Hacker News new | ask | show | jobs
by x0054 4572 days ago
I have a better challenge! From today until March 1, 2014, I will SSH into my server and type a secret email address on the command prompt. Send me an email to that address and tell me my crypto key, and I will allow you to pet my dog for 5 minutes. (Sorry, I do not have $200k in BTC, or any other currency, for that matter :(, but my dog is totally cute.)

The point is, the above challenge is impossible without a MITM attack, and that MITM attack has to take place when I first save the server keys on my computer. The point is that there are numerous cryptographic protocols available which can not be broken using currently available technology.

This contest will prove one thing, and one thing only, the cryptographic algorithm they are using is secure. And it SHOULD be, considering that there are a lot of publicly available secure algorithms. This contest, however, will not prove that the Telegram service is secure.

3 comments

> This contest will prove one thing, and one thing only, the cryptographic algorithm they are using is secure. And it SHOULD be, considering that there are a lot of publicly available secure algorithms.

It doesn't even prove that. It proves that no one has told you about any flaws yet. The algorithm may be secure, but their implementation of it might have bugs.

Your challenge isn't at all hard. An attacker could get into your server using some other method besides breaking SSH then simply look at your bash history.
That's why the dog will give you 5 minutes only
Break into his house, install a key logger. Real world security is fun.
At that point you might as well steal the dog :)
Only if enter is pressed!
Pet your dog? Now you're singing my song, potnuh...