Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Who are the trusted partners? By whom are they trusted? I am certainly not the one doing any trusting right now.

In security, "trusted" has a very simple and straightforward definition:

    Trusted (adj.) - Liable to create a security breach.
That's what it means, nothing more, nothing less. It means that YOU are going to have to trust these third partners to not screw you over.

Whether you know who they are or not, it means that you trust them with your private data.

"Trusted" is never a good thing. With proper security and privacy logic in place you shouldn't need to "trust" anyone.

Indeed it means that I "trust" the NSA (and local Dutch agencies conscripted by them) with any data that I send or receive that is not strongly encrypted. I don't get a lot of choice in the matter, so I'm going to have to "trust" they won't screw me over with it, sell it to bad actors, keep it safe for as long as they keep it. No it's not a very smart idea to "trust" them, but I don't get a lot of say in the matter ...



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: