Hacker News new | ask | show | jobs
by bri3d 5254 days ago
Keeping encrypted data in the US is increasingly futile - see http://arstechnica.com/tech-policy/news/2012/01/judge-fifth-... .

Steganography is a good idea, though.

(edited: corrected stenography -> steganography per too-aggressive spellchecker usage)

3 comments

It is not a settled question whether you can be forced to decrypt or not; some judges have considered encrypted drives protected and others have not. And the UK has compelled individuals to decrypt as well.

The fact remains that you are much better off encrypting in the first place even if you are eventually forced to decrypt. You can challenge the order to decrypt, you can add more time to the investigation and give your lawyers more time to put together a strategy for whatever angle they consider most prudent, you can prevent surreptitious listening that may arouse interest in your activity in the first place, and so on.

Even if you ultimately are forced to comply with an order to decrypt, which again is by no means guaranteed, you still do yourself a lot of favors by encrypting from the get go. And we haven't even mentioned protection from non-governmental entities like script kiddies, competitors, or tabloids.

> Stenography is a good idea, though.

Steganography is provably secure but requires a lot of cover data and careful implementation.

Steganography is less useful for most purposes than most people want.

Unfortunately this is the case now. I am hoping that someone invents something that makes steganography more usable. "----BEGIN PGP MESSAGE----" is a little obvious for my taste, though of course encryption is much better than nothing.
I think you mean steganography. "Stenography" is writing down what someone is saying.
Indeed, I should have paid more attention to my spell checker which does not recognize "steganography". Thanks.
Thank you! Corrected.