News for hackers. Stuff that matters.
Re:The EARN IT act is an attack on end-to-end encryption by matheusmoreira on Friday March 06, 2020 @08:17PM (#22509007)
It's reasonable because police forces simply don't have enough resources to abuse this system. As a result, innocent people are generally left alone and don't live in constant anxiety that their homes could be randomly searched by armed operators. That's exactly how things should work.

Compare that to remote backdoor access to everyone's encrypted communications. All they have to do is push a button in order to instantly get access to someone's mail, calls, instant messages, social media, phone location history, etc. Abusing this power is a trivial matter and there is little if any oversight. The Five Eyes intercept, decrypt and store even their own citizen's communications as a matter of course and will tip off law enforcement so they can parallel construct a case using means of investigation that are actually legal. Intelligence employees have been known to abuse their powers to spy on their significant others, a practice that became known as LOVEINT. People who are a threat to those in power -- political opposition, whistle blowers, journalists, dissidents -- will probably be targeted despite their rights to privacy.

In order to obtain encrypted communications, police forces should have to get a warrant and obtain the physical storage media that contains the messages they want.

Re:The EARN IT act is an attack on end-to-end encryption by ComodoHacker on Saturday March 07, 2020 @04:20AM (#22510752)
>It's reasonable because police forces simply don't have enough resources to abuse this system.

Could this principle be applied to encryption? A cryptosystem for personal communications carefully designed to be crackable using certain amount of resources. So getting access to one person's data would cost you say $1000 of cloud resources. And first you have to obtain an escrowed hash to crack using a warrant.

Would this be acceptable to public?

Re:The EARN IT act is an attack on end-to-end encryption by teddyh on Saturday March 07, 2020 @05:50AM (#22510974)
It’s not only the factor that police raids cost money; raids are also very visible, and there aren’t enough police to conduct very many raids all the time, so there’s an inherent limiting factor. Both these factors make it impractical to conduct blanket raids on everyone all the time.
Re:The EARN IT act is an attack on end-to-end encryption by Veedrac on Saturday March 07, 2020 @04:35AM (#22510798)
> Compare that to remote backdoor access to everyone's encrypted communications. All they have to do is push a button in order to instantly get access to someone's mail, calls, instant messages, social media, phone location history, etc. Abusing this power is a trivial matter and there is little if any oversight.

Much as you can build a physical policing system with or without oversight and with or without covert powers, you can do the same for encryption. It is absolutely possible to build a system where the company, the police, and the courts all need to agree in order to hand over access — in fact it's more possible than with physical security. It's also possible to build regulatory bodies that make relevant details publically visible.

Re:The EARN IT act is an attack on end-to-end encryption by TwoBit on Saturday March 07, 2020 @12:37AM (#22509983)
Look no further than the hacking of Bezos' phone.
Re:The EARN IT act is an attack on end-to-end encryption by zaroth on Saturday March 07, 2020 @09:52AM (#22511745)
You might not be aware that there’s actually no solid evidence that Bezos’s phone was ever actually hacked.