The Ledger
Every statement that passed quotation and attribution checks. Mix any filter with any other: certainty 1/5, debate potential 5/5, or both at once.
why aren't all 17 resolved? a statement only gets an assessment when the public record can support or contradict it. opinions and what-ifs never can, and 1 checkable ones are still open, waiting for their date. predictions held up or didn't; assertions are supported or contradicted. on every card: ▮▮▮▮▮ certainty · ▮▮▮▮▮ debate potential. speakers are clickable
Current HTTPS middlebox workarounds rely on man-in-the-middle attacks
“And actually, the solution is very embarrassing and insecure solution. People basically mount a man in the middle attack on SSL.”
Popa: BlindBox inspects encrypted traffic while maintaining user privacy
“So I'm going to tell you about some very recent work on Blindbox, which enables us to inspect traffic that remains encrypted and protect the privacy of the users.”
Popa: Computing on encrypted data will significantly impact industry
“And then I'm going to scope out from this and tell you about a bigger vision that Blindbox is part of, namely Computing on encrypted data, which I think can have a lot of impact to industry and to what people use today.”
Popa: BlindBox is first system enabling DPI on encrypted traffic
“Our system blind box is the first to show that this could be possible, and is the first system that enables DPI middle boxes to inspect traffic without seeing the traffic.”
Popa: BlindBox encryption matches security of randomized and speed of deterministic schemes
“So as part of Blindbox, our first contribution was to construct such a scheme. A scheme that is as secure as randomized schemes, and as fast as deterministic schemes.”
Popa: BlindBox detection speed is competitive with Snort
“So the detection of the middle box is competitive to Snort.”
Popa: Computing on encrypted data eliminates the confidentiality-functionality trade-off
“But the bottom line that I want to mention is that computing on encrypted data can be practical for a set of systems that we use today. And it really gives you, at the same time, confidentiality and functionality. So you don't have to choose only one anymore.”
Popa: Microsecond Network Speeds Severely Limit Usable Cryptography
“Network rates are on the order of microseconds, so not a lot of cryptography remains that could be used in this setting.”
Popa: BlindBox encryption operates at network rates using hardware AES
“And third is that actually it's fast. It can run at network rates, because it only uses AES, and we have AES instructions in hardware.”
BlindBox uses secure two-party computation during SSL handshake for encrypted rule generation
“So for this, we use really cool primitive from the crypto community, namely secure two-party computation, which enables the middle box and the user during the SSL handshake to produce this encryption scheme to get this encryption encrypted value together witho…”
Popa: BlindBox middleboxes learn only matching malicious string locations
“The middle box learns only if a malicious string matches at some location, but it doesn't learn anything else about the other locations.”
Popa: BlindBox equality matching supports watermarks, filtering, and IDS rules
“Only the equality part that I told you about can support already watermarks, checking if exfiltrated documents contain watermarks, and parental filtering, and a bunch of the IDS rules.”
Popa: BlindBox increases page load time by 15% to 100%
“In terms of the transmission time, we increase it so page load time would become 15% to a hundred percent slower.”
CryptDB achieved 27% overhead compared to MySQL on TPCC benchmark
“So for industry standard benchmarks such as TPCC, CryptDB had an overhead of 27% compared to MySQL.”
Popa: A Boston hospital uses Myler for medical applications
“And actually a hospital in Boston is currently using Myler in one of their medical applications.”
Raluca Ada Popa: BlindBox HTTPS operates without altering core SSL primitives
“What we build in Blindbox is an enhanced version of HTTPS called Blindbox HTTPS. And with Blindbox HTTPS when a user sends a message the user gets the message gets encrypted through SSL as before, so we don't change SSL.”