Why Governments Lie About Encryption Backdoors (vortex.com)
Lauren Weinstein says there are smart people in government, "who fully understand the technical realities of modern strong encryption systems and how backdoors would catastrophically weaken them," but asks So why do they continue to argue for these backdoor mechanisms, now more loudly than ever? The answer appears to be that they're lying to us. Or if lying seems like too strong a word, we could alternatively say they're being 'incredibly disingenuous' in their arguments. You don't need to be a computer scientist to follow the logic of how we reach this unfortunate and frankly disheartening determination regarding governments' invocation of terrorism as an excuse for demanding crypto backdoors for authorities' use.
I don't understand why people believe a single word from the (US) government. Every time, on nearly every topic but especially security / military, what they say turns out to be not true.
Because the smart people don't drive the commentary, they just stand there in the background face-palming them selves.
Honestly government isn't any different from enterprise:
The Techs & Scientists give management a clear answer on a subject, stipulating all the factors and issues with a stance that the boss is taking, providing alternate approaches & data that shows what they want is irrelevant anyway.
The PHB doesn't like what he's hearing so just goes out and says what he thinks, regardless of the facts. "Well that's what I've promised the client, so you'll have to deliver"
Do you think that politicians & leaders in the "security" services are any different ?
In the old days, you could attack one thing. You could defend one thing. But, that doesn't map well to the internet. Now, we all talk to each other. We all use the same methods of defense. When one actor attacks another, the attack is exposed, analyzed, and re-used. Now, when somebody attacks, they increase the cost of defense for everybody. When somebody comes up with improved defense, we all learn how to increase the cost of attack for everybody.
For over a decade, several branches of the US government have focused almost all their energy on attacking others across the internet. The result is an internet where compromise and breach are daily events. Somehow, our protectors don't see that they are crafting the tools of our demise and handing them to our enemies. If we are honest, we are more to blame for the great compromise at the OPM than our attackers. If we had spent the last decade on creating and encouraging defense, then breach would be difficult and rare.
Now, our governments are blindly following the tradition of attack. They wish to attack the protocols we use to determine identity and create security. They don't see or care that everybody else will do likewise. They don't see the great devastation that will follow.
Well I think it's just as much the general public not being used to early, brutal death anymore. I just checked the mortality statistics here in Norway:
0-1 years old: <0.25%
0-45 years old: <2%
0-66 years old: <10%
That is rather amazing when you consider there's still fatal accidents, diseases, murder and suicide. But we're chipping away at it bit by bit, adding safety measures, advancing medicine, reducing crime, improving mental care. Then a guy with a Kalashnikov fucks it up good, killing lots of people who with 98-99% probability should have lived decades, minimum. I'm not sure how they really coped with that during WWI and WWII when young men (and quite a few others) were dying left, right and center but I know today it's such an abomination we don't deal with it at all. We want it solved and eradicated, not just make the reasonable precautions and live with the residual risk.
Live today, because you never know what tomorrow brings