• DebatableRaccoon@lemmy.ca
    link
    fedilink
    arrow-up
    88
    ·
    edit-2
    1 day ago

    The fact that governments are so hellbent on having backdoors to encrypted communications should be telling…

    • Zorque@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      21 hours ago

      Its because they would rather be reactive rather than active. They would rather the ones be on an individual improve themselves with little to no outside assistance, then be punished if they dont. Not as a lesson to that individual, but to others.

      Shockingly, it doesn’t really work very well.

      • DebatableRaccoon@lemmy.ca
        link
        fedilink
        arrow-up
        3
        ·
        20 hours ago

        Considering I remember the news hitting that the anti-terrorism task force knew about the Manchester attack at the Ariana Grande concert in advance and did nothing about it, that tracks.

  • MoonMelon@lemmy.ml
    link
    fedilink
    English
    arrow-up
    41
    ·
    1 day ago

    That’s why I hate the “give the government a master key” metaphor for weakening encryption. You aren’t making a master key, you’re making every lock worse. The “master key” is just knowing how to exploit the giant flaw you’ve now created in every lock, and if that knowledge escapes every lock is now worthless.

    Knocking “shave and a haircut” now opens every door, let’s hope nobody else figures that out! I know! we’ll lock that information inside this “shave and a haircut” safe!

    • zener_diode@feddit.org
      link
      fedilink
      arrow-up
      21
      ·
      1 day ago

      One thing I don’t like about the “master key” metaphor: I do lockpicking as a hobby. And locks built for a master key are easier to pick, because you can open them with two keys. It seems kinda obvious when you think about it. (You gotta be careful when picking mastered locks though, the master wafers can fall into the keyway and permanently destroy the lock.)

    • cynar@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      21 hours ago

      TSA luggage keys are a good counter example.

      In theory, only you and airport security can open your case. In practice, you can pick them up off eBay for next to nothing.

      • BCsven@lemmy.ca
        link
        fedilink
        arrow-up
        2
        ·
        18 hours ago

        Its like the old bank deposit zipper bags with the lock, turns out ( because its soft fabric ) you can just push the fabric through the zipper and balloon out the sides that have passed through the zip/lock, and dump out the contents.

  • TheObviousSolution@lemmy.ca
    link
    fedilink
    arrow-up
    16
    ·
    23 hours ago

    The US is a century of building softpower to be able to respond with “but you can trust us more than anyone else” that has been toppled by the current regime in less than a year. It’s the whole reason Edward Snowden was a big deal, now he wouldn’t even appear in the obituary section of a newspaper.

    • Chakravanti@monero.town
      link
      fedilink
      English
      arrow-up
      1
      ·
      19 hours ago

      You apparently didn’t see the NSA-CIA snitch in the TV show kill himself when the Newsroom passed printing the story that “Snowden” actually did say exactly the fucking same shit the next year.

      Yup. TV Show. One year prior to Snowden. Said the same that Snowden said. Yup. Newsroom. Season 3. I just watched Pleasantville again too. Welcome to Arrakis!

  • Lemvi@lemmy.sdf.org
    link
    fedilink
    arrow-up
    28
    ·
    1 day ago

    There are two ways of handling security vulnerabilities.

    One is to try and find them before the “bad guys” do, then fix them. The other is to do nothing and just hope the “bad guys” don’t find them (or have already found them and are already exploiting them)

    • TheOneCurly@feddit.online
      link
      fedilink
      English
      arrow-up
      2
      ·
      4 hours ago

      There’s a third option. Find them and horde them as “weapons” but then sometimes get hacked and leak them all.

      • MinnesotaGoddam@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        18 hours ago

        i see you’ve met my SIL. everyone (but my wife and i) teases her husband for being jumpy, but their front door lock does not lock properly. I WONDER WHY HE’S JUMPY

  • Quacksalber@sh.itjust.works
    link
    fedilink
    arrow-up
    15
    arrow-down
    2
    ·
    1 day ago

    I get the feeling that privacy advocates like the German CCC or the EFF in the US need to get ahead of this chat control and age verification bullshit by implementing a privacy-first age verification system prototype. Something where you can identify yourself as adult that is both trustworthy and anonymous.

    Because if they don’t, palantir will implement your age verification and harvest all your data.

    • raspberriesareyummy@lemmy.world
      link
      fedilink
      arrow-up
      9
      ·
      23 hours ago

      You mean like buying anonymous tokens in a supermarket that have an 18+ sales rule on them and you have to show your ID as when you buy booze? It’s not like it isn’t trivial. It’s just that out government fucks want totalitarian control. Fuck them all with a rusty rebar.

    • Petter1
      link
      fedilink
      arrow-up
      14
      ·
      1 day ago

      Or, like, add a feature to a browser where parents can force an “I am a Child” header in Calls…

      • Quacksalber@sh.itjust.works
        link
        fedilink
        arrow-up
        10
        ·
        1 day ago

        That’d work too, although I’d implement it the other way around. Define a new http header that indicates what type of content the site you’re visiting is hosting and handle the content blocking client-side based on those headers.

    • TheLeadenSea@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      8
      ·
      24 hours ago

      The point is that the internet shouldn’t be censored though, we shouldn’t be giving corporations or governments the keys to censor the internet based on any protected characteristics (one of which is age), even if it’s done in a ‘private’ manner. What comes next? Sexuality/gender verification? You can only view porn if you’re the opposite gender? Race verification?

  • DerisionConsulting@lemmy.ca
    link
    fedilink
    English
    arrow-up
    5
    ·
    24 hours ago

    The thumbnail almost looks like a new MTG card frame.

    Just like laws and policies, you need to look at how bad things would be if it was used by bad actors, not just how it would work in a magic land where everyone is rational, moral, and just.

  • AItoothbrush@lemmy.zip
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    2
    ·
    22 hours ago

    Ehhh it means you can warn people about it before bad people use it for bad things