> Have YOU inspected your CPU/Firmware/OS/Applications for backdoors? Even with the full source code?

this is absolutely spot on, especially the firmware. nobody talks about it and the attack surface is huge.

just to be explicit, hardware backdoors exist as well :)

Completely agree. Anybody recall the TPM? Security is pretty much turtles all the way down.

Encryption isn't going to help stop a guy with a stick from beating the information out of you. A functional state, however, can help prevent such things from happening.

Not to mention backdoors in routers/cable modems and god knows what else. Every carrier is preloading in spyware to SIM cards now too, wait for that big revelation soon. They can already track you with their program that responds to type 0 sms and now they can OTA update your SIM to run voice capture, sms capture, store accelerometer data for decryption use, turn on the mic and listen in or turn on the camera.

Exactly. There was revelation in a recent court case that the feds had the ability to turn on and listen in on conversations from your cell phone that you thought was off.

>No crypto-system is truly secure unless BOTH sides can be trusted. If either one is even remotely possible to compromise, then that will happen.

Depends on what you want to keep secret and mean by secure. Homomorphic encryption (http://en.wikipedia.org/wiki/Homomorphic_computing) schemes work even when an end-point is untrusted. For example a game of mental poker (http://en.wikipedia.org/wiki/Mental_poker) each party/end-point is untrusted by it may still be a "secure" system.

Or consider "secure" to mean that your identity remains private if you so wish. One could certainly create a crypto system that binds an actor to an act without any end-points learning the identity of the actor, but still allowing the actor to take credit if they so wish.

Homomorphic encryption, at the moment, doesn't work at all if you want practicality.

Fully homomorphic encryption isn't very practical yet, but partial homomorphic schemes such as blind signing have been practical for 10 years.

Of course we have a form of Clipper through such agreements. Lotus Notes had a secret key escrow mechanism that was discovered in the '90s. It is very unlikely that Notes was the only supposedly secure product with secret arrangements with law enforcement and/or intelligence services, and it is even less likely that the pace and intensity of such arrangements has declined since then.

On the other hand, Edward Snowden thinks he can secure information effectively from attempts to crack it. He probably had practical knowledge of the day-to-day capabilities of the NSA when he worked there. There is no reason that most everything that you and I store and transmit can't be equally well-protected.

Snowden also admitted if they are personally targeting you it's game over unless you're a master of tradecraft and encryption. If you have an unencrypted bootloader then they can break into your hotel room while you're either sleeping (or drugged) or not around and evil maid attack. They did this in Dubai already to a Ukrainian fraudster they were after.

They could also just plant bugs/cameras and watch you type in passwords, or rent the room beside you and set up Van Eck/TEMPEST equipment. They could mess with the power socket in the wall to do encryption analysis as well or replace your powerbar with an evil bar.

You would need guards to watch your room, a SICP tent and TEMPEST proof NATO standards laptop, OpenBSD to softraid encrypt the discs leaving no bootloader (or carry around the bootloader on a usb or CD), and you would have to custom manufacture the equipment yourself in Taiwan to ensure no backdoors and pick it up in person, or manually solder in hardware firewalls to block signals from leaking out of proprietary blobs.

That's correct, but black bag jobs don't scale.

You can both be right.

Even poorly-executed encryption will stop _some_ forms of attack, some of the time.

But a failure to provide legal protections will render even strong crypto a weak shield.

Property laws and strong fences and effective policing make for good neighbors.