Hacker News new | ask | show | jobs
by Kadin 2863 days ago
Encryption isn't a magic bullet. If you have good visibility into the network there's a hell of a lot you can do with traffic analysis and metadata. Plus, if you own the end-user device you can just go around the encryption since the data, by definition, has to be displayed to the user decrypted.

It's a hard problem. Encryption is part of the solution, but it's not the solution.

1 comments

Excellent response, I've become quite sceptical of the Australian calls for encryption backdoors, frankly think the government knows they aren't necessary and can back down to appease the public while silently scooping up everything. Catchy lines like the laws of maths quote is a hugely successful distraction.

Mandatory metadata is already retained for 2 years at the consumers expense, no one has ever released how much or what is actually kept as all freedom of information requests by journalists have been denied. It's estimated that every adult generates around 15000 data points a day, it's known that mobile phone signal strength is kept allowing triangulation within 100m or so of every citizen every few minutes.

Last year alone there was over 300,000 warrantless requests made by 60 government agencies, many more are legally allowed to make requests, right down to small local councils in the middle of nowhere with 15 staff members and obscure agencies such as horse racing officials.

There's absolutely no oversight, I'm stuggling to imagine how many people it would actually take to investigate around 1000 requests a day, every day of the week.

It's only a matter of time before some serious abuse of the system occurs.