Path: ...!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: Richard Heathfield <rjh@cpax.org.uk>
Newsgroups: sci.crypt
Subject: Re: UK demands Apple break encryption to allow gov't spying
 wolrdwide, report says
Date: Sun, 9 Feb 2025 17:03:03 +0000
Organization: Fix this later
Lines: 68
Message-ID: <voan47$nsjc$1@dont-email.me>
References: <vo74v9$3veda$1@dont-email.me>
 <C8WSYmh0lGIHjUshuYEeCQiQZcZHW2wF0JoxxGtrLg4=@writeable.com>
 <vo7mpq$2cip$1@dont-email.me> <vo8ckb$6j4f$1@dont-email.me>
 <vo8p4p$8qsc$1@dont-email.me> <voa6jc$ks54$1@dont-email.me>
 <voaf8j$lr1v$3@dont-email.me> <voaj2d$n44a$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sun, 09 Feb 2025 18:03:03 +0100 (CET)
Injection-Info: dont-email.me; posting-host="2d167fd947ed81fa20d7671cabd0bbfa";
	logging-data="782956"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX19LXRe3ZexTtHAvtrZBPPp7MdHUCiTV4s/MAehBRyZoDg=="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:7arj3K/Ji2gfpt+cUK9EW7YuFLI=
In-Reply-To: <voaj2d$n44a$1@dont-email.me>
Content-Language: en-GB
Bytes: 3531

On 09/02/2025 15:53, Peter Fairbrother wrote:
> On 09/02/2025 14:48, Richard Heathfield wrote:
>> On 09/02/2025 12:21, Peter Fairbrother wrote:
>>> On 08/02/2025 23:25, Richard Heathfield wrote:
> 
>>>> You might use it as a channel for sheer convenience, but it 
>>>> would be daft not to superencrypt.
>>>
>>> But people don't know how to do that. Even many clever people.
>>
>> It's easy. Instead of:
>>
>> apple < plain.txt
>>
>> you:
>>
>> cat plain.txt | aes_for_example > apple
>>
>> and Bob pipes through aes_for_example -d at his end.
>>
>> In other words, instead of sending plaintext through Apple, you 
>> send ciphertext.
> 
> But most people don't know how to open a terminal - even clever 
> people. Just because they don't know computers, computer 
> security, internet security, cryptography - does not make them 
> stupid.

No, but such people presumably aren't interested in secure 
communication and don't give a damn about keeping their secrets 
secret, so how are they relevant to this discussion?

> And even stupid people should have secure comms and data storage.

Why would they care, if security is so unimportant to them that 
they can't be bothered to learn how to acquire it?

But if they *do* care, they're going to need to invest some 
cluons in learning something about this stuff.

>>>>> Note that in the UK you have to give up keys to stored data 
>>>>> on demand.
>>>>
>>>> With a warrant, yes, and that means evidence, which means the 
>>>> crook has already failed.
>>>
>>> Nope, no warrant needed. Just a demand from a mid-level 
>>> policeman.
>>
>> Having read the relevant legislation, which is not the kind of 
>> document I'd like to read for the first time in a panic, I'm 
>> not convinced either way. This is a job for an actual lawyer.
> 
> Been there, done that, the tee-shirt is now rags.

:-)

I'm delighted to report that it's a rabbit-hole I've managed to 
avoid, but of course I must cede the point (albeit under protest, 
because they *should* need a warrant, dammit).


-- 
Richard Heathfield
Email: rjh at cpax dot org dot uk
"Usenet is a strange place" - dmr 29 July 1999
Sig line 4 vacant - apply within