TSA to download your iTunes?

Re:TSA to download your iTunes? by jrockway on Monday April 19, 2010 @03:36PM (#1277620)

Indeed. Just send it via the Internet, where packets are not opened and inspected before entering the country.

Sometimes I think that government policies are implemented only to make people feel powerful. We can search your laptop!

OK, but I can just send the data to my home computer via the Internet, and just carry my wiped laptop across the border.

[ Parent | on HN ]

Re:TSA to download your iTunes? by milkshakes on Monday April 19, 2010 @04:05PM (#1277689)

You're joking right?

http://en.wikipedia.org/wiki/Protect_America_Act_of_2007#Dat...

[ Parent | on HN ]

Re:TSA to download your iTunes? by jrockway on Monday April 19, 2010 @04:10PM (#1277703)

But they haven't broken AES or the key exchange protocols. Nobody sends important data across the Internet unencrypted.

[ Parent | on HN ]

Re:TSA to download your iTunes? by milkshakes on Monday April 19, 2010 @04:23PM (#1277743)

DJB had some interesting thoughts on AES and its vulnerability to timing based attacks, here: http://cr.yp.to/antiforgery/cachetiming-20050414.pdf

While network latencies would definitely make this type of attack more challenging to implement, AES is not invincible.

And that's just the stuff we hear about :)

[ Parent | on HN ]

Re:TSA to download your iTunes? by tedunangst on Monday April 19, 2010 @05:17PM (#1277875)

If you're sending encrypted files across the internet, the government doesn't get to see how long it took to encrypt the data. And if you're running an open "encrypt anything my secret key" oracle, well, you get what you deserve.

[ Parent | on HN ]

Re:TSA to download your iTunes? by jrockway on Monday April 19, 2010 @06:48PM (#1278086)

Indeed. This sort of attack is good for breaking DRM, but not so good for any legitimate uses of cryptography.

[ Parent | on HN ]