• 0 Posts
  • 58 Comments
Joined 2 years ago
cake
Cake day: June 20th, 2023

help-circle



  • bamboo@lemmy.blahaj.zonetoPrivacy@lemmy.ml[Deleted]
    link
    fedilink
    English
    arrow-up
    12
    ·
    18 days ago

    It’s possible that they discovered a weakness in the way the keys are generated in the TPM (or whatever it’s called for Android), which brings the time to brute force down from 1,000 years to a few weeks with massive GPUs?

    Similar story, as of a few years ago, OpenSSH announced deprecating support for RSA keys keys because of a vulnerability in SHA-1 hashing, where they cited research showing a determined attacker could break the key with $50k of compute power, which may seem like a lot, but is pretty feasible, necessitating the deprecation

    It is now possible [1] to perform chosen-prefix attacks against the SHA-1 hash algorithm for less than USD $50K. For this reason, we will be disabling the “ssh-rsa” public key signature algorithm that depends on SHA-1 by default in a near-future release.

    I don’t know about the Android system, but during the initial design and fabrication, the hardware may have not been designed to withstand the compute power just a few years later, and can not be easily updated to improve the security. These are the weaknessed Cellebrite is looking for.






  • Is there a really a quota on the CSAM detection, or do you mean catbox would only get a free 1GB of storage? No one’s saying that Cloudflare would give away 1 PB of traffic for free, obviously catbox would have to pay for it. Still though, Cloudflare or another CDN adds a lot of value which would be hard to replicate.

    At that volume, you need to scale a lot, which is what CDNs are designed to do. Moving 1 PB a month in traffic would be like a sustained upload speed of 3 Gbps for an entire month, which is huge for any ISP, and cost a lot. You’d probably need to divide the traffic going out which means multiple ISP connections, and more machines for redundancy. Probably at that scale, connections are coming from all over the world, so to reduce latency, you’ll need locations in multiple continents to serve quicker. As you can probably tell, this becomes more than just one time purchases and electricity costs.

    CDNs have dedicated fiber links between geographic locations and negotiated volume discount rates on bandwidth with other ISPs. From a cost and a reliability perspective, it means you can deliver content for less than hosting it all on your own.