Site icon The Punching Bag Post

The DOJ Wants Weak Encryption on Devices, A Clueless Perspective

<p style&equals;"text-align&colon; left&semi;" align&equals;"center">&nbsp&semi;The Department of Justice has been on a mission to weaken encryption so it&rsquo&semi;s easier for officials&comma; when needed&comma; to break into devices&period;&nbsp&semi;<&sol;p>&NewLine;<p>Deputy Attorney General Rod Rosenstein has made it clear that the DOJ will only be applying more pressure on technology companies&period; On Tuesday&comma; he made a speech at the U&period;S&period; Naval Academy&comma; where he called for &ldquo&semi;warrant-proof encryption&rdquo&semi; again&period;&nbsp&semi;<&sol;p>&NewLine;<p>&ldquo&semi;A requirement to implement a solution could be applied thoughtfully&comma; in the places where it is needed most&comma;&rdquo&semi; said Rosenstein&period; &ldquo&semi;Encrypted communications and devices pose the greatest threat to public safety when they are part of mass-market consumer devices and services that enable warrant-proof encryption by default&period;&rdquo&semi;&nbsp&semi;<&sol;p>&NewLine;<p>The DOJ and technology companies&comma; especially Apple disagree on this issue&period;&nbsp&semi;<&sol;p>&NewLine;<p>As does the PunchingBag Post&period; First&comma; weak encryption guarantees widespread invasion of privacy by government and the black hat community&period; Yes &&num;8211&semi; &&num;8220&semi;guarantees&&num;8221&semi; is the right word&period; Second&comma; having the police tell private citizens they need guaranteed access to any device is a&nbsp&semi;perversion of society&period; In<&sol;p>&NewLine;<p>First&comma; weak encryption guarantees widespread invasion of privacy by government and the black hat community&period; Yes &&num;8211&semi; &&num;8220&semi;guarantees&&num;8221&semi; is the right word&period; Second&comma; having the police tell private citizens they need guaranteed access to any device is a&nbsp&semi;perversion of society&period; In America the police do NOT dictate the behavior of private citizens and innocent citizens are NOT required to submit to search or make available their private business to the government&period;<&sol;p>&NewLine;<p>Rodenstein&&num;8217&semi;s philosophies go directly against the fourth amendment&period; The founding fathers would see this as potential for government repression of its citizens&period; Information is power&period; Power corrupts&period;<&sol;p>&NewLine;<p>Rodenstein&&num;8217&semi;s proposed strategy is also exceeding naive&period; The rest of the world will not willingly allow the U&period;S&period; government to access their data&period; An underground market of advanced encryption packages will quickly emerge&comma; and&comma; of course&comma; Apple and other manufacturers will always be suspected of collusion with U&period;S&period; intelligence services &lpar;which of course would be correct&rpar;&period;<&sol;p>&NewLine;<p>The&nbsp&semi;Justice Department wants potential evidence to be more accessible&period; The department isn&&num;8217&semi;t explicitly asking companies like Apple to break a phone&&num;8217&semi;s encryption at the request of a government agency&period;&nbsp&semi;&nbsp&semi;<&sol;p>&NewLine;<p>Instead&comma; the DOJ wants the company to disable a feature on the iPhone that limits the number of wrong passwords that can be entered before the information on the phone is automatically destroyed&period; This function is in place to protect iPhone owners&period;&nbsp&semi;<&sol;p>&NewLine;<p>&&num;8220&semi;In recent years&comma; new methods of electronic communication have transformed our society&comma; most visibly by enabling ubiquitous digital communications and facilitating broad e-commerce&period;&nbsp&semi;As such&comma; it is important for our global economy and our national security to have strong encryption standards&comma;&&num;8221&semi; said James Comey when he was the FBI Director&period; &&num;8220&semi;The benefits of our increasingly digital lives&comma; however&comma; have been accompanied by new dangers&comma; and we have been forced to consider how criminals and terrorists might use advances in technology to their advantage&period; We are seeing more and more cases where we believe significant evidence resides on a phone&comma; a tablet&comma; or a laptop&mdash&semi;evidence that may be the difference between an offender being convicted or acquitted&period;&&num;8221&semi;<&sol;p>&NewLine;<p>Last year&comma; Apple refused to help the government unlock and decrypt the San Bernardino gunman&&num;8217&semi;s iPhone&period; The