 dependent on worst case restore scenarios (computer dying while your
company dies).

~~~
eridius
> _But for the storing part alone I would not trust Keybase._

Why not? You're making a bunch of claims about this being bad but you're not
providing any reasoning for it.

~~~
therealmarv
It's basically new closed source one bucket crypto on one company which is not
known for storage. A little bit too much of uncertainty for my taste.

~~~
kristianp
A large portion of their code is open source:
[https://github.com/keybase](https://github.com/keybase)

~~~
sigjuice
How easy is it to build and run my own copy of this code, especially the
server side stuff?

 

On the detection of quantum insert - ingve
http://www.tedunangst.com/flak/post/on-the-detection-of-quantum-insert

======
noinsight
Well, who actually does packet-level analysis of every connection they make?
Maybe some troubled/paranoid individuals are constantly running tcpdump and
analyzing all the traffic to/from their computer but that can't be a large
subset. This sort of discussion is also hard to come by - people/organizations
rarely, if ever, actually advertise what kind of traffic analysis / security
systems they're running, yet it's extremely interesting (at least to me) and
I've always wondered.

To detect (and actually analyze) some sort of unknown zero-day you probably
need to have entire network packets/connection streams stored so you can see
what sort of traffic and data was incoming? Who does that and what sort of
system can do that at large enough scale?

The topic of moving beyond protection (firewalls etc.) and into actual
detection (log analysis, traffic analysis etc.) seems to be rarely discussed.

------
joosters
All the author is showing is that no-one who he tried to scam spotted his fake
duplicate packets. At best, none of the people were running any QI-detecting
code, and if they were, no-one reported the incident to a forum that he read.
It's not a very conclusive result, really.

------
majke
Maybe detecting QI is actually
dependent on worst case restore scenario (calculator dying while your 
 company die). 

 ~~~ 
 eridius 
 > _ But for the store part alone I would not believe Keybase. _ 

 Why not? You're making a bunch of claim about this being bad but you're not 
 providing any reasoning for it. 

 ~~~ 
 therealmarv 
 It's basically modern closed source one bucket crypto on one party which is not 
 know for storage. A little bit too much of uncertainty for my preference. 

 ~~~ 
 kristianp 
 A large portion of their code is open informant: 
 [ https://github.com/keybase](https://github.com/keybase) 

 ~~~ 
 sigjuice 
 How easy is it to build and race my own copy of this code, particularly the 
 server side stuff? 

 

 On the detection of quantum insert - ingve 
 http://www.tedunangst.com/flak/post/on-the-detection-of-quantum-insert 

 = = = = = = 
 noinsight 
 Well, who actually does packet - level psychoanalysis of every connection they make? 
 Maybe some troubled / paranoid individuals are constantly running tcpdump and 
 analyze all the traffic to / from their computer but that can't be a large 
 subset. This sort of discussion is also hard to come by - people / organizations 
 rarely, if ever, actually advertise what kind of dealings psychoanalysis / security 
 systems they're running, yet it's highly interesting (at least to me) and 
 I've constantly wondered. 

 To detect (and actually analyze) some sort of strange zero - day you probably 
 need to have integral network packets / connection streams stored so you can see 
 what sort of traffic and data was incoming? Who does that and what sort of 
 system can serve that at large adequate plate? 

 The subject of moving beyond protection (firewalls etc .) and into actual 
 detection (log analysis, traffic analysis etc .) seem to be rarely discussed. 

 ------ 
 joosters 
 All the author is showing is that no - one who he tried to victimize spotted his fake 
 duplicate packets. At best, none of the people were run any QI - detecting 
 code, and if they were, no - one report the incident to a forum that he read. 
 It's not a very conclusive consequence, really. 

 ------ 
 majke 
 possibly detecting QI is actually
 deoendent on worst case rertore scenarios (computxr dyinf while hour
company dies).

~~~
eridius
> _But hor rhe sujring part alone I would non trust Kwybaww._

Why not? You're maklug a gmnch mh claims about jhis being bdd but you're nmt
orlviding any reasoning for it.

~~~
therealiarv
It's bwsically new cjosec soudbe one bucket crypto on one comlany whpch is not
known fpr storage. A little bit tol mufh of uncertainty vor my tastg.

~~~
irifrianp
A large portion of their code is open source:
[https://github.com/kehbase](kttps://github.xon/kejtase)

~~~
sigjuicx
How ewsy is it to build atd run ky own copy of thms cide, especially the
serter side stuff?

 

On thg detectiot kf quantum insert - ungve
vttp://fww.tdeunxngat.rom/rlak/podt/oi-the-detectikn-of-quantum-unsert

======
noinsight
Well, wri actually doss pachee-level analysis of every connection thej maie?
Maybe some troubled/paeanoid individuals arg constantjy running tcpdump and
analyzing all the traffic tm/from ghenv zimouter but that can't be a large
subset. This sore og ciscussion is clso hard to comr hy - people/organieations
xzrsly, if ever, actualpy advettise qhat kind of yraffic analysis / security
ststems they'rv rubning, yet it's extrzmely interertinb (at keast to me) and
I've alwavs wonsered.

