Path: news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: Richard Heathfield <rjh@cpax.org.uk>
Newsgroups: sci.crypt
Subject: Re: UK demands Apple break encryption to allow gov't spying
 wolrdwide, report says
Date: Sun, 9 Feb 2025 14:48:51 +0000
Organization: Fix this later
Lines: 63
Message-ID: <voaf8j$lr1v$3@dont-email.me>
References: <vo74v9$3veda$1@dont-email.me>
 <C8WSYmh0lGIHjUshuYEeCQiQZcZHW2wF0JoxxGtrLg4=@writeable.com>
 <vo7mpq$2cip$1@dont-email.me> <vo8ckb$6j4f$1@dont-email.me>
 <vo8p4p$8qsc$1@dont-email.me> <voa6jc$ks54$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sun, 09 Feb 2025 15:48:58 +0100 (CET)
Injection-Info: dont-email.me; posting-host="2d167fd947ed81fa20d7671cabd0bbfa";
	logging-data="715839"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1+sL+UufvS6uelr5OnUQvw+UOYz9ae3otzk2T1e7hIxJg=="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:N979BfWOgxJVW5Hk6I68FnGgSjQ=
Content-Language: en-GB
In-Reply-To: <voa6jc$ks54$1@dont-email.me>

On 09/02/2025 12:21, Peter Fairbrother wrote:
> On 08/02/2025 23:25, Richard Heathfield wrote:
> 
>>> That it is not really correct - if it is less easy to 
>>> communicate and store data securely then more people will have 
>>> no option but to use less secure methods.
>>
>> I don't see the grounds for your protasis. Why is it less easy 
>> to communicate and store data securely? Why must people use 
>> less secure methods?
> 
> Because they no longer have access to more secure methods, ie 
> Apple encryption.
> 
> [...]
>> I agree, but trusting a cryptosystem known to have a back door 
>> certainly does count as stupid.
> 
> ITYM *would* count as stupid..

I do, yes. Thank you for the correction.

> 
>> You might use it as a channel for sheer convenience, but it 
>> would be daft not to superencrypt.
> 
> But people don't know how to do that. Even many clever people.

It's easy. Instead of:

apple < plain.txt

you:

cat plain.txt | aes_for_example > apple

and Bob pipes through aes_for_example -d at his end.

In other words, instead of sending plaintext through Apple, you 
send ciphertext.

> 
> [...]
> 
>>> Note that in the UK you have to give up keys to stored data on 
>>> demand.
>>
>> With a warrant, yes, and that means evidence, which means the 
>> crook has already failed.
> 
> Nope, no warrant needed. Just a demand from a mid-level policeman.

Having read the relevant legislation, which is not the kind of 
document I'd like to read for the first time in a panic, I'm not 
convinced either way. This is a job for an actual lawyer.


-- 
Richard Heathfield
Email: rjh at cpax dot org dot uk
"Usenet is a strange place" - dmr 29 July 1999
Sig line 4 vacant - apply within