4 ms·
>Eavesdropping is a worry too. Spy agencies can readily tap into cables landing on their territory Well if the US and other western countries got fully behind
by jmclnx 4y ago
>Eavesdropping is a worry too. Spy agencies can readily tap into cables landing on their territory
Well if the US and other western countries got fully behind with End to End encryption without backdoors, eavesdropping would be no issue. Instead they are trying to force "backdoors" into encryption people already use.
- amrocha 4y agoEh, even if we use encryption it'll still be a problem in a couple decades thanks to quantum computers
- LightBug1 4y agoLet me see, shall I have a heart attack today? Or in a couple of decades? I'll get back to you (possibly).
- philprx 4y agoYes, it is a problem now because of SNDL: Store Now Decrypt Later programs running around the world. Capture is performed and encrypted data is stored, waiting for quantum computers to be available and cheap to then break in the future what we exchanged securely today. It counts on having the half life of data greater than the average time for quantum computers to arrive. Post quantum cryptography algorithms exist (PQC) and some open source implementations are there. Even for SSH. and NIST has an active crypto challenge on that.
- hanniabu 4y agoThey don't want e2e because they want to spy on US citizens too
- InCityDreams 4y agoI thought they said they wouldn't do that sort of thing?
- deleted 4y ago[deleted]
- sealeck 4y agoThe strongest guarantee of all. Why would you want transparency and accountability when you could have a firm promise on the back of an envelope?
- lazide 4y agoI’m pretty sure they were clear that was bullshit even at the time they said it.
- yardstick 4y agoThey probably did, and they are probably following their promise- but also other members of the five eyes community are likely spying on their behalf.
- amadeuspagel 4y agoIf you have access to the cable, you know who is connecting to whom. That's valuable information, and it can't be protected with end-to-end encryption.
- progbits 4y agoHow? The cable is point to point. (Well ok there is branching but let's ignore that) So you know those two endpoints are talking. Not about what. And this is trivial to bypass by always sending, regardless of whether there is data to send. Just fill the cable with dummy packets. Unless you compromise the keys used on either end you learn absolutely nothing by watching the cable.
- amadeuspagel 4y agoHow does a packet get sent from one device to another unless everyone in between knows where it has to be sent?
- epgui 4y agoI don’t know what I’m talking about, but presumably the address on the envelope is not the final destination.
- hinkley 4y agoThat's true in TOR, but not true in IP packets. And then it took us three or four major iterations of HTTPS before we stopped revealing a bunch of metadata about the question you're asking the server. Also if you know what service I'm talking to, and you know anything about me, you can get some statistically relevant information from the traffic patterns. You might be able to tell if I'm using a chat application, or watching videos. And if I'm being surveilled by state actors, then the fact that I'm chatting might suggest what I'm getting up to.
- epgui 4y ago