Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works
by rocqua on Saturday March 11, 2017 @09:09AM
(#13845439)
There is still tremendous value in symmetric encryption for off-site storage, especially cloud-based storage.
This allows storage to be off-loaded wherever without needing the storage location to be trusted. All that needs to be stored locally is the key.
Done right, this means quantum won't get you access to dropbox-like stuff. (Dropbox itself probably doesn't work like that, it'll store the symmetric keys server side somehow.)
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works
by mikepurvis on Saturday March 11, 2017 @09:56AM
(#13845585)
Dropbox de-duplicates your files with other users who have the same ones, and are capable of serving them all to you through a web site.
There's no encryption there at all, except TLS in transit.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works
by smaddox on Saturday March 11, 2017 @10:21AM
(#13845677)
Found that hard to believe, so I googled it. Not positive this is a trustworthy source, but it sounds like Dropbox does use encryption for files at rest and in motion: https://www.virtru.com/blog/dropbox-encryption/
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works
by Laforet on Saturday March 11, 2017 @10:46AM
(#13845760)
Dropbox is known to have intergration with PhotoDNA, a state program that matches file signature with a database of known illicit images. This would be impossible if the encryption used is irreversible and as far as I know dropbox never claimed otherwise.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works
by doubleunplussed on Saturday March 11, 2017 @09:13PM
(#13848510)
Couldn't dropbox hash the images on the client, and upload the encrypted images as well as the hash? No need to upload an unencrypted file to do matching.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works
by eru on Sunday March 12, 2017 @09:10AM
(#13850495)
Depends on what kind of hashing they do: a scheme like yours using a cryptographic hash would be defeated by just randomly changing a single bit in the image (eg appending some garbage bytes at the end); or re-encoding the jpeg. Of course, it could still catch non-techy people.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works
by smaddox on Saturday March 11, 2017 @10:50AM
(#13845777)
I'm not claiming it is end-to-end, nor did I expect it to be, but perhaps some people would assume that. I thought you were claiming they don't use encryption at all.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works
by mikepurvis on Saturday March 11, 2017 @03:15PM
(#13847010)
It's effectively nothing when Dropbox themselves have access to all your files whenever they want.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works
by jacquesm on Saturday March 11, 2017 @04:12PM
(#13847288)
And whoever hacks dropbox, yours or all of them.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works
by Spooky23 on Saturday March 11, 2017 @11:51AM
(#13846060)
They do, but Dropbox controls the key and their services can decrypt customer data, so the value of the encryption is limited at best.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works
by mahyarm on Saturday March 11, 2017 @06:54PM
(#13847985)
You shouldn't be trusting your commodity cloud storage provider for that stuff anyway. Use your own client side encryption program to encrypt whatever you need to. Arq, borg backup, zip files with a password, sparse encrypted dmg directories, etc.
Additionally... unless you generated all the bytes you are encrypting yourself without transmitting them over a network at any time... e.g. video/pictures you took yourself and then stored to your own encrypted disk, your data could be compromised by quantum-breakable encrypted communication protocols at the time of transmission. I would wager that most data worth surveilling goes over the network at some point using TLS.