Slashdot Mirror
FBI Director: Without Compromise on Encryption, Legislation May Be the 'Remedy' (cyberscoop.com)
An anonymous reader shares a report: FBI Director Christopher Wray said Wednesday that unless the U.S. government and private industry are able to come to a compromise on the issue of default encryption on consumer devices, legislation may be how the debate is ultimately decided. "I think there should be [room for compromise]," Wray said Wednesday night at a national security conference in Aspen, Colorado. "I don't want to characterize private conversations we're having with people in the industry. We're not there yet for sure. And if we can't get there, there may be other remedies, like legislation, that would have to come to bear." Wray described the issue of "Going Dark" because of encryption as a "significant" and "growing" problem for federal, state and local law enforcement as well as foreign law enforcement and intelligence agencies. He claims strong encryption on mobile phones keeps law enforcement from gaining access to key evidence as it relates to active criminal investigations. "People are less safe as a result of it," he said.
More like the government institutions are less safe from the people.
Either private companies give up our privacy by allowing the government access to our communications...... or laws will be passed FORCING them to give up our privacy.
And we wonder why the United States Government won't pass a law protecting our personal data.
Math doesn't have it. If there's a shared key to all our communications, it will sooner or later leak and it will render all encrypted data wide open. Also, I presume that for some reasons Christopher Wray doesn't keep a copy of the keys to his house at some government agency, no?
Governments and often unrelated companies are less privy to our private lives as a result of it. FTFY.
When encryption has backdoors, then NO ONE will have encryption at all
You CANNOT have 'backdoors' in an encyption algorithm and still have effective encryption, goddamnit!
Clearly the FBI and Congress doesn't give a rat's ass whether or not anyone has secure systems or not, so long as they can stick their little brown noses into everyones business. Who cares if every computer in the country is easily hacked by even script kiddies, everyones identity is stolen, and everyones bank accounts drained and credit cards charged up? The Feds will have 'unbreakable' encryption, as will all elected officials and of course The Rich, they'll all be exempt from it, while the rest of us are wide open to whoever wants to victimize us.
Them, them, FUCK THEM.
"People are less safe as a result of it." People are less safe by leaving their room every day. Some things are just expected to be "less safe" but we do them because we want to be more than prisoners.
They keep talking about "compromise" as if Tim Cook and Larry Page have everyone's encryption keys in a file on their laptops that they refuse to hand over for convicted mobsters. That sort of mindset just does not reflect the nature of the situation.
Here is what it ultimately boils down to:
1. The user - and only the user - has the encryption key.
2. Companies are compelled to sell devices that cannot be secured at all, because a 'master key' lives somewhere.
That's it. Those are the two options. There is no way for the phone to verify if there is a warrant, or if the person inputting the master key is truly a law enforcement agent or not, or any other way to ensure the individual using the master key is justified in doing so, or any means of discriminating between a hack and a court order.
If Wray would like to come up with a third option that doesn't ultimately fall into the category of one of the other two, he's welcome to try. Smarter people have failed.
Problem with "give us the key or go to jail" is...what if you don't have the key?
What's to stop someone sending me some encrypted communication with a public key that I don't have access to?
Anytime any political type of any stripe says they just want compromise, what they mean is they want capitulation.
Good comments:
"... there is still open source, free and openly available encryption."
"... there are phones moving across political boundaries."
Many people in government and in management of private companies have NO knowledge of technical issues. That doesn't prevent them from having what they consider to be a strong and sensible opinion. They don't recognize they are ignorant.
ALSO: Back doors are not an answer. They will ALWAYS eventually be compromised.