,
6 tweets,
2 min read
Read on Twitter
There are many misconceptions in cryptography, such as "military grade encryption" (no such thing exists). This is another one: bat shit crazy things are so stupid it's not worthy anybody's time to point out how bat shit crazy it is.
What does it mean "pay you if you can crack it?" What are the rules of this contest? The answer is that the rules are written in such a confusing way, as confusing as their algorithm, that it's impossible to tell if it's been cracked.
It's like McAfee's Bitcoin wallet device that offered bounties if somebody can hack it, somebody hacked it, but they didn't pay out the bounty because it didn't meet their criteria of a hack. But it met OUR criteria of a hack.
Just post working code to GitHub. Let the public look at it, for free. That's the test of a crypto algorithm. "Pay you if you can crack it" isn't.
It's a subtle difference between "reward if you can hack this unhackable thing" and "bug bounties". They sound like the same thing. The difference is that with bug bounties, they expect to pay out, but "reward if hacked' doesn't.
In other words, Chrome is the most trusted web browser because they've paid out the most in bug bounties to people who have hacked it. A browser offering a reward-if-hacked that they've never paid out is wholly untrustworthy.
