139
submitted 1 year ago by retiolus@lemmy.cat to c/opensource@lemmy.ml
you are viewing a single comment's thread
view the rest of the comments
[-] danielquinn@lemmy.ca 20 points 1 year ago

One red flag from that podcast:

When asked how they might deal with abuse of the service to distribute illegal files, he suggested that you could compare uploaded files to hashes of known files. This doesn't make sense in a system where the server has no knowledge of the unencrypted file, since the same file encrypted with two different passwords will result in two different hashes.

[-] braveone@lemmy.ml 9 points 1 year ago* (last edited 1 year ago)

Can’t you hash it before uploading and upload just the hash? Or download the banned hash list locally.

[-] danielquinn@lemmy.ca 10 points 1 year ago

Sure, but then you're trusting the client. I can always encrypt x and send along the hash for y.

[-] myself@lemmy.ml 14 points 1 year ago

In the end you can always just encrypt the illegal stuff externally before giving it to them...

load more comments (1 replies)
this post was submitted on 18 Oct 2023
139 points (96.6% liked)

Open Source

31133 readers
384 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS