Video: Whitfield Diffie and Moxie Marlinspike on stage

Impetus

https://www.youtube.com/watch?v=lt7uW6vDk00


Diffie Hellman (an unlikely Jewish name) - he grew up in a NY Jewish neighbourhood, talks on a panel with Moxie Marlinspike.

Diffie creaeted the Diffie Hellman key exchange (an algorithm used to establish a shared secret between two parties. It is primarily used as a method of exchanging cryptography keys for use in symmetric encryption algorithms like AES). He comes across as a bright guy.

Moxie created the Signal app, among others, - which is used as core technology in What's App security. Unfortunately there are questions about What's App security of late - after the takeover of What's App by Facebook. Moxie's Signal remains an open source app - with no Facebook type big data implications or questions.

Moxie outlines the issues of using certain TLS certificate providers - those with large market shares, who browser developers 'must' incorporate as trusted.... but increasingly browser certificate are being dished out like snuff at a wake.

Steve Gibson has words to say about poor quality TLS certification in his latest show:

http://www.podtrac.com/pts/redirect.mp4/cdn.twit.tv/video/sn/sn0596/sn0596_h264m_1280x720_1872.mp4

Certificate authorities must be organized like notaries. The EU needs to establish minimum criteria for them. America won't - especially under Trump. There is a company based in the North of England who appears to throw out certs like 'snuff at a wake', and has a massive market share as a result. One has to ask the question why the GB government allows this?

gctest50

Uploaded on Oct 31, 2011

Fair bad lag on yer internet connection there

timmywex

Impetus wrote: »

Unfortunately there are questions about What's App security of late - after the takeover of What's App by Facebook. Moxie's Signal remains an open source app - with no Facebook type big data implications or questions.

i

There's no questions about WhatsApp security. Lets not spread fear based on a ill researched Guardian article thats been discredited.

Impetus

gctest50 wrote: »

Fair bad lag on yer internet connection there

I am not youtube or twit - the serving entities. Perhaps the issue is at your end? I have no problem viewing the videos.

Perhaps you might wish to consider changing your ISP?

Impetus

timmywex wrote: »

There's no questions about WhatsApp security. Lets not spread fear based on a ill researched Guardian article thats been discredited.

I am on grey mode on that one. But I trust Marlinspike more than Zuck. Zuck makes his money from selling information. Marlinspike is a nerd enthusiast.

I am unfamiliar with your reference to "Guardian article".

Impetus

Impetus wrote: »

I am not youtube or twit - the serving entities. Perhaps the issue is at your end? I have no problem viewing the videos.

Perhaps you might wish to consider changing your ISP?

If you are so bandwidth challenged there is an audio only version of the Security Now netcast

http://www.podtrac.com/pts/redirect.mp3/cdn.twit.tv/audio/sn/sn0596/sn0596.mp3

The videos I linked to are distributed by https://www.cachefly.com one of the largest CDNs on the planet, and youtube - which is part of google. I can only think of one network that has more bandwidth in the world.

Ireland has the cheapest international bandwidth pricing in Europe due to its position and fibre connections. One has to ask why people like you have to put up with video issues - buffering etc? Crap, corrupt regulation and an absence of unbundling of fiber and cable...... No different to the planning permission mess and celtic tiger crash. The net result of an incompetent government and over centralization of everything.

I can watch 4k TV on the net with HDR. I am not in Ireland. If you want good service in virtually anything - hop on the next suitable flight to mainland Europe.

gctest50

I find it funny that I know Moxie for creating sslstrip. I wasn't aware he was behind signal.

Diffie Hellman (an unlikely Jewish name) - he grew up...

This reminds me of the bit in Bridget Jones Diary where Bridget thinks the Aghani Heaney trial is a very important trial involving a very important man called Aghani Heaney. When in fact its two people, ones a kurdish freedom fighter and the other is an aid worker.

Diffie Hellman is not a jew from New York. They are two people. Whitfield Diffie, born in Washington D.C. is one man. Martin Hellman is the other. Hellman was born in New York.

gctest50 wrote: »

Fair bad lag on yer internet connection there

Impetus, gctest50 was making a tongue in cheek comment on the fact this video was uploaded 5 years ago.,

One final comment, why the two mentions of Judaism in the opening paragraph? I'd be really pi$$ed off if in a summary of my work I was described as "raised a catholic, in a catholic community in the Wesht of Ireland...." WTF has that got to do with the price of milk?

Impetus

Deleted User wrote: »

I find it funny that I know Moxie for creating sslstrip. I wasn't aware he was behind signal.

This reminds me of the bit in Bridget Jones Diary where Bridget thinks the Aghani Heaney trial is a very important trial involving a very important man called Aghani Heaney. When in fact its two people, ones a kurdish freedom fighter and the other is an aid worker.

Diffie Hellman is not a jew from New York. They are two people. Whitfield Diffie, born in Washington D.C. is one man. Martin Hellman is the other. Hellman was born in New York.

Diffie just made the remark in the video. I don't give two ** where they were born or what church they follow.

Deleted User wrote: »

Impetus, gctest50 was making a tongue in cheek comment on the fact this video was uploaded 5 years ago.,

There has been no change - the video might as well have been made 30 years ago. The same actors and technology and procedures are in play. We still have cert mongers who sell cheapo certs to anybody with a 16 digit payment card number and an email address - and it looks 'secure' to most of the rest of the ejits on the planet. Due diligence is not a word that springs to their minds.

You are missing the big picture. I suspect that you are motivated by things other than improving computer security in making the above posting.

Ireland is riddled with people of similar mentality, especially in politics.