later at a festival, and was blown away. I admit I was dead wrong. Listened to every album since and they are incredible composers and performers.

Maybe check out WAICT.

Oh yeah. I had just edited to identify that. And if this is the threat for which you’re protecting, this does make sense.

It doesn’t. The code your site provides is downloaded by your client’s browser. It uses a key on their side that is never sent back to your server. Same as if you did it with an extension or application. This is well trodden ground, and used across the internet such that hosts have zero knowledge of their users’ data aside from in its encrypted state.

Actually, let me give a little ground here. There is a subtle but real benefit to an extension or signed application. With just JavaScript, a server could on a new page load deliver an altered code that would introduce a compromise. If that is the threat you want to mitigate for, you’re onto something. If you’re talking high stakes, and you make it clear this is the threat for which you’re protecting users, then I could be convinced.

I mean no offense by this at all, but I wouldn’t because it would indicate a poor understanding of cryptography to me as a user. Either that or being intentionally misleading. In either case, probably unsafe for the user. There does not need to be an extension to encrypt content such that the server never has access to it. It can be encrypted and sent to the host with a key the server never possesses.

Smile

My guess is most are very young. Goes to show our civil liberties worldwide, especially since 9/11, have eroded tremendously. Young people have grown up in a world where privacy is a joke and government spying is a foregone conclusion.

Sorry but you’ll need to hold the L on this one. If I encrypt a message with public key material for which the only private key material that can decrypt the message is in only my possession, it doesn’t matter if the message passes centralized servers.

I’m not trying to be rude, that’s just how it works.