why aren't all 14 resolved? a statement only gets an assessment when the public
record can support or contradict it. opinions and what-ifs never can, and 0 checkable
ones are still open, waiting for their date. predictions held up or didn't;
assertions are supported or contradicted. on every card:
▮▮▮▮▮ certainty ·
▮▮▮▮▮ debate potential. speakers are clickable
Insight
Boneh: Smartphone-based 2FA fails when users browse directly on their mobile devices
“Unfortunately today all second factor authentication schemes are essentially based on, well, the smartphone. And what happens if you only interact with the website through your smartphone, right? So in fact, we're hearing more and more of people that the only …”
Insight
Boneh: Security technology's ultimate goal is narrowing attacks strictly to social engineering
“Is to make it so that the only attack that's possible on you is a social engineering attack.”
Insight
Boneh: Faster computers help cryptographic defenders more than they help attackers
“And the reason is because as computers get faster we can you know, end, end user machines can actually handle larger and larger numbers. But if you just make the number, like, twice as big, Factoring it is not twice as hard. Factoring it becomes exponentially …”
Insight
Non-AES block ciphers cannot compete with Intel hardware acceleration
“It's gonna be really hard to promote any other block cipher, because any other block cipher is gonna have to be implemented in, in software, and there's no way it will compete with what Intel did.”
Insight
Boneh: Cryptography uniquely bridges deep theoretical math with global real-world deployment
“It's one of the few areas, I have to say, where you can do deep mathematics, and at the same time, it would be extremely applied and deployed and used by billions of people all over the world.”
Insight
Boneh: Advanced security technology will fail to deploy without strong user interfaces
“You could have the best technology, but if it's not wrapped in a nice user interface that people have fun and, you know, they're comfortable using, it's never gonna get deployed. It's never gonna work.”
Insight
Boneh: Smartwatches are ideal 2FA mechanisms because they stay on the body
“The direction we'd like to go at, to move to, is where the second factor is something that's always on the human body. So, one of the beautiful applications for smart watches is exactly a second factor, right? My smart watch, my watch actually, is always on me…”
Insight
Boneh: Unlike passwords, compromised biometric fingerprints cannot be revoked or reset
“If your fingerprint, if you suspect that your fingerprint has been somehow compromised, there's no way for you to revoke your fingerprint.”
Insight
Boneh: The most impactful security technology operates invisibly to the user
“So the best security technology that has had the most impact in the world is security technology that is, is invisible, that people don't even know that it's there.”
Insight
Boneh: Post-launch UI security fixes face severe user adoption friction
“Cause once your product is out there, once you build a user base, your users are used to using the product in a particular way. If it turns out that you have to make changes in the user interface because of security concerns, ah, that actually would make it ha…”
Insight
Boneh: MOOCs serve as 21st-century interactive textbooks rather than university replacements
“I now I've come to realize this MOOC is basically like a 21st century textbook. So if you take the MOOC online, you should be, it's almost the same as actually reading a textbook on crypto.”
Insight
VCs ignore pitches without "billions of dollars" on slide one
“When, ah, when you go pitch to VCs, the first thing they tell you is like, on slide number one, you're supposed to have some word, somewhere, it's where, you're supposed to have the words, billions of dollars, somewhere on slide number one, otherwise the VCs d…”
Insight
Blockchain is the first publicly available, append-only database
“The thing that we're excited about Bitcoin is, A, the, obviously, the currency, but what's more interesting is even the block applications of the blockchain, right? It's the first time when we have sort of an append-only database that's kind of you can put thi…”
Insight
Verifying 1% of balances exposes corrupt crypto exchanges
“It's enough to, say, one percent of the customers check, If the exchange cheats and actually does not include people's obligations, you know, if a small number of fraction of the, ah, ah, customers actually check that the proof is valid, a, ah, a corrupt excha…”