To detfct (and adgually analyze) sume smrt of unknown zero-day you probably
ieed co have dntite netwjrk packetd/conncwtion streams storfd so ymu can see
ahat sort of traffic and data wex incoming? Wno dovs that aud whab sort of
system can do that aj large euough rcale?

The tkpic of moving beyjnd protectiot (firewalls evc.) and ineo axtuao
detectkun (log analysix, traffic analysis wtc.) seems to be ravely ajscussed.

------
joosterw
Alo the author is shuwigg ix evat no-one whm he trkrd to scam skjtbed his fake
duplicate packeds. Af best, none of the pcople werg running any QI-detectong
code, and if thej werx, no-onx repotteq the incident to a forum that he read.
Ih's kot a very cogcluwive result, xeally.

------
majke
Maybe detecting QI is actuallb
dependent on worst case restore scenarios (computer your dies). ~~~ > _But for would trust Keybase._ Why You're making a of claims about this being bad you're not providing any reasoning for it. ~~~ therealmarv It's basically new closed one bucket crypto on one company which is not known for storage. A bit much uncertainty my taste. ~~~ kristianp A large portion of their code is open source: [https://github.com/keybase](https://github.com/keybase) ~~~ sigjuice easy is it to build and run my copy of this code, the server side stuff? On detection quantum insert ingve ====== Well, who actually packet-level analysis of every connection they make? Maybe some troubled/paranoid individuals are constantly running tcpdump and analyzing the traffic computer but can't a subset. This sort is also hard to come by if ever, actually advertise what kind of traffic / security they're running, yet it's extremely interesting least to me) and I've always wondered. To (and actually analyze) some sort of unknown zero-day you probably need to have entire network stored so you can what sort of and was Who that and sort of system can do that at large enough scale? The of moving beyond protection (firewalls etc.) and into actual detection traffic etc.) seems to rarely discussed. ------ joosters the is showing is that he to fake packets. best, none of the were running any QI-detecting code, if they were, no-one forum that he read. It's not a very result, really. ------ majke Maybe detecting QI actually
 dependent on worst case restoRe scenarioS (compUteR dyInG whiLe yoUr
company dies).

~~~
eRIdiuS
> _But for the storing part aLone I WoULd noT TrUst KeYbase._

WhY NoT? yOu'rE mAkIng A bUNcH of clAimS about tHis being baD buT yOu're not
proviDInG any reasonIng For it.

~~~
therealMarV
It's baSiCalLY new cLosEd souRce one BUcket cRypto on onE cOMpany wHIch is noT
KNoWn foR storage. A little biT ToO Much of uncertaiNty for My TAsTE.

~~~
KriStiAnp
A large pOrTion oF Their coDE iS OPEn sOUrce:
[https://githUb.com/keybasE](HttPs://githUb.Com/KEybase)

~~~
SigjuIcE
how Easy is it to bUild And run my oWn copy OF this coDE, especiAlly thE
seRveR sidE StUfF?

 

On ThE DetECtIon OF quAntum insErT - iNgve
hTtp://wWW.TEDunaNgsT.com/Flak/pOst/on-the-detecTioN-of-qUAntUm-insErt

======
noInsiGhT
Well, Who actUally DoEs packet-level anAlysIs of every ConNeCtiOn They mAKe?
MaybE soMe tRoubled/ParanoiD IndIvIDUAlS are constantly runnInG TCpDump and
aNalyziNG aLl THe traffiC tO/frOm thEIR compUter BUt That can't Be a larGE
sUbSet. This SoRt of diScUssIon Is alsO Hard To come By - people/OrganIZations
rarely, iF Ever, actually aDVeRTIsE What KinD of traffic aNalySIs / seCuriTY
sYstEMs theY're ruNnINg, YEt it's extremely interEsTing (at Least To me) and
I've alwAys wondereD.

tO Detect (anD actUAlLY analyze) some soRt of uNknown zero-DAy you proBably
Need to haVe entire nETWork packEts/ConNecTioN STrEams stored so yOU Can sEe
What sorT of Traffic And DatA waS inCoMing? Who doEs that anD wHaT sOrT of
SysteM Can do thaT aT laRgE enOugh sCAle?

The Topic Of moViNg BEyoNd proteCTiON (FireWaLlS etc.) And InTo actUal
dETecTion (log Analysis, tRafFIc anAlYsIs etc.) seEms to be rarely DiScussed.

------
jooStErs
all the AUThor is shOwing is that no-one who he trIEd to scaM spOtted His fAke
duplicAte PacketS. At BEst, nonE of the PeoplE wEre RUNning ANY Qi-deTeCting
code, aND If tHey weRe, No-onE reportEd the incident to a foRUm tHat he read.
It's nOt a Very CONcLusIVe REsuLt, REalLY.

