Path: ...!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: Peter Fairbrother <peter@tsto.co.uk>
Newsgroups: sci.crypt
Subject: Re: UK demands Apple break encryption to allow gov't spying
 wolrdwide, report says
Date: Sun, 9 Feb 2025 15:53:49 +0000
Organization: A noiseless patient Spider
Lines: 47
Message-ID: <voaj2d$n44a$1@dont-email.me>
References: <vo74v9$3veda$1@dont-email.me>
 <C8WSYmh0lGIHjUshuYEeCQiQZcZHW2wF0JoxxGtrLg4=@writeable.com>
 <vo7mpq$2cip$1@dont-email.me> <vo8ckb$6j4f$1@dont-email.me>
 <vo8p4p$8qsc$1@dont-email.me> <voa6jc$ks54$1@dont-email.me>
 <voaf8j$lr1v$3@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sun, 09 Feb 2025 16:53:50 +0100 (CET)
Injection-Info: dont-email.me; posting-host="1b2e90c780eadd5638755e770d0aeb0a";
	logging-data="757898"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1+YS6l4xQumSLyMj62boUJBnWEItV4+x8s="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:6P/naq1HtmqivS13AccNq5EqIbM=
Content-Language: en-GB
In-Reply-To: <voaf8j$lr1v$3@dont-email.me>
Bytes: 2738

On 09/02/2025 14:48, Richard Heathfield wrote:
> On 09/02/2025 12:21, Peter Fairbrother wrote:
>> On 08/02/2025 23:25, Richard Heathfield wrote:

>>> You might use it as a channel for sheer convenience, but it would be 
>>> daft not to superencrypt.
>>
>> But people don't know how to do that. Even many clever people.
> 
> It's easy. Instead of:
> 
> apple < plain.txt
> 
> you:
> 
> cat plain.txt | aes_for_example > apple
> 
> and Bob pipes through aes_for_example -d at his end.
> 
> In other words, instead of sending plaintext through Apple, you send 
> ciphertext.

But most people don't know how to open a terminal - even clever people. 
Just because they don't know computers, computer security, internet 
security, cryptography - does not make them stupid.

And even stupid people should have secure comms and data storage.

[...]

>>>> Note that in the UK you have to give up keys to stored data on demand.
>>>
>>> With a warrant, yes, and that means evidence, which means the crook 
>>> has already failed.
>>
>> Nope, no warrant needed. Just a demand from a mid-level policeman.
> 
> Having read the relevant legislation, which is not the kind of document 
> I'd like to read for the first time in a panic, I'm not convinced either 
> way. This is a job for an actual lawyer.

Been there, done that, the tee-shirt is now rags. See eg

http://www.chiark.greenend.org.uk/pipermail/ukcrypto/


Peter Fairbrother