FBI Director Christopher Wray On Encryption: We Can't Have an 'Entirely Unfettered Space Beyond the Reach of Law Enforcement' (cnet.com)
An anonymous reader quotes a report from CNET: Encryption should have limits. That's the message FBI Director Christopher Wray had for cybersecurity experts Tuesday. The technology that scrambles up information so only intended recipients can read it is useful, he said, but it shouldn't provide a playground for criminals where law enforcement can't reach them. "It can't be a sustainable end state for there to be an entirely unfettered space that's utterly beyond law enforcement for criminals to hide," Wray said during a live interview at the RSA Conference, a major cybersecurity gathering in San Francisco. His comments are part of a back-and-forth between government agencies and security experts over the role of encryption technology in public safety. Agencies like the FBI have repeatedly voiced concerns like Wray's, saying encryption technology locks them out of communications between criminals. Cybersecurity experts say the technology is crucial for keeping data and critical computer systems safe from hackers. Letting law enforcement access encrypted information just creates a backdoor hackers will ultimately exploit for evil deeds, they say.
Wray, a former assistant attorney general in the U.S. Department of Justice who counts among his biggest cases prosecutions against Enron officials, acknowledged Tuesday that encryption is "a provocative subject." As the leader of the nation's top law enforcement agency, though, he's focused on making sure the government can carry out criminal investigations. Hackers in other countries should expect more investigations and indictments, Wray said. "We're going to follow the facts wherever they lead, to whomever they lead, no matter who doesn't like it," he said. To applause, he added, "I don't really care what some foreign government has to say about it."
Wray, a former assistant attorney general in the U.S. Department of Justice who counts among his biggest cases prosecutions against Enron officials, acknowledged Tuesday that encryption is "a provocative subject." As the leader of the nation's top law enforcement agency, though, he's focused on making sure the government can carry out criminal investigations. Hackers in other countries should expect more investigations and indictments, Wray said. "We're going to follow the facts wherever they lead, to whomever they lead, no matter who doesn't like it," he said. To applause, he added, "I don't really care what some foreign government has to say about it."
50+ years of voting for tough on crime politicians gets you thinking like this. That and the equally if not more-so ineffective "broken windows" policing.
Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
governments are the entities people most need to be able to keep secrets from.
Just sayin.
A free society's highest priority is not to service law enforcement.
And if we give you the keys Mr. Government everyone will have them in 3..2..1.. because we all know how well law enforcement can keep a secret.
Yeah, I'm looking at you NSA, the most secure agency on planet earth that couldn't hang on to their toys, tools, and tactics.
Fun Fact: If it wasn't for the NSA leaks, we most likely would not have had the WannaCry ransomware attacks.
Even if it becomes illegal in the US, there is still a whole world out there where it's not illegal. The software will still be there and still be accessible. You might as well let the good guys use it too. This man's argument is steeped in lazyness on the part of the FBI. They want to be able to issue a warrent to access the data and boom they have their case. The FBI don't want to do the leg work to get the information, they want a magic legal bullet. Sorry but that's pretty lame.
4th Amendment is "a provocative subject."
I donated, volunteered, and voted for Trump but I gotta say... fuck his FBI director on this.
Both of my positions as a conservative (small government) and a hacker (individual software freedom) are against this.
But let's not fool ourselves into thinking the Democrats would be any better on this issue. Both parties are chock full of authoritarian fuckwits.
Leave me alone with my guns and computers please. :(
Land of the free my ass.
>"Encryption should have limits. That's the message FBI Director Christopher Wray had for cybersecurity experts Tuesday."
No, it shouldn't. And it can't. We have been over this over and over again. It has been proven in the REAL WORLD over and over again. Either something is secure with encryption or it isn't. You can NOT have back doors or intentional weaknesses in encryption or, eventually, EVERYONE loses and suffers. It is either secure or not secure. Back doors and weaknesses will be found by the "bad doers"- bad governments, rogue elements in governments, corporate competitors, hackers with nothing better to do, terrorists, whatever.
>"it shouldn't provide a playground for criminals where law enforcement can't reach them."
We have ALWAYS had such playgrounds. Before the days of computers and text messages and Email and web logs and "security" cameras everywhere, the government couldn't just watch what everyone did/say/go/read/etc. We had privacy and security BY DEFAULT due to the fact that it was either impractical or impossible to collect such information and sift through it en-mass. And it would have been UNTHINKABLE that citizens would ever allow the government to do so in a free country.
In an age where information is power, privacy and security are more important than ever. And just passing laws to "protect" this or that isn't going to cut it. Strong encryption is the only option we have. Mess that up, and we have no real protections left.
FBI Director Christopher Wray just can't understand. "We're the good guys here! Why don't you believe us, we're the good guys!"
