[Hackupy-discuss] Dovetail protester communications system

[Shannon Lee]

Yes, like BitTorrent, which is very public but which people use as though
it were sekrit sekurity. Nevertheless, BitTorrent remains a good way to
download stuff.

It's OK for functionality like this to run ahead of security, so long as
that fact is very public.  In this case, if the "how it works" page is
accurate, there are some big holes -- for example, it seems as though a
couple of sniffers could get a *lot* of data -- but it also seems like an
interesting product, if you strip out the security claims and make the
risks public.

--S

On Tue, Jan 10, 2012 at 8:22 AM, Eleanor Saitta <ella at dymaxion.org> wrote:

> On 2012.01.10 16.20, Shannon Lee wrote:
> > I would be happier if the stated goal was to create a system that simply
> > focused on functionality, and didn't make claims about its security.
> >  Its the false expectation of security that is harmful.
>
> That's insufficient, though, because people *will* make assumptions
> about the security of the system based on how it appears to function to
> them, and the modes of organization which a system like this affords
> will encourage people to use it in ways which are actively unsafe.
>
> A system like this, targeted at the use cases this system is targeted
> at, must be proactively secure.  To do otherwise is grossly irresponsible.
>
> E.
>
> --
> Ideas are my favorite toys.
>
>


-- 
Shannon Lee
(503) 539-3700

"Any sufficiently analyzed magic is indistinguishable from science."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.hackerspaces.org/pipermail/hackupy-discuss/attachments/20120110/d8b18a7c/attachment.html>