• 29 Posts
  • 401 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle

  • if I was travelling abroad I would not be bringing anything that has universal access to my accounts or data (primary phone for example). I would most likely get a new device loaded only with what I needed to get things done using a new account I transferred money into. For the most part I would not expect any issues but the laws at most borders, even US international borders generally say they can clean you out of all your data and force you to log into any devices you have with you. So the 2 countries mentioned are only part of the story when it comes to privacy when travelling international.















  • i think there was a lot of hope among some at the public systems, no clue if it will bear out, the tech however is a viable PKI distro strategy that has been proven to work already in multiple large orgs in different forms. We don’t talk about how expensive or difficult it is to control your own PKI. Its one of the key reasons why you have to yield so much data and control to providers.

    I could go on a long rant about what the internet was built to be vs what “big tech” has perverted it into, using p2p technologies to do it then saying “i dont see what the point is for people to have versions of this for themselves rather than it being only in the hands of big corps controlled by share holders” but thats about as far as Ill go.

    as for private systems, this stuff is already starting to rule your world. distributed PKI systems in enterprise require expensive and technically onerous trust ceremonies for each cross system connection. you also require functioning cert trees from root to tip in order to validate anything in most of these systems (tools like pgp are the exception rather than the rule sadly). These systems are expensive to operate and add another single point of attack to the system. There are already chains doing internal asset management at companies, and its quite likely that any DiD standard that becomes a gov ID will be on a ledger network not that it should matter to end users.

    the biggest push with the latest wave of the tech is to stop trying to sell to people, sell to enterprise, the usecases are more solid and don’t require strange economic games to function.

    You will be using blockchain tech, but if its deployed right. You will never know. Do you know or care what app server or db your provider uses? of course not.



  • I think we are grasping for new words here really, its only been in the last few years orgs have been exploring actual deployments internally.

    I do have a very reductive definition of “blockchain” as I believe it is what it says. what is considered “satoshi’s vision” includes a blockchain system but it does not define the word.

    HL is a blank canvas that allows you to deploy whatever consensus you want including those commonly found in public chains, it is entirely possible to run a hyperledger instance that is compatible with any network you would like, presuming you would want that effort.


  • the issue with the hardware wallet is not a “simple math” problem but a “trust” issue. in reality you simply can’t trust any hardware you didn’t make yourself, in practical use we usually pick vendors we like and decide to trust them.

    for example. many people considered ledger trustworthy until they introduced firmware that indicates a capability to exfiltrate the keys.

    I think the problem you are speaking to was some older hardware keys (and maybe some strange off brands) that encode keys at the factory, to my knowledge no major product does anything like that and they take pains to show you are generating the key. the big back and forth there has been with hardware providers using methods that are potentially reversible or other types of vulnerabilities.

    Yes pretty much all devices will allow you to import a key you have generated by whatever means you prefer, however once you put it on the device you are signing up for the other issues that come with hardware still.