Email or username:

Password:

Forgot your password?
John Scott-Railton ☕

"Citizen, leave a copy of your home keys at the police station."

Hmm, people won't like that.

How about, "home-builders have a social responsibility ...[and must give police copies of all house keys]"

Much better.

#Europol taking another stab at the encryption fight.

#Encryption #privacy #infosec #cybersecurity #europe #surveillance

35 comments
Liana Brooks

@jsrailton Do you all trust your law enforcement more than Americans or is this a terrible idea all around?

delProfundo

@LianaBrooks @jsrailton I wrote papers on the crypto wars at law school as a software architect, opening encryption is dangerous in every way and better information is available in other ways (hacking specific targets, telemetry and log data etc). The directors of the nsa and cia all are on record saying opening encryption is ruinous for the economy and law enforcement should wake up and accept that fact.

delProfundo

@bsdphk @LianaBrooks @jsrailton it essentially is. cross jurisdictional exchange of keys is impossible to overcome as decisions there are subject to political control and dangerous concentration. Key escrow is great, using it to access encrypted comms is not a case it’s suited to. Hoyle and Mitchel, the authors of ‘on solutions to key escrow problems’ acknowledge this. The paper ‘keys under doormats’ I believe reject the technology along those same lines.

Poul-Henning Kamp

@delProfundo @LianaBrooks @jsrailton

Without escrow, what do we do about the "I forgot the password" problem in criminal trials ?

Jail the accused/witness until the remember the password ?

delProfundo

@bsdphk @LianaBrooks @jsrailton targeted hacking of the individuals during the investigation.

Poul-Henning Kamp

@delProfundo @LianaBrooks @jsrailton

So if criminals are sufficiently competent, they're not criminals ?

Ténno Seremélʹ

@bsdphk If you don't have evidence you don't have evidence. “I know s/he is guilty” is not how justice is supposed to work. If it's your job to find evidence, do your job and find it without trampling rights of the people 🤷

@delProfundo @LianaBrooks @jsrailton

Poul-Henning Kamp

@tennoseremel @delProfundo @LianaBrooks @jsrailton

And my point is: That means that people sufficiently competent with cryptography can never be found guilty in white-collar crime ?

ENRON: "Sorry, lost the password" - Not guilty!

Really ?

Ténno Seremélʹ

@bsdphk If a few bits on a device you, as a police officer, do not control is your only evidence, then yes, you are out if luck. Work better.

@delProfundo @LianaBrooks @jsrailton

dexternemrod :qubes:

@tennoseremel

@bsdphk @delProfundo @LianaBrooks @jsrailton

This! And in addition you would danger all other people.
That's like poisoning certain food in a restaurant only because some criminals order it:
You might get the criminal but also hurt innocent people (I think this is from Schneier).

Didier

@bsdphk @tennoseremel @delProfundo @LianaBrooks @jsrailton It can be solved with a few cameras in every house, you know? It's not that you have something to hide and it could prevent some child abuse. Extra benefit: you can have your e2ee in your chat, for now.

Leszek

@bsdphk It is if the involved institutions have a history of losing confidential data. LEO agencies are targeted right now even with the limited datasets they have. I don't believe they're competent enough to be trusted with key escrow.

Most recent big accomplishments of Europol:
Losing physical files on their own personnel: politico.eu/article/europol-in

Publishing terrorist investigation data and hiding the leak nu.nl/binnenland/4357991/terro

@delProfundo @LianaBrooks @jsrailton

@bsdphk It is if the involved institutions have a history of losing confidential data. LEO agencies are targeted right now even with the limited datasets they have. I don't believe they're competent enough to be trusted with key escrow.

Most recent big accomplishments of Europol:
Losing physical files on their own personnel: politico.eu/article/europol-in

Francesco Marini

@LianaBrooks @jsrailton it’s a terrible idea. And I wouldn’t trust *any* law enforcement agency/individual with any decryption key. Even if it doesn’t end up in the hands of criminals (and they will), I expect criminals to already be part of the aforementioned agencies, so… fsck them and their 1984 dreams.

Aral Balkan

@jsrailton Alt text: Europol's Executive Director Catherine De Bolle, said:
Our homes are becoming more dangerous than our streets as crime is moving online. To keep our society and people safe, we need this digital environment to be secured. Tech companies have a social responsibility… (1/2)

Aral Balkan

to develop a safer environment where law enforcement and justice can do their work. If police lose the ability to collect evidence, our society will not be able to protect people from becoming victims of crime. (2/2)

Jasper

@jsrailton will our reporters be asking her if she's building an authoritarian panopticon? If we get to own our machines? If we get to opt out of "smart"?

