<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yiv7381465582"><div id="yui_3_16_0_1_1447136913831_5290"><div id="yui_3_16_0_1_1447136913831_5289" style="color:#000;background-color:#fff;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;"><div id="yui_3_16_0_1_1447136913831_5288">This is fascinating. From the article:</div><div id="yiv7381465582yui_3_16_0_1_1447136913831_3301">"Finally, one participant eventually exported his private key<br clear="none">and sent it along with his keyring password to his friend so<br clear="none">that his friend could decrypt the message he had received. In<br clear="none">this case, even though the participants had transmitted the re-<br clear="none">quired information, they were informed that they needed to<br clear="none">try some more and accomplish the task without sending the<br clear="none">private key."<br clear="none"></div><div id="yui_3_16_0_1_1447136913831_5417"><br></div><div id="yui_3_16_0_1_1447136913831_5418">It's difficult to describe just how broken an encryption application is <br></div><div id="yui_3_16_0_1_1447136913831_5962" dir="ltr">when this can be an actual result in the field. But I'll try-- imagine <br></div><div id="yui_3_16_0_1_1447136913831_8057" dir="ltr">reading this on a test of an audio playback application:<br></div><div id="yui_3_16_0_1_1447136913831_7750" dir="ltr"><br></div><div id="yui_3_16_0_1_1447136913831_7749" dir="ltr">"Finally, one participant eventually succeeded in playing back<br clear="none">an audio file but set fire to his laptop by clicking the buttons in <br></div><div id="yui_3_16_0_1_1447136913831_7821" dir="ltr">the wrong order. In this case, even though the participant had <br></div><div id="yui_3_16_0_1_1447136913831_7820" dir="ltr">played back the required audio file, they were informed that they <br></div><div id="yui_3_16_0_1_1447136913831_7936" dir="ltr">needed to try some more and accomplish the task without melting <br></div><div id="yui_3_16_0_1_1447136913831_7937" dir="ltr">the hardware."</div><div id="yui_3_16_0_1_1447136913831_7446"><br></div><div id="yui_3_16_0_1_1447136913831_7447">-Jonathan</div><div id="yui_3_16_0_1_1447136913831_7582"><br></div><div class="qtdSeparateBR"><br><br></div><div class="yiv7381465582yqt4699899529" id="yiv7381465582yqt90713"><div id="yui_3_16_0_1_1447136913831_7746" class="yiv7381465582yahoo_quoted" style="display:block;"> <div id="yui_3_16_0_1_1447136913831_7745" style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;"> <div id="yui_3_16_0_1_1447136913831_7744" style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;"> <div id="yui_3_16_0_1_1447136913831_7748" dir="ltr"> <font id="yui_3_16_0_1_1447136913831_7747" face="Arial" size="2"> On Monday, November 9, 2015 5:58 PM, Ben Finney <ben+debian@benfinney.id.au> wrote:<br clear="none"> </font> </div> <br clear="none"><br clear="none"> <div id="yui_3_16_0_1_1447136913831_8062" class="yiv7381465582y_msg_container">fauno <<a href="" id="yui_3_16_0_1_1447136913831_8063" rel="nofollow" shape="rect" class="yiv7381465582removed-link">fauno@kiwwwi.com.ar</a>> writes:<br clear="none"><br clear="none">> Petter Reinholdtsen <<a href="" rel="nofollow" shape="rect" class="yiv7381465582removed-link">pere@hungry.com</a>> writes:<br clear="none">><br clear="none">> > I find this user testing report by Scott Ruoti, Jeff Andersen, Daniel<br clear="none">> > Zappala and Kent Seamons very interesting. Check out<br clear="none">> > <URL: <a href="" rel="nofollow" shape="rect" class="yiv7381465582removed-link">http://arxiv.org/pdf/1510.08555.pdf </a>>.<br clear="none">><br clear="none">> so... individual persons without a community helping them are unable to<br clear="none">> use X?, shocking :D<br clear="none"><br clear="none">That's a broadly worded statement, with no specific predictions, so is<br clear="none">of virtually no use for guiding specific action. Just about any result<br clear="none">could be made to fit such a vague statement, so no, when you state it<br clear="none">like that, it's no shock.<br clear="none"><br clear="none">It is very easy to say “yes, that seems obvious” about the results of<br clear="none">any study. Such a glib statement is of no value, and does not discount<br clear="none">the value of the study. The opposite outcome would also be met with<br clear="none">“yes, that seems obvious” by some people, so merely encountering such a<br clear="none">sentiment tells us nothing.<br clear="none"><br clear="none">The point is not to simply assert such claims and act as though they're<br clear="none">true, because other people can assert contradictory claims and act as<br clear="none">though *those* are true. Assertion without hard scientific evidence<br clear="none">leads to conflicting policies with nothing but ideology to resolve them.<br clear="none"><br clear="none">The hard work is to refine such claims so that they make specific<br clear="none">predictions, and then *test* those predictions against real people's<br clear="none">real behaviour, in a clinically-controlled trial, and discover whether<br clear="none">observations of actual people's actual behaviour matches the claim.<br clear="none"><br clear="none">If we actually knew the result beyond any doubt before conducting the<br clear="none">experiment, there would be no point and your dismissal would have merit.<br clear="none">In the absence of such trial results, though, we *don't* know, and the<br clear="none">trial is worthwhile and its reporting has great value.<br clear="none"><br clear="none">> <a href="" rel="nofollow" shape="rect" class="yiv7381465582removed-link">http://www.dmytri.info/hackers-cant-solve-surveillance/</a><br clear="none"><br clear="none">Another interesting article, thank you.<br clear="none"><br clear="none">-- <br clear="none"> \ “Pity the meek, for they shall inherit the earth.” —Donald |<br clear="none"> `\ Robert Perry Marquis |<br clear="none">_o__) |<br clear="none">Ben Finney<br clear="none"><br clear="none"><br clear="none">_______________________________________________<br clear="none">Freedombox-discuss mailing list<br clear="none"><a href="" rel="nofollow" shape="rect" class="yiv7381465582removed-link">Freedombox-discuss@lists.alioth.debian.org</a><br clear="none"><a href="" rel="nofollow" shape="rect" class="yiv7381465582removed-link">http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss</a><br clear="none"><br clear="none"></div> </div> </div> </div></div></div></div></div></div></body></html>