Recent comments in /f/technology

Heijoshinn t1_j9xpspo wrote

> requires providers of encrypted communications to alter their products to ensure user messages are free of material that’s harmful to children.

Oh for f***'s sake, Lovejoy Arguments?? I swear, any time I hear about regulation "for the sake of the children", it's got to be conservatives. Every freaking time, they scapegoat the idea of child protection in order to effect overwatch or controls on people.

Sounds like the U.S. EARN IT Act.

47

smp7401 t1_j9xoucz wrote

I am of the opinion that Canada is making a mistake with this law.

Time will determine which one turns-out to be right.

I hope it turns-out to be Google’s mistake, but I suspect it will turn-out to be Canada’s.

Regardless, it will unfortunately be average people bearing the consequences of corporate greed and shortsightedness (that’s on both sides of this issue btw - Google’s and media organizations) regardless as usual.

4

Heijoshinn t1_j9xom8a wrote

I replied to another comment of yours regarding encryption. But this statement you made gives much more clarity on your issue of "trust" in [insert company here].

Encryption works depending on it's implementation. Take AES for example. It's a standard that's wisely recognized and widely used by virtually everyone on the encryption scene. As a result, it's been tested, used in multitude of ways and is regularly attempted to be broken. That's because AES is the standard. Since this is the case, it's less likely to have side channel attack weakness due to it's wide spread application and audit.

Compare that to something like TwoFish. It's strong like AES and is built differently. You could use this method of encryption and likely be safe. However, it's not widely used. This means it's likely not audited or scrutinized as much as AES and since it's not used as much, it's implementation is also at higher risk of side channel attacks. Without players routinely executing TwoFish encryption, it's level of progress is much lower than AES by comparison. This doesn't mean TwoFish is necessarily inferior but that it doesn't have the "run time" that AES has.

1

frogking t1_j9xoe2r wrote

“Military grade” as in outsourced to the cheapest source and likely to be hugely overpriced when delivered?

These days, when it’s encrypted, a significant amount of time has to be put into decryption. So significant that the decrypted material will be irrelevant. (65 million years later, it doesn’t matter)

8

brock_h t1_j9xobe1 wrote

Honestly take away the political figures in this discussion and this is much better for data privacy and right to forget. There's similar things for Reddit and frankly I think for an average person these things violate privacy in a way because they remove your right for Reddit to forget your data. I'm sure people would argue over this but the idea that we should archive everything everywhere all the time for everyone is not a comforting one to me personally. And while public figures are different usually there's no distinction made for these types of capabilities.

0

taz-nz t1_j9xnk78 wrote

Thank you for at least trying, but after reading all the cited sources, none of them official quote Microsoft as saying Windows 10 is the last Windows, the first article comes the closest with actual quote from Microsoft talking about Windows as a service and a change in the way they make their revenue stream, but the last two are just third party misquote of the original developer as I quoted above.

−27

Heijoshinn t1_j9xn8e9 wrote

Bruh.. Lol

You clearly don't understand how encryption works to be commenting on the subject matter. Especially when you openly admitted:

> I'm not sure how exactly Signal and these other messaging apps implement their encryption

For starters, both Signal and WhatsApp use the Signal Protocol: an encryption standard that was engineered by Signal in-house. Also, Signal is open source meaning that anyone can verify their source code on how the app was constructed. Signal wouldn't tamper with their code and even if they did, Signal is set up in such a way that any adversary that wanted to snoop would need the device itself to discover the messages.

Do more research my friend.

6