if you were ever looking for a reason to become radicalized - ThreadSky

retr0.id • 16 days ago

if you were ever looking for a reason to become radicalized

Apple ordered to open encrypted user accounts globally to UK spying

Comments

I suspect the international pushback from this is going to be overwhelming. I doubt the UK public response will be any better after this hits UK press.

retr0.id•16 days ago

there will only be a pushback if we make a pushback

oracularhades.com•16 days ago

that is my concern https://bsky.app/profile/oracularhades.com/post/3lhlhkhagvk2j

regardless, here we go again. It is comforting that each time we do this we have more defences than the previous time, at least.

retr0.id•16 days ago

learn how cryptography actually works, and how it gets broken: https://cryptohack.org/

marcsov.bsky.social•14 days ago

just wanna thank you for recommending this, i'm having a lot of fun with it

evaristegal0is.bsky.social•16 days ago

do you recommend this site? I am looking for a good "gamified" resource for cryptography

retr0.id•16 days ago

yes, my post above is the recommendation ;)

getdownon.it•16 days ago

hell yea i WILL implement rsa

retr0.id•16 days ago

no please implement an x25519/ml-kem hybrid scheme, it's 2025

getdownon.it•16 days ago

i think i can just get bigger primes...

palaiologos.rocks•16 days ago

RSA seems simple on paper but correct side channel-proof implementations are often even more complex than many ECC implementations. I used to like simplicity of RSA but x25519 grew on me when I implemented both.
So ECC for the win.

retr0.id•16 days ago

ml-kem is even nicer still, because you don't need to implement any bigint arithmetic (although there are a few edge-cases involving division you need to watch for)

retr0.id•16 days ago

although, my understanding of lattices and LWE as concepts are still weaker

she.hawk.in.my.tuah.till.i.rizz.my.swag.tteles.dev•15 days ago

What sidechannels were you attempting to defend against?

retr0.id•15 days ago

We usually aim for "all of them"

tunnel-janitor.bsky.social•16 days ago

Why can’t they just monitor everyone in real time like the USA… amateurs.

en4rab.bsky.social•16 days ago

I feel a bit sorry for whichever Salt Typhoon member has to look through the sexting history of british MP's after they aquire the unencrypted backups. There's no mind bleach strong enough to erase that.

numbereightball.bsky.social•16 days ago

Which kind of backdoor?

A bit related: right now, how can you know your cloud data is really encrypted and you're not just being promised it is?

nicolas17.xyz•16 days ago

Usually I would answer "because your device uploads already-encrypted data", but Apple has an escrow system (in case you lose all your devices and thus your keys) that is allegedly secure but hard to audit from the outside.

she.hawk.in.my.tuah.till.i.rizz.my.swag.tteles.dev•15 days ago

I'm not sure that you can audit that your device only uploads already encrypted data, and doesn't upload any keys, being that everything is closed source. With this said, I still believe that likely Apple does not break their promises, as there should have been leaks by now if they did.

nicolas17.xyz•15 days ago

Closed source means you can't know what it does? 😂

she.hawk.in.my.tuah.till.i.rizz.my.swag.tteles.dev•15 days ago

Auditing becomes significantly harder yes

numbereightball.bsky.social•16 days ago

Oh, so the backdoor was always there they just enforce not using their key, but they won't any longer...

Thanks!

nicolas17.xyz•16 days ago

You should watch this for how the escrow service works https://youtu.be/BLGFriOKz6U?t=22m35s

numbereightball.bsky.social•16 days ago

Thanks!

olaren.dev•16 days ago

Big tech keeps reminding me that the only server I can trust is my own 🙃

Comments

Posting Rules

Reply