+- Sinisterly (https://sinister.ly)
+-- Forum: Design (https://sinister.ly/Forum-Design)
+--- Forum: Web Design (https://sinister.ly/Forum-Web-Design)
+--- Thread: New website design (/Thread-New-website-design)
RE: New website design - Justice_mybb_import8175 - 06-19-2014
Its hard to say it cant be broken, I have a lot of faith in it. We update it every week to improve the security and the speed.
RE: New website design - Justice_mybb_import8175 - 06-19-2014
I would like to mention we are a small business please take that into consideration @dropzon3 . We will let serious clients try it under a license of confidentiality, they may test and use any means necessary to try to hack our system. We have been in contact with a professor at the University of Waterloo, he has seen nothing like it before and since then we have continued to optimize our code.
RE: New website design - dropzon3 - 06-19-2014
(06-19-2014, 12:09 AM)Justice Wrote: Its hard to say it cant be broken, I have a lot of faith in it. We update it every week to improve the security and the speed.
Which is kinda why crypto algorithms are usually open source; so that those knowledgable can examine and attempt to find a break. So that its security can be known. Hiding it just means we have to trust you. No security should be lost by having it open source.
Also if your really updating it every week for security that tells me you are finding many (weekly) security issues which is a terrible sign.
But realistically I think you're just misunderstanding. I'm not talking about someone being able to 'hack' or penetrate your system. Getting code execution, or anything like that; I'm referring purely to a mathematical break of your crypto system that would allow a key to be determined in with less computational power than a bruteforce.
No client who needs encryption should really care about how much faith you have in it. I'm sure the creator of DES had plenty of faith in it also. I have plenty of faith in NTRU but I actively encourage its examination so that there can be more assurace than just 'trust me'.
The idea that any security is gained by hiding the details is naive and very poor practice that almost always results in getting owned because the system could not mature without proper examination.
RE: New website design - Justice_mybb_import8175 - 06-19-2014
I do take your point into consideration. Our lead programmer and developer excels in in math, he is on top of his class and the school. Its not that we find breaks or vulnerabilities, we just try to find better ways of securing our system. At times we rewrite our algorithm because we feel that something could be replaced to better suit what we have. @draopzon3
RE: New website design - dropzon3 - 06-19-2014
So only one person is really examining it at a mathematical level...my confidence is soaring
Realistically the algorithm shouldn't be changing at all. Implementation perhaps but the core algorithm shouldn't be changing without due reason?
What is your major concern with allowing the algorithm to be examined publicly. Public examination will not mean anyone can steal it if that is your concern. NTRU for example is an open-source algorithm but still considerably profitable because its still licensed so anyone attempting to use it needs to pay up.
I can assure you that ultimately you are risking overall security not ensuring it by obscuring it.
RE: New website design - Justice_mybb_import8175 - 06-19-2014
(06-19-2014, 12:25 AM)dropzon3 Wrote: So only one person is really examining it at a mathematical level...my confidence is soaring
Realistically the algorithm shouldn't be changing at all. Implementation perhaps but the core algorithm shouldn't be changing without due reason?
What is your major concern with allowing the algorithm to be examined publicly. Public examination will not mean anyone can steal it if that is your concern. NTRU for example is an open-source algorithm but still considerably profitable because its still licensed so anyone attempting to use it needs to pay up.
I can assure you that ultimately you are risking overall security not ensuring it by obscuring it.
Your point is very valid, the only reason we make it private is because we hope that big company's will use it. But we can make it publicly available, I would have to talk to the others to see what they say.
RE: New website design - Justice_mybb_import8175 - 06-19-2014
Updated background to black, please take a look.
RE: New website design - Ex094 - 06-19-2014
If you can make the top nav bar a lil bit bright, I find it too dark :S
RE: New website design - L0aD1nG - 06-19-2014
8/10 at least cause of the arrow navigation...i personally see that first time WELL DONE!
RE: New website design - Justice_mybb_import8175 - 06-19-2014
(06-19-2014, 09:55 AM)Ex094 Wrote: If you can make the top nav bar a lil bit bright, I find it too dark :S
Was thinking the same thing