FBI ultimately hired hackers to access the phone&rsquo&semi;s data&comma; but officials remain bitter about Apple&rsquo&semi;s decision to stay out of it&period;<&sol;p>&NewLine;<p>&&num;8220&semi;Fortunately&comma; the government was able to access data on that iPhone without Apple&&num;8217&semi;s assistance&period; But the problem persists&period; Today&comma; thousands of seized devices sit in storage&comma; impervious to search warrants&comma;&rdquo&semi; sad Rosenstein&period; &&num;8220&semi;If companies are permitted to create law-free zones for their customers&comma; citizens should understand the consequences&period; When police cannot access evidence&comma; crime cannot be solved&period; Criminals cannot be stopped and punished&period;&&num;8221&semi;&nbsp&semi;<&sol;p>&NewLine;<p>The DOJ continues to urge technology companies to find a solution to this encryption problem&period; However&comma; Apple argues that weakening encryption will have a devastating impact on the privacy of its customers&period;&nbsp&semi;<&sol;p>&NewLine;<p>Tim Cook&comma; Apple&rsquo&semi;s CEO argues that making devices more vulnerable won&rsquo&semi;t help agencies solve crimes&comma; instead it would make it easier for criminals to hack devices&period;&nbsp&semi;&nbsp&semi;<&sol;p>&NewLine;<p>&ldquo&semi;The government is asking Apple to hack our own users and undermine decades of security advancements that protect our customers&ndash&semi;including tens of millions of American citizens&ndash&semi;from sophisticated hackers and cybercriminals&comma;&rdquo&semi; said Cook in response to the backlash from the government about the Bernardino gunman case&period; &ldquo&semi;The same engineers who built strong encryption into the iPhone to protect our users would&comma; ironically&comma; be ordered to weaken those protections and make our users less safe&period;&rdquo&semi;&nbsp&semi;<&sol;p>&NewLine;<p>But Rosenstein believes that &ldquo&semi;responsible encryption&rdquo&semi; is obtainable&period; &lpar;Again&comma; he is full of crap&period;&rpar;<&sol;p>&NewLine;<p>&ldquo&semi;Responsible encryption is achievable&period; Responsible encryption can involve effective&comma; secure encryption that allows access only with judicial authorization&period; Such encryption already exists&period; Examples include the central management of security keys and operating system updates&semi; the scanning of content&comma; like your e-mails&comma; for advertising purposes&semi; the simulcast of messages to multiple destinations at once&semi; and key recovery when a user forgets the password to decrypt a laptop&comma;&rdquo&semi; said Rosenstein&period; &ldquo&semi;No one calls any of those functions a &&num;8220&semi;back door&period;&&num;8221&semi; In fact&comma; those capabilities are marketed and sought out by many users&period;&rdquo&semi;&nbsp&semi;<&sol;p>&NewLine;<p>Although Rosenstein has theories about how this can be done&comma; he isn&rsquo&semi;t a cyber security expert and he places the burden on technology companies&period;<&sol;p>&NewLine;<p>&ldquo&semi;We know from experience that the largest companies have the resources to do what is necessary to promote cybersecurity while protecting public safety&period; A major hardware provider&comma; for example&comma; reportedly maintains private keys that it can use to sign software updates for each of its devices&period; That would present a huge potential security problem&comma; if those keys were to leak&period; But they do not leak&comma; because the company knows how to protect what is important&period; Companies can protect their ability to respond to lawful court orders with equal diligence&comma;&rdquo&semi; said Rosenstein&period;<&sol;p>&NewLine;<p>He is well aware that technology companies won&rsquo&semi;t offer a solution unless they are forced to&period;<&sol;p>&NewLine;<p>&&num;8220&semi;There is no constitutional right to sell warrant-proof encryption&period; If our society chooses to let businesses sell technologies that shield evidence even from court orders&comma; it should be a fully-informed decision&comma;&rdquo&semi; said Rosenstein&period;<&sol;p>&NewLine;<p><strong>Author&rsquo&semi;s note&colon;<&sol;strong>&nbsp&semi;Shouldn&rsquo&semi;t the rights of private citizens always outweigh the rights of law enforcement to solve crimes&quest; It&rsquo&semi;s always been and should remain that way&period; If technology companies intentionally make security weaker&comma; then more breaches&comma; like the recent Equifax one&comma; are clearly going to happen&period;<&sol;p>&NewLine;

Exit mobile version