Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

IIRC the Bataclan terrorists didn't use any crypto at all.

Using crypto makes you stand out, and doesn't really complicate traffic analysis.

Corollary: not using crypto makes it easier to look like hay in a huge hay pile, even if you're a needle.

Ad-hoc-but-disciplined plaintext comsec for small committed teams is not that difficult to establish and master, and can work very well for them.

But for the rest of us, plaintext comsec just doesn't work. And defending privacy relative to state actors, foreign and domestic, is a legitimate activity within the bounds of due process (e.g., your affairs can get searched with a legal warrant, and so on).

It's important to understand that when the State wins the crypto wars, not only does it ensure for itself access to people's data pursuant under Due Process, but also without Due Process at all. It's like making all houses and walls out of glass just so people can't hide from the police: it's insane.

And worse than that: the State winning the crypto wars does not make it easier to prevent attacks. If anything it can make mounting attacks easier for terrorists, depending on the particulars of the crypto war outcome.



1.3 bn people are using WhatsApp. If we assume that only 70% of those have encryption enabled, that's a billion people whose data is standing out, therefore no one is really standing out any longer.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: