5 ms·

> Think of how that would have affected Linux (Android uses dm-crypt for FDE), open source, Github, etc A concern of mine is that unlike the others you mention

> Think of how that would have affected Linux (Android uses dm-crypt for FDE), open source, Github, etc A concern of mine is that unlike the others you mention, Apples software isn't open - we have no ability to check there aren't already backdoors resulting from secret court orders. Perhaps going forward 2015 going "open" will be the only way to build trust with a client is offer an open or reproducible means to replicate any claims made about suitability of encryption and lack of a backdoor both on client and server.

sjwright 12y ago
You can't really check Android binary distributions either.
- Nanzikambe 12y ago
  Indeed not and there're also other concerns in that sphere (baseband and the underlying network/protocols, SS7 etc). But there's some movement in the right direction (Cyanogen, F-droid and the various open phone hardware projects)
- happyscrappy 12y ago
  Also consider the amount of malware as uninformed Android users download god knows what. If they use the Play Store they are safer and Google tries to stress that fact but everybody loves free stuff.
snowwrestler 12y ago
Apple and Microsoft have provided source code reviews to customers of a large enough size. The federal government, for example, reviewed sections of Windows source code before installing it on things like Navy ships, NSA computers, etc. Of course, this does not do us regular schmoes much good. That said, this problem is a much better problem to manage than the one declan is talking about. Imagine if you wanted to use open source encryption to secure your information but were legally prohibited from doing so. That's what law enforcement is talking about now (and as declan points out: again).
- Nanzikambe 12y ago
  It's un-enforceable as well unless, ultimately you'd end up needing to police the consumer. This sort of misguided action in today's technology culture will just result in an exodus of hardware manufacturers + technology service providers and shrinking demand & trust for US based technology. This is already happening to some extent, illustrated by the boom in ASPs & Cloud computing occurring in Germany, elsewhere in Europe and to a lesser extent in Switzerland.

sjwright 12y ago

You can't really check Android binary distributions either.

Nanzikambe 12y ago
Indeed not and there're also other concerns in that sphere (baseband and the underlying network/protocols, SS7 etc). But there's some movement in the right direction (Cyanogen, F-droid and the various open phone hardware projects)
happyscrappy 12y ago
Also consider the amount of malware as uninformed Android users download god knows what. If they use the Play Store they are safer and Google tries to stress that fact but everybody loves free stuff.

snowwrestler 12y ago

Apple and Microsoft have provided source code reviews to customers of a large enough size. The federal government, for example, reviewed sections of Windows source code before installing it on things like Navy ships, NSA computers, etc. Of course, this does not do us regular schmoes much good. That said, this problem is a much better problem to manage than the one declan is talking about. Imagine if you wanted to use open source encryption to secure your information but were legally prohibited from doing so. That's what law enforcement is talking about now (and as declan points out: again).

Nanzikambe 12y ago
It's un-enforceable as well unless, ultimately you'd end up needing to police the consumer. This sort of misguided action in today's technology culture will just result in an exodus of hardware manufacturers + technology service providers and shrinking demand & trust for US based technology. This is already happening to some extent, illustrated by the boom in ASPs & Cloud computing occurring in Germany, elsewhere in Europe and to a lesser extent in Switzerland.