Slashdot Mirror
How Security Pros Look at Encryption Backdoors (helpnetsecurity.com)
An anonymous reader shares a report: The majority of IT security professionals believe encryption backdoors are ineffective and potentially dangerous, with 91 percent saying cybercriminals could take advantage of government-mandated encryption backdoors. 72 percent of the respondents do not believe encryption backdoors would make their nations safer from terrorists, according to a Venafi survey of 296 IT security pros, conducted at Black Hat USA 2017. Only 19 percent believe the technology industry is doing enough to protect the public from the dangers of encryption backdoors. 81 percent feel governments should not be able to force technology companies to give them access to encrypted user data. 86 percent believe consumers don't understand issues around encryption backdoors.
This debate has been with us since the early 1990s when the Clipper Chip (with its LEAF override fields) was introduced. Every time this comes up, the answer is obvious:
With how easy it is for information to leak [1], a deliberately placed backdoor would turn into a gold mine for terrorist organizations, criminal organizations, foreign intel, organizations doing industrial espionage. Especially now, when almost anything winds up leaking due to the popularity of those who will sell out their country for a buck, even if the person doing so knows that their co-workers and their families will be tortured and killed.
Backdoors become security holes. Was true back then; is true now.
[1]: Yesterday, Assange received a lot of classified documents and other info on Russia, but refused to publish it on WikiLeaks. Wonder why he has no interest in attacking anything but US or European interests... hmmm...
Now ask them a question how likely would it be that 1 out of 10,000 would get lost or misplaced and end up in the wrong hands?
Worse: Some 'law enforcement officer' decides that since he/she has the key already, there's no reason for them to not go snooping around, warrant or no warrant. In fact let's go snooping through every house on the block, just in case we find something actionable. You know, for the safety and security of everyone. If people have nothing to hide in their homes, they shouldn't have anything to fear from this, right? And since it's 'law enforcement' on 'official business', they should trust them implicitly, right? If they don't trust them, then they MUST have something to hide, therefore justifying the snooping. Anyone making a big fuss over it for no reason probably is a criminal and needs to be investigated further..
Excuse me, citizen; PAPERS, PLEASE..