PetraPanda

@jsrailton tech companies to have social responsibilities.
Why would they do that? That may result in fewer billions for their owners, a few hundred millions less for their CEOs, stacks of dallahdallahs for their shareholders...
Who ever asked a predator to be kind and found that they complied?
In the known history of humans this has never happened.
What the fuck do these overpaid bureaucrats think will happen on account of their suggestions? Greed disappearing because billionaires break good?

Benedek Kozma

@jsrailton There is already a lot of public evidence against cryptocurrencies and AI companies, so the lack of evidence is not the deciding factor why they are not doing their work.

Benedek Kozma

@bigMouthCommie no, I commented on the text inside the image.

bigMouthCommie

cryptocurrency aren't illegal. I'm not sure which companies you are saying did something, either.

I agree that there is plenty of crime, and cops don't need any help, but your comment is opaque.

KB Leecaster

@jsrailton
Does encryption undermine the fundamental purpose of government to protect its citizens or is government the only thing we have to fear?

If you think that you can't trust your government than you should definitely do all you can to change it.

red0ran

@GreenFire @jsrailton the former. Or do you think governments should be able to enter your home and rifle through your belongings without a warrant?

KB Leecaster

@red0ran @jsrailton
How can the government protect us from the terrorists like the 9/11 religious fanatics if they can't get a warrant?

Why should I be afraid of my government? You sound like a Trumper worried about lizard people running everything.

KB Leecaster

@red0ran @jsrailton
As a long time protester, I have been investigated. I am thankful that we have due process and in most cases if our constitution is not followed than we can remedy it or we begin reforming the crooked law enforcement office and courts that allow that kind of abomination.

You sound like a criminal that I'd like my government to help protect my friends and family from, but maybe you just support terrorists and Russians running rampant in democratic liberal states doing harm.

red0ran

@GreenFire @jsrailton you are white, and the law and "due process" are applied differently to you. If you still don't understand that in 2024, then with "Democrats" like you I'm not sure we need Republicans.

On which note: you have called me a Trump supporter, a criminal, and a terrorist supporter. I won't wait to find out what the next epithet will be. Next time you lose a friend or find yourself yelling into a void, I would recommend some self-reflection regarding why that keeps happening.

@infosec_jcp 🆓🐦🐈🃏 done differently

@jsrailton

Don't tell them about the COPS Program or COINTELPRO & how the LEO'S got their ACAB label. Those two programs is how they got those labels. The deathbed confessions of previous COINTELPRO & COPS Program types are now up the the early 1990's, fyi.

I had a really good history & civil rights teacher, btw. The total gaslighting that people in the southeast do is generational. Ask me how I know, eh?

duckduckgo.com/?q=COINTELPRO+d

Remember, cops are legally allowed to threaten, kill and lie. Ask any lawyer.

Their major character assassination platform is Meta. Fsck that place. That's just Russian Intelligences' wet dream platform full of hacked CALEA usage clients from GammaGroup.Com.

All they have is gaslighting, State Sponsored Malware, & think they have a license to steal without the people they steal from having any recourse.

They were checked in 1975. They kept going right after the hearing uninterrupted. 48yrs later these same programs funding and goals cause more problems, by design, because of the decentralized & white listed from crime types, running without oversight. This is just a tiered justice system with known SCI Programs running. Move along. Same shit different day. Same programs running but worse now made worse since the 1970's by deeply embedded generational cold war sleeper cell family type running unchecked.

en.wikipedia.org/wiki/Church_C

@jsrailton

Don't tell them about the COPS Program or COINTELPRO & how the LEO'S got their ACAB label. Those two programs is how they got those labels. The deathbed confessions of previous COINTELPRO & COPS Program types are now up the the early 1990's, fyi.

I had a really good history & civil rights teacher, btw. The total gaslighting that people in the southeast do is generational. Ask me how I know, eh?

Purple

@jsrailton I bet than in a lot of places, homes where always more dangerous due to violence in partnerships (so called domestic violence).

Osma A

@jsrailton
[must make sure a template admin key exists, is known to the police, and gets leaked out to anyone interested in "visiting" your homes without leaving traces] .. if we want to be precise about that ask.

Alessandro Corazza

@jsrailton haha what? I don't want anyone but me to have my house keys. That's the point of having a lock in the first place.

Go Up