HN user

cooperq

687 karma

Senior Staff Technologist at EFF personal site: https://cooperq.com

Posts13
Comments9
View on HN

Um guys, A5/3 is completely broken. According to Wikipedia: "In 2010, Dunkelman, Keller and Shamir published a new attack that allows an adversary to recover a full A5/3 key by related-key attack.[5] The time and space complexities of the attack are low enough that the authors carried out the attack in two hours on an Intel Core 2 Duo desktop computer even using the unoptimized reference KASUMI implementation. The authors note that this attack may not be applicable to the way A5/3 is used in 3G systems; their main purpose was to discredit 3GPP's assurances that their changes to MISTY wouldn't significantly impact the security of the algorithm."

Even if A5/3 weren't broken, there are still tower dumps and IMSI catchers, which are a whole lot easier to use than breaking encryption. Yes A5/3 is better than A5/1, but I call bullshit on this whole article.

The undo functionality is actually almost there, I think we just don't have an interface for it. The arrow keys thing should be easy to implement. I will add it to github, and of course accept a pull request! We definitely need to accept ranges for formulas or some up with some easy way to do that.

The project as a whole is definitely unfinished but we have been working on it for so long and lost some motivation. I wanted to just get it out there to at least re-motivate myself to work on it.

I specifically addressed this in the article. The feds located freedom hosting by using an exploit in Firefox which was able to deanonymize users. I don't know enough about the silk road case, but it seems probable that traffic correlation was used in that case. I agree that things can change in a year, but the essential point that Tor is not cryptographically broken is still true, IMO.

"Lighten up" 14 years ago

Wow a person of privilege (male) feels uncomfortable when being asked not to do something that harms a person of less privilege (female). How difficult that must be for you. I really feel your plight. Asshole.