BlackBerry CEO Promises To Try To Break Customers' Encryption If the US Government Asks Him To (techdirt.com)
An anonymous reader writes from a report via Techdirt that claims the company has "chosen to proclaim its willingness to hack into its own customers' devices if the government asks." From the report: From a Forbes article: "[CEO John] Chen, speaking at a press Q&A during the BlackBerry Security Summit in London on Tuesday, claimed that it wasn't so simple for BlackBerry to crack its own protections. 'Only when the government gives us a court order we will start tracking it. Then the question is: how good is the encryption? 'Today's encryption has got to the point where it's rather difficult, even for ourselves, to break it, to break our own encryption... it's not an easily breakable thing. We will only attempt to do that if we have the right court order. The fact that we will honor the court order doesn't imply we could actually get it done.'"
Oddly, this came coupled with Chen's assertions its user protections were better than Apple's and its version of the Android operating system more secure than the one offered by competitors. This proactive hacking offer may be pointed to in the future by DOJ and FBI officials as evidence Apple, et al aren't doing nearly enough to cooperate with U.S. law enforcement. Of course, Chen's willingness to try doesn't guarantee the company will be able to decrypt communications of certain users. Blackberry may be opening up to law enforcement but it won't be sharing anything more with its remaining users. From the Forbes article: "Chen also said there were no plans for a transparency report that would reveal more about the company's work with government. 'No one has really asked us for it. We don't really have a policy on whether we will do it or not. Just like every major technology company that deals with telecoms, we obviously have quite a number of requests around the world.'"
Oddly, this came coupled with Chen's assertions its user protections were better than Apple's and its version of the Android operating system more secure than the one offered by competitors. This proactive hacking offer may be pointed to in the future by DOJ and FBI officials as evidence Apple, et al aren't doing nearly enough to cooperate with U.S. law enforcement. Of course, Chen's willingness to try doesn't guarantee the company will be able to decrypt communications of certain users. Blackberry may be opening up to law enforcement but it won't be sharing anything more with its remaining users. From the Forbes article: "Chen also said there were no plans for a transparency report that would reveal more about the company's work with government. 'No one has really asked us for it. We don't really have a policy on whether we will do it or not. Just like every major technology company that deals with telecoms, we obviously have quite a number of requests around the world.'"
I'm sure all eight remaining BB customers are totally freaked out. Best switch to Windows Phone to keep their niche player cred.
The world's burning. Moped Jesus spotted on I50. Details at 11.
Hold on. The headline is very misleading. He did NOT say they would attempt to crack if the government ASKED. He said they would do it ONLY for a court order, which is not ASKING, it is demanding.
All companies are required to obey court orders.
Not that I was going to seriously consider buying a Blackberry product before, but I can't think of any possibly way this would make me want to change my mind.
Is he just saying stupid shit like this so he can get fired and collect his golden parachute?
Companies are free to fight court orders he is implying he will not contest anything or even look too hard. It does not matter as their platform is dead.
No sir I dont like it.
Of course it's not impossible.
You deliver the court a PC, something nice and powerful, running a brute-force decryption crack attempt on the encrypted payload. Then you give them a reasonable estimate regarding how long they might expect to have to wait until the machine finds the correct key. That this length of time exceeds the lifetime of the universe might be understood to be the plaintiff's problem.
... says 2008 me.
#DeleteChrome
If he was asked to put in a backdoor "by court order", would he....
Governments already require telcos to implement backdoors under the guise of "Lawful Interception": https://en.wikipedia.org/wiki/...
I developed for an ISP platform of "a major provider" in Europe a while back, and guess what . . . ?
Yes, it was conform in providing this LI service to the folks, um, "entitled" to it. It was even implemented so that the platform operators could not see who was being tapped. This was because the spooks feared that "criminals" would smuggle in their own folks to work as operators, who could then tip off the criminals when the spooks were tapping them.
The spooks are supposed to have the proper judicial approvals . . . but it's like a dubious dance club catering to underage drinkers . . . no one is checking IDs at the door.
Someone should directly ask Blackberry how they assist "lawful" organization trace and tap communications on their systems.
Whoops! That pesky little National Security Letter Gag Order, again . . .
Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
Being scared of terrorists in a country almost bereft of terrorism is just shy of being an accomplice.
And the US Constitution and Bill of Rights handicap the US when dealing with countries such as China, Russia, or NK. While the NSA and CIA are subject to daily scrutiny the same cannot be said about US adversaries. You will never see any protesters in China, Russia, or NK demanding details of their countries intelligence agencies.
Yeah and the US Gov is so handicapped by that scrutiny that their rates of regime-changing per decade are lower than China, Russia or NK. And the incarceration rates too.
Without such handicaps the US Gov would have to interfere with democracies by paying for social media ads and fake news/users rather than making up lies and sending US citizens to kill brown people. /s
I've been repeating this for quite a while now, but I dunno for what reason, people have apparently forgotten all about the case involving the Canadian Mounted Police, a master decryption key for all non-enterprise accounts, and extremely crappy response from your same very own John Chen who was also the CEO back at the time.
Let me refresh people's memories:
https://www.theverge.com/2016/...
https://news.vice.com/article/...
http://blogs.blackberry.com/20...
https://www.computerworld.com/...
If anyone was stupid enough to fall into the obvious and very false statement that the new Blackberry had better costumer protection in place in comparison to Apple or other Android brands, it's on you for not doing very basic research.
It's like getting surprized with a new round of scandals of Lenovo laptops having malware pre-loaded on their bios. There have been enough cases to know what the position of the company is. If you are still throwing your money at them, you are just reinforcing the behavior and proving to them that it's acceptable.
John Chen has said nothing there that he didn't already say in the past. While he is the CEO of the company, such behavior is to be expected. Anyone who cares about their own personal privacy and about having proper standards on costumer protection should've already let go of the brand by now.