Saturday, February 04, 2012

Encryption pt 2

I said this a while ago regarding government backdoors on encrypted devices / services:

To put it another way, the people you're hoping to catch here are the subset of criminals who know that they _should_ use encryption, but don't know that the product they're using has a built-in backdoor. Personally I think that's probably a small subset of criminals, but maybe that's just me being naive.

I guess there's another class of "criminals" that I forgot about: those who don't think they're breaking the law, or at least think that they're safely enough in the grey areas to not warrant a wiretap. Note here - interestingly we don't even know exactly what got tapped - although this article (and every other article on the subject) has "Skype" in the headline, nobody really knows _how_ they got the info - for all we know they had old-fashioned bugs in peoples' headsets.

At any rate, I'm pretty sure that anybody else who makes serious money in the grey is going to start looking more carefully into security...

--Nate