logoalt Hacker News

pyinstallwoesyesterday at 9:38 PM1 replyview on HN

You don’t have to trust the recommendations, you can analyze the reasoning behind their decisions and argue that. In this case the risk being at the engineering and hardware side and also denial of service. In addition to the trusted relays. Those are valid disputes.


Replies

belochyesterday at 10:02 PM

You can argue these exhaustively. They have not done that here. Some of their arguments are complete bunk.

e.g. "Quantum key distribution requires special purpose equipment"

Yes, it requires special equipment. That hasn't deterred some from using it where the added expense is warranted. Commercial QKD systems have been in use for decades. The technology is not currently useful for credit card transactions from your living room, but that doesn't mean it has no applications.

"Since QKD is hardware-based it also lacks flexibility for upgrades or security patches."

This is like arguing that, because your internet connection runs on hardware, nothing can be done to upgrade it or fix security vulnerabilities. If your last-mile connection is copper, as it is for many, there have likely been massive upgrades to its bandwidth and security over the years in the form of changes to what's on either end of the copper. Fiber is the same way. A huge part of QKD protocols is software as well.

When I see points like these, I question the source. They appear to have an agenda, and they certainly have motive. Remember, this is an organization whose business has been spying on its own citizens for decades.