News for hackers. Stuff that matters.
Re:EU Draft Council Declaration Against Encryption [pdf] by vorpalhex on Sunday November 08, 2020 @11:44PM (#25031530)
1a - Because that worked out so well for HDMI? It'll be what, maybe 90 days before those "law enforcement keys" are public?

1b - If it's already backdoored then there is no need for such an act, the problem is already solved.

2 - It's ineffective for it's stated goal because the stated goal is not the real goal. The goal is to enable a continued abuse of power, one which is already ongoing, and one which produces no actionable results or meaningful outcomes. Five eyes & co is upset that they're losing some of their toys.

3 - Who says governments should be able to regulate weapons? Likewise these days, who is to say they meaningfully can?

4 - Sex trafficking existed prior to encryption. The government failed to stop it then. I strongly suspect that even if the government gets it's way and breaks encryption, sex trafficking will continue exactly at the same rate. Most sex traffickers are not technology ept, nor do they need to be - the track record for capturing them is atrocious. Epstein anyone?

This is a bad faith argument. "Protecting children" and "stopping terrorists" are the siren's song of every government overreach basically since the dawn of time and yet the government remains terrible at solving either problem. I don't think encryption is really the issue preventing those things from getting resolved. I do think encryption is very inconvenient for a very snoop heavy government.

Re:EU Draft Council Declaration Against Encryption [pdf] by buisi on Wednesday November 11, 2020 @04:06PM (#25062980)
Sex trafficking is a very difficult problem to address. Even if you were to shutdown an online network, someone could fly to a third world country to personally do it, and there are always going to be takers lining up.

People in third world countries are poor, and may be desperate. A purely technical solution is not going to address this. Rather, we need ways to lift people out of poverty, and improve their standard of living. No one should ever have to live like that to survive.

I don't know if it is possible to stop child pornography (anyone anywhere in the world can create it and anyone anywhere can view it), but it should be able to reduce the amount of sex abuse in the world, if the government were to pursue prevention initiatives to stop it where ever possible.

Re:EU Draft Council Declaration Against Encryption [pdf] by GoblinSlayer on Monday November 09, 2020 @04:47AM (#25033106)
>and yet the government remains terrible at solving either problem

You don't kill the cash cow.

Re:EU Draft Council Declaration Against Encryption [pdf] by Veedrac on Sunday November 08, 2020 @11:56PM (#25031590)
> Because that worked out so well for HDMI? It'll be what, maybe 90 days before those "law enforcement keys" are public?

This is a completely different context to having one copy (or a small number) of said low-bandwidth silicon held exclusively by an agency vested in keeping it exclusive, plus another copy held by the company themselves, such that both copies would need to be broken for security to be weakened.

> If it's already backdoored then there is no need for such an act, the problem is already solved.

Seriously? Microsoft having the ability to install a keylogger on any random person's machine is not the solution to finding networks of criminal activity.

> [government bad]

I'll debate the technicals but I'm not going to argue politics here.

Re:EU Draft Council Declaration Against Encryption [pdf] by vorpalhex on Monday November 09, 2020 @12:24AM (#25031714)
I'm going to start naming a few major government security breaches:

+ TSA keys

+ OPM (all of it)

+ NSA's hacking tools

Were these incredible skilled sidechannel attacks? Movie esque infiltrations?

+ TSA accidentally published the keys

+ OPM was a master password from a contractor who was bribed for about the cost of an ipad

+ NSA hacking tools was.. an email trojan? A CD walked?

Do you really trust these people with anything?

Putting a backdoor into encryption is less secure than a random Microsoft employee backdooring me. At least I know it's Microsoft who will be doing the backdoor...

This isn't politics, this is history. This is not the first time, nor the last time we've seen these moves. We know 5 eyes have had major incidents of internal abuse because we have their own documentation on it - and we have their own documentation that they decided to do nothing about it.

It requires external oversight for any organization to truly follow compliance, otherwise the incentives to cheat the system are overbearing. If they won't take us at our word, why would we take them at theirs?

Re:EU Draft Council Declaration Against Encryption [pdf] by Veedrac on Monday November 09, 2020 @12:32AM (#25031752)
> Putting a backdoor into encryption is less secure than a random Microsoft employee backdooring me. At least I know it's Microsoft who will be doing the backdoor...

My point isn't about how much you trust Microsoft, but that Microsoft has keys, which are more easily stolen and in many regards more valuable than the scheme I gave.

> TSA keys

Not remotely comparable. These were never designed to be secure in the sense we're talking here.

> OPM (all of it)

> NSA's hacking tools

Hence the scheme I gave, which isn't vulnerable in the same way.

Re:EU Draft Council Declaration Against Encryption [pdf] by raxxorrax on Monday November 09, 2020 @05:37AM (#25033351)
Basically all your arguments have been proved false in a short amount of time. Agencies could not name a single case where mass surveillance helped. And don't kid yourself, if you have a master key to encryption, it is mass surveillance you try to implement and it will be used as such.

We had security agencies that had the info but didn't act in case of Vienna. Encryption wasn't the issue here, this is an incontinent case of saving face at best, a deliberate attack against civil rights at worst.

> These were never designed to be secure in the sense we're talking here

Encryption today is a protection against access for a limited amount of time. It is an intrinsic rule about every encryption algorithm. It is fundamental property and widely known.

Re:EU Draft Council Declaration Against Encryption [pdf] by feanaro on Monday November 09, 2020 @03:18AM (#25032502)
So you admit defeat on the politics aspect of it? Because every one of your points was political, save for 1a.
Re:EU Draft Council Declaration Against Encryption [pdf] by Veedrac on Monday November 09, 2020 @06:42AM (#25033742)
This kind of comment is exactly why I'm avoiding the politics side of things. I don't want to subject myself to this sort of bad faith jabbing, as much as it comes with the topic.
Re:EU Draft Council Declaration Against Encryption [pdf] by feanaro on Monday November 09, 2020 @10:09AM (#25035528)
It was not meant as a jab, and certainly not bad faith. I'm just telling you that your comment was of exactly the same character. Either refrain from making a political comment yourself or have it be responded to.

Making a political comment but then trying to shut down discussion of it by stating that you will not participate in political discussions is a double standard, though perhaps you were unaware that you were doing it.

Re:EU Draft Council Declaration Against Encryption [pdf] by Veedrac on Monday November 09, 2020 @11:18AM (#25036312)
I never said people couldn't respond to them. I said I wasn't going to debate it. Saying “so you admit defeat” (or the many, many variations) whenever someone exits a heated part of a debate is a textbook jab, and has no place in honest conversation.
Re:EU Draft Council Declaration Against Encryption [pdf] by feanaro on Monday November 09, 2020 @01:12PM (#25037687)
Fair. I retract my comment.

I think what prompted me to react was mostly your `[government bad]` blurb. It felt like you got to state your political position and caricaturise the political position of the responder while avoiding further discussion. That felt wrong.

Re:EU Draft Council Declaration Against Encryption [pdf] by Veedrac on Monday November 09, 2020 @02:48PM (#25039048)
Fair in turn. I'll try to do better next time :).