rietta

50 ms·

601.
by rietta 11y ago
Dump a few hundred megabytes from /dev/random into an encrypted file with a provocative name. The thing every Cypherpunk dreams about.
602.
Senate proposal on encryption gives judges authority over Apple(venturebeat.com)
3 points by rietta 11y ago|0 comments
603.
Letter on FBI V. Apple Sent to the New York Times by a Sixth-Grader from Chicago(twitter.com)
1 points by rietta 11y ago|0 comments
604.
PGP: Backdoors and Key Escrow (2003)(rossde.com)
48 points by rietta 11y ago|8 comments
605.
by rietta 11y ago
This article is an overly simplified threat model is just the most basic explanation on the issues as they would play out in a world with only good guys and where no keys or credentials are stolen or abused. At least a short list of other a
606.
Encryption techniques and access they give (2015)(washingtonpost.com)
1 points by rietta 11y ago|1 comments
607.
by rietta 11y ago
Even with absolutely perfect systems, which do not exist in practice even when they may exist in math, the humans with the keys are the weakest link. Stolen credentials are the biggest cause of data breaches in enterprise web applications (
608.
by rietta 11y ago
Even if the system were perfect and the users with legit access had impeccable credential management and physical security, the escrow will be used a lot to unlock devices and communications. It becomes routine . Processes which become r
609.
by rietta 11y ago
And what if government agencies bought that safe to handle classified material because it was certified to have met or exceeded the standards for handling such data. Then the FBI forces the safe manufacturer to make a way to get into the sa
610.
by rietta 11y ago
I do understand what you are saying and it is precisely because of Director Comey's public statements on the matter that I called him an expert statesman in the article, which he is. The legal precedent set in this case when Apple is f
611.
by rietta 11y ago
It has been explained to them multiple times in congressional hearings. If you have a long time, the recent House Judiciary Committee Hearing is worth the watch: The Encryption Tightrope: Balancing Americans’ Security and Privacy https:&#x
612.
FBI Wants It to Be Impractical to Deploy Strong Encryption Without Key Escrow(rietta.com)
293 points by rietta 11y ago|179 comments
613.
by rietta 11y ago
I'll take this a step further. Ultimately Director James Comey and the FBI want a future where it is illegal or impractical to deploy strong encryption without key escrow. Few companies, actually practically no one, will offer encrypti
614.
by rietta 11y ago
In a clause is contrary to public policy, it may be unenforceable in that jurisdiction and thus they could use the code without violating the license. The unenforceable clause will be skipped over by the courts. It is a nullity.
615.
by rietta 11y ago
Absolutely true! I have to tell people that many attacks just try every door to see if its unlocked. They are not movie plot-style targeted attacks. And such an attack can and do lead to data breaches!
616.
by rietta 11y ago
This is why I absolutely believe and publicly talk about security being a matter of developer ethics. I have used my walk away power to get a company to do the security they needed in a similar, but not quite the same type of situation. H
617.
by rietta 11y ago
Seems that the site has been slashdotted (or is that Hacker Newsed) - "Error establishing a database connection".
618.
by rietta 11y ago
Not entirely. The companies that must collect presumably have better security safeguards than those just wanting it just because it's easy or customary. I have a client that must collect and store drivers license copies for 2 years by
619.
by rietta 11y ago
My parents always used a kettle on the stove to heat the water to make ice tea. Bring it to a boil and then pour into a pitcher with two big tea bags. Sometimes as a kid I would do that using the microwave instead of the stove, but to the s
620.
by rietta 11y ago
Yes, my router does have this. Which we use to have a simpler wifi password just to give to guests. It can only access the Internet and nothing on the LAN.
621.
by rietta 11y ago
For my home, I fully believe that if things continue this way, I will need to have three networks at home. The household network and wifi for my wife and our family to use, the work network (hardwired Cat6 because that's how I like it)
622.
by rietta 11y ago
My wife and I received an electric kettle as a wedding gift and it's pretty amazing how fast it brings water to a boil. But, she may end up taking it to her office at work as she has no stove there whereas we have a really nice gas sto
623.
by rietta 11y ago
The amount in the bank account is very, very different than the budget. A startup should not be tracking its money on such a simple basis. Without categories (or envelopes) the amount of cash is pretty meaningless without knowing if is clea
624.
by rietta 11y ago
I used AIM big time on my T-Mobile sidekick. It's something Danger did very well.
625.
by rietta 11y ago
Looking at the demo without running it yet, that looks amazing. It reminds me a lot of the QBasic game Outer Space Wars that I wrote when I was 14, having taught myself QBasic from reading a book checked out from the local library. I too ma
626.
by rietta 11y ago
I believe the term is "malum in se" vs "malum prohbitium". Some crimes, especially murder are so wrong and universally so that it is a worse crime than one that is just wrong because the law says so.
627.
by rietta 11y ago
A programmable dimmer, such as one of the Casetas from Lutron, would work. Set the brigtnesses to a time to increase over a period of several minutes starting at your designed time.
628.
by rietta 11y ago
The argument has been around for a long time. The first crypto wars had their policy papers and summary pros/cons such as https://www.cs.cornell.edu/html/cs513-sp98/hw.policy.keyEscr... .
629.
by rietta 11y ago
While you raise a point, I am not sure that the law in a heavy regulation environment will be that specific. For example, in the area of ham radio encryption is strictly forbidden and has been for years and yet cryptographically secure auth
630.
by rietta 11y ago
Yes, I am not in favor of Federal regulation here, but that is somewhat off topic. Even still, I wanted to purposely point out information to those on HN who might not be familiar with the complexities of such a legal patchwork and what it

More ›