Slashdot Mirror
FBI Director Christopher Wray On Encryption: We Can't Have an 'Entirely Unfettered Space Beyond the Reach of Law Enforcement' (cnet.com)
An anonymous reader quotes a report from CNET: Encryption should have limits. That's the message FBI Director Christopher Wray had for cybersecurity experts Tuesday. The technology that scrambles up information so only intended recipients can read it is useful, he said, but it shouldn't provide a playground for criminals where law enforcement can't reach them. "It can't be a sustainable end state for there to be an entirely unfettered space that's utterly beyond law enforcement for criminals to hide," Wray said during a live interview at the RSA Conference, a major cybersecurity gathering in San Francisco. His comments are part of a back-and-forth between government agencies and security experts over the role of encryption technology in public safety. Agencies like the FBI have repeatedly voiced concerns like Wray's, saying encryption technology locks them out of communications between criminals. Cybersecurity experts say the technology is crucial for keeping data and critical computer systems safe from hackers. Letting law enforcement access encrypted information just creates a backdoor hackers will ultimately exploit for evil deeds, they say.
Wray, a former assistant attorney general in the U.S. Department of Justice who counts among his biggest cases prosecutions against Enron officials, acknowledged Tuesday that encryption is "a provocative subject." As the leader of the nation's top law enforcement agency, though, he's focused on making sure the government can carry out criminal investigations. Hackers in other countries should expect more investigations and indictments, Wray said. "We're going to follow the facts wherever they lead, to whomever they lead, no matter who doesn't like it," he said. To applause, he added, "I don't really care what some foreign government has to say about it."
Wray, a former assistant attorney general in the U.S. Department of Justice who counts among his biggest cases prosecutions against Enron officials, acknowledged Tuesday that encryption is "a provocative subject." As the leader of the nation's top law enforcement agency, though, he's focused on making sure the government can carry out criminal investigations. Hackers in other countries should expect more investigations and indictments, Wray said. "We're going to follow the facts wherever they lead, to whomever they lead, no matter who doesn't like it," he said. To applause, he added, "I don't really care what some foreign government has to say about it."
governments are the entities people most need to be able to keep secrets from.
Just sayin.
A free society's highest priority is not to service law enforcement.
And if we give you the keys Mr. Government everyone will have them in 3..2..1.. because we all know how well law enforcement can keep a secret.
Yeah, I'm looking at you NSA, the most secure agency on planet earth that couldn't hang on to their toys, tools, and tactics.
Fun Fact: If it wasn't for the NSA leaks, we most likely would not have had the WannaCry ransomware attacks.
Even if it becomes illegal in the US, there is still a whole world out there where it's not illegal. The software will still be there and still be accessible. You might as well let the good guys use it too. This man's argument is steeped in lazyness on the part of the FBI. They want to be able to issue a warrent to access the data and boom they have their case. The FBI don't want to do the leg work to get the information, they want a magic legal bullet. Sorry but that's pretty lame.
4th Amendment is "a provocative subject."
I donated, volunteered, and voted for Trump but I gotta say... fuck his FBI director on this.
Both of my positions as a conservative (small government) and a hacker (individual software freedom) are against this.
But let's not fool ourselves into thinking the Democrats would be any better on this issue. Both parties are chock full of authoritarian fuckwits.
Leave me alone with my guns and computers please. :(
>"Encryption should have limits. That's the message FBI Director Christopher Wray had for cybersecurity experts Tuesday."
No, it shouldn't. And it can't. We have been over this over and over again. It has been proven in the REAL WORLD over and over again. Either something is secure with encryption or it isn't. You can NOT have back doors or intentional weaknesses in encryption or, eventually, EVERYONE loses and suffers. It is either secure or not secure. Back doors and weaknesses will be found by the "bad doers"- bad governments, rogue elements in governments, corporate competitors, hackers with nothing better to do, terrorists, whatever.
>"it shouldn't provide a playground for criminals where law enforcement can't reach them."
We have ALWAYS had such playgrounds. Before the days of computers and text messages and Email and web logs and "security" cameras everywhere, the government couldn't just watch what everyone did/say/go/read/etc. We had privacy and security BY DEFAULT due to the fact that it was either impractical or impossible to collect such information and sift through it en-mass. And it would have been UNTHINKABLE that citizens would ever allow the government to do so in a free country.
In an age where information is power, privacy and security are more important than ever. And just passing laws to "protect" this or that isn't going to cut it. Strong encryption is the only option we have. Mess that up, and we have no real protections left.
This is a binary issue: you either have encryption, or you don't, damnit!
Meanwhile criminals (and non-stupid people!) will use non-backdoored encryption and not give a fuck.
Criminals will also find the backdoor and have access to everything!
Why the ACTUAL FUCK can't these brainless idiots get this through their thick skulls!?
And many people over 40 invented your computers, punk.
You're welcome.
Its because of jackasses like you, Hoover, etc, that we NEED and DEMAND bullet proof network security and encryption.
If you need a refresher on the reasons why, try the following.
https://en.wikipedia.org/wiki/...
https://en.wikipedia.org/wiki/...
https://en.wikipedia.org/wiki/...
https://en.wikipedia.org/wiki/...
https://en.wikipedia.org/wiki/...
https://en.wikipedia.org/wiki/...
https://en.wikipedia.org/wiki/...
And finally, go back and re-read this thoroughly. Shut your yap until such time you UNDERSTAND the material in question.
https://en.wikipedia.org/wiki/...
Lawyers, MBA's, RIAA? A jedi fears not these things!
Not true. They are under the authority of the department of justice, which is a part of the executive branch. Their funding comes from congress as well, they must abide by laws created by congress, and the court system has oversight for criminal cases they bring. They absolutely and positively answer to elected officials no matter what your special youtube videos tell you. Just because an authoritarian president finds that he can't order them about is not the same thing as the FBI being unanswerable to elected officials. The FBI members have taken oaths to uphold the law, not oaths to an individual office holder.
>We can either have privacy and terrorism, or no privacy and a government that can't prosecute.
What makes you think the courts couldn't prosecute? People end up in prison all the time based on nothing more than eye-witness testimony - the least-reliable form of evidence, as any scientist can tell you.
Not to mention that you forgot to add "and terrorism using unassailable encryption" to the second half of that. No terrorist organization worth half a damn would would be more than mildly inconvenienced by the deliberate compromising of "officially sanctioned / legal" encryption. Even if you don't have the chops to roll your own, you can download real, secure, encryption programs and libraries from open-source repositories around the world.
There's no putting the genie back in the bottle - the most you can do is make sure that you can spy on every online action of law-abiding citizens and the most incompetent of criminals, and hopelessly compromise their security in the process. That's not much good for fighting crime, quite the opposite in fact. But it's of great value if your real target is to be able to blackmail or destroy political opposition before it can present a real challenge.
--- Most topics have many sides worth arguing, allow me to take one opposite you.
People end up in prison all the time based on nothing more than eye-witness testimony
It is apparently even worse, people end up in prison all the time based on nothing more than a threat of longer sentence and a plea bargain offer.
Never mind the unanimous recommendation of Wray by Senate Judiciary Committee (all Democrats also voted for him), and the 92-5 confirmation in the Senate. Nope, just Republicans here, pay no attention to the Democrats on that same side!
Browsing at +1 - no ACs, I ignore their posts. So refreshing!
This is not a technical issue.
For the last 232 years, the supreme law of the land in the United States is the US Constitution. All government powers, whether Executive, Legislative, or Judicial, are subordinate to the limits defined in the Constitution.
Claiming that the US Legal system must have unfettered access to all information is the same as saying that the US Legal system must not be fettered or subject to the US Constitution. That leads me to 3 important questions:
Let's stop calling it a "plea bargain". That's a misleading euphemism. Let's call it what it really is: coerced false confession.
Trump won because there are a lot of people that had their futures taken away by outsourcing and Trump was the first presidential candidate that said they were going to do something about it. If you want to avoid this happening again, stop squealing about Putin and start looking at how to solve this issue. Trump may or may not be a dead man walking but the reason he's there won't go away once he's gone, it will be ripe for someone potentially more competent to tap into it.
All police departments try to achieve zero crime. They constantly look for ways to detect criminals. This means they are constantly pushing the boundary of legal law enforcement methods, and sometimes they cross that line. The "Average" living room is beyond the reach of law enforcement. Only special living rooms justify surveilance (special = they have a reason for a warrant), meaning average living rooms are not bugged just like encrypted messages are not read. For most of human history what happened in private stayed private, so again this isn't a new situation for police and they know how to deal with it (lean on a person who has access to what you want).
But surely this is the first time in human existence that law enforcement has waged a war on mathematics? Until the elite are willing to limit their personal finances to 2^32 pennies, I will not give up my 256 bit AES or 2048 bit RSA. If we are going to put limits on math, we need to limit it everywhere