Slashdot Mirror
Justice Department To Be More Aggressive In Seeking Encrypted Data From Tech Companies (wsj.com)
An anonymous reader quotes a report from The Wall Street Journal (Warning: source may be paywalled; alternative source): The Justice Department signaled Tuesday it intends to take a more aggressive posture in seeking access to encrypted information from technology companies, setting the stage for another round of clashes in the tug of war between privacy and public safety. Deputy Attorney General Rod Rosenstein issued the warning in a speech in Annapolis, Md., saying that negotiating with technology companies hasn't worked. "Warrant-proof encryption is not just a law enforcement problem," Mr. Rosenstein said at a conference at the U.S. Naval Academy. "The public bears the cost. When our investigations of violent criminal organizations come to a halt because we cannot access a phone, even with a court order, lives may be lost." Mr. Rosenstein didn't say what precise steps the Justice Department or Trump administration would take. Measures could include seeking court orders to compel companies to cooperate or a push for legislation. A Justice Department official said no specific plans were in the works and Mr. Rosenstein's speech was intended to spur public awareness and discussion of the issue because companies "have no incentive to address this on their own."
"Violent criminal organizations" are the last thing on their minds when making these arguments. They want to go after dissent, after whistleblowers. They want to stalk their exes, commit industrial espionage and blackmail. They want to track the best moments to rape and murder, or to be able to plant evidence without alibis making their so-called discoveries as obviously fake as they can be.
These powers would not and will never be used to make citizens or the country safer in any way, even if it could be used in this fashion. If there were any chance they could, they would never pursue them.
I wonder if they recognize the hypocrisy in this statement when numerous administrations also encrypt or destroy email archives prior to leaving office.
...you have to break a few eggs. A few lives lost every year due to "terrists" are a small price to pay for freedom.
I am willing to risk the ridiculously small chance that my family and I will die in a terrorist incident in order to preserve our freedoms, despite continued government attempts to erode them (Patriot Act, etc.). I'd like to think that anyone sufficiently educated in mathematics and history would logically come to a similar conclusion.
This is the same pile of bovine excrement used in any attempt to destroy, um I mean "regulate" freedoms. They "may" have a slim shred of justification if there was concrete and irrefutable evidence of the imminent commission of a homicide, but we all know better.
""Warrant-proof encryption is not just a law enforcement problem,"" It's actually a natural right for all human beings, so stop trying to violate it.
Secure encryption increases public safety. If the government can't break into everybodies data criminals can't either.
When our investigations of violent criminal organizations come to a halt because we cannot access a phone, even with a court order, lives may be lost.
Lives may be lost, but liberty will be preserved.
Let's put the cards on the table, shall we? This has little or nothing to do with saving lives, and everything about garnering power through the acquisition of data...lots and lots of data. While those who seek this power wouldn't word it quite this way, it's about a nation subjugating its citizenry.
Next step, aerosolized chemical agents to keep people calm and docile. You want Reavers? Cause that's how you get Reavers.
I'm sorry, but your opinion seems to be wrong.
....the stage for another round of clashes in the tug of war between privacy and public safety.
No, there is a clash between privacy and dragnet operations by lazy and corrupt law enforcement.
They collect all this data for our "security" and yet, some cranky old guy gets 23 guns and shoots up Las Vegas under their noses. Or two punk ass kids blow up a Boston marathon.
If you have to rely on personal data in order to get the person under investigation to basically incriminate themselves, then there is something horribly lacking in their investigation. You would have to be one brilliant criminal mastermind to have the only evidence against you be on your electronic device - actually an idiot savant - brilliant enough not to have any way of proving your crimes but stupid enough to keep a record on your personal device.
It bothers me how his argument is almost entirely a plea to emotion. It might as well be, "think about the children." Even if he is correct, that some violent criminals are getting away with crimes because we can't prosecute due to strong encryption, how many of those incidents are we willing to pay for more secure devices? It pains me to say it, but if we had to trade 10 murders for a few billion dollars of economic damage due to preventable cyber crime, I think there are very few people who would choose the second option. We know human lives have a price in this country or else we would have universal health care by now...
Another aggravating point in his speech is that he says, "we [the DoJ] are in the business of preventing crime and saving lives." That is not true. He is in the business of prosecuting crime and getting convictions. There are actually very few incentives for him to reduce crime. If removing encryption let him convict more criminals, and then had the side-effect of increasing cyber crime, leading to more criminal convictions, that is a win/win for him.
