logoalt Hacker News

CTDOCodebasestoday at 12:27 PM0 repliesview on HN

> I so want to reject the notion such a thing is acceptable, but…

Me too but it is the reality now. As someone who saw the birth of the internet and watched it grow into what it is today it is really quite sad.

> TrueCrypt, “replaced” by VeraCrypt which Internet people will claim is backdoored? I haven’t heard about stylometry paper.

Yes. TrueCrypt shut down in a very strange fashion. The software was functional and the authorities had tried to actively crack archives and failed. Then one day the project shuts down with a notice that TrueCrypt is "not secure as" Windows Bit-Locker which is and was a complete falsehood. TrueCrypt also passed independent security audits. Many believed the announcement to be a warrant canary. I've dropped some links below.

> btw w/this idea would want to avoid typing into a comment field directly, since the session recorders would capture it (although that’s a different risk - same as our identifiable behavior patterns with our mouse etc.)

You are 100% correct. It would probably be better implementing this idea as a virtual keyboard for better privacy. No doubt typing cadence is unique too and I have probably already been identified just by doing online typing tests. Mouse could be at least partially defended against using vimium style keyboard shortcuts.

https://www.theregister.com/2010/06/28/brazil_banker_crypto_...

https://krebsonsecurity.com/2014/05/true-goodbye-using-truec...

https://oar.princeton.edu/handle/88435/pr1q24c