If they're releasing something that they could reasonably expect the NSA to be a... | Hacker News

Hacker Timesnew | past | comments | ask | show | jobs | submit

		tjohns on Aug 17, 2013 \| parent \| context \| favorite \| on: Wikileaks Releases New 'Insurance' Files If they're releasing something that they could reasonably expect the NSA to be able to crack, there's a non-zero chance other governments would be able to read it as well. That's not really "responsible disclosure" anymore. It would be safer to just send the decryption key directly to the NSA on a CD. ;)

chimeracoder on Aug 17, 2013 | [–]

Well, that also lets the NSA (or anybody who intercepts the CD) release the key to try and make it look like it came from Wikileaks.

Depending on how an adversary times that, it could be damaging for Wikileaks.

gizmo686 on Aug 18, 2013 | | [–]

They could encrypt it using a pre-existing NSA public key.

ChuckMcM on Aug 17, 2013 | [–]

Fair enough.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact