3 ms·
> Did you not see Storj's canary? I hadn't seen the old one, just the empty one they have published now. It was a lot more specific than other comments suggest
by autoexec 4y ago
> Did you not see Storj's canary?
I hadn't seen the old one, just the empty one they have published now. It was a lot more specific than other comments suggested!
> Although, with Storj, the signatures didn't expire, so in the event that the government did setup operations, they could have just continued using one of the older signatures. (And only would have been unable to create new ones on request)
that's my guess. they could either compel the company to turn over the keys or they could get them themselves from wherever they are stored/used.
- dane-pgp 4y agoThis is why you have to protect your Hardware Security Module with a passphrase that is kept only in your brain. Compelling the disclosure of that passphrase is much more likely to violate the Fifth Amendment, especially if you set your passphrase to something like "I killed him and buried the body under my garage". Of course such an important passphrase shouldn't only exist in the head of one person, and instead should be distributed between multiple members of the company (so perhaps the HSM could require N of M passphrases to unlock the master secret, using Shamir's Secret Sharing), which means creating a very complicated on-going criminal conspiracy, with new hires forced to further the crime in unique and creative ways, so that their individually-chosen passphrases can't be guessed.