News for hackers. Stuff that matters.
Re:Don't Even Think of Using Encryption Software to Escape N... by Swizec on Tuesday June 25, 2013 @08:19AM (#5938874)
XKCD once had a very salient comic on this point: https://xkcd.com/538/

The idea being, you think they can't break your encryption, but they can just break your fingers one by one until you tell them the password.

Re:Don't Even Think of Using Encryption Software to Escape N... by TimCinel on Tuesday June 25, 2013 @08:41AM (#5938990)
It's not really useful in defending this point because the threat doesn't scale.

The NSA can't hire enough heavies to break fingers of every person sending and receiving encrypted data (assuming they could even find the people sending and receiving it without first decrypting).

Re:Don't Even Think of Using Encryption Software to Escape N... by scarmig on Tuesday June 25, 2013 @01:04PM (#5940854)
Could be a new jobs program.
Re:Don't Even Think of Using Encryption Software to Escape N... by bigiain on Tuesday June 25, 2013 @09:32AM (#5939273)
The difference is, if the assumptions/reassurances about the math/crypto/physics hold, I can be _reasonably_ sure that if they haven't broken my fingers or hit me with a wrench, they've probably not read my email/files. That knowledge of whether they have or haven't "broken my crypto" is of value.
Re:Don't Even Think of Using Encryption Software to Escape N... by rgbrenner on Tuesday June 25, 2013 @08:22AM (#5938891)
So you're saying: don't force the NSA to get a court order and force you to reveal the unencrypted data, just hand it over to them now so they can look at it any time they want?
Re:Don't Even Think of Using Encryption Software to Escape N... by Svip on Tuesday June 25, 2013 @08:28AM (#5938914)
Only if you care about your fingers.
Re:Don't Even Think of Using Encryption Software to Escape N... by LoganCale on Tuesday June 25, 2013 @09:18AM (#5939185)
At this point, no one has to worry about that if they aren't being individually targeted. I think most people just want to avoid being sucked up in a dragnet along with everyone else and having their communications permanently on record.
Re:Don't Even Think of Using Encryption Software to Escape N... by shiven on Tuesday June 25, 2013 @08:21AM (#5938884)
HTTPS with perfect forward secrecy is passwordless :P Right?
Re:Don't Even Think of Using Encryption Software to Escape N... by danbruc on Tuesday June 25, 2013 @08:34AM (#5938947)
True, but that only applies to data in flight. For everything you want to store and look at again you better have a key - otherwise you could just delete everything and arrive at essentially the same result.
Re:Don't Even Think of Using Encryption Software to Escape N... by gyardley on Tuesday June 25, 2013 @09:35AM (#5939298)
All perfectly true, but you've at least made it a bit harder for someone to break your encryption without your knowledge and monitor your communications on an ongoing basis.
Re:Don't Even Think of Using Encryption Software to Escape N... by ctdonath on Tuesday June 25, 2013 @08:38AM (#5938974)
AKA "rubber hose cryptanalysis".