HackerTrans
トップ新着トレンドコメント過去質問紹介求人

powercf

no profile record

コメント

powercf
·9 か月前·議論
I didn't know of the existence of SNI and thought that all traffic through TLS was encrypted. SNI sounds like a terrible idea: it should be obvious that leaking domain names will be abused and makes a mockery of any little cute icon in the browser (your government, police, ISP, airline knows what sites you visit). It would have been better to have a secure (ignoring DNS) inconvenient technology stack than a convenient somewhat-secure stack.
powercf
·7 年前·議論
The car analogy would be:

  He saw a car
  He tried the doors until he found one that was open
  He climbed in and searched everywhere until he found personal information about other users of the system
Even though the security of this system was poor, he still (probably) broke the law. There are plenty of opportunities for people with some knowledge of IT to abuse their power, but it's our responsibility not to do so.