News for hackers. Stuff that matters.
Re:More encryption means less privacy by icebraining on Tuesday August 09, 2016 @01:54PM (#12256443)
it's easy to design cryptosystems to be [...] unbreakably strong against mass eavesdropping by governments, yet still provide access on a case by case basis.

Is it? How? Because that's certainly not the default that you referred to.

Re:More encryption means less privacy by mike_hearn on Tuesday August 09, 2016 @02:07PM (#12256557)
It's absolutely the default.

Imagine you own a webmail company. You secure your SMTP relays with SMTP-TLS (let's pretend it works well) and your client connections with TLS again.

Now your users are safe from random creepy flatmates, criminals with wifi sniffers, your telco and even mass government surveillance. But, governments can still serve a warrant on you to get email in a targeted manner, assuming they have a working MLAT process.

All you did was apply ordinary encryption to an ordinary website and you have that middle ground between "unbreakable to everyone" and "totally useless".

Re:More encryption means less privacy by icebraining on Tuesday August 09, 2016 @03:30PM (#12257156)
You use a weird definition of "mass surveillance" if installing a single tapping device that can snoop on every customer of a company (hundreds of millions, for the large providers) doesn't qualify.
Re:More encryption means less privacy by mike_hearn on Wednesday August 10, 2016 @03:47AM (#12260123)
No, I use the definition that makes sense given the Snowden documents: high capacity cable taps on the backbone itself, not FBI style taps on specific companies after getting the keys via some sort of court process.
Re:More encryption means less privacy by icebraining on Wednesday August 10, 2016 @04:55AM (#12260371)
OK, under which of them would you classify NSA's MUSCULAR program?
Re:More encryption means less privacy by mike_hearn on Wednesday August 10, 2016 @10:24AM (#12261970)
MUSCULAR is/was a codename for a UK based bulk cable tap.

It's easy to confuse that with the name of a programme to reverse engineer and analyse Google internal traffic (which is presumably now over as all that traffic is encrypted), and I made that mistake myself, but I was corrected on HN no less by someone who is closer to the leaks than I am.

It wasn't something done with the knowledge of Google or Yahoo, as evidenced by the use of reverse engineering of the data formats.

Re:More encryption means less privacy by finnh on Tuesday August 09, 2016 @03:18PM (#12257084)
GP already replied to this exact claim:

But that's the point: we've seen that this balance doesn't exist, because if the service providers have access to the plaintext, the State will not contain itself to issuing case-by-case warrants - see Room 641A, "SSL added and removed here", etc.

The current move to encrypt everything is a reaction to the realization that the balance that was thought to exist, does not, and political participation is not sufficient because the information is kept hidden, so no informed political discourse is possible.