J. Edgar Hoover? That's in the past! Patriot Act? You can't bake a cake without breaking a few eggs! The Panopticon such that even Grandma gets a working over due to too many internet searches for cross-stitch patterns? Well Grandma liked that Commie pinko Rudolph Valentino back in the day, that's reason enough to suspect her!!
This is a binary issue: you either have encryption, or you don't, damnit!
Meanwhile criminals (and non-stupid people!) will use non-backdoored encryption and not give a fuck.
Criminals will also find the backdoor and have access to everything!
Why the ACTUAL FUCK can't these brainless idiots get this through their thick skulls!?
The only way to avoid leaking backdoor information is to not have one. Period. If there is one, it will unavoidably either leak out, or be found out, that's certain. I understand they'd wish their jobs would be easier, but wishes aren't horses.
I am putting myself to the fullest possible use, which is all I can think that any conscious entity can ever hope to do.
Well as such a supporter of the constitution, I shouldn't need to remind you that the right to keep and bear arms is in fact an unalienable right, according to the constitution, the one you are a sworn defender of. In fact the second amendment says 'shall not be infringed'. It doesn't say 'unless the person is an idiot' or 'if I deem they are unsuitable for XYZ reasons'. That definitely clears up my misconceptions of 'the left', thank you..
As long as fingers are breakable, so will be encryption.
while (sig==sig) sig=!sig;
And many people over 40 invented your computers, punk.
You're welcome.
Its because of jackasses like you, Hoover, etc, that we NEED and DEMAND bullet proof network security and encryption.
If you need a refresher on the reasons why, try the following.
https://en.wikipedia.org/wiki/...
https://en.wikipedia.org/wiki/...
https://en.wikipedia.org/wiki/...
https://en.wikipedia.org/wiki/...
https://en.wikipedia.org/wiki/...
https://en.wikipedia.org/wiki/...
https://en.wikipedia.org/wiki/...
And finally, go back and re-read this thoroughly. Shut your yap until such time you UNDERSTAND the material in question.
https://en.wikipedia.org/wiki/...
Lawyers, MBA's, RIAA? A jedi fears not these things!
anything, and i do mean anything, that a person squirrels away for 'later' can and will be found and exploited by another.
so offline is only good until the building/room/safe is breached.
So what he's saying is that other countries have an unfettered right to spy on the US with the same backdoors he'll put into the software. Because surely no one is beyond the lawful reach of (US/Russian/Chinese) right to investigate?
-In space, it is very hard to rig lights.
With key escrow, the device manufacturer keeps the keys in offline storage. The key for your device is only retrieved when presented with a lawful warrant.
And nobody with a brain will trust that device for anything important anyway.
So mail in the post should be opened and the contents scanned and looked at?
East German style?
Not just scan the envelope and keep text front and back?
Yet on the internet that electronic mail and data should be opened all the time by the federal gov?
Domestic spying is now "Benign Information Gathering"
When Gutenberg's press went into production.
The facts are that encryption is a byproduct of math and any computer science student can develop and encryption system as a school project. This is like trying to hold back the printing press. It's not going to happen.
What did happen is that law and social values evolved to accommodate the printing press. Defamation was compartmentalized into libel versus slander and social and political conventions emerged to balance different interests.
The same is happening here.
---- The above post was generated by the Turing Institute. Maybe.
What they don't really address is that crooks have been pretty good at finding back-doors. No known technology can make a practical back door for law enforcement that's not a potential and fairly likely access point for crooks.
In fact, the crooks have proved smarter and faster than law enforcement, in part because 3rd-world labor is cheap and plentiful compared to law enforcement staff, and crooks are happy to outsource. The crooks have a much bigger eArmy. Law enforcement will lose a labor contest.
Table-ized A.I.
In layman's terms,
"Law enforcement must have master keys to all homes/offices/safes. Every cop must be able to freely copy them."
and "we promise we'll never lose them, pinky swear!"
See how that goes over with the general public.
captcha: "tyranny" - wow. First time I landed an apropos one.
Pandora's box was opened a long time ago. Criminals can use open source encryption to avoid mainstream services.
The question the FBI and others haven't answered is - how is this any benefit to crime control when all it does is relocate the dark users to their own platforms that they alone hold the keys to?
Why therefore break it for the vast majority of law abiding citizens thus exposing us to not just bad actors in government but the criminals too?
Have you? Don't even try to pretend your old lady doesn't run the show at your place. That's a defacto government if I've ever seen one. Points go to ze Kernel.
Santa Claus? The Easter Bunny?
Sorry to be flippant, but I really, really, really shouldn't have to point this out.
And our current president has pretty clearly removed all semblance of impartiality from the appointment while our Republican lead Congress (well, half of it now) is letting him get away with it.
Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
I like the way things are right now. It's a good balance. There's secure encryption out there that's *very* hard for the government to break. If someone wants to use that stuff, they can, but it takes motivation. Apple products don't cut it - those are easy to break. You need pgp and stuff like that. If the government wants access to strongly-encrypted data, they have to get a subpoena. It's not easy. Two separate branches of the government (executive and judicial) have to agree that there's a legit reason. If the government meets that high bar, then they have rights to it. At that point, the person can either a) unlock the info or b) head to jail.
