The Ledger
Every statement that passed quotation and attribution checks. Mix any filter with any other: certainty 1/5, debate potential 5/5, or both at once.
why aren't all 9 resolved? a statement only gets an assessment when the public record can support or contradict it. opinions and what-ifs never can, and 0 checkable ones are still open, waiting for their date. predictions held up or didn't; assertions are supported or contradicted. on every card: ▮▮▮▮▮ certainty · ▮▮▮▮▮ debate potential. speakers are clickable
Krohn: Perimeter security for major cloud providers is an impossible task
“It's just that they've chosen to do a job that's basically impossible, that, that no one can really do. Relative to all the threats that are lined up against them.”
Krohn: Security software cannot be trusted unless the code is open source
“Because we're building software that we think people need to trust, there's no possible way that people can trust us unless they get to see what the code actually is and how the software we're writing is using crypto and is using The various things that we tal…”
Krohn: People will increasingly need digital identity mapping
“We started Keybase a little bit over a year ago just because we were convinced that in the future people would really see a need for mapping what they considered notions of identity that computers could understand.”
Krohn: Consumer crypto onboarding shares challenges with early online dating platforms
“So in that respect, we think that our experience at OkCupid is very helpful for moving into something like getting crypto to be popular for more people. There's a lot of common elements of user recruitment and user onboarding and making people like the product…”
Krohn: Systems should prevent servers from viewing plain-text user data
“The way we should be building systems is that If the server doesn't need to see the data or access the data that you're putting onto it, then it just shouldn't. There's no reason why it has to see it, then the data should be not available to the server in plai…”
Krohn: Keybase servers store no user decryption keys
“If anyone ever breaks into the server, all they really get is a bunch of encryption, and Unlike with other systems, the key you need to decrypt the data is just not on the server. The only person who has a key is like, is the phone in your pocket or the deskto…”
Krohn: Cryptographic public key signing is far superior to password authentication
“What you ought to be doing is signing a statement saying, I'm Max, and I want to log into this service, and the service would just have your public key. You know, Max is identified with this public credential, and as long as he's able to sign a statement with …”
Krohn: Building crypto apps today is like forcing developers to implement TCP/IP
“I think the status quo is now, I mean, a good analogy would be like, you know, hey, you want to write Photoshop, but with photo sharing, you know, you first have to implement TCP IP before you can get that done. I mean, that's kind of the world we live in righ…”
Krohn: Communication apps fail without low recipient onboarding friction
“We have to really allow the operation to go through as far as possible, as far as the sender is concerned, and then get the receiver onboarded also with minimum friction. And I think unless an application does that, it's doomed to fail.”