HNHacker News
TopNewBestAskShowJobs

CariadKeigher

1,474 karma · joined January 23, 2013

Security analyst and researcher based in Vancouver, British Columbia.

https://cariad.keigher.ca

submissionscomments
CariadKeigher··on Reflections: The ecosystem is moving
> And I think that email is unbeatable, because it is federated, because it's governed by standards and because in spite of all constraints, it's quite adaptable, being the kind of platform supporting short term proprietary solutions because (and not in spite of) its client/server decoupling.

E-mail's biggest problem is that many, many, many people get it wrong either through configuration snafus or a holier-than-thou approach to how it talks to other servers. It's a miracle that it has managed to function as well as it has; and has done so only only out of sheer necessity.

The problems that e-mail face are the problems that Moxie doesn't want to deal with. If other people want to go for a protocol that has interoperability that's fine, but he wants no part in it. He has no obligation to provide a service to clients he doesn't want connecting and he's right to demand that those who use "Signal" in their name cease its use so to not confuse their attempts with his own.

We already saw a revolt when Signal (when it was known as "TextSecure") went away from its SMS model to a client-server one, leading to a version that still relies on SMS. The point of switching away was to further remove metadata that otherwise would have become exposed. This demonstrates that the type of people who want to go against Moxie's wishes are the type that are to get this implemented incorrectly.

> Is it unencrypted? Sure, but it doesn't matter though. Because we are willingly trading that for a capable search engine and a good web interface. Trade secrets aren't communicated over email anyway.

Your username should be enough to tell you that trade secrets are traded over e-mail routinely.

A multitude of inappropriate material that should not be shared via e-mail is done so on a regular basis. If you work at any company that has credit card numbers being used for either expenses or customer details, you'll quickly find that with a search for 16-digit strings within e-mails will give results.

The problem you're neglecting to acknowledge here is that data at rest can be left unencrypted but overall has no business being unencrypted when in transit. If data from party A is meant for party B (and C, D, E, F, and so on) then any party that is not involved has no business knowing about its contents other than where it is destined to--and even that is questionable.

Those who favour convenience over security are part of a huge problem that faces the Internet.

> I think Moxie is missing the point. He's emulating WhatsApp, but you can't beat WhatsApp at their own game. Did WhatsApp really deliver encryption to 1 billion users? Well, those are 1 billion users that probably won't use Signal or chat with Signal users. Oops.

Moxie isn't trying to beat WhatsApp at its game; he in fact went and improved it by incorporating aspects of Signal into it [1]. Signal is meant to be something else and not something to directly compete with WhatsApp on. Signal and WhatsApp cater to different groups and markets.

[1] https://whispersystems.org/blog/whatsapp-complete/

CariadKeigher··on How the Atari ST Almost Had Real Unix (2011)
Well considering that the author went on to work at Apple, it sort of makes sense. I don't think he was explicitly told not to continue development, but it is likely that some sort of boilerplate part of his contract restricts him.
CariadKeigher··on Depression Part Two
I don't speak much about my experience with depression but I avoid it namely because it's hard to describe to people the emotions you feel as you "deal" with it.

For about a decade I had noticed a behaviour in my mood and it caused a great deal of grief for my friends, those I worked with, and most importantly myself. It never really prevented me from holding down a job, but it very much delayed me from achieving certain things in my life that I have only recently started to attain. I blame my leaving post-secondary school early partly because of the fact that I could not cope with the demands that it brought upon me as well as the fact that I was losing a lot of interest in things that I once had some level of passion for before.

It was never destructive to the point where I wanted to go and kill myself--although there were fleeting moments where I questioned the validity of such an action. However, it definitely brought me down a few notches and it was only when I began to approach the issue seriously that I found myself on the road to actually recovering. I had to let go of certain things to get to this point and it was only by opening up to a select few people did I find myself going down a path to better things.

Years of treatment and some self-exploration has brought a level of calm to my life--I haven't seen a doctor about the issue in about three years now. I avoided using it as a crutch in my relationships with people (even when I knew it was probably a part of the tension), but I was less and less uncomfortable telling people once I knew that it wasn't all in my head so to speak. With that said, not everyone understands depression but I cannot condemn them for it because it's a rather convoluted and complex thing to explain. Hell, I don't even know what I am writing here to say the least.

Allie's statements definitely resonated with me and I'm glad to see her writing again because her previous post about depression made me think about how things were going mid-treatment. There is no real "cure" to depression but I do think that there is a certain level of exploration that is needed to be done to sort of make the whole issue less of a barrier to what you want to accomplish. Even to this day I still have to struggle with certain aspects of it, but I understand now after so many years of pain that it can be defeated or at the very least put at bay.