Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Re:Key exchange (Score 1) 196

1) They hold the public keys. But the risk isn't them decrypting with your private key, it's them adding their own public key (or one they generate) to your list of keys without your knowledge. Apple could send your public iPhone key, your public Ipad key, and their own generated snopping public key to the sending device, and no one would be the wiser. You can read about it here: http://techcrunch.com/2014/02/...

2) There's a setting to turn off "Send as SMS," but under some circumstance, it might not honor that setting. For example, if you're texting someone who's not using an iPhone. Ideally, a user should have more strict control.

As I said, default iMessage encryption is good, in that it guards against mass surveillance in most cases, but there's certainly room for improvement.

Comment Re:Nothing about Facbook is private (Score 1) 173

This is a case of selection bias. We see people posting ridiculous things, so we think everyone does, but believe me, there are plenty of people who don't post stupid shit to Facebook, and are -- not surprisingly -- very competent and responsible people, or who are at least competent enough to appear to responsible. There's no shortage of competition for jobs in sensitive industries, whether it's finance, government, or law, and yes, they pass on people who post stupid shit on Facebook.

Comment Key exchange (Score 1) 196

Apple technically has end-to-end encryption, but the problem is the key exchange. Apple retains the keys for all of your devices, which is how one iMessage can be sent to multiple devices. The way it works is that the sender communicates with Apple's servers to obtain a list of public keys for devices registered to the recipient. The sender then encrypts the message once per key, and sends the encrypted messages to Apple, who then distributes them to each device. In theory, and likely in practice, Apple cannot see the contents of the messages transiting its servers, since it doesn't have the private keys.

But, as the custodian, Apple could add keys to this list at any time, including their own, or one at the behest of a TLA. This may or may not happen, so it's really a question of what risk you're willing to take. Their current method, if implemented properly, would prevent your plaintext messages from being swept up in mass collection, but without knowing the encryption method and the security details surrounding the keystore, you could still be targeted. Add to that that iMessage silently falls back to SMS, so if someone had the ability to block your tcp/ip traffic, the iDevice would transmit in the clear. It's an improvement over pure plaintext, but it's still fraught with risk and insecurities that will likely be exploited at some point, if the past experience is any indication.

Comment Re:Laugh (Score 1) 312

Exactly. The only point of contention is the one that seems to have been overlooked by many people, which is that he's 17. Presumably, he was as young as 16 when he started this. That's old enough to know that what he was doing was wrong, but not old enough to fully appreciate the consequences. Hell, some people never learn, but 16/17 isn't old enough to expect well-adjusted adult behavior either. There's a reason ISIS targets young people for recruitment, and it's not for their life skills.

Comment Re:Mixture (Score 1) 312

"Liberty is something we must ALWAYS guard diligently."

Of course, but this wasn't just a case of someone posting a hypothetical; he also aided someone in joining IS, so his actions were in line with his words. I get the slippery slope argument, and if lesser behavior is prosecuted, that's something to be wary of, but this seems pretty clear cut.

Comment Re:The NSA fallout here is astonishing (Score 3, Interesting) 236

But can you really put a price on safety? All of this spying has made us incredibly safe, as evidenced by steep decline in terrorism-related deaths in the US since 2001, zero of which have been from hijacked airplanes. I mean, sure, more people in the US died from malnutrition in 2001 (and every year since) than from 9/11 attacks, but starvation in America is hardly a problem we can solve by just throwing hundreds of billions of fucking dollars at the way we can with terrorism.

And yes, many, many other countries have been affected by terrorism without getting sucked into a perpetual war in a variety of countries that may or may not have had anything to do with the attacks or creating a power vacuum for ISIS to fill, but those aren't the best, most exceptional countries in the world, are they? Probably French or European countries. Light on a hill, American exceptionalism, Stikypad for President 2016, y'all!

Comment Re:Disagree with stupid wording (Score 1) 236

You see, before we knew about the spying, the activity was in a superposition. We were both spying, and we weren't. Once Snowden leaked that information, the possible states collapsed to one -- spying -- and therefore Snowden is in fact directly responsible for both the spying and all of the fallout.

Slashdot Top Deals

Never trust a computer you can't repair yourself.

Working...