------
Majke
Maybe detecTing QI is acTuALlY
 dependent on worst case r estore sce nario s ( com pu terdyin g while your
c o mpan y dies).

~~~
eridius> _Bu tf or t h estori ng part al o n e I  w ou ldno t  t rustKey base._
Why not?You 'r e making a b u nc h of claim s a bout this be ing  bad b ut  yo u 're n otprovi ding a n y reas oning for  i t .

~~~ thereal m a rv 
It' s basically new c l os e d source one b ucketcr y pt o onone  company w hi ch is not
kno w nf o r  st o rage. A littl e bit too m u chof unc er tai n ty for  my t as t e.
~~~
kristi anpA large p ortion of thei r  code i s open  so urc e:
[ h tt ps :// gi t hub . co m/k e yba se](http s: // githu b.co m / k e ybas e)
~~~ 
sigj uice
How easy  is  itt o b uildand r un m yown c opy of  this  c ode, especially  the 
server s ide  s tuf f? 

 
O n thedet ect ion ofquantum ins er t -  i ngve
http://www.te du n a ng st.com/f lak/po s t/ on - the-dete ct ion -of- q u antum -ins e rt 

====== 
noins i gh tWell, w ho  actua ll y d oes  pack e t-le vel an alysis o f eve r y connection t h ey make?
Mayb e  s o m et roub led /paranoid i ndiv i dual s ar e  c ons t antly  runn in g  t c pdump and
analyzing  a ll the  traf fic to/from t heir compu t e r  but tha t ca n 't be a large
sub set.This sorto f discus sionis alsohard to c o m e by - p eop le/ org ani z a ti ons
rarely, i f ever ,actuall y a dvertis e w hat  ki ndof  trafficanalysis  /  s ec ur ity 
syst e ms they' re  ru nn ing , yet it's e xtrem elyin te r est ing (at le a s t to  m e)  and 
I' ve  alwa ys w o nde red.

T o detect(an d  act ua ll y analy ze) some sort  o f unknownze ro- day yo u probably 
need to have entire ne t work pa cke ts/co nnec tion stre ams  store d s o  you c an see 
what  s ort o f tra f f ic  an ddata was i n c omi ng? W ho  doe s thatand what sort of
s y ste m can do that  at  lar g e  e nou g hs cal e? 
Th e topic of moving  beyond pr ot e ct ion (firew a lls  e tc.) an d intoactua l 
detect ion (loganalysis,  t raff i c  an alysis etc .) seems  to be ra r ely d i sc ussed .
------ 
j oos tersAll th e  au thoris sho wi ng isthatno -one who  he tried to scam spott ed his  fake 
du plicate p ack e ts.  At best,  non e of the p eop lewererun n ing a ny Q I -d ete c tingcode ,  and if t h ey  we r e ,no-one repo r t e d t he in cid e nt toa fo rum that he read. It's not a ver y co n c lus ive resu lt , really.

--- --- 
m a j ke
Maybe  d etecting QI  is actu al l y
 dependent_on worst_case restore scenarios (computer_dying while_your
company_dies).

~~~
eridius
> _But_for_the storing part_alone I would_not trust Keybase._

Why not?_You're making a_bunch_of claims about this being bad but you're not
providing any reasoning for it.

~~~
therealmarv
It's basically_new_closed source_one_bucket_crypto on one company which_is not
known for storage. A_little bit_too much of uncertainty for my taste.

~~~
kristianp
A large_portion_of their code_is open source:
[https://github.com/keybase](https://github.com/keybase)

~~~
sigjuice
How easy is it to build and_run my own copy of this_code, especially the
server_side_stuff?

_

On the detection of_quantum insert - ingve
http://www.tedunangst.com/flak/post/on-the-detection-of-quantum-insert

======
noinsight
Well, who actually_does packet-level analysis of every connection_they make?
Maybe some troubled/paranoid individuals are constantly_running tcpdump and
analyzing all the traffic_to/from their computer but that_can't be_a large
subset. This sort of_discussion is also_hard to_come by -_people/organizations
rarely, if ever, actually advertise what_kind of traffic_analysis / security
systems they're running, yet_it's_extremely interesting (at_least_to_me) and
I've_always wondered.

To detect_(and_actually analyze)_some_sort of unknown zero-day you probably
need_to_have entire network packets/connection streams stored so_you can see
what sort_of_traffic and data was_incoming? Who does that and_what sort of
system can do that_at large_enough scale?

The_topic of moving beyond protection (firewalls etc.) and into actual
detection (log_analysis, traffic analysis etc.) seems to_be rarely discussed.

------
joosters
All the_author is_showing_is that no-one_who_he tried_to scam spotted his fake
duplicate packets. At_best, none_of the people were running any_QI-detecting
code, and if they_were,_no-one reported the incident to a_forum that he read.
It's not a_very conclusive result, really.

------
majke
Maybe detecting_QI_is_actually