Conversation

Notices

1. Embed this notice
   Patrick C Miller :donor: (patrickcmiller@infosec.exchange)'s status on Tuesday, 16-Jul-2024 17:12:03 JST Patrick C Miller :donor:

   Proton launches free, privacy-focused Google Docs alternative https://www.bleepingcomputer.com/news/software/proton-launches-free-privacy-focused-google-docs-alternative/

   • Embed this notice
     David Chisnall (*Now with 50% more sarcasm!*) (david_chisnall@infosec.exchange)'s status on Tuesday, 16-Jul-2024 19:37:51 JST David Chisnall (*Now with 50% more sarcasm!*)

     in reply to

     @patrickcmiller

     End-to-end encryption to protect all keystrokes and cursor movement in real time.

     Is this satire? What is the remote 'end' to which keystrokes and cursor movements are being sent that needs encryption? And why are keystrokes and cursor movements being sent anywhere?

     Do they just mean that they use TLS for their web apps (in which case, that's table stakes)?

     For keystrokes and mouse movements encryption isn't sufficient, you need to add noise or traffic analysis can reconstruct them with high probability.