4 ms·
The basic question is, does the law require giving authorities the password verbatim, or rather, giving them access to account's data (perhaps including fake au
by dexen 16y ago
The basic question is, does the law require giving authorities the password verbatim, or rather, giving them access to account's data (perhaps including fake authentication as the user, but without use of user's password)? There may well be mis-understanding in the early reporting.
If password verbatim is required, well, game over, the law will be shot down in record time. If, on the other hand, merely access to the account is required, that's just a small feature to be implemented -- ``allow accounts of authorities authenticating as any plain user without users' passwords'' (which is still terribly bad, open to abuse etc.).
In any case, the law (as reported in the article) sounds like a failure of democracy to me -- not something one wants his representative to vote for.