Re:ProtonMail, Tutanota urging EU to reconsider encryption r...
by bronzeage on Thursday January 28, 2021 @09:01AM
(#25941812)
I don't think it'll be known. I bet what you described already happens and yet it attracts far less attention than the end to end encryption shenanigans.
I also think WhatsApp messages backup is literally a backdoor to bypass the end to end encryption.
I think government RCE is far more serious concern than encryption, yet it gets no attention.
We hear about the encryption from all the second class governments that are blocked from the juicy NSA backdoors of auto updates. Ever noticed how the NSA stays quiet in all those encryption debates?
Would you hear about it if it had?
If the US military collaborated with Apple, Google, or Microsoft on a classified project to abuse the autoupdate mechanisms everyone leaves enabled to exec code using their certificates on some military target (leaving aside for the moment that a "military target" is whoever the military says it is and includes people like Snowden), why on Earth do you think that any of the involved parties would ever speak of it?
It's reputational poison; everyone would keep that as quiet as humanly possible.
We know Apple is willingly collaborating with the FBI to avoid encrypting people's device backups, and that's for domestic traffic as well. They work with the CCP and run special backdoored servers there to be permitted to offer iCloud/iMessage services in China.
The Apple software update system can target specific computers by MAC address - fact, today, not speculation.
Why do you think it would be known if they offered this sort of assistance?
It would likely even be illegal for them to divulge it, for various reasons, depending on how they were asked. FISA spying orders and FBI wiretaps already are.