China, Russia, the UK and now the USA. Our constitution, even the pretence of it, as the US is increasingly not a government for the people or even by the people, but over the people regardless of what it believes. At least Russia and China are straightforward about it. We claim to be difference yet we push ourselves further and further towards the very people we openly condemn. Japan and France are starting to look pretty good right now. Canada is okay, for the moment, but given it's proximity and trying to retain it's "buddy, buddy" status with the USA, it may well go the same route or at least route data to the USA ever so quietly violating not only privacy, but it's own sovereignty. So when is the public going to say "enough". Even Snowden's sacrifice (and others before him) to show us what is going on so we can act, seems to have barely made people aware, and then they go back to "business as usual", save for the few exceptional people, who will be targets for questions the direction of the "status quo". Curse the Bush family for starting it, and curse those after them who kept expanding it. (And that includes Obama I'm sorry to say).
"Imagination is more important than knowledge" - Einstein
It sounds like they want encryption with a backdoor for law enforcement to get into with a warrant. Even putting aside the abuse of power that would happen (e.g. government getting a rubber stamped warrant to look at someone's phone because they don't like his political views), this is worrying. There is no such thing as "a backdoor only for law enforcement." If you make a backdoor, hackers and other governments WILL find it and WILL exploit it. Unlike a normal vulnerability, which can be patched when found, if this backdoor gets out it won't be able to be patched. The government agencies will demand that it remains open for them even while other entities abuse it.
"Law enforcement only" backdoors will just make security much weaker for everyone while not really improving much in the way of security on the law enforcement side.
My sci-fi novel, Ghost Thief, is now available from Amazon.com.
The intelligent argument is not that the government should be in charge of health care, but that the government should be the single-payer for health care. Numerous payers require numerous negotiations and often-unfair rates in the interest of profit. No one should profit off the health of another, and no one should be unhealthy due simply to the fact that they are poor. No one should be bankrupted by a health issue, especially when they have health insurance. Besides the obvious fact that healthier citizens are more productive, there are relatively unseen and often-ignored effects of concern over health, and guaranteed health coverage for all would eliminate those issues.
Then stop abusing your power. As it is now, the likelihood of someone being damaged by you HAVING access to data is higher than if you don't.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
Enlightenment.
California has a population of 40 million, this is larger than 200 countries. If California can negotiate a great deal by itself then I don't expect the US as a whole to do it much better.
Also, California voted 140% democrat in the last election. Literally. If California can't pass single payer healthcare then clearly the idea is too extreme for the whole country.
~~~
Be careful, when we talk about "government" there are different governments.
-- I was raised on the command line, bitch
First, to hear the Justice department tell it, they must have been unable to solve crimes back before networks existed. Which is clearly BS.
Second, if their argument is to be taken seriously, then we also need to have laws preventing people from owning safes unless they give a copy of the key/combo to the government.
It's funny how you translated "more registered voters than residents" into "voted democrat".
The errors in the registration lists are largely due to people moving, dying, etc. and not contacting the state to deregister. It's a common problem and it's not just among Democrats, despite your obvious desire to paint it as such.
After Trump bitched about fraudulent voting and people being registered where they shouldn't, it came out that Steve Bannon, Tiffany Trump, Sean Spicer, Jared Kushner and Steven Mnuchin were all registered in more than one state because they hadn't deregistered themselves when they moved.
If you honestly believe that someone being registered in two states means they're voting in both states, then you should be demanding that all those Republicans be arrested for voter fraud.
Regardless, the government will just have keyloggers built into the BIOS. The manufacturers are the weak link here.
Keyloggers are a well-known problem -- and one for which security solutions are designed to mitigate. U2F was designed to be secure with a keylogger installed (because spyware is a thing). There are completely open, easily manufactured designs of U2F keys.
GPG cards similarly have an open design, and are designed such that the keys can't be recovered from the device -- and the critical decryption is done on the GPG card.
There's also Coreboot, Libreboot, and OpenFirmware before that -- all open source BIOSes you can audit and compile yourself.
Electronics hobbyists design entire computers -- from PC board design and manufacture (at home) all the way to working Linux computers with internet access. Completely from scratch.
The reality is that the skills and tools to bypass such spying is common, widespread, and well published. Many who have the skills are thrilled when somebody shows an interest in their hobby, and eagerly assist anyone who asks.
-- Sometimes you have to turn the lights off in order to see.