Email or username:

Password:

Forgot your password?
10 comments
delProfundo

@bsdphk @LianaBrooks @jsrailton it essentially is. cross jurisdictional exchange of keys is impossible to overcome as decisions there are subject to political control and dangerous concentration. Key escrow is great, using it to access encrypted comms is not a case it’s suited to. Hoyle and Mitchel, the authors of ‘on solutions to key escrow problems’ acknowledge this. The paper ‘keys under doormats’ I believe reject the technology along those same lines.

Poul-Henning Kamp

@delProfundo @LianaBrooks @jsrailton

Without escrow, what do we do about the "I forgot the password" problem in criminal trials ?

Jail the accused/witness until the remember the password ?

delProfundo

@bsdphk @LianaBrooks @jsrailton targeted hacking of the individuals during the investigation.

Poul-Henning Kamp

@delProfundo @LianaBrooks @jsrailton

So if criminals are sufficiently competent, they're not criminals ?

Ténno Seremélʹ

@bsdphk If you don't have evidence you don't have evidence. “I know s/he is guilty” is not how justice is supposed to work. If it's your job to find evidence, do your job and find it without trampling rights of the people 🤷

@delProfundo @LianaBrooks @jsrailton

Poul-Henning Kamp

@tennoseremel @delProfundo @LianaBrooks @jsrailton

And my point is: That means that people sufficiently competent with cryptography can never be found guilty in white-collar crime ?

ENRON: "Sorry, lost the password" - Not guilty!

Really ?

Ténno Seremélʹ

@bsdphk If a few bits on a device you, as a police officer, do not control is your only evidence, then yes, you are out if luck. Work better.

@delProfundo @LianaBrooks @jsrailton

dexternemrod :qubes: replied to Ténno

@tennoseremel

@bsdphk @delProfundo @LianaBrooks @jsrailton

This! And in addition you would danger all other people.
That's like poisoning certain food in a restaurant only because some criminals order it:
You might get the criminal but also hurt innocent people (I think this is from Schneier).

Didier

@bsdphk @tennoseremel @delProfundo @LianaBrooks @jsrailton It can be solved with a few cameras in every house, you know? It's not that you have something to hide and it could prevent some child abuse. Extra benefit: you can have your e2ee in your chat, for now.

Leszek

@bsdphk It is if the involved institutions have a history of losing confidential data. LEO agencies are targeted right now even with the limited datasets they have. I don't believe they're competent enough to be trusted with key escrow.

Most recent big accomplishments of Europol:
Losing physical files on their own personnel: politico.eu/article/europol-in

Publishing terrorist investigation data and hiding the leak nu.nl/binnenland/4357991/terro

@delProfundo @LianaBrooks @jsrailton

@bsdphk It is if the involved institutions have a history of losing confidential data. LEO agencies are targeted right now even with the limited datasets they have. I don't believe they're competent enough to be trusted with key escrow.

Most recent big accomplishments of Europol:
Losing physical files on their own personnel: politico.eu/article/europol-in

Go Up