powercf

no profile record

comments

vor 9 Monatendiscuss

I didn't know of the existence of SNI and thought that all traffic through TLS was encrypted. SNI sounds like a terrible idea: it should be obvious that leaking domain names will be abused and makes a mockery of any little cute icon in the browser (your government, police, ISP, airline knows what sites you visit). It would have been better to have a secure (ignoring DNS) inconvenient technology stack than a convenient somewhat-secure stack.

powercf

vor 7 Jahrendiscuss

The car analogy would be:

  He saw a car
  He tried the doors until he found one that was open
  He climbed in and searched everywhere until he found personal information about other users of the system

Even though the security of this system was poor, he still (probably) broke the law. There are plenty of opportunities for people with some knowledge of IT to abuse their power, but it's our responsibility not to do so.