@URFZMFK37y
@URFZMFK37y
关注的小组(2)
动态 帖子 0 评论 1 短评 0 收到的赞 0 送出的赞 0
  1. URFZMFK37y   在小组 2047 回复文章

    如何看待迷雾通的免费用户也必须注册账号并登录才能使用?为什么要设计成这样?

    Recommended Remediation:
    The assessment team recommends changing the wording of the homepage so that the security properties of the Mizaru protocol are more accurately represented, since out-of-band deanonymization is difficult to mitigate.

    https://www.opentech.fund/wp-content/uploads/2023/11/OTF_-_2023_Q1_Geph_Final_Report-1.pdf

    总感觉盲签名有点不靠谱, 设施提供者想要追踪和去匿名总是有办法, 大不了变成不索要信息的免费钓鱼梯子, 我的猜想得到了audit支持.