3 ms·

If only there was some secure technology capable of hierarchical accreditation and authentication that already ran on every single computer operating system tha

If only there was some secure technology capable of hierarchical accreditation and authentication that already ran on every single computer operating system that could resolve this situation for no cost beyond administrative overhead and was so easy to deploy that a small team could prototype a solution within weeks.

account42 5y ago
You mean the "secure" technology where countless barely accountable organization across the globe can provide accreditation for any entity they want and it will be trusted without any hierarchical restrictions? Or the one that is hierarchical in theory but provides no accreditation in practice an uses a completely insecure protocol? Or the protocol replacement for that technology that replaces the hierarchical nature and replaces it with cantralized entities that again get full authority to answer any request how they want? Plus from the article: > It involves compromising email accounts and websites tied to police departments and government agencies If websites and emails can be compromized then the hackers also have a good chance of gettng at certificates. But the root problem isn't even that hackers can claim to be the police when making the requests but rather that the police can make these requests in the first place without getting a court order. "Police" is already a very large group of externally unaccountable actors that will include those willing to abuse these powers without the need for "hackers".
- escape_goat 5y ago
  Yes. Issues of poor implementation are not my concern. I think you are very wrong about the difficulties you suggest. What you identify as the 'root' problem is a policy problem best addressed by legislation and not really relevant here. Please don't misunderstand that to be a rejection of your beliefs about policy.

3 ms·

If only there was some secure technology capable of hierarchical accreditation and authentication that already ran on every single computer operating system tha

by escape_goat 5y ago

account42 5y ago
You mean the "secure" technology where countless barely accountable organization across the globe can provide accreditation for any entity they want and it will be trusted without any hierarchical restrictions? Or the one that is hierarchical in theory but provides no accreditation in practice an uses a completely insecure protocol? Or the protocol replacement for that technology that replaces the hierarchical nature and replaces it with cantralized entities that again get full authority to answer any request how they want? Plus from the article: > It involves compromising email accounts and websites tied to police departments and government agencies If websites and emails can be compromized then the hackers also have a good chance of gettng at certificates. But the root problem isn't even that hackers can claim to be the police when making the requests but rather that the police can make these requests in the first place without getting a court order. "Police" is already a very large group of externally unaccountable actors that will include those willing to abuse these powers without the need for "hackers".
- escape_goat 5y ago
  Yes. Issues of poor implementation are not my concern. I think you are very wrong about the difficulties you suggest. What you identify as the 'root' problem is a policy problem best addressed by legislation and not really relevant here. Please don't misunderstand that to be a rejection of your beliefs about policy.