4 ms·

So... when does this become an anti-patriotic thing to have? You know, when a country's police can't unlock the phone then convince everyone that a "little bit

So... when does this become an anti-patriotic thing to have? You know, when a country's police can't unlock the phone then convince everyone that a "little bit of a backdoor" is a good thing? /s

est31 6y ago
These end to end encrypted systems are subverted through backups that devices put into the cloud in the clear. Officially they are "encrypted" in Android [0], but typically the key is extremely weak so it's easy to brute force. iCloud is officially "encrypted" as well but Apple holds the keys. [0]: https://security.googleblog.com/2018/10/google-and-android-have-your-back-by.html https://security.googleblog.com/2018/10/google-and-android-h...
- bergstromm466 6y ago
  It’s scary how few people know and understand all this, and, proportional to the amount of tech we use in our daily lives, how little we learn to use and program our own technology. I think we’ve got nothing to blame but the digital enclosure of knowledge through patents and copyrights. People aren’t ‘stupid’ at all, they’re disinherited and disempowered, starting at ‘school‘.
- dragonelite 6y ago
  Yeah whatsapp kept asking me do you want to backup your chat history so we can easily recover it. To the point it became so annoying i almost deleted whatsapp. I just assume there is no privacy on the internet. If i wanna keep a secret i will keep it in my mind.
- sneak 6y ago
  I believe that that blog post indicates that Google uses custom HSMs to do the backup pin check to access the actual backup encryption key, ruling out the likelihood (but not possibility) that Google is able to casually decrypt the data. Google writes and signs the firmware for the Titan HSMs in question, though. I would be surprised if it is actually 100% technically impossible for Google to decrypt backups.
  - est31 6y ago
    Yeah the HSM idea is good, and it likely helps preventing malicious insiders from hacking user's backups, but I wouldn't trust it as it's not verifiable from the outside.
- blackrock 6y ago
  The other problem, if you try your best to avoid backing your stuff up to the cloud, is that other people will back up their stuff to the cloud. So, your messages with them, will get sucked up also, and forever saved on the cloud.
blackrock 6y ago
What do you have to hide? If you don’t have anything to hide, then what’s wrong with a little backdoor into your smartphone, so that the “good guys” can help to keep an eye on you, and keep you safe. -wink -wink

So... when does this become an anti-patriotic thing to have? You know, when a country's police can't unlock the phone then convince everyone that a "little bit of a backdoor" is a good thing? /s

est31 6y ago

These end to end encrypted systems are subverted through backups that devices put into the cloud in the clear. Officially they are "encrypted" in Android [0], but typically the key is extremely weak so it's easy to brute force. iCloud is officially "encrypted" as well but Apple holds the keys. [0]: https://security.googleblog.com/2018/10/google-and-android-have-your-back-by.html https://security.googleblog.com/2018/10/google-and-android-h...

bergstromm466 6y ago
It’s scary how few people know and understand all this, and, proportional to the amount of tech we use in our daily lives, how little we learn to use and program our own technology. I think we’ve got nothing to blame but the digital enclosure of knowledge through patents and copyrights. People aren’t ‘stupid’ at all, they’re disinherited and disempowered, starting at ‘school‘.
dragonelite 6y ago
Yeah whatsapp kept asking me do you want to backup your chat history so we can easily recover it. To the point it became so annoying i almost deleted whatsapp. I just assume there is no privacy on the internet. If i wanna keep a secret i will keep it in my mind.
sneak 6y ago
I believe that that blog post indicates that Google uses custom HSMs to do the backup pin check to access the actual backup encryption key, ruling out the likelihood (but not possibility) that Google is able to casually decrypt the data. Google writes and signs the firmware for the Titan HSMs in question, though. I would be surprised if it is actually 100% technically impossible for Google to decrypt backups.
- est31 6y ago
  Yeah the HSM idea is good, and it likely helps preventing malicious insiders from hacking user's backups, but I wouldn't trust it as it's not verifiable from the outside.
blackrock 6y ago
The other problem, if you try your best to avoid backing your stuff up to the cloud, is that other people will back up their stuff to the cloud. So, your messages with them, will get sucked up also, and forever saved on the cloud.

blackrock 6y ago

What do you have to hide? If you don’t have anything to hide, then what’s wrong with a little backdoor into your smartphone, so that the “good guys” can help to keep an eye on you, and keep you safe. -wink -wink