4 ms·
What's even more ridiculous is calling it end-to-end encryption when it's secured by a short numeric pin (what most people use). The search space for brute forc
by tasn 3y ago
What's even more ridiculous is calling it end-to-end encryption when it's secured by a short numeric pin (what most people use). The search space for brute forcing it is so insanely small that it doesn't matter how much password stretching you do, it's trivial for Google/anyone with access to the keystore to brute force.
- astrange 3y agoGoogle doesn't have access to the keys, since they're in an HSM with no admin access. They could lie about that, but they could do a lot of things.
- thiht 3y agoGoogle doesn’t need your password to access your Google data though.
- tasn 3y agoIt's supposedly end-to-end encrypted. That's my point.