Some people in government feel that they should be able to poke into whatever, whenever, wherever they want. If we give these people control, we'll end up like China. No thanks. I like my western democracy. The executive branch+NSA has overstepped these bounds in the past and I don't approve at all. Suck it up, spooks! Spend the time, fill out the paperwork and get your frikkin subpeonas approved by a judge. Every. Single. Time. It's designed to be hard on purpose.
Some people on the other side feel that they should be able to do whatever they want, whenever they want, wherever they want. Laws be damned. Some of these people call themselves libertarians, some call themselves anarchists, some are truly criminals, but a lot of them just don't like being told what to do. These people need to get a clue. If you want to live like that, find an uninhabited spot and live as a hermit. Rural Australia, Siberia and the Arctic are good candidates. You won't last long, but you'll be free according to your own terms. The second you want to live in a group with other people (aka a civilization) there are rules to follow.
This is not a technical issue.
For the last 232 years, the supreme law of the land in the United States is the US Constitution. All government powers, whether Executive, Legislative, or Judicial, are subordinate to the limits defined in the Constitution.
Claiming that the US Legal system must have unfettered access to all information is the same as saying that the US Legal system must not be fettered or subject to the US Constitution. That leads me to 3 important questions:
Capone got busted on tax evasion. I'm not sure bringing him up is relevant here.
And the FBI has never gotten over the fact that it was IRS accountants who got him..........
"The average reporter we talk to is 27 years old......They literally know nothing." - Ben Rhodes
No but what they will do is make it a crime to use robust encryption schemes. If you are caught using one then you go to prison for a long time on the basis of possession (regardless of whether you are actually involved in anything else illegal). Of course, criminals won't care, since they are already doing illegal stuff, but regular folk will basically have to make all their data discoverable to the authorities on demand. Similarly anyone in a position of authority, or with large amounts of wealth will be able to apply for an permit to use stronger encryption. As for data breaches, well, these seem to occur every few months at the moment, but unless it is panama paper stuff, very few seem to care (and even then...).
This is the middle class' biggest weakness - they have enough invested in the 'system' that you can use the threat of loss of participation in the system to make them conform to silly rules. Unfortunately we have only had a middle class for about 60 years now out of thousands of years of recorded civilisation, and I'm not entirely convinced it has the political will to sustain itself in the face of oligarchic leadership that seems intent on bringing back feudalism.
It also says "well regulated Militia": and where are those now? Are you part of a militia? If so, who is your commanding officer and your chain of command?
Do we have to bring this up every fucking time? Well regulated, in the speech of 1789, does not mean the same thing it does now. Regardless, the Supreme Court ruled that comma seperated the people from the militia part. The Federalist Papers back up this interpretation as being the only possible correct interpretation. That was the whole point of the Papers.. They were the Cliff Notes, of their time, to the Document.
The people have the right to form militias.. and they have the right to bear arms.. They can bear those arms privately or they can bear them in a militia.. Their choice.. End of story..
If there was any possibly chance the left could overturn or repeal the 2nd amendment with another amendment, they'd have tried by now.. Instead they are working on it by attrition.. Chip away a little bit here and a little bit there.
"It can't be a sustainable end state for there to be an entirely unfettered space that's utterly beyond law enforcement for criminals to hide..."
Funny how often officials and policemen unintentionally reveal their inner thoughts when speaking in public.
Can't have... "unfettered"...
Fetters, of course, are chains. Apparently this Gestapo officer believes that all citizens belong in chains - at all times. Even their thoughts, ideas and words must be in chains.
I am sure that there are many other solipsists out there.
Opening envelopes takes work for every individual one. For encryption backdoors, it just takes a bit of electricity once the software is written. People like this one believe that they finally have victory in sight in their war on civil liberty and freedom. They want to make sure everybody is afraid to say what they think in any circumstances, because everything can be under surveillance all the time, no safe spots.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
I'm sure the nuke crap would be far more sophisticated.
You sure about that?
The Nuclear Launch Code at US Minuteman Silos Was 00000000
Opening envelopes takes work for every individual one. For encryption backdoors, it just takes a bit of electricity once the software is written.
I understand that they are doing something insidious by simply scanning the from and to address on every piece of mail and making a database of associations. All automated.
My ism, it's full of beliefs.
Careful with that generalization there bud.
I am over 40, and started with VT220's, Apple //'s, and DOS.
PGP was a thing in the DOS days.
-Miser
You guys never do learn. You always think you are the smartest guys in the room and then you say something stupid-as-fuck. The deplorables comment hurt Hillary as much as anything else. Anyone in flyover country heard loud and clear just how much they could expect her to represent them. You guys prove over and over that you learned nothing.