dijksterhuis

Sounds like the services shouldn't be split up into 10 if there's that much dependency going on. Like, services are an abstraction. If one service has to call all other 9 services, and the s…

I really hope conda stays on the user end. Like, I understand it's great for managing package dependencies/setting up environments etc for a single project. But I've found it's an …

I'm loving the synthy 80s ident. @eastdakota any chance of a link to the musician who wrote it?

> EDIT -- I've actually just gone off to try out jitsi again (i do actually check to see if it's worth switching platforms) and it turns out it asks me to install an android app too. So J…

As per a reply to another child comment. > My point was that Zoom fits some use cases better, and that seems to be the case more often than not for users with less technical ability than the HN use…

Don't get me wrong, our users are very intelligent. They've done great things on Zoom. But technical " whizzkid stuff " (as they call it) is not something they are comfortable with…

Posted this in reply to another reply to my original parent. > I've actually just gone off to try out jitsi again (i do actually check to see if it's worth switching platforms) and it tur…

This is exactly one of the points I was trying to make. 90% of of the other meetings in our eco-system of meetings use Zoom. Adding additional barriers is something we have to try and avoid in our use…

I'm the only administrator and we have meetings running 7 nights a week. I'd quite like to not have to unexpectedly sacrifice 4 hours of my time finding a bug in the config. Nor do I reall…

90% of our Zoom users use smart phones and install the app, which is a normal and understood process by most smartphone users. EDIT -- I've actually just gone off to try out jitsi again (i do act…

Because there are other factors to consider for each user's use case. Jitsi wouldn't work for the Zoom meetings I admin. It's too technical for a very untechnical audience. Zoom was har…

I have no idea what I'm doing. Screens appear and I have to click on things... Another day in the office then. Also, loving the hip hop music loop.

Sorry, to clarify, when i say protocol I specifically mean the E2E encryption protocol. Also, have you thought about asking your clients/whatever to use one app to communicate with you? Even if y…

> The most private solution is end to end encrypted and doesn't require a credit card and doesn't collect metadata etc. The most private solution actually doesn't involve a computer …

Perfect security doesn't exist. If humans are involved at any point, it's not perfectly secure. The One time pad is a great testament to that. Should we work towards an ideal? Sure. Should w…

* it used to be with ECB. not anymore. My bad. > Matthew Green, a cryptographer and computer science professor at Johns Hopkins University, points out that group video conferencing is difficult to …

Which is a fairly ambiguous question and could be interpreted several ways so I went mainly for the E2E case (as it's the new thing). Could also be interpreted as how can we show only paid users …

This whole discussion is about the E2E case. That's what the CEO was referring to. There's a twitter thread link somewhere. I think I read that Zoom do decrypt AES-GCM server side already. T…

I'm full of great ideas that other people have already done.

Thank you for your work!

AES GCM will still exist for free users. > ... this is in reference to end-to-end encryption, but simply ran out of space in the tweet. ... https://twitter.com/nicoagrant/statu…

So by your logic then, WhatsApp provides privacy? What about the troves of metadata they collect and make available to law enforcement? Plus the fact you have to register with a phone number which can…

With physical security, it would be more like "I trust Bob isn't going to hit me with a wrench because he told me he wouldn't". Bob isn't very trustworthy. Sure, we could encr…

In terms of an actually relevant reply that's not bemoaning browser certs... Yes I was a bit harsh. But I was trying to demonstrate a point - no one knows for sure until we can look at this stuff…

Don't get me started on browser certificates. That's a whole week of my life I'll never get back. The short versiom of it is, your browser trusts CAs to say whether a certificate is val…

You say no chance, I say someone is probably already starting to work on it. Don't forget we can sniff and inject packets at the network level. Just because we dont have sources doesn't mean…

Reverse engineer/packet sniff the implementation and perform some sort of cryptanalysis to see if the implementation works according to the published protocol. It's pretty standard. That…

Security does not equal privacy. They are two distinct concepts. Security with encryption is about trust guarantees. I send message X to Alice and I know Bob can't read the plaint text of mes…

Their E2E proposal design is open: https://github.com/zoom/zoom-e2e-whitepaper

Sure. Study a PhD in cryptanalysis and reverse engineering. If you want to look at something now, the white paper for the E2E protocol design is public and open right now: https://github.c…