tinwhiskers

tinwhiskers , 2 months ago (edited 2 months ago)

Yeah, I'm surprised Google or another big player hasn't released something yet, or that the people like the IETF haven't had any RFCs or produced any practical standards. Now's the time to get market dominance. Perhaps nobody will react until the shit hits the fan.

I mean, pgp is great, but in this day and age we need a simple standard people can use to sign media without a hassle and we may also need chain of custody in light of social media (edits and whatnot). Developers will likely need or want to build it into their software, so we need a standard. I don't think the pgp approach really worked for most people.

tinwhiskers , 4 months ago

Ah, you're suggesting using RFC 3514. Good thinking.

tinwhiskers , 4 months ago

what about edited?

tinwhiskers , 5 months ago

I was just looking at https://haveibeenpwned.com/ and it listed appen as a site that breached my details. I had no idea who they were or why they had my details. I guess this is related?

Appen: In June 2020, the AI training data company Appen suffered a data breach exposing the details of almost 5.9 million users which were subsequently sold online. Included in the breach were names, email addresses and passwords stored as bcrypt hashes. Some records also contained phone numbers, employers and IP addresses. The data was provided to HIBP by dehashed.com.

tinwhiskers , 5 months ago

They have released it on github. The code is only about 500 lines. But releasing the model is arguably more important because that sort of compute is not affordable to any mortals.