5 ms·

As long as it's possible to do this and there aren't serious high-level repercussions for it, it will keep happening. This is why people flock to e2e systems, b

As long as it's possible to do this and there aren't serious high-level repercussions for it, it will keep happening. This is why people flock to e2e systems, because we don't trust corporations or governments to protect us.

sn_master 6y ago
The sad part is, most e2e aren't true e2e. Even if they are, they often backup everything in a central location like Whatsapp/ which put everything in your Google account without any additional crypto layers, making it all accessible with a subpeona or prism to any law enforcement agency. Edit: Removed Signal as an example.
- tokamak-teapot 6y ago
  Signal only backs up messages on Android - and requires a thirty digit key to be provided to save/restore. Is this not the encryption key then?
- eatingCake 6y ago
  > they often backup everything in a central location like Whatsapp/Telegram/Signal which put everything in your Google account without any additional crypto layers I don't know about the others but I don't think Signal does this. Signal offers the user the ability to backup their messages, and lets them password protect them, but the way you've written this implies Signal is uploading messages to Google of its own volition, unencrypted, which afaik is not the case.
- deleted 6y ago
  [deleted]
teddyh 6y ago
> As long as it's possible to do this … it will keep happening. FTFY. The only solution is for the information never to exist in the first place, never centralized, never even collected.
- camgunz 6y ago
  Decentralization is probably the (old) new geek frontier, the way the internet used to be. I doubt it'll ever be mainstream, because the network effects, business incentives, and markets just aren't there--there'll never be a successful decentralized Spotify. But that's a feature; I don't want that stuff to go mainstream because that's how you get Slack instead of IRC (etc. etc.)

sn_master 6y ago

The sad part is, most e2e aren't true e2e. Even if they are, they often backup everything in a central location like Whatsapp/ which put everything in your Google account without any additional crypto layers, making it all accessible with a subpeona or prism to any law enforcement agency. Edit: Removed Signal as an example.

tokamak-teapot 6y ago
Signal only backs up messages on Android - and requires a thirty digit key to be provided to save/restore. Is this not the encryption key then?
eatingCake 6y ago
> they often backup everything in a central location like Whatsapp/Telegram/Signal which put everything in your Google account without any additional crypto layers I don't know about the others but I don't think Signal does this. Signal offers the user the ability to backup their messages, and lets them password protect them, but the way you've written this implies Signal is uploading messages to Google of its own volition, unencrypted, which afaik is not the case.
deleted 6y ago
[deleted]

teddyh 6y ago

> As long as it's possible to do this … it will keep happening. FTFY. The only solution is for the information never to exist in the first place, never centralized, never even collected.

camgunz 6y ago
Decentralization is probably the (old) new geek frontier, the way the internet used to be. I doubt it'll ever be mainstream, because the network effects, business incentives, and markets just aren't there--there'll never be a successful decentralized Spotify. But that's a feature; I don't want that stuff to go mainstream because that's how you get Slack instead of IRC (etc. etc.)