4 ms·

> We've known how to do it for a long time: just add a second signing key to every iPhone, and give it to the government. It's far from "impossible" to meet the

> We've known how to do it for a long time: just add a second signing key to every iPhone, and give it to the government. It's far from "impossible" to meet the requirements being handed down by US.gov with a reasonable level of risk. But that's the whole argument. Everyone knowledgable about encryption knows it's not impossible to hand the government a key, they're claiming it's impossible to do so with a reasonable level of risk. There's no such thing as a "reasonable level of risk" here. If the government has access, every human on the planet has access, so you might as well just give up on encryption entirely because it's doing nothing of value. For example, here's what happened when we "just give the government a second signing key" to luggage locks http://www.computerworld.com/article/2983558/security/that-tsa-approved-lock-on-your-suitcase-just-got-hacked.html http://www.computerworld.com/article/2983558/security/that-t...

esrauch 11y ago
> If the government has access, every human on the planet has access, so you might as well just give up on encryption entirely because it's doing nothing of value. It's a pretty extreme position to say that you trust Apple to be able to keep secrets better than the FBI/NSA/CIA > because it's already happened to luggage I don't think this is actually relevant. This "vulnerability" being introduced by the TSA is completely irrelevant: wants to get into your luggage they can cut it open if they have to. Luggage locks have always protected against the threat model of "some rando rifling through my stuff" not "dedicated attacker who spends time ahead of time making devices to get into the luggage". The TSA doesn't and shouldn't care about people having copies of TSA luggage keys, it pragmatically doesn't change anything.
- dragonwriter 11y ago
  It's not Apple keeping secrets vs. The FBI/NSA/CIA keeping secrets. It's secrets being kept that Apple willfully lacks the means to access vs. secrets being kept that Apple has been compelled to develop the means to access at the behest of the FBI/NSA/CIA.

esrauch 11y ago

> If the government has access, every human on the planet has access, so you might as well just give up on encryption entirely because it's doing nothing of value. It's a pretty extreme position to say that you trust Apple to be able to keep secrets better than the FBI/NSA/CIA > because it's already happened to luggage I don't think this is actually relevant. This "vulnerability" being introduced by the TSA is completely irrelevant: wants to get into your luggage they can cut it open if they have to. Luggage locks have always protected against the threat model of "some rando rifling through my stuff" not "dedicated attacker who spends time ahead of time making devices to get into the luggage". The TSA doesn't and shouldn't care about people having copies of TSA luggage keys, it pragmatically doesn't change anything.

dragonwriter 11y ago
It's not Apple keeping secrets vs. The FBI/NSA/CIA keeping secrets. It's secrets being kept that Apple willfully lacks the means to access vs. secrets being kept that Apple has been compelled to develop the means to access at the behest of the FBI/NSA/CIA.