4 ms·
With end-to-end encryption where the messages are encrypted and decrypted on the client it would not be possible for anyone with access to phone records or cent
by williamcotton 12y ago
With end-to-end encryption where the messages are encrypted and decrypted on the client it would not be possible for anyone with access to phone records or central servers to read what was said. They would need to obtain the private keys that are generated on the client devices themselves.
- brational 12y agoBut they'd still be able to do that given a warrant? Or is this unwarrantable protection, for lack of a better word?
- chaz72 12y agoNope. They could use a warrant to compel the sender or the recipient of the messages to unlock them or face jail time. But Apple doesn't have the keys.
- netcraft 12y agowouldn't the 5th amendment protect against that?
- chaz72 12y agoer - possibly, I'm not a lawyer. I read it somewhere on the internet and it sounded credible at the time.
- smtddr 12y agoI think the most important thing here is that law enforcement must approach the individual. What happens next may end up a complicate web of legal acrobatics, but the individual at least knows the law is after them. That's a good thing, IMHO. If your privacy is being violated by police forcing you to open your phone to them... at least you know the "when", "how" and "what" info they're getting. I'm also pretty sure you'd at least have a strong suspicion on the "why" it's happening to you as well - fair or otherwise.
- CHY872 12y agoMaybe. See http://www.uclalawreview.org/?p=5168 http://www.uclalawreview.org/?p=5168
- matwood 12y agoAssuming they can get the client device(s) before they are destroyed.
- rsync 12y ago"With end-to-end encryption where the messages are encrypted and decrypted on the client it would not be possible for anyone with access to phone records or central servers to read what was said. They would need to obtain the private keys that are generated on the client devices themselves." Would that it were. You are using the application processor (the "computer") to do that work, but there are two other computers inside your phone - the baseband processor and the SIM card.[1] Your carrier has access (OTA updates, etc.) to the baseband processor and can load new code/functions on it without your knowledge at any time. Depending on the SOC your phone is based on, the baseband processor can have DMA access to your application processor. What that means is, the baseband processor (which you have no control over whatsoever) can read your RAM directly. Your cryptosystem that you describe probably works quite well on a desktop or laptop computer, but your carrier completely and totally owns your phone and everything on it. ... and we haven't even gotten to what they can do with the SIM card ... [1] Yes, the SIM card is a computer with its own processor, RAM and programs running on it right this moment.
- AnthonyMouse 12y agoIt seems like what we need to do is separate the damn things. Build the phone as two independent machines that only communicate with each other over ethernet. Then the user controls the one that runs Android and the other one never sees plaintext.
- Roboprog 12y agoDon't expect to see that architecture on the floor of a retailer near you anytime soon. Maybe in the EU??? NOT in the US.