7 ms·

This really makes little sense. The service was designed so that the data was encrypted. He could just let people download their data and decrypt it locally.

by nullc 13y ago

This really makes little sense. The service was designed so that the data was encrypted. He could just let people download their data and decrypt it locally. Instead the site is prompting you for a password which it could freely capture.

tuananh 13y ago
how do you authenticate the said person so you could allow she/he to download her/his data?
- chrislipa 13y ago
  Why would you need to? The data is encrypted by the password.
  - nitrogen 13y ago
    Particularly weak passwords could be brute forced with a dictionary attack.
    - chrislipa 13y ago
      In that case, the feds already have it ...
      - nitrogen 13y ago
        Yes, but no doubt some of Lavabit's users are more worried about random or targeted hackers, and not so worried about the US government. No need to give everyone the data just because one group already has it.
levosmetalo 13y ago
Actually this makes the most sense. When users type their passwords online in order to recover the data, NSA gets those passwords the same moment. I'm pretty sure Lavabit was forced to try to trick its users into giving their passwords one more time.
nodata 13y ago
I find it very suspicious that people are being rushed into